$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json) Hash identifier: PhnN7cfEW06aGDyr0yWeqHfe5KLGFiS4HiiaDugnHP8= Subject key identifier: 7D:71:56:10:8C:68:CE:22:F3:6F:DC:B5:BE:EB:14:03:E9:34:81:98 Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft Manifest number: 25 Signing time: Tue 03 Mar 2026 08:29:01 +0000 Manifest this update: Tue 03 Mar 2026 08:29:00 +0000 Manifest next update: Tue 10 Mar 2026 08:29:00 +0000 Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: uF273HRAk9iFWFA83inZrsxC5SWH5hZWNC0dHIaVDO8=) 2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Validity Not Before: Mar 3 08:29:00 2026 GMT Not After : Mar 10 08:29:00 2026 GMT Subject: CN=69a69bcd-2568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:92:67:24:77:f3:5f:35:e4:4a:fe:12:e3:86: cc:ad:1d:e5:6b:bf:e0:8e:00:0b:fd:6e:72:e3:d5: 09:fc:d9:9a:88:d4:e5:87:28:44:fc:2a:bc:24:97: 15:d0:d4:9e:66:c0:d9:7b:1b:f0:63:23:3b:3d:2a: f7:95:8a:7c:9f:20:59:05:4f:43:6e:66:40:72:88: c6:16:44:5b:33:e8:bb:62:8d:71:a0:38:8e:78:e6: 51:4a:c2:b0:aa:c0:12:eb:43:20:09:99:56:a5:17: 6e:de:18:70:c5:5a:c0:c5:03:f4:b2:70:b1:67:e2: 2f:ef:ba:5d:e9:a3:29:36:be:77:6c:f2:bc:8c:42: df:bd:05:6a:74:71:74:67:15:0b:55:8b:f4:a0:1c: 04:a1:a8:6f:70:2f:b9:de:5f:ce:c0:a9:ed:df:f9: 42:89:96:86:6f:18:77:e3:97:a1:df:e1:18:f9:c7: 5d:a8:68:7b:f5:ac:ae:ed:58:c6:77:a4:17:d4:04: 95:4a:c6:68:e2:24:86:48:74:a4:dd:6c:11:40:74: 33:c4:01:18:0f:68:1f:15:91:94:95:f8:d0:22:04: a0:e0:48:ec:0c:46:49:60:e8:01:1c:68:f1:e8:43: 5e:b5:55:a7:49:22:45:76:32:71:c7:45:84:7b:4f: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:71:56:10:8C:68:CE:22:F3:6F:DC:B5:BE:EB:14:03:E9:34:81:98 X509v3 Authority Key Identifier: keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:9b:a6:44:53:cb:ae:b6:ae:a8:3f:df:31:06:72:39:13:20: ec:cf:2f:e0:fd:a2:88:ef:83:7c:02:82:21:7e:62:0e:a4:8d: 9d:81:50:5a:68:78:80:bf:9c:3d:98:4c:00:11:5d:53:85:62: 37:cc:77:a0:93:e7:08:16:32:d7:9a:10:7d:45:cc:9f:31:1b: 39:cd:80:e7:06:d2:3d:44:19:39:69:33:ee:2f:fe:5d:2e:86: 7a:09:dd:09:21:c5:76:2b:f6:72:a0:5d:ad:d2:89:0b:76:bb: 8b:15:d7:79:dd:07:a3:16:de:e5:1e:03:2e:41:fc:db:c0:c2: 77:73:a9:04:82:b2:2e:f8:9e:15:50:51:83:82:3c:1a:c3:e1: c5:88:b2:de:8d:15:10:c1:30:2e:25:71:22:fb:7a:77:3f:81: 97:40:92:b6:5d:b6:0e:7e:34:76:14:7b:d8:fa:bc:e8:72:c6: 35:06:56:07:6b:fc:78:8a:b9:09:09:33:20:a1:a7:d4:d3:ac: fc:72:9b:3e:8c:3d:62:37:fc:6d:d4:cd:ae:79:16:e1:10:14: 69:00:80:32:29:c4:60:d4:33:c5:84:dd:db:de:74:7a:80:7f: 1d:c0:30:f5:8d:52:0f:72:d2:09:a7:28:2e:9e:1b:e0:38:ed: c6:87:be:de -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlENTc0M0I0NzQ1 QkY1OTA3NTAeFw0yNjAzMDMwODI5MDBaFw0yNjAzMTAwODI5MDBaMBgxFjAUBgNV BAMTDTY5YTY5YmNkLTI1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZkmckd/NfNeRK/hLjhsytHeVrv+COAAv9bnLj1Qn82ZqI1OWHKET8KrwklxXQ 1J5mwNl7G/BjIzs9KveVinyfIFkFT0NuZkByiMYWRFsz6LtijXGgOI545lFKwrCq wBLrQyAJmValF27eGHDFWsDFA/SycLFn4i/vul3poyk2vnds8ryMQt+9BWp0cXRn FQtVi/SgHAShqG9wL7neX87Aqe3f+UKJloZvGHfjl6Hf4Rj5x12oaHv1rK7tWMZ3 pBfUBJVKxmjiJIZIdKTdbBFAdDPEARgPaB8VkZSV+NAiBKDgSOwMRklg6AEcaPHo Q161VadJIkV2MnHHRYR7T5r/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfXFWEIxo ziLzb9y1vusUA+k0gZgwHwYDVR0jBBgwFoAUD1RnqdHrCYtSzBOdV0O0dFv1kHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzUxOUMxMDRFRTU1 OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0U3pCT2RWME8wZEZ2MWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFSbnFkSHJDWXRTekJPZFYwTzBkRnYxa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0 U3pCT2RWME8wZEZ2MWtIVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXm6ZEU8uutq6oP98xBnI5EyDszy/g/aKI74N8AoIhfmIOpI2dgVBaaHiAv5w9 mEwAEV1ThWI3zHegk+cIFjLXmhB9RcyfMRs5zYDnBtI9RBk5aTPuL/5dLoZ6Cd0J IcV2K/ZyoF2t0okLdruLFdd53QejFt7lHgMuQfzbwMJ3c6kEgrIu+J4VUFGDgjwa w+HFiLLejRUQwTAuJXEi+3p3P4GXQJK2XbYOfjR2FHvY+rzocsY1BlYHa/x4irkJ CTMgoafU06z8cps+jD1iN/xt1M2ueRbhEBRpAIAyKcRg1DPFhN3b3nR6gH8dwDD1 jVIPctIJpygunhvgOO3Gh77e -----END CERTIFICATE-----Generated at Wed Mar 4 08:41:29 2026 by rpki-client