$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: 4JC5+Lae/Eoo6D8hNSdWYmuuMk2+tLgOCQMlrJoI7Hc= Subject key identifier: F7:40:C4:BB:D5:60:31:A6:54:1A:37:64:6F:1F:F8:AC:F5:D8:C5:97 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: A4 Signing time: Sat 21 Mar 2026 06:13:55 +0000 Manifest this update: Sat 21 Mar 2026 06:13:54 +0000 Manifest next update: Sat 28 Mar 2026 06:13:54 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: +nrFNJ11rEzrbyax68EqmZuGNcZgKIHoT8mFdruZuhE=) 2: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: i0U6RLy91T9DkhNZtnLF7FlhidMvmsCPREqfKmoGIdU=) 3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: fh4pbk7ZgyPKBaTjsRWjp1tC+xa/lcPj1cdrRM1oMjA=) 4: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: reMz8lDbqv/5MKQ6Imr6fG4CgsSrFCmBFY2a5YJcGm4=) 5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: XTFl/MyUGXYDLMXaMRa7HDON+jfgJcrSfnOokKAkziU=) 6: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: mmlD29Jwj8h5f301RfKicLwmF3TuYi2j0tYABjJXZO0=) 7: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: QYbToAo1d6nye+FsjzAnvw3/lP4Nx+MEududWG8oDyc=) 8: CA5B991430E111F09B76D311C4F9AE02.roa (hash: PEnLi/2yYSoy8XLBMGLd/6VOl25IvlE5IW4q9j8andY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Mar 21 06:13:54 2026 GMT Not After : Mar 28 06:13:54 2026 GMT Subject: CN=69be3723-ee41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:f8:56:4f:ee:58:bd:4e:91:aa:0b:7d:1a: bd:64:44:fc:d2:ba:45:5e:ee:85:6c:90:5b:d2:13: a9:2e:63:53:21:dd:a1:37:dd:52:92:ec:f2:62:0b: fa:2e:9c:03:bf:d3:0b:93:03:d9:f0:e5:bf:6e:61: 12:fa:28:46:13:6e:4e:71:a9:6e:7b:b9:d7:9a:1e: c6:45:08:5b:f4:a7:0f:74:21:8e:d9:71:55:0b:3c: 0c:da:fa:5c:23:85:53:f6:d0:6a:01:66:8c:83:b0: 58:18:26:d4:a5:e3:05:ac:8d:e8:4b:8f:3c:ad:d2: 4e:5d:24:4a:1f:f3:1d:a9:fd:55:a5:79:4f:c4:f1: f5:e5:29:65:b0:aa:92:aa:1c:66:e4:b6:48:8f:1c: a4:23:1a:73:39:c3:7a:c7:2c:d6:bf:fb:69:af:97: 48:55:6e:17:65:1a:cd:36:5c:af:8e:29:de:d7:65: e2:c0:66:88:39:73:11:bf:a7:47:d0:e5:32:e8:1c: 26:cb:c7:dd:c9:43:95:29:d5:13:4f:fb:47:b5:d2: db:07:84:18:72:6b:e7:91:10:5c:7e:db:df:33:e3: a2:2e:5a:75:b1:f7:c1:3e:70:4a:08:4f:de:db:59: fd:c1:31:40:44:ff:99:9d:fb:b2:fb:a2:cc:06:36: af:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:40:C4:BB:D5:60:31:A6:54:1A:37:64:6F:1F:F8:AC:F5:D8:C5:97 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:5b:38:ba:e5:0c:c1:30:90:d9:13:42:84:b0:43:fb:8e:43: b4:c9:fa:2e:45:dd:9a:aa:cd:c9:15:0b:d1:18:fd:3f:0a:52: 93:5e:83:7d:21:e9:31:6a:a3:9f:bd:52:5c:28:62:20:fb:58: 12:92:73:e5:22:43:72:f0:23:40:53:6f:b3:4a:82:0e:e8:d0: be:54:b3:51:ed:67:22:21:b4:79:05:25:10:c7:19:c5:6a:26: 1c:b2:a4:b7:7e:6c:53:15:85:2c:fc:09:30:8c:2d:b3:7a:08: 00:3b:70:51:64:c9:f9:e8:90:fc:56:2a:af:58:1a:3b:ae:31: 37:ef:0a:0f:cb:d8:23:5f:1b:a9:4d:16:5b:40:2d:d2:45:78: c0:64:da:ad:98:50:7b:c8:21:11:8c:14:50:48:01:bb:0a:35: ac:06:1d:f6:ed:af:07:08:73:08:5e:80:d4:54:3f:12:52:9c: 7c:57:28:83:32:19:d3:84:16:34:09:86:4c:99:11:a7:3a:60: f6:ef:f9:4a:16:9a:aa:2e:59:87:a4:eb:25:48:0a:6e:b5:21: 52:4c:e8:70:8f:35:43:cd:ae:af:87:b3:03:be:3b:10:b7:c5: 82:e2:c6:bb:88:f5:84:3e:d1:f4:d3:71:a5:2e:72:b2:26:93: de:85:46:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwMzIxMDYxMzU0WhcNMjYwMzI4MDYxMzU0WjAYMRYwFAYD VQQDEw02OWJlMzcyMy1lZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFH4Vk/uWL1OkaoLfRq9ZET80rpFXu6FbJBb0hOpLmNTId2hN91SkuzyYgv6 LpwDv9MLkwPZ8OW/bmES+ihGE25Ocalue7nXmh7GRQhb9KcPdCGO2XFVCzwM2vpc I4VT9tBqAWaMg7BYGCbUpeMFrI3oS488rdJOXSRKH/Mdqf1VpXlPxPH15SllsKqS qhxm5LZIjxykIxpzOcN6xyzWv/tpr5dIVW4XZRrNNlyvjine12XiwGaIOXMRv6dH 0OUy6Bwmy8fdyUOVKdUTT/tHtdLbB4QYcmvnkRBcftvfM+OiLlp1sffBPnBKCE/e 21n9wTFARP+Znfuy+6LMBjavawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdAxLvV YDGmVBo3ZG8f+Kz12MWXMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOFs4uuUMwTCQ2RNChLBD+45DtMn6LkXdmqrNyRUL0Rj9PwpSk16DfSHpMWqj n71SXChiIPtYEpJz5SJDcvAjQFNvs0qCDujQvlSzUe1nIiG0eQUlEMcZxWomHLKk t35sUxWFLPwJMIwts3oIADtwUWTJ+eiQ/FYqr1gaO64xN+8KD8vYI18bqU0WW0At 0kV4wGTarZhQe8ghEYwUUEgBuwo1rAYd9u2vBwhzCF6A1FQ/ElKcfFcogzIZ04QW NAmGTJkRpzpg9u/5Shaaqi5Zh6TrJUgKbrUhUkzocI81Q82ur4ezA747ELfFguLG u4j1hD7R9NNxpS5ysiaT3oVG1w== -----END CERTIFICATE-----Generated at Sat Mar 21 13:17:28 2026 by rpki-client