$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft File: DvuCEhc42eyGnjyjzwUA-RKOF6g.mft (raw, json) Hash identifier: N1GYI7l9CnGT8ZZzSS6XINzTWgA3sSss/xNcuXq/6To= Subject key identifier: 58:5A:F7:F1:FE:54:EC:95:E4:47:45:45:51:D5:17:41:00:C7:5E:78 Authority key identifier: 0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8 Certificate issuer: /CN=A91DEDFD/serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft Manifest number: 47 Signing time: Tue 24 Mar 2026 19:58:45 +0000 Manifest this update: Tue 24 Mar 2026 19:58:45 +0000 Manifest next update: Tue 31 Mar 2026 19:58:45 +0000 Files and hashes: 1: DvuCEhc42eyGnjyjzwUA-RKOF6g.crl (hash: axCswTP3eKqWCMBhEDS7w08KlTZn06YydIPlMfiY02w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=0EFB82121738D9EC869E3CA3CF0500F9128E17A8 Validity Not Before: Mar 24 19:58:45 2026 GMT Not After : Mar 31 19:58:45 2026 GMT Subject: CN=69c2ecf5-2176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:ca:d6:dd:52:86:8c:2b:d2:40:81:93:83: 8f:a4:ef:f9:f6:52:0c:48:92:9f:b7:48:d1:7d:16: a0:23:1b:c4:f7:d1:63:e8:da:cf:58:38:6e:e1:28: 62:2a:91:14:25:06:be:0a:ee:2f:40:76:9b:11:ba: cc:7a:4b:aa:1a:ac:cd:7d:55:40:09:ca:93:31:47: 85:f0:eb:47:3e:31:1f:0b:89:5d:33:a2:46:02:f6: 13:39:6f:7c:53:46:aa:f6:9d:be:5f:35:4a:d8:15: 1f:0f:b7:93:63:7d:8e:62:ff:31:e1:59:6f:42:26: 52:fb:1c:b0:3f:10:e0:15:56:f3:88:cd:82:21:21: 98:de:6d:e3:2a:56:e5:bf:72:0e:98:3e:e3:b8:91: 10:f3:13:0a:1e:6d:a1:a1:bc:5f:09:35:aa:f5:9c: 89:04:d4:ac:64:4f:4a:67:ed:a7:9d:27:91:36:47: 9c:9b:be:b3:d2:3c:e3:8c:42:fc:f8:ab:3e:36:84: 0d:ed:6a:ba:6c:5c:43:a7:ba:8c:f1:e5:ef:06:be: 13:fd:de:13:2b:33:e1:65:c9:6f:c4:21:ea:a6:b1: 90:ef:cf:64:e2:3e:bb:f7:8c:dd:2d:05:d0:7d:60: 9e:97:3e:b5:f2:48:23:7b:b2:04:ab:67:03:dd:26: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:F7:F1:FE:54:EC:95:E4:47:45:45:51:D5:17:41:00:C7:5E:78 X509v3 Authority Key Identifier: keyid:0E:FB:82:12:17:38:D9:EC:86:9E:3C:A3:CF:05:00:F9:12:8E:17:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DvuCEhc42eyGnjyjzwUA-RKOF6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/EA1D8E16C13111F0B431743EC4F9AE02/DvuCEhc42eyGnjyjzwUA-RKOF6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:92:41:6a:e6:f4:ef:1b:07:72:10:95:7b:29:69:87:42:47: 59:9d:27:59:3b:a2:5d:e1:a3:34:b2:a9:28:60:cd:6a:16:3f: 32:05:f0:c3:9d:1f:27:64:83:ab:70:43:23:6e:b0:bf:4f:69: e1:b3:32:09:3b:9b:82:22:bf:e3:c7:1c:92:60:31:07:ac:79: bc:05:a3:d5:03:cb:90:1d:e4:b9:09:60:18:4b:db:eb:8c:3f: 28:46:65:55:72:2c:b4:20:d7:ce:06:52:08:2c:97:c3:62:b2: 38:e1:70:79:69:0d:10:00:4c:d7:d2:8d:40:fa:73:dc:95:7a: 7d:3e:a5:88:a6:45:3f:b2:b1:7b:03:38:72:f5:bf:4f:92:b0: b0:20:43:83:9a:c9:0a:d5:f2:76:77:9b:32:a6:eb:d5:1d:7d: 6e:0c:46:b3:df:32:ad:cd:e3:d3:7b:1c:39:df:13:df:30:3c: 89:ba:0d:d4:86:76:2b:4f:81:d8:71:bd:ee:cd:2b:ac:e5:3d: 1c:72:e7:97:fe:e3:2b:83:38:33:27:8d:ff:b3:e7:19:08:94: 23:14:a9:74:11:6c:02:c3:8d:d1:d7:c1:48:1a:0e:db:be:8b: b5:3a:31:01:62:f0:64:df:9a:be:7f:2f:14:3f:3c:36:24:f4: 59:70:90:e6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RURGRDExMC8GA1UEBRMoMEVGQjgyMTIxNzM4RDlFQzg2OUUzQ0EzQ0YwNTAwRjkx MjhFMTdBODAeFw0yNjAzMjQxOTU4NDVaFw0yNjAzMzExOTU4NDVaMBgxFjAUBgNV BAMTDTY5YzJlY2Y1LTIxNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCRE8rW3VKGjCvSQIGTg4+k7/n2UgxIkp+3SNF9FqAjG8T30WPo2s9YOG7hKGIq kRQlBr4K7i9AdpsRusx6S6oarM19VUAJypMxR4Xw60c+MR8LiV0zokYC9hM5b3xT Rqr2nb5fNUrYFR8Pt5NjfY5i/zHhWW9CJlL7HLA/EOAVVvOIzYIhIZjebeMqVuW/ cg6YPuO4kRDzEwoebaGhvF8JNar1nIkE1KxkT0pn7aedJ5E2R5ybvrPSPOOMQvz4 qz42hA3tarpsXEOnuozx5e8GvhP93hMrM+FlyW/EIeqmsZDvz2TiPrv3jN0tBdB9 YJ6XPrXySCN7sgSrZwPdJgc1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWFr38f5U 7JXkR0VFUdUXQQDHXngwHwYDVR0jBBgwFoAUDvuCEhc42eyGnjyjzwUA+RKOF6gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREZEL0VBMUQ4RTE2QzEz MTExRjBCNDMxNzQzRUM0RjlBRTAyL0R2dUNFaGM0MmV5R25qeWp6d1VBLVJLT0Y2 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRHZ1Q0VoYzQyZXlHbmp5anp3VUEtUktPRjZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF REZEL0VBMUQ4RTE2QzEzMTExRjBCNDMxNzQzRUM0RjlBRTAyL0R2dUNFaGM0MmV5 R25qeWp6d1VBLVJLT0Y2Zy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCUkkFq5vTvGwdyEJV7KWmHQkdZnSdZO6Jd4aM0sqkoYM1qFj8yBfDDnR8nZIOr cEMjbrC/T2nhszIJO5uCIr/jxxySYDEHrHm8BaPVA8uQHeS5CWAYS9vrjD8oRmVV ciy0INfOBlIILJfDYrI44XB5aQ0QAEzX0o1A+nPclXp9PqWIpkU/srF7Azhy9b9P krCwIEODmskK1fJ2d5sypuvVHX1uDEaz3zKtzePTexw53xPfMDyJug3UhnYrT4HY cb3uzSus5T0ccueX/uMrgzgzJ43/s+cZCJQjFKl0EWwCw43R18FIGg7bvou1OjEB YvBk35q+fy8UPzw2JPRZcJDm -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:52 2026 by rpki-client