$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: qiZDd8EjWOFqyCmTBWXjnyom1oC3EE4bsnv9dUPAtwk= Subject key identifier: DC:88:3B:AB:A7:1A:55:1D:B0:7D:A1:BF:0D:84:AD:8B:4B:6A:B9:AB Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 04CB Signing time: Tue 24 Mar 2026 23:37:58 +0000 Manifest this update: Tue 24 Mar 2026 23:37:58 +0000 Manifest next update: Tue 31 Mar 2026 23:37:58 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: 1TnEF8gun8rb3WEkNqiiyPddAGWILMN6xk0rW2KFIyE=) 2: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 4: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 5: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 6: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 7: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 8: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Mar 24 23:37:58 2026 GMT Not After : Mar 31 23:37:58 2026 GMT Subject: CN=69c32056-48a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:4f:f9:b8:52:c7:a6:35:28:06:ee:61:80: 45:c6:6c:9f:77:d1:63:48:07:e2:76:a6:26:43:73: 68:04:5c:49:7e:8b:38:d4:9c:87:de:83:4c:09:3a: c6:bd:fc:90:6f:5c:f2:44:4b:92:15:0e:5b:fa:f9: cb:b2:96:f4:3f:c7:f1:20:d5:de:2a:0a:86:16:c1: bc:c3:db:f8:08:94:0f:23:8d:be:83:84:5e:1a:5a: b3:ba:1d:85:1a:a5:e4:31:32:52:b5:a9:40:dc:4c: e6:de:90:74:76:55:2c:41:b9:98:55:a9:45:82:ee: a9:b9:61:72:0a:71:e6:29:c5:d8:5f:88:75:a3:e5: 6e:c7:f6:e4:3b:c8:b9:92:3c:4f:89:d1:3d:df:4c: 72:e2:79:6f:60:79:dc:f1:a8:bc:3c:71:3c:82:e5: b9:35:61:13:cd:e4:4b:14:bd:29:3f:28:5b:8d:d8: b3:81:8f:05:97:5b:59:64:f8:2d:e5:c9:89:4c:58: 26:3f:a7:0e:13:9a:56:97:92:b8:6e:f7:3d:35:97: 6d:65:00:8c:f4:f0:a2:a1:78:06:62:ed:15:1e:48: f4:ab:fd:b8:98:3a:30:76:b0:03:40:57:34:ba:c8: 50:4a:b7:52:53:b5:8d:82:a7:ba:6d:16:05:7b:df: 96:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:88:3B:AB:A7:1A:55:1D:B0:7D:A1:BF:0D:84:AD:8B:4B:6A:B9:AB X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a9:5e:7e:d8:10:d5:16:90:70:51:20:0a:b9:82:0d:7e:ee: 53:38:da:d1:05:3c:7d:c3:eb:8f:4e:b2:93:e7:59:60:80:48: 39:a7:e1:e7:f7:63:b1:c0:c8:a0:3a:cf:1b:b8:a7:11:c0:6b: 5e:a0:ce:a0:0f:2e:60:5b:fb:5b:74:2a:66:fc:f9:03:ea:e4: 08:be:ef:44:02:dd:79:f6:70:28:01:e8:b7:70:72:b3:58:77: c5:01:7d:99:cd:9e:f6:95:c4:f4:01:f4:2d:c3:32:e6:cc:72: 52:fa:f5:28:ee:47:5d:f3:28:fc:ee:b7:95:20:6d:b9:1c:5a: 9c:39:9c:36:9a:f2:61:52:a9:00:2d:bb:ea:10:33:59:b4:db: 17:ea:45:92:ba:e2:51:13:90:9b:58:24:fd:0f:f0:a8:ad:7e: b8:ed:e9:62:28:e2:35:0b:e6:9b:48:f5:06:8a:97:8b:54:e0: 60:81:ce:1e:2d:69:82:ad:2f:38:3d:95:99:fa:a5:b1:1a:ba: 6b:54:71:c8:c8:11:b8:32:a6:58:54:6b:91:ff:4d:2d:77:1e: 96:02:91:f8:64:74:51:fc:fc:1f:1c:9c:7d:d2:4e:ed:5b:0f: b6:f8:45:24:0e:7c:78:13:d8:3e:b9:50:34:76:af:23:af:11: 0e:65:86:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwMzI0MjMzNzU4WhcNMjYwMzMxMjMzNzU4WjAYMRYwFAYD VQQDEw02OWMzMjA1Ni00OGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKxP+bhSx6Y1KAbuYYBFxmyfd9FjSAfidqYmQ3NoBFxJfos41JyH3oNMCTrG vfyQb1zyREuSFQ5b+vnLspb0P8fxINXeKgqGFsG8w9v4CJQPI42+g4ReGlqzuh2F GqXkMTJStalA3Ezm3pB0dlUsQbmYValFgu6puWFyCnHmKcXYX4h1o+Vux/bkO8i5 kjxPidE930xy4nlvYHnc8ai8PHE8guW5NWETzeRLFL0pPyhbjdizgY8Fl1tZZPgt 5cmJTFgmP6cOE5pWl5K4bvc9NZdtZQCM9PCioXgGYu0VHkj0q/24mDowdrADQFc0 ushQSrdSU7WNgqe6bRYFe9+WPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyIO6un GlUdsH2hvw2ErYtLarmrMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe6leftgQ1RaQcFEgCrmCDX7uUzja0QU8fcPrj06yk+dZYIBIOafh5/djscDI oDrPG7inEcBrXqDOoA8uYFv7W3QqZvz5A+rkCL7vRALdefZwKAHot3Bys1h3xQF9 mc2e9pXE9AH0LcMy5sxyUvr1KO5HXfMo/O63lSBtuRxanDmcNpryYVKpAC276hAz WbTbF+pFkrriUROQm1gk/Q/wqK1+uO3pYijiNQvmm0j1BoqXi1TgYIHOHi1pgq0v OD2VmfqlsRq6a1RxyMgRuDKmWFRrkf9NLXcelgKR+GR0Ufz8HxycfdJO7VsPtvhF JA58eBPYPrlQNHavI68RDmWGQQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:45 2026 by rpki-client