$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft File: fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft (raw, json) Hash identifier: mV/MBOwqh5cAUSUvFj5dDUOaKtAwyv2DxpN26acny04= Subject key identifier: 79:BB:9A:41:31:DE:C3:BB:1A:E6:A2:B5:EC:E5:81:45:DC:AD:A4:33 Authority key identifier: 7D:DA:6B:F2:C7:F5:29:6C:AB:B0:B7:4D:DD:21:7B:55:B2:BA:71:67 Certificate issuer: /CN=A919C7D0/serialNumber=7DDA6BF2C7F5296CABB0B74DDD217B55B2BA7167 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft Manifest number: 3C Signing time: Tue 03 Mar 2026 08:05:43 +0000 Manifest this update: Tue 03 Mar 2026 08:05:43 +0000 Manifest next update: Tue 10 Mar 2026 08:05:43 +0000 Files and hashes: 1: fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl (hash: mOSBRRB5WA24X0SwSMuds6vJW5HJ60AWYPDfkl/VZSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7D0, serialNumber=7DDA6BF2C7F5296CABB0B74DDD217B55B2BA7167 Validity Not Before: Mar 3 08:05:43 2026 GMT Not After : Mar 10 08:05:43 2026 GMT Subject: CN=69a69657-bfed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:e2:6b:6d:a0:fe:3d:04:50:60:1b:89:53: a2:53:d3:03:ac:e5:cc:2d:1c:e2:56:82:d6:3d:29: 23:7e:87:fe:7b:fc:11:97:62:e9:41:ac:93:38:3e: 9f:ba:f3:1e:89:6d:a4:84:55:a7:63:28:a6:f3:8d: 35:95:29:02:90:8b:8c:ae:24:79:16:65:63:30:37: 41:8d:44:eb:30:4a:3f:fe:fb:e7:e4:04:9e:0a:0f: 8d:bc:96:2a:04:8e:59:71:b1:d3:e1:1e:16:d2:1e: 35:39:eb:0e:52:cd:8f:b0:69:6f:86:dd:88:7c:eb: 61:e1:57:a5:f9:f6:6e:38:8a:7c:c8:ee:aa:cf:55: 38:fc:7a:e4:96:af:2e:fd:33:36:be:1e:22:f5:b5: 45:fa:a4:80:18:c8:31:6b:00:c3:be:5d:b9:58:c4: 20:21:98:81:64:94:63:43:39:20:e5:fa:c4:bb:2a: 60:f3:1b:5e:ca:00:94:84:0c:10:28:f6:70:bf:21: 66:2b:d1:29:c7:99:fa:37:3a:b4:b2:d3:aa:9a:da: ee:fb:24:d3:6b:e8:65:66:be:0d:04:57:64:2f:d2: 7d:31:9e:9d:ca:ce:0b:47:9c:9d:6f:8e:f7:71:b3: 3d:49:7f:a6:3c:31:fd:46:ec:6d:ed:70:65:ca:dd: b7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BB:9A:41:31:DE:C3:BB:1A:E6:A2:B5:EC:E5:81:45:DC:AD:A4:33 X509v3 Authority Key Identifier: keyid:7D:DA:6B:F2:C7:F5:29:6C:AB:B0:B7:4D:DD:21:7B:55:B2:BA:71:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fdpr8sf1KWyrsLdN3SF7VbK6cWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/755315C2BD5A11F0946C1D66C4F9AE02/fdpr8sf1KWyrsLdN3SF7VbK6cWc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:13:71:72:a4:56:e9:ea:20:1b:ef:f2:f5:7d:04:81:cb:10: 