$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: 2afvGtMdiNBGytas2wKM9M1VCtO/j7MQDZ4fBEmkj4g= Subject key identifier: 66:EF:09:5D:B0:D7:8D:57:EB:BA:1F:CD:37:1F:ED:BC:A6:C0:44:78 Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 03B3 Signing time: Fri 27 Mar 2026 00:26:46 +0000 Manifest this update: Fri 27 Mar 2026 00:26:46 +0000 Manifest next update: Fri 03 Apr 2026 00:26:46 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: c0QJ2GNmZX3GrHsZRm4B4HRsZHPPiY8uF8SxCXxYqLk=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: in2SGcslKvdWmLFyOrq3QeVaymp0oqerQYbYxXUBafo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Mar 27 00:26:46 2026 GMT Not After : Apr 3 00:26:46 2026 GMT Subject: CN=69c5cec6-8172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b3:b7:ec:8b:11:1c:c4:ee:9a:f9:e0:3d:7d: a1:be:a0:46:33:d7:23:01:58:61:97:5b:f6:96:2f: 77:d2:77:1a:f8:5f:36:11:0b:3e:e2:e8:ab:de:c3: 7e:3e:d5:42:5d:6c:17:79:00:83:49:6d:d8:cf:b3: 79:87:2c:bc:4f:22:8d:95:f5:3f:3e:35:11:55:ee: 40:9c:d7:c8:13:36:db:97:ca:5d:9f:4f:6c:59:a1: 12:83:74:a4:dc:79:a6:1f:39:b7:49:ad:f0:c6:f4: af:3b:c5:df:7d:73:14:5b:c2:f8:bf:78:5f:eb:92: 0e:15:2a:1d:9e:bb:86:fc:07:f4:f0:78:69:70:88: f5:28:31:4a:f5:76:00:64:18:b6:14:8a:6e:f0:d7: df:8b:b3:5b:e6:d5:e2:64:e9:e4:14:a6:b6:d9:77: 95:d6:2a:e1:d7:ae:f5:fb:14:67:0f:e3:74:12:aa: a1:0a:9b:0a:54:c4:ac:55:41:2c:ff:bf:fd:f5:2d: 40:bf:30:e2:ee:a0:cc:d0:5c:c9:be:73:2b:2a:1f: 77:ee:04:1f:ba:56:76:25:3b:3d:dd:22:69:65:46: b8:a6:8c:83:69:58:b5:fb:f7:c5:0b:ff:54:f6:80: 8f:2b:7b:f4:ca:b2:90:ad:73:d2:c9:a1:e7:bd:88: 32:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EF:09:5D:B0:D7:8D:57:EB:BA:1F:CD:37:1F:ED:BC:A6:C0:44:78 X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:24:db:73:b6:e6:62:60:44:b5:f2:25:e7:1b:ad:b1:45:d2: b3:c9:78:20:03:ca:51:cb:b8:86:fd:dd:c9:e2:09:30:b1:f1: d2:95:eb:d3:8a:7e:04:f4:fb:7a:7f:dd:5b:be:13:7a:ab:93: ce:e4:93:dc:e5:cc:e3:20:89:47:01:15:69:30:98:4b:14:bf: 20:9c:b6:9b:60:53:bb:2a:b4:6a:76:41:42:cc:a3:7a:d8:3a: bf:0e:6a:0c:8a:74:e9:ea:b9:0e:7b:cb:05:24:65:06:c6:19: ed:c0:54:d1:e2:ec:fe:d5:cf:6d:51:de:46:d1:83:e3:2a:3a: 66:29:bc:9a:70:a4:8f:ad:89:0f:1e:a6:e4:3d:ff:a6:6b:4d: e3:ae:20:08:84:25:03:f2:7e:56:29:dd:d0:ec:2e:b2:30:2b: 5b:11:d7:7e:2c:7a:19:0a:ed:6e:f9:07:a8:64:05:38:a3:5c: 27:b5:dc:c5:d3:f8:40:a1:81:e4:c7:82:b5:c1:4a:db:5c:fb: 03:1f:90:8c:a4:7e:41:17:c9:94:0c:82:0f:96:cb:98:80:0c: 44:7a:63:8f:c3:b9:ff:7d:e0:a2:bd:bd:72:64:e5:bb:5b:17: e8:ae:d4:db:df:a7:e3:62:ff:ac:ae:75:38:1e:82:f5:cd:3c: 01:e0:ec:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjYwMzI3MDAyNjQ2WhcNMjYwNDAzMDAyNjQ2WjAYMRYwFAYD VQQDEw02OWM1Y2VjNi04MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LO37IsRHMTumvngPX2hvqBGM9cjAVhhl1v2li930nca+F82EQs+4uir3sN+ PtVCXWwXeQCDSW3Yz7N5hyy8TyKNlfU/PjURVe5AnNfIEzbbl8pdn09sWaESg3Sk 3HmmHzm3Sa3wxvSvO8XffXMUW8L4v3hf65IOFSodnruG/Af08HhpcIj1KDFK9XYA ZBi2FIpu8Nffi7Nb5tXiZOnkFKa22XeV1irh1671+xRnD+N0EqqhCpsKVMSsVUEs /7/99S1AvzDi7qDM0FzJvnMrKh937gQfulZ2JTs93SJpZUa4poyDaVi1+/fFC/9U 9oCPK3v0yrKQrXPSyaHnvYgy/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbvCV2w 141X67ofzTcf7bymwER4MB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWSTbc7bmYmBEtfIl5xutsUXSs8l4IAPKUcu4hv3dyeIJMLHx0pXr04p+BPT7 en/dW74TequTzuST3OXM4yCJRwEVaTCYSxS/IJy2m2BTuyq0anZBQsyjetg6vw5q DIp06eq5DnvLBSRlBsYZ7cBU0eLs/tXPbVHeRtGD4yo6Zim8mnCkj62JDx6m5D3/ pmtN464gCIQlA/J+Vind0OwusjArWxHXfix6GQrtbvkHqGQFOKNcJ7XcxdP4QKGB 5MeCtcFK21z7Ax+QjKR+QRfJlAyCD5bLmIAMRHpjj8O5/33gor29cmTlu1sX6K7U 29+n42L/rK51OB6C9c08AeDsOA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:32:24 2026 by rpki-client