$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: hIQIisTZ192D/+gJOdguRjIGHN/osIb1DGrEHDytfl4= Subject key identifier: 5C:36:F1:AB:20:B1:C8:83:1F:FE:7B:BC:DA:28:EA:D1:F1:06:2C:61 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0D0B Signing time: Tue 24 Mar 2026 17:58:07 +0000 Manifest this update: Tue 24 Mar 2026 17:58:06 +0000 Manifest next update: Tue 31 Mar 2026 17:58:06 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: d2uEIxS7hYC4l8QJgUOU5IO2bd4VvhGi52P02naroSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Mar 24 17:58:06 2026 GMT Not After : Mar 31 17:58:06 2026 GMT Subject: CN=69c2d0af-8023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:00:27:a1:10:10:43:7a:23:12:2a:50:3a: 77:4d:42:15:f1:b2:03:c1:ac:2d:ee:b5:23:43:98: 15:3b:ca:d3:ee:84:e8:59:4a:8f:02:16:dd:d7:18: 72:d6:21:9f:2c:09:a4:54:49:a8:e9:9e:08:3e:25: 8e:f6:0d:c7:d7:7c:41:84:2f:b5:6b:bd:f3:f3:bb: 98:da:0b:1f:51:d5:c1:0b:99:e6:13:4e:2a:d4:f3: 13:80:2c:05:a4:e8:dc:61:fc:be:3b:c1:7c:2d:3c: f4:6a:73:75:78:41:96:d0:bf:73:a5:91:a8:e7:18: 89:1c:9a:a4:a4:d4:67:0e:60:30:74:4e:da:9d:49: 9c:58:06:ad:ea:58:73:4f:48:ac:9b:b8:4d:03:0a: b2:bf:99:7c:20:0e:34:c9:1c:a6:28:88:2a:0f:b1: c2:a8:a7:de:1a:b4:84:57:95:10:2f:08:e9:b5:29: b7:3b:2a:1a:ba:d5:24:11:0d:ef:05:8f:0e:f2:e9: 99:82:65:dd:4a:f5:de:46:c4:52:4f:02:8b:7d:fa: fd:cc:70:06:05:50:d8:d0:34:65:70:05:28:53:4a: 3d:dd:4e:4d:3a:ba:5d:e6:be:f4:6a:39:2b:ca:44: 1b:ca:f3:b9:50:3a:87:8e:e8:bf:e1:e1:bc:74:0f: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:36:F1:AB:20:B1:C8:83:1F:FE:7B:BC:DA:28:EA:D1:F1:06:2C:61 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2c:d1:16:fe:4c:55:14:cc:10:a1:5e:47:bb:f0:db:ae:a6: dc:19:14:88:fe:e5:0d:ad:31:80:1d:35:bd:7a:11:32:a2:c8: 9b:85:0d:f0:b7:f9:78:e2:52:8e:b5:19:3e:bd:40:f5:53:1c: eb:1f:d1:08:b2:b0:61:b0:46:af:88:e5:0d:b0:26:37:eb:24: 47:df:bc:61:30:fd:25:f5:bb:0d:e0:ef:c1:75:ec:a6:13:c9: de:d7:c5:04:2c:e9:05:dc:c2:38:36:bf:a4:b3:68:0f:b8:e8: b9:25:32:d3:eb:a8:81:b4:37:f5:2a:06:1c:36:4f:97:01:e2: 32:6d:fe:f0:88:ae:c1:aa:a2:b3:ea:1e:55:c1:fa:c0:4e:9a: 74:b6:20:86:ec:4a:c4:19:2f:da:fd:9b:89:d8:25:e5:0c:41: c9:d2:7c:97:5b:b8:3c:a3:8d:99:0f:f2:f6:fe:36:7e:44:fd: b8:b6:26:68:c1:12:9b:69:92:56:9d:7a:84:05:7f:17:fa:ab: 9a:47:d8:05:9a:c1:8a:aa:0a:d1:4f:79:fa:09:9a:a4:58:d2: 4f:50:2a:52:c8:a1:27:2b:ba:98:9a:88:ab:b9:e8:6b:1e:32: 7f:72:f5:ed:05:52:82:28:73:33:de:1a:0e:66:ab:24:5e:f8: 67:1d:07:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjYwMzI0MTc1ODA2WhcNMjYwMzMxMTc1ODA2WjAYMRYwFAYD VQQDEw02OWMyZDBhZi04MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVEAJ6EQEEN6IxIqUDp3TUIV8bIDwawt7rUjQ5gVO8rT7oToWUqPAhbd1xhy 1iGfLAmkVEmo6Z4IPiWO9g3H13xBhC+1a73z87uY2gsfUdXBC5nmE04q1PMTgCwF pOjcYfy+O8F8LTz0anN1eEGW0L9zpZGo5xiJHJqkpNRnDmAwdE7anUmcWAat6lhz T0ism7hNAwqyv5l8IA40yRymKIgqD7HCqKfeGrSEV5UQLwjptSm3OyoautUkEQ3v BY8O8umZgmXdSvXeRsRSTwKLffr9zHAGBVDY0DRlcAUoU0o93U5NOrpd5r70ajkr ykQbyvO5UDqHjui/4eG8dA8bwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFw28asg sciDH/57vNoo6tHxBixhMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUSzRFv5MVRTMEKFeR7vw266m3BkUiP7lDa0xgB01vXoRMqLIm4UN8Lf5eOJS jrUZPr1A9VMc6x/RCLKwYbBGr4jlDbAmN+skR9+8YTD9JfW7DeDvwXXsphPJ3tfF BCzpBdzCODa/pLNoD7jouSUy0+uogbQ39SoGHDZPlwHiMm3+8Iiuwaqis+oeVcH6 wE6adLYghuxKxBkv2v2bidgl5QxBydJ8l1u4PKONmQ/y9v42fkT9uLYmaMESm2mS Vp16hAV/F/qrmkfYBZrBiqoK0U95+gmapFjST1AqUsihJyu6mJqIq7noax4yf3L1 7QVSgihzM94aDmarJF74Zx0HEA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:23:31 2026 by rpki-client