$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json) Hash identifier: fPAFMGe4gUysqUoLHpHreUbVM3hd6Dr0zybP9v6oOhM= Subject key identifier: 04:1A:8A:3F:F7:56:A9:FD:5E:1A:8A:3D:A8:EF:AB:E9:FE:EF:C8:B3 Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft Manifest number: 0201 Signing time: Wed 25 Mar 2026 02:26:17 +0000 Manifest this update: Wed 25 Mar 2026 02:26:17 +0000 Manifest next update: Wed 01 Apr 2026 02:26:17 +0000 Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: Tv0+QmapfJIkTIw9wvlYMFOGwcUChxZAVE1C7Xq5uec=) 2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: LOVQf/LdRjlXMFrzIgrgv8KlqIFzre3Qe7jhRSJb4JQ=) 3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: xb0+uYgRF2Qsu64pqIvTIsaUIoIoJYA9r/GFBorr/Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5 Validity Not Before: Mar 25 02:26:17 2026 GMT Not After : Apr 1 02:26:17 2026 GMT Subject: CN=69c347c9-d0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:2a:b7:75:e7:6d:1d:18:60:09:ae:00:74: cd:6e:38:d1:b5:1b:80:ee:b5:50:7b:34:f5:13:60: 93:b2:92:e4:cc:3d:3e:77:5c:be:b6:43:1b:68:2f: 29:a0:93:0c:1c:56:fa:a2:4e:64:be:3f:96:6a:a9: 0e:7f:02:91:a1:90:f7:83:48:c4:87:57:83:66:f3: 01:f1:eb:ca:9a:64:e7:55:69:4c:b3:01:c6:5f:f3: 9f:73:d7:7f:c5:28:c8:ae:fd:ed:42:2e:cd:9c:2f: 8b:24:a0:a5:52:3a:83:85:fd:19:e9:b0:bc:01:d3: 06:92:28:78:cd:ab:b8:9c:ce:9e:21:d7:70:45:c8: cd:16:97:da:83:f2:50:e7:a8:f2:d8:b4:9f:c6:b1: c2:4e:8f:42:9b:58:2b:d2:41:03:33:e2:ca:f6:62: 98:7a:83:10:3c:12:69:0b:fd:e1:86:c5:6f:0f:a3: 25:ce:13:f1:0d:f1:d7:b8:80:49:5a:2c:b0:48:3e: f8:c2:ab:13:da:4b:28:2a:58:72:1a:74:80:9d:b7: af:5d:6f:82:90:9d:40:72:00:1c:ce:f8:2b:38:68: be:4f:a7:0b:9c:5e:14:02:54:4a:9a:83:77:7a:11: cd:f8:f1:d1:18:bf:04:36:3f:e7:a9:43:78:86:ab: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1A:8A:3F:F7:56:A9:FD:5E:1A:8A:3D:A8:EF:AB:E9:FE:EF:C8:B3 X509v3 Authority Key Identifier: keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f1:55:d7:38:09:79:d3:76:b2:6e:d0:81:62:7c:95:2f:65: a3:cc:8e:bf:9b:4a:41:39:33:36:af:ba:af:ef:51:34:08:c8: 89:61:f5:f3:af:9d:ad:6b:dc:dc:8e:85:94:0b:73:ad:de:4d: 15:c4:b0:c8:13:86:e9:2e:f5:bf:3c:7a:0a:01:8c:e8:c7:7b: 25:24:53:20:eb:65:ab:1e:d2:61:3e:2a:e4:49:0b:98:4f:27: ee:26:d4:2b:a0:78:cf:58:4f:ff:f2:b0:5b:23:1c:1d:28:d3: 8f:24:f3:a5:af:78:6d:96:3c:7e:b6:4e:3c:59:d7:ec:9a:54: e5:f1:a4:07:dc:75:ab:20:30:ad:8a:5a:8c:82:25:7c:73:34: 3d:a6:0f:92:ce:e9:62:fb:aa:0b:aa:ed:f5:55:87:6b:d5:72: f7:1d:ec:9b:f4:c6:4e:66:1e:ad:02:91:0e:91:28:fa:81:d0: 05:ab:c8:ad:05:26:bb:69:26:8c:8c:01:cd:71:d4:36:34:67: 2f:47:74:da:95:32:c0:46:e3:9d:fd:6b:1a:bc:21:17:fb:cf: 5a:05:08:58:4d:64:a9:b6:7d:5e:12:65:6e:6c:02:60:ca:23: 3e:82:d0:62:d4:de:3d:f6:1d:ed:c3:e2:ae:87:44:89:c3:6c: d7:84:00:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0 REM1NjRFRjUwHhcNMjYwMzI1MDIyNjE3WhcNMjYwNDAxMDIyNjE3WjAYMRYwFAYD VQQDEw02OWMzNDdjOS1kMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjj4qt3XnbR0YYAmuAHTNbjjRtRuA7rVQezT1E2CTspLkzD0+d1y+tkMbaC8p oJMMHFb6ok5kvj+WaqkOfwKRoZD3g0jEh1eDZvMB8evKmmTnVWlMswHGX/Ofc9d/ xSjIrv3tQi7NnC+LJKClUjqDhf0Z6bC8AdMGkih4zau4nM6eIddwRcjNFpfag/JQ 56jy2LSfxrHCTo9Cm1gr0kEDM+LK9mKYeoMQPBJpC/3hhsVvD6MlzhPxDfHXuIBJ WiywSD74wqsT2ksoKlhyGnSAnbevXW+CkJ1AcgAczvgrOGi+T6cLnF4UAlRKmoN3 ehHN+PHRGL8ENj/nqUN4hqsMIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQaij/3 Vqn9XhqKPajvq+n+78izMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3 NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa c1hzODdZTVdUdlJOeFdUdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfvFV1zgJedN2sm7QgWJ8lS9lo8yOv5tKQTkzNq+6r+9RNAjIiWH186+drWvc 3I6FlAtzrd5NFcSwyBOG6S71vzx6CgGM6Md7JSRTIOtlqx7SYT4q5EkLmE8n7ibU K6B4z1hP//KwWyMcHSjTjyTzpa94bZY8frZOPFnX7JpU5fGkB9x1qyAwrYpajIIl fHM0PaYPks7pYvuqC6rt9VWHa9Vy9x3sm/TGTmYerQKRDpEo+oHQBavIrQUmu2km jIwBzXHUNjRnL0d02pUywEbjnf1rGrwhF/vPWgUIWE1kqbZ9XhJlbmwCYMojPoLQ YtTePfYd7cPirodEicNs14QAUQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:20 2026 by rpki-client