$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json) Hash identifier: nR61YnjzkAVPNypjdJSkFJQC/RtSs4+LkU0Aw+7vwWI= Subject key identifier: 9D:3F:C1:78:02:1E:9C:D1:F2:93:9A:29:18:FF:E4:40:33:8D:C2:AA Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft Manifest number: 1B Signing time: Sat 07 Mar 2026 08:21:00 +0000 Manifest this update: Sat 07 Mar 2026 08:20:59 +0000 Manifest next update: Sat 14 Mar 2026 08:20:59 +0000 Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: ZWWLGnAA+sl4NvbAiukfPfllNv9sntWHuPgj96kbNcg=) 2: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=) 3: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Validity Not Before: Mar 7 08:20:59 2026 GMT Not After : Mar 14 08:20:59 2026 GMT Subject: CN=69abdfec-4c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3a:d5:88:89:8f:03:ce:48:97:c7:1a:6a:67: 6f:45:52:49:4c:e2:6c:e4:8e:c5:10:2f:5b:68:64: 5d:bb:3d:45:a4:62:6f:95:0e:71:fb:53:9e:10:c6: 55:b4:72:f1:2a:56:25:9b:65:d2:45:ff:a6:9a:5a: 5c:1c:5c:c1:85:f5:41:af:d3:33:d4:0f:d5:f0:6c: 17:1e:7e:f5:84:28:4e:73:ce:4b:63:b0:20:13:df: fb:ce:65:b6:25:25:2c:9d:6a:df:bf:8d:bf:f7:7b: 8b:9d:74:70:cd:5d:26:a8:65:b8:9e:32:57:0f:84: 09:38:60:7f:48:d0:b1:dc:fe:be:01:bc:19:c4:50: b0:cc:cb:3b:78:36:29:48:27:4e:22:1b:a6:b6:26: 46:10:6d:70:a7:28:30:3a:e0:e1:d3:20:fd:21:ae: 74:85:5a:d6:aa:1f:94:ab:9c:82:2d:c0:9b:5a:5b: f1:03:bd:af:29:06:59:bd:55:a8:aa:5f:30:c2:d7: 99:99:92:f9:cb:86:f2:ec:7c:e0:d0:f7:a7:86:0d: e7:3c:34:31:8d:96:2d:7f:e6:e7:18:e7:0d:62:08: cb:4e:3d:66:73:ad:1e:60:9a:53:f9:d7:2e:57:15: 86:3e:43:3f:72:21:b3:f1:9b:35:08:7b:8c:96:1e: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3F:C1:78:02:1E:9C:D1:F2:93:9A:29:18:FF:E4:40:33:8D:C2:AA X509v3 Authority Key Identifier: keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c5:d8:c4:d4:91:28:28:45:09:3b:bb:93:ae:37:b5:60:54: 45:74:be:b8:d0:b6:a8:e4:80:a7:e5:31:2e:19:c4:3a:fb:12: 48:71:8a:cc:42:f0:67:12:74:9f:6b:cd:bb:64:52:9f:9f:6c: df:64:2e:17:09:ce:09:7f:de:a7:d4:fe:fe:d9:4b:bd:4a:d3: 28:7e:70:8f:f6:d0:6e:37:e0:ac:55:3a:20:2e:2b:ba:ae:fc: 46:49:ca:0c:84:c3:9b:21:65:03:d5:3a:a8:c9:d8:46:78:65: 3a:b2:cc:f3:24:c1:1c:9f:26:98:1c:a9:dc:c3:bd:1c:cb:89: a8:3d:96:17:24:96:d2:68:bc:7e:f1:c9:55:9e:9e:38:e1:47: 26:72:5c:93:e4:00:90:76:70:8c:56:06:ee:19:62:09:ac:17: cf:ad:ea:2d:51:b1:8a:75:ff:66:6f:1b:87:1a:77:7d:d6:1d: 51:8a:80:12:a0:36:9e:8c:10:a7:7f:87:88:ed:0d:85:9d:f1: 9c:15:2c:39:3d:d7:da:a5:79:45:c3:2b:24:fa:2f:16:dd:ef: e8:71:2b:2c:7a:b3:74:6d:ce:97:3e:71:e6:28:e7:c4:31:9d: 6c:9e:77:1c:be:87:c5:96:b4:6a:68:c8:25:59:84:ba:ff:fa: c7:3a:ca:7f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM2OTExMC8GA1UEBRMoNDgzODQyODZBRUI5QjYwQkIzNDI4NDdGMkJBNzYxMkY4 NERCNDNCMjAeFw0yNjAzMDcwODIwNTlaFw0yNjAzMTQwODIwNTlaMBgxFjAUBgNV BAMTDTY5YWJkZmVjLTRjODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfOtWIiY8DzkiXxxpqZ29FUklM4mzkjsUQL1toZF27PUWkYm+VDnH7U54QxlW0 cvEqViWbZdJF/6aaWlwcXMGF9UGv0zPUD9XwbBcefvWEKE5zzktjsCAT3/vOZbYl JSydat+/jb/3e4uddHDNXSaoZbieMlcPhAk4YH9I0LHc/r4BvBnEULDMyzt4NilI J04iG6a2JkYQbXCnKDA64OHTIP0hrnSFWtaqH5SrnIItwJtaW/EDva8pBlm9Vaiq XzDC15mZkvnLhvLsfODQ96eGDec8NDGNli1/5ucY5w1iCMtOPWZzrR5gmlP51y5X FYY+Qz9yIbPxmzUIe4yWHu/DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnT/BeAIe nNHyk5opGP/kQDONwqowHwYDVR0jBBgwFoAUSDhChq65tguzQoR/K6dhL4TbQ7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzY5Lzc2N0E4RThBMEM3 OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1elFvUl9LNmRoTDRUYlE3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0RoQ2hxNjV0Z3V6UW9SX0s2ZGhMNFRiUTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzY5Lzