$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft File: dxIwqC7bwncWqz3GqC_FrsRe72c.mft (raw, json) Hash identifier: A+HuwwwpqGMY/jZw3z1v2dME0+eg4IOlHic/5tPtiYM= Subject key identifier: 3F:6B:98:9C:AE:4D:19:E2:6F:24:A2:84:1D:5A:1B:17:88:DE:82:3E Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Certificate serial: 0D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft Manifest number: 0CCE Signing time: Thu 26 Mar 2026 18:27:10 +0000 Manifest this update: Thu 26 Mar 2026 18:27:09 +0000 Manifest next update: Thu 02 Apr 2026 18:27:09 +0000 Files and hashes: 1: dxIwqC7bwncWqz3GqC_FrsRe72c.crl (hash: P01gyQQM8p1UKuPxArTSuSUSVIX+D2OtGsupB0fnqZE=) 2: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (hash: T30sMzZH4Abydwi4UNKY0/Wj2XuOOa+/JM841poURBU=) 3: C1C279D6997C11F0BDB1853FC4F9AE02.roa (hash: DQkRppQNbZeDMwk1/8d30BRcsAk9mGpTFMUfz2amNfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67 Validity Not Before: Mar 26 18:27:09 2026 GMT Not After : Apr 2 18:27:09 2026 GMT Subject: CN=69c57a7e-681d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:2e:0d:a2:d3:0f:6d:72:2d:f2:e2:eb:d8: 42:05:68:9e:5a:b3:65:8e:53:03:12:29:c9:67:a6: c8:c2:4e:26:7d:fe:63:99:63:1a:73:68:28:28:c2: b1:69:ef:b5:0c:1f:e7:40:49:4d:ea:9b:a2:2a:1c: 03:16:39:f1:88:34:a6:31:dd:61:c3:08:6f:35:51: ac:db:54:ef:00:8b:79:1f:12:a4:14:29:49:36:44: 5a:b1:e7:b7:9b:aa:e3:4e:d3:bb:dd:4a:1c:84:6c: 65:3d:90:fd:0c:ab:ee:0b:b0:e4:c0:f9:08:5c:da: a1:56:f8:96:7e:a1:24:bb:e1:1f:f3:a6:38:ab:ec: 99:b7:af:78:c6:fc:f9:17:eb:95:23:7d:82:67:2d: 72:fb:e7:58:73:4f:ff:b7:4b:4e:31:36:3d:ee:82: d5:fb:d5:5a:cc:f6:00:28:6e:89:28:5c:32:62:e8: 37:f9:a7:32:6f:89:01:94:a6:d3:ee:bc:3b:8a:96: 22:57:00:8b:04:c8:db:b8:b6:b2:8e:a6:ae:6f:71: 18:fa:1e:bd:cf:5c:ef:5e:f5:e1:7d:0b:2e:9d:ca: 10:71:26:48:47:a7:0e:2f:d7:52:7e:97:48:f2:21: 47:1a:e4:46:a0:7c:bd:6e:2d:80:a8:20:18:2b:f9: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6B:98:9C:AE:4D:19:E2:6F:24:A2:84:1D:5A:1B:17:88:DE:82:3E X509v3 Authority Key Identifier: keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a9:87:fd:50:e9:c6:45:27:83:8b:41:46:91:2b:ca:9e:17: c1:0f:6f:aa:83:34:2a:9f:41:bd:a0:fe:94:80:14:84:cd:16: ff:3b:78:19:f4:71:4f:b3:1a:1f:80:d3:45:e7:ac:c8:59:44: f7:8e:be:09:91:fb:b1:ee:06:1b:ef:44:f6:9a:b1:4f:f7:0d: 66:8e:33:ff:dd:f0:51:66:43:ac:85:c2:e8:b0:2f:2c:34:39: 0b:e8:37:48:13:27:1a:ec:40:04:d1:ee:58:58:42:b1:b9:7c: 2b:81:83:49:4a:2e:6a:a1:c3:8f:58:2e:a8:56:d5:5f:94:b4: 92:6d:66:da:26:a4:ba:b6:eb:3a:dd:82:21:4e:17:61:49:5a: 8b:ea:f2:c2:5c:7e:c6:cc:ca:76:53:4d:6d:f7:3c:7f:01:2d: 0e:57:14:84:1b:15:00:19:4c:83:24:69:4c:12:47:b5:d7:9c: c2:42:cb:80:57:79:69:70:4e:d2:79:a5:68:fb:a2:96:f9:60: a1:08:59:41:87:d4:3a:67:bb:f4:fd:9c:17:96:c2:03:c3:ad: 5e:2c:8a:41:71:f6:4e:13:08:f0:1e:2d:51:d7:c6:0f:9a:f6: 0c:20:78:05:95:db:54:54:13:68:a9:86:6b:a7:a9:45:6b:e3: d0:cc:6e:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ0NjMxMTAvBgNVBAUTKDc3MTIzMEE4MkVEQkMyNzcxNkFCM0RDNkE4MkZDNUFF QzQ1RUVGNjcwHhcNMjYwMzI2MTgyNzA5WhcNMjYwNDAyMTgyNzA5WjAYMRYwFAYD VQQDEw02OWM1N2E3ZS02ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUkuDaLTD21yLfLi69hCBWieWrNljlMDEinJZ6bIwk4mff5jmWMac2goKMKx ae+1DB/nQElN6puiKhwDFjnxiDSmMd1hwwhvNVGs21TvAIt5HxKkFClJNkRasee3 m6rjTtO73UochGxlPZD9DKvuC7DkwPkIXNqhVviWfqEku+Ef86Y4q+yZt694xvz5 F+uVI32CZy1y++dYc0//t0tOMTY97oLV+9VazPYAKG6JKFwyYug3+acyb4kBlKbT 7rw7ipYiVwCLBMjbuLayjqaub3EY+h69z1zvXvXhfQsuncoQcSZIR6cOL9dSfpdI 8iFHGuRGoHy9bi2AqCAYK/lfGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9rmJyu TRnibySihB1aGxeI3oI+MB8GA1UdIwQYMBaAFHcSMKgu28J3Fqs9xqgvxa7EXu9n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDQ2My9BNEQ0NDAwQzEz OUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3YnduY1dxejNHcUNfRnJzUmU3 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4SXdxQzdid25jV3F6M0dxQ19GcnNSZTcyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDQ2My9BNEQ0NDAwQzEzOUYxMUVBQTY1ODI4NjBDNEY5QUUwMi9keEl3cUM3Yndu Y1dxejNHcUNfRnJzUmU3MmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgqmH/VDpxkUng4tBRpEryp4XwQ9vqoM0Kp9BvaD+lIAUhM0W/zt4GfRxT7Ma H4DTReesyFlE946+CZH7se4GG+9E9pqxT/cNZo4z/93wUWZDrIXC6LAvLDQ5C+g3 SBMnGuxABNHuWFhCsbl8K4GDSUouaqHDj1guqFbVX5S0km1m2iakurbrOt2CIU4X YUlai+rywlx+xszKdlNNbfc8fwEtDlcUhBsVABlMgyRpTBJHtdecwkLLgFd5aXBO 0nmlaPuilvlgoQhZQYfUOme79P2cF5bCA8OtXiyKQXH2ThMI8B4tUdfGD5r2DCB4 BZXbVFQTaKmGa6epRWvj0MxuAw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:56 2026 by rpki-client