$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: 1TIkviVkl9GdsDtNasoWP/m3FTuGRz13uZU1DyDnLrs= Subject key identifier: FC:0B:EA:79:B8:69:F6:E2:45:DC:28:63:A5:2B:5B:AD:C3:FB:7A:1F Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 351F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 351F Signing time: Tue 24 Mar 2026 15:09:25 +0000 Manifest this update: Tue 24 Mar 2026 15:09:24 +0000 Manifest next update: Tue 31 Mar 2026 15:09:24 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: PUzp9z+G3oQtWspPogx0jLpKEX+GpxG9JUaaqw2QIGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Mar 24 15:09:24 2026 GMT Not After : Mar 31 15:09:24 2026 GMT Subject: CN=69c2a924-62e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:60:1a:aa:96:1d:85:81:ff:63:b5:71:80: 10:01:5e:fc:e5:58:84:27:a3:80:83:03:ce:af:f1: 12:91:2c:15:69:98:0d:e1:a0:87:2f:b4:de:50:a6: fc:11:27:ef:d2:57:48:4f:61:6b:01:3e:7f:5d:44: 20:cd:59:3a:02:7a:fb:de:26:f1:ee:e3:f6:77:2c: 4b:38:e0:b0:45:5a:6c:01:8d:8b:58:7b:eb:01:9c: 0d:21:a0:a4:57:f9:64:d3:e9:ae:f0:a5:4e:91:b2: a9:e4:60:fe:c2:ad:1a:e6:20:79:26:2d:52:ae:9c: fc:2f:0d:6d:34:62:c9:5c:60:9d:b5:93:77:19:fc: 4a:1c:a6:08:37:9c:64:d3:48:70:24:dd:73:52:69: 5e:32:50:a4:75:66:98:21:94:d9:d0:62:64:e6:7b: 32:ec:0b:d1:96:81:aa:2f:3d:09:44:39:84:90:3a: c7:43:a9:48:67:71:2b:da:a4:53:b8:bc:32:88:73: 57:59:69:4b:27:4b:82:a4:6d:ef:4f:cc:c1:43:84: 62:b3:c7:92:07:9f:7d:d6:84:0b:46:d9:e7:81:6f: 74:52:de:de:19:b8:12:49:b1:3f:67:4b:24:eb:ea: 71:0a:dd:7a:03:eb:5c:3a:51:ff:92:a7:ba:27:42: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0B:EA:79:B8:69:F6:E2:45:DC:28:63:A5:2B:5B:AD:C3:FB:7A:1F X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d5:ac:78:09:39:06:d9:42:47:e7:05:70:70:0a:be:d5:d0: b8:15:2d:75:c8:aa:cf:2c:c7:1a:cf:fc:c7:f1:ac:aa:fe:91: 4e:48:74:99:f4:95:29:b6:67:4b:42:21:76:80:f6:01:6a:10: b8:29:fe:b0:a6:77:24:cb:21:b8:b9:55:51:1d:77:07:05:95: 48:b8:25:f2:d1:80:ef:29:28:4b:f5:95:ab:6e:9b:64:8d:d4: d3:44:5c:d2:4f:ea:5c:83:9d:b2:9a:4a:93:b8:f2:bc:c9:e5: 38:db:89:ac:46:b9:95:ec:33:f6:38:44:d8:4d:5f:3f:57:91: 00:1e:31:12:0c:18:35:ff:1d:41:bf:fb:86:38:cd:85:ea:48: 6e:1d:27:c6:9f:e9:db:44:58:c1:12:f8:1f:e1:a2:cb:2d:a8: b1:64:eb:bd:ec:1a:d0:ef:b9:5f:02:4b:f3:3d:df:e8:b2:54: 88:84:42:1e:7f:87:ae:1b:c5:eb:77:2d:70:98:1a:70:d4:98: fa:cd:ed:99:78:66:e2:21:eb:d2:0c:e4:91:6a:74:3c:3f:99: bc:d1:18:86:15:cb:23:54:5c:52:f5:44:fe:a3:f4:83:14:43: a8:46:81:3d:07:74:e4:fb:7e:f0:ad:83:0c:13:02:5a:f7:d2: d3:4f:14:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjYwMzI0MTUwOTI0WhcNMjYwMzMxMTUwOTI0WjAYMRYwFAYD VQQDEw02OWMyYTkyNC02MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxVgGqqWHYWB/2O1cYAQAV785ViEJ6OAgwPOr/ESkSwVaZgN4aCHL7TeUKb8 ESfv0ldIT2FrAT5/XUQgzVk6Anr73ibx7uP2dyxLOOCwRVpsAY2LWHvrAZwNIaCk V/lk0+mu8KVOkbKp5GD+wq0a5iB5Ji1Srpz8Lw1tNGLJXGCdtZN3GfxKHKYIN5xk 00hwJN1zUmleMlCkdWaYIZTZ0GJk5nsy7AvRloGqLz0JRDmEkDrHQ6lIZ3Er2qRT uLwyiHNXWWlLJ0uCpG3vT8zBQ4Ris8eSB5991oQLRtnngW90Ut7eGbgSSbE/Z0sk 6+pxCt16A+tcOlH/kqe6J0KwpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwL6nm4 afbiRdwoY6UrW63D+3ofMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASdWseAk5BtlCR+cFcHAKvtXQuBUtdciqzyzHGs/8x/Gsqv6RTkh0mfSVKbZn S0IhdoD2AWoQuCn+sKZ3JMshuLlVUR13BwWVSLgl8tGA7ykoS/WVq26bZI3U00Rc 0k/qXIOdsppKk7jyvMnlONuJrEa5lewz9jhE2E1fP1eRAB4xEgwYNf8dQb/7hjjN hepIbh0nxp/p20RYwRL4H+Giyy2osWTrvewa0O+5XwJL8z3f6LJUiIRCHn+HrhvF 63ctcJgacNSY+s3tmXhm4iHr0gzkkWp0PD+ZvNEYhhXLI1RcUvVE/qP0gxRDqEaB PQd05Pt+8K2DDBMCWvfS008UVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:41 2026 by rpki-client