$ rpki-client -vvf rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft File: rdsr88QYJtbQ--jSvy8FLZil2Uk.mft (raw, json) Hash identifier: ZCqnwpibJzOpJpUEC/skfqJJ4l2ZTIkjay0tKfueesA= Subject key identifier: 6F:11:FC:BB:38:CA:D8:47:9C:23:F5:2A:40:7C:93:7A:BD:F8:94:AD Authority key identifier: AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 Certificate issuer: /CN=A91689C8/serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft Manifest number: 0324 Signing time: Sun 05 Apr 2026 01:44:04 +0000 Manifest this update: Sun 05 Apr 2026 01:44:04 +0000 Manifest next update: Sun 12 Apr 2026 01:44:04 +0000 Files and hashes: 1: rdsr88QYJtbQ--jSvy8FLZil2Uk.crl (hash: TV/piR4bgL44pIWrOqsvA9docd+KHzIJABcD3pWFfTM=) 2: 3BB70A86092211F08BA72686C4F9AE02.roa (hash: n2/dWwwbsPVQvjLILKjQ6cAG3MMBLfAzkKw6aR2yhc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689C8, serialNumber=ADDB2BF3C41826D6D0FBE8D2BF2F052D98A5D949 Validity Not Before: Apr 5 01:44:04 2026 GMT Not After : Apr 12 01:44:04 2026 GMT Subject: CN=69d1be64-40a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:5f:98:bd:57:85:88:7b:4f:a0:a7:ad:1b: 8a:92:7e:9d:49:ab:a4:ab:85:22:c2:ac:d9:d4:f3: ed:0e:9b:42:d4:7e:6c:5e:c9:46:2d:5e:21:34:5a: 5c:f5:14:99:b2:f9:71:07:02:b2:2e:4e:79:0d:fe: 0a:41:3f:35:74:d9:48:d1:dc:7a:bf:27:ce:25:ac: d3:e6:82:a7:ec:6c:8a:3e:f5:17:e5:ed:d2:1e:23: 6e:30:90:d6:1a:07:a6:5e:e7:4c:24:8b:78:7e:8b: 68:14:ac:3a:bc:77:67:ba:cb:35:72:9a:7b:b9:34: 82:9c:3c:1f:e3:48:26:cb:80:8e:09:ea:34:05:13: 4c:63:cf:db:70:23:69:66:7b:b8:c8:da:ba:24:59: 38:c5:22:38:f8:45:dc:85:19:18:86:d4:1a:3c:7c: 8f:f2:67:f1:5e:ef:c9:81:9e:da:5a:3d:2d:d1:97: f2:6d:31:9e:e0:4b:e2:e5:ca:5e:1a:4d:6a:e5:e6: 72:b6:b8:5c:6a:ac:59:71:96:5c:ad:3c:77:1e:82: 4e:e8:66:3d:fb:89:ac:58:8c:c1:85:c6:6c:b6:9f: ca:e2:e7:0b:8d:22:2c:09:a1:2d:b3:c4:e8:0d:14: a0:2d:18:e8:cc:37:35:1a:d8:d4:17:b8:26:83:76: 9a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:11:FC:BB:38:CA:D8:47:9C:23:F5:2A:40:7C:93:7A:BD:F8:94:AD X509v3 Authority Key Identifier: keyid:AD:DB:2B:F3:C4:18:26:D6:D0:FB:E8:D2:BF:2F:05:2D:98:A5:D9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdsr88QYJtbQ--jSvy8FLZil2Uk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689C8/38B38E5E8DD711ED85225A7EC4F9AE02/rdsr88QYJtbQ--jSvy8FLZil2Uk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:fa:c2:7d:d7:a1:90:b1:22:c7:ff:5c:da:fa:fb:8e:aa:81: