$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: ewXVebObP24YvqLYZiMTy8u+N7ii5vBfm+4DqVotNc0= Subject key identifier: F1:AD:CC:CE:E0:9F:53:1C:E7:D9:A1:07:C0:E3:B9:06:71:32:7E:6B Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 04C2 Signing time: Fri 06 Mar 2026 23:40:36 +0000 Manifest this update: Fri 06 Mar 2026 23:40:36 +0000 Manifest next update: Fri 13 Mar 2026 23:40:36 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: 98I5BF2J1UdpLWRxmncCCqSWBYhwCWFffkBbs3KbsI0=) 2: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 6: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) 7: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 8: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 23:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Mar 6 23:40:36 2026 GMT Not After : Mar 13 23:40:36 2026 GMT Subject: CN=69ab65f4-7c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:f0:af:19:21:ac:d8:9f:21:c8:6f:e6:7e: 13:5d:2f:42:6b:79:fb:1d:d6:eb:3c:02:cb:1d:03: 70:0d:06:6b:a2:0d:07:93:16:ee:d1:bb:73:fc:1a: 9b:50:db:fd:4d:1f:1e:7a:f4:37:96:97:ae:89:ad: 57:2e:3a:5a:82:0b:21:08:02:ad:01:4b:a7:07:9a: 1e:a7:28:ec:40:b7:5f:97:f4:2f:d7:3c:d1:f3:21: 94:07:e2:dd:34:eb:34:76:b2:e2:ec:e1:87:71:ce: 53:cd:94:3e:10:a6:fe:fd:b1:a0:30:20:14:3c:08: fb:f2:84:d6:8f:f3:21:ef:9f:6d:81:71:9f:1d:f3: d4:f2:e8:f5:c7:2f:c6:9b:29:19:59:82:e0:a5:8f: fd:1b:d8:93:f0:01:7d:be:dd:b0:a9:a2:d9:c3:20: 20:41:4a:db:c5:07:12:75:eb:eb:7a:84:0c:8b:1b: 2e:4c:21:0b:b7:74:f7:25:24:cb:ed:83:7d:9f:2d: 5a:90:ef:9f:b4:e8:83:0e:18:b4:46:7a:fb:33:cc: f2:74:bc:ab:8b:c2:52:1d:7a:63:42:ba:b7:dc:8a: 32:80:78:56:dc:e0:3a:f0:8d:dd:8c:25:bc:b4:dc: ed:29:b2:39:b2:65:42:46:ac:80:39:d3:d9:e7:22: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AD:CC:CE:E0:9F:53:1C:E7:D9:A1:07:C0:E3:B9:06:71:32:7E:6B X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b2:07:c3:91:d8:72:c3:3b:33:1a:47:cd:f9:65:59:50:e1: 47:54:4c:41:db:95:c6:fe:06:84:50:ce:07:39:31:8f:df:c8: d8:af:6c:7a:7e:40:8b:c6:1b:14:56:b0:69:32:1a:67:b7:84: af:de:f3:a7:12:bb:6c:10:4e:ed:87:5f:7a:c9:93:52:b6:a8: ce:0f:b7:90:a1:43:38:97:38:98:f4:6d:5b:b8:84:e9:99:fb: c9:2f:d3:63:d3:42:22:4d:66:a1:6f:7c:db:53:91:6c:b2:c2: 3a:b3:0a:cb:9e:a1:51:f1:fd:04:7f:c8:74:27:5a:84:f9:70: 11:dc:2e:24:33:74:a3:49:ad:5d:dc:e7:a8:db:2f:ba:9f:d7: 95:85:94:a8:54:0d:ee:0e:5c:e0:02:54:be:ad:b8:83:98:40: d1:63:8e:33:6d:cf:06:fb:cd:27:34:97:d4:7b:8d:41:c9:f1: 70:41:f9:7e:97:4f:d8:5d:53:10:1b:53:48:9d:fa:f2:84:e6: 1c:24:7d:ed:9a:77:30:5f:13:56:33:82:04:b9:55:c8:49:96: 4b:44:f4:96:f0:06:31:c6:3c:6e:e1:40:51:f1:d5:0c:de:2e: d7:98:00:82:2b:16:85:d2:5a:4d:cc:11:9f:ba:ff:27:45:0f: 5f:47:92:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwMzA2MjM0MDM2WhcNMjYwMzEzMjM0MDM2WjAYMRYwFAYD VQQDEw02OWFiNjVmNC03YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAry/wrxkhrNifIchv5n4TXS9Ca3n7HdbrPALLHQNwDQZrog0Hkxbu0btz/Bqb UNv9TR8eevQ3lpeuia1XLjpaggshCAKtAUunB5oepyjsQLdfl/Qv1zzR8yGUB+Ld NOs0drLi7OGHcc5TzZQ+EKb+/bGgMCAUPAj78oTWj/Mh759tgXGfHfPU8uj1xy/G mykZWYLgpY/9G9iT8AF9vt2wqaLZwyAgQUrbxQcSdevreoQMixsuTCELt3T3JSTL 7YN9ny1akO+ftOiDDhi0Rnr7M8zydLyri8JSHXpjQrq33IoygHhW3OA68I3djCW8 tNztKbI5smVCRqyAOdPZ5yIuYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGtzM7g n1Mc59mhB8DjuQZxMn5rMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFLIHw5HYcsM7MxpHzfllWVDhR1RMQduVxv4GhFDOBzkxj9/I2K9sen5Ai8Yb FFawaTIaZ7eEr97zpxK7bBBO7YdfesmTUraozg+3kKFDOJc4mPRtW7iE6Zn7yS/T Y9NCIk1moW9821ORbLLCOrMKy56hUfH9BH/IdCdahPlwEdwuJDN0o0mtXdznqNsv up/XlYWUqFQN7g5c4AJUvq24g5hA0WOOM23PBvvNJzSX1HuNQcnxcEH5fpdP2F1T EBtTSJ368oTmHCR97Zp3MF8TVjOCBLlVyEmWS0T0lvAGMcY8buFAUfHVDN4u15gA gisWhdJaTcwRn7r/J0UPX0eS1w== -----END CERTIFICATE-----Generated at Sat Mar 7 18:38:02 2026 by rpki-client