7c:a9:b0:f9:8d:72:bd:11:64:36:f0:45:8d:ab:bf:74:8c:f7: 57:52:f9:a1:ad:3b:3d:e0:57:01:b1:ac:1d:0d:c2:a3:ca:05: 2b:d3:e2:91:2e:b1:63:f0:1c:37:41:94:76:66:e4:92:a1:29: e7:75:c5:1a:9a:8d:bc:f8:92:56:c8:d8:23:5f:0a:47:29:c8: 58:b3:53:3d:28:9d:ac:01:5a:fa:b3:30:81:7c:01:1f:5e:04: a8:4a:9d:9b:77:d5:13:c1:67:15:29:0e:01:5d:2e:ea:42:50: 8a:b5:ed:61:db:c6:5b:49:43:b5:3f:99:c0:74:dc:b9:60:fc: 78:2e:5d:77:95:28:c6:03:7d:8f:3c:4d:72:c6:47:d7:4e:7b: e9:f3:d1:71:ce:f6:27:6c:4a:65:cd:2f:07:45:6f:ca:29:c6: 3b:d6:cb:6c:3a:36:75:d5:8d:fa:76:5c:82:bf:bf:a6:6b:45: bb:cc:09:d5:4f:b0:0c:f4:aa:e7:f7:b2:f1:f5:27:ce:84:f3: 5a:23:5f:17:5c:a2:7d:bb:fc:a3:8f:6d:98:6f:1c:6b:8e:34: 3f:54:d9:3b:af:ee:80:06:22:69:a2:55:04:36:48:01:9d:46: 56:31:d7:84 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QzdEMDExMC8GA1UEBRMoN0REQTZCRjJDN0Y1Mjk2Q0FCQjBCNzREREQyMTdCNTVC MkJBNzE2NzAeFw0yNjAzMDMwODA1NDNaFw0yNjAzMTAwODA1NDNaMBgxFjAUBgNV BAMTDTY5YTY5NjU3LWJmZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJVeJrbaD+PQRQYBuJU6JT0wOs5cwtHOJWgtY9KSN+h/57/BGXYulBrJM4Pp+6 8x6JbaSEVadjKKbzjTWVKQKQi4yuJHkWZWMwN0GNROswSj/+++fkBJ4KD428lioE jllxsdPhHhbSHjU56w5SzY+waW+G3Yh862HhV6X59m44inzI7qrPVTj8euSWry79 Mza+HiL1tUX6pIAYyDFrAMO+XblYxCAhmIFklGNDOSDl+sS7KmDzG17KAJSEDBAo 9nC/IWYr0SnHmfo3OrSy06qa2u77JNNr6GVmvg0EV2Qv0n0xnp3KzgtHnJ1vjvdx sz1Jf6Y8Mf1G7G3tcGXK3bc3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUebuaQTHe w7sa5qK17OWBRdytpDMwHwYDVR0jBBgwFoAUfdpr8sf1KWyrsLdN3SF7VbK6cWcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDN0QwLzc1NTMxNUMyQkQ1 QTExRjA5NDZDMUQ2NkM0RjlBRTAyL2ZkcHI4c2YxS1d5cnNMZE4zU0Y3VmJLNmNX Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZmRwcjhzZjFLV3lyc0xkTjNTRjdWYks2Y1djLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD N0QwLzc1NTMxNUMyQkQ1QTExRjA5NDZDMUQ2NkM0RjlBRTAyL2ZkcHI4c2YxS1d5 cnNMZE4zU0Y3VmJLNmNXYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCyE3FypFbp6iAb7/L1fQSByxB8qbD5jXK9EWQ28EWNq790jPdXUvmhrTs94FcB sawdDcKjygUr0+KRLrFj8Bw3QZR2ZuSSoSnndcUamo28+JJWyNgjXwpHKchYs1M9 KJ2sAVr6szCBfAEfXgSoSp2bd9UTwWcVKQ4BXS7qQlCKte1h28ZbSUO1P5nAdNy5 YPx4Ll13lSjGA32PPE1yxkfXTnvp89FxzvYnbEplzS8HRW/KKcY71stsOjZ11Y36 dlyCv7+ma0W7zAnVT7AM9Krn97Lx9SfOhPNaI18XXKJ9u/yjj22YbxxrjjQ/VNk7 r+6ABiJpolUENkgBnUZWMdeE -----END CERTIFICATE-----Generated at Wed Mar 4 08:37:19 2026 by rpki-client