d1:47:52:8f:b9:30:46:5d:3c:19:b3:8c:5c:5b:3a:12:64:6e: 5a:01:e9:a4:c0:a8:e0:aa:48:97:74:e0:9a:f9:c5:cd:ae:68: 13:91:22:13:13:30:02:31:ac:6f:33:ea:2d:15:5b:00:7b:44: fb:5f:8c:1b:71:91:cb:bc:84:43:53:0a:03:ae:9f:64:2f:60: c5:82:1e:01:64:b4:c1:ed:04:f6:de:d9:4c:54:b1:d0:b6:1f: 42:81:13:3d:d8:76:fa:0c:5d:91:e5:c2:b5:f1:0a:ad:26:1a: 3e:9e:cd:2b:40:91:44:42:a0:95:80:b0:8f:70:3c:db:a4:67: 8d:5c:21:74:03:3f:be:93:4f:62:7a:b4:0f:3b:f4:81:11:5e: 3e:db:94:21:02:27:9b:4c:df:bc:8b:84:91:43:f9:be:6e:03: c9:63:49:e6:22:e7:1f:b6:ba:41:0f:68:a7:55:4d:d3:06:49: 1d:d4:6b:88:88:34:27:be:3e:07:dd:e8:2d:a1:06:4d:a4:e0: 27:a8:cc:5e:c3:28:34:65:61:e2:50:4f:39:c0:0b:0a:d0:3d: 8d:99:fe:0d:aa:3b:47:05:92:bf:99:1e:82:9f:9f:0b:da:4e: 00:06:e8:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5QzgxMTAvBgNVBAUTKEFEREIyQkYzQzQxODI2RDZEMEZCRThEMkJGMkYwNTJE OThBNUQ5NDkwHhcNMjYwNDA1MDE0NDA0WhcNMjYwNDEyMDE0NDA0WjAYMRYwFAYD VQQDEw02OWQxYmU2NC00MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXxfmL1XhYh7T6CnrRuKkn6dSaukq4UiwqzZ1PPtDptC1H5sXslGLV4hNFpc 9RSZsvlxBwKyLk55Df4KQT81dNlI0dx6vyfOJazT5oKn7GyKPvUX5e3SHiNuMJDW GgemXudMJIt4fotoFKw6vHdnuss1cpp7uTSCnDwf40gmy4COCeo0BRNMY8/bcCNp Znu4yNq6JFk4xSI4+EXchRkYhtQaPHyP8mfxXu/JgZ7aWj0t0ZfybTGe4Evi5cpe Gk1q5eZytrhcaqxZcZZcrTx3HoJO6GY9+4msWIzBhcZstp/K4ucLjSIsCaEts8To DRSgLRjozDc1GtjUF7gmg3aaTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8R/Ls4 ythHnCP1KkB8k3q9+JStMB8GA1UdIwQYMBaAFK3bK/PEGCbW0Pvo0r8vBS2YpdlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODlDOC8zOEIzOEU1RThE RDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0YlEtLWpTdnk4RkxaaWwy VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jkc3I4OFFZSnRiUS0talN2eThGTFppbDJVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlDOC8zOEIzOEU1RThERDcxMUVEODUyMjVBN0VDNEY5QUUwMi9yZHNyODhRWUp0 YlEtLWpTdnk4RkxaaWwyVWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkvrCfdehkLEix/9c2vr7jqqB0UdSj7kwRl08GbOMXFs6EmRuWgHppMCo4KpI l3TgmvnFza5oE5EiExMwAjGsbzPqLRVbAHtE+1+MG3GRy7yEQ1MKA66fZC9gxYIe AWS0we0E9t7ZTFSx0LYfQoETPdh2+gxdkeXCtfEKrSYaPp7NK0CRREKglYCwj3A8 26RnjVwhdAM/vpNPYnq0Dzv0gRFePtuUIQInm0zfvIuEkUP5vm4DyWNJ5iLnH7a6 QQ9op1VN0wZJHdRriIg0J74+B93oLaEGTaTgJ6jMXsMoNGVh4lBPOcALCtA9jZn+ Dao7RwWSv5kegp+fC9pOAAboIw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:06 2026 by rpki-client