$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: evGjKREGeqH9gF5UFgXdJfduBuUobg2uCa0QXSzU6e8= Subject key identifier: A5:4D:06:A3:DB:AC:AD:03:30:15:B9:49:AD:55:20:24:80:53:5F:DA Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 05D2 Signing time: Tue 24 Mar 2026 22:41:53 +0000 Manifest this update: Tue 24 Mar 2026 22:41:52 +0000 Manifest next update: Tue 31 Mar 2026 22:41:52 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: NAaV2u9mE79VTnbCU0lEQi3vkI+kBGXMl9W89ilfSE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: Mar 24 22:41:52 2026 GMT Not After : Mar 31 22:41:52 2026 GMT Subject: CN=69c31331-cb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:c2:6f:d1:75:76:e3:b8:78:ff:4f:13:00: 93:25:d6:c9:65:da:f3:6e:da:7a:c2:ff:59:25:54: 65:ca:ea:53:48:67:98:a7:fe:fc:d8:51:32:36:b9: 3e:37:b8:bc:4a:25:17:57:53:08:46:f7:19:a8:35: 50:6d:4f:62:04:16:ac:79:d8:a4:f4:a5:80:45:18: 10:40:50:c2:8b:d2:ec:36:79:aa:07:80:76:61:cd: 35:da:dc:e8:dd:47:86:c2:f5:34:6a:57:84:70:bc: b9:c9:2d:c1:1e:a3:d3:97:38:2e:20:d8:f8:76:33: 3d:0f:6e:fb:ee:e9:a9:52:5c:8c:df:84:ec:1d:6d: b8:b7:da:b4:3a:77:2b:03:20:db:64:8b:10:d0:0d: 0e:f4:f8:81:89:4f:90:ba:45:cc:cc:b2:d5:a0:60: 6d:fa:7a:8a:43:4b:8a:2b:d1:3b:af:59:a0:1e:f7: 12:c3:0d:0a:21:80:0a:ac:89:3b:f7:7a:83:de:47: 0b:6b:4b:a4:09:0c:3f:14:a4:c9:0e:e6:f3:92:88: d6:c3:40:3c:e4:42:52:d0:7c:0b:54:e3:9f:a1:50: 29:6a:7b:c1:30:c6:1e:c7:e3:bb:1d:d7:5d:1b:56: 03:d4:24:fe:97:cc:a5:e9:cf:cd:21:19:ea:41:19: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4D:06:A3:DB:AC:AD:03:30:15:B9:49:AD:55:20:24:80:53:5F:DA X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:bc:10:2b:15:da:21:57:d9:3d:c9:67:fa:7e:54:d9:26: a5:a1:fb:8f:55:e4:7f:32:7b:33:b4:f7:3f:ca:63:35:07:ba: d5:aa:e9:ce:09:46:ac:cd:38:bc:3a:2d:8d:c5:6b:a0:2e:ca: 05:bc:48:e2:a3:c7:76:de:c6:4c:a9:f2:14:d6:2b:0e:7b:d0: 71:10:32:45:a4:4a:c6:82:49:c8:7d:b6:03:ca:0c:ec:ea:6b: 9c:74:d5:43:c4:7b:9b:15:e0:99:90:79:d8:f6:ce:a2:e3:05: c8:de:07:28:39:ed:d3:9e:62:de:e7:fb:6b:ab:48:19:1e:c9: 12:5d:32:cb:66:b3:aa:cd:05:5f:3a:19:8b:c9:3a:54:a0:35: 2f:d1:f2:4a:a1:d5:da:b0:e9:38:09:fb:2b:df:38:d9:68:a3: 34:90:7e:87:7b:af:3a:c1:9d:67:de:fb:de:70:be:df:13:d8: c1:80:ce:95:3f:c4:07:f7:18:5d:f0:90:15:1a:99:7a:fc:b4: 52:de:97:ec:44:35:02:50:0b:73:26:eb:2a:f7:1b:77:5c:72: 7b:77:cd:c4:46:aa:9c:a0:8b:05:bc:ac:9b:9d:d5:19:2d:f7: a9:ad:20:2f:f7:2c:d9:00:6c:38:a4:6e:24:bd:de:c5:cb:4c: 8f:5d:5f:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjYwMzI0MjI0MTUyWhcNMjYwMzMxMjI0MTUyWjAYMRYwFAYD VQQDEw02OWMzMTMzMS1jYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAklbCb9F1duO4eP9PEwCTJdbJZdrzbtp6wv9ZJVRlyupTSGeYp/782FEyNrk+ N7i8SiUXV1MIRvcZqDVQbU9iBBasedik9KWARRgQQFDCi9LsNnmqB4B2Yc012tzo 3UeGwvU0aleEcLy5yS3BHqPTlzguINj4djM9D2777umpUlyM34TsHW24t9q0Oncr AyDbZIsQ0A0O9PiBiU+QukXMzLLVoGBt+nqKQ0uKK9E7r1mgHvcSww0KIYAKrIk7 93qD3kcLa0ukCQw/FKTJDubzkojWw0A85EJS0HwLVOOfoVApanvBMMYex+O7Hddd G1YD1CT+l8yl6c/NIRnqQRllDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVNBqPb rK0DMBW5Sa1VICSAU1/aMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAclO8ECsV2iFX2T3JZ/p+VNkmpaH7j1XkfzJ7M7T3P8pjNQe61arpzglGrM04 vDotjcVroC7KBbxI4qPHdt7GTKnyFNYrDnvQcRAyRaRKxoJJyH22A8oM7OprnHTV Q8R7mxXgmZB52PbOouMFyN4HKDnt055i3uf7a6tIGR7JEl0yy2azqs0FXzoZi8k6 VKA1L9HySqHV2rDpOAn7K9842WijNJB+h3uvOsGdZ9773nC+3xPYwYDOlT/EB/cY XfCQFRqZevy0Ut6X7EQ1AlALcybrKvcbd1xye3fNxEaqnKCLBbysm53VGS33qa0g L/cs2QBsOKRuJL3exctMj11fJQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:10:36 2026 by rpki-client