$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: pFua8DsKBRCv7WVaNGUZXkIHujULNQAJ8CNkT6NMqyE= Subject key identifier: CE:E5:89:30:FB:7A:82:BA:AB:5A:87:B1:14:C9:48:B3:8E:D9:FA:0C Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: 0113 Signing time: Wed 25 Mar 2026 05:10:53 +0000 Manifest this update: Wed 25 Mar 2026 05:10:53 +0000 Manifest next update: Wed 01 Apr 2026 05:10:53 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: Z23y+nguD/BnzkDiYWRTD9XGCAnBZdsrtjdCoTD6PTM=) 2: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: WXld54/qQpJ20SP2MF49RJrfgvRKOagSnwKZf6AK3Ng=) 3: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: pGkwox9umZUHoOM38loNX04qmSCRj5ejUz67/mM+dmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Mar 25 05:10:53 2026 GMT Not After : Apr 1 05:10:53 2026 GMT Subject: CN=69c36e5d-8cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:30:75:86:0a:b6:bd:b1:33:d9:63:1b:4e: 98:4a:25:24:21:90:16:d1:21:9e:d6:e2:b6:97:c7: 49:ee:a9:5a:26:01:6c:2b:7c:bd:ac:e2:e8:36:35: e8:81:2c:44:fd:b6:50:b8:17:3d:07:02:28:43:af: f6:11:34:dc:14:8c:a1:bc:4a:e8:b8:fe:48:60:e5: ce:5b:27:8b:62:7a:94:3f:27:ba:3f:0a:be:f3:5f: 93:4c:b2:da:2a:b7:4b:fc:75:f1:49:3e:71:85:09: ac:4d:c9:e9:36:95:7f:a1:11:11:5a:4a:70:e2:c2: 5a:7f:d1:d7:bd:12:f9:01:41:0e:56:3a:8e:31:ed: 1d:f0:32:14:95:95:3c:a5:b6:3e:92:96:15:f5:23: 97:8c:f5:75:4d:95:f7:be:d8:53:6a:c3:c4:ec:df: fc:6f:dd:1e:ec:71:d4:a8:e5:0c:0a:84:28:9f:db: 3d:67:87:cb:6e:bc:cd:2d:c2:0e:9c:69:33:37:58: f3:c9:15:fd:b1:43:96:5a:8d:34:da:cc:68:64:f3: b1:07:be:85:2f:db:af:5e:e6:ba:46:8d:d1:65:08: 55:b4:2d:ba:f0:9c:17:bc:78:42:e5:ce:49:41:2b: f6:41:7c:47:07:f1:2a:84:f5:38:7c:8d:c3:4b:2a: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E5:89:30:FB:7A:82:BA:AB:5A:87:B1:14:C9:48:B3:8E:D9:FA:0C X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:96:4f:4b:21:57:68:74:f6:ba:9e:a1:ee:c7:c4:30:33:c4: 0c:f0:9a:72:0c:dc:47:39:58:67:92:71:61:cf:d4:06:20:86: 7a:b0:fc:ee:9b:a1:85:b4:05:f9:7c:da:cb:4f:ad:b9:8d:3f: ee:a8:ea:f4:71:ad:e6:2c:86:8f:7a:26:93:41:bc:b4:7a:ab: 2c:68:c8:d6:cd:26:95:85:10:e9:b0:cd:de:59:e3:cc:d4:2f: d1:95:75:6f:b1:10:02:b8:c5:88:24:06:d8:10:14:40:64:fe: 3f:2d:1a:24:54:44:25:d1:b0:53:39:0e:87:e1:14:d3:8a:32: a4:95:d4:7b:b5:e1:c5:b2:8e:b0:ac:88:32:f1:f2:89:ea:0a: 9e:b6:c8:32:dc:60:8c:89:de:e9:bd:4a:d1:e6:59:14:74:7c: f2:40:f8:38:87:0d:1d:8b:bd:a0:8b:a9:83:4d:b9:80:bb:e8: 68:9d:85:df:b7:20:47:9d:5f:61:90:97:2e:a3:07:bf:c3:3f: 6e:ed:93:90:f3:bf:c5:55:cb:4b:af:dd:78:7b:3e:9e:d2:85: 93:8b:10:a1:0b:50:46:6f:e4:3b:69:b1:66:8b:8b:54:55:25: 4a:ad:fc:b7:2c:af:c7:20:ad:b7:bf:64:bc:0e:00:2b:8a:4a: ff:cd:df:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjYwMzI1MDUxMDUzWhcNMjYwNDAxMDUxMDUzWjAYMRYwFAYD VQQDEw02OWMzNmU1ZC04Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuowdYYKtr2xM9ljG06YSiUkIZAW0SGe1uK2l8dJ7qlaJgFsK3y9rOLoNjXo gSxE/bZQuBc9BwIoQ6/2ETTcFIyhvErouP5IYOXOWyeLYnqUPye6Pwq+81+TTLLa KrdL/HXxST5xhQmsTcnpNpV/oRERWkpw4sJaf9HXvRL5AUEOVjqOMe0d8DIUlZU8 pbY+kpYV9SOXjPV1TZX3vthTasPE7N/8b90e7HHUqOUMCoQon9s9Z4fLbrzNLcIO nGkzN1jzyRX9sUOWWo002sxoZPOxB76FL9uvXua6Ro3RZQhVtC268JwXvHhC5c5J QSv2QXxHB/EqhPU4fI3DSyoXWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7liTD7 eoK6q1qHsRTJSLOO2foMMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL5ZPSyFXaHT2up6h7sfEMDPEDPCacgzcRzlYZ5JxYc/UBiCGerD87puhhbQF +Xzay0+tuY0/7qjq9HGt5iyGj3omk0G8tHqrLGjI1s0mlYUQ6bDN3lnjzNQv0ZV1 b7EQArjFiCQG2BAUQGT+Py0aJFREJdGwUzkOh+EU04oypJXUe7XhxbKOsKyIMvHy ieoKnrbIMtxgjIne6b1K0eZZFHR88kD4OIcNHYu9oIupg025gLvoaJ2F37cgR51f YZCXLqMHv8M/bu2TkPO/xVXLS6/deHs+ntKFk4sQoQtQRm/kO2mxZouLVFUlSq38 tyyvxyCtt79kvA4AK4pK/83fcA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:10:13 2026 by rpki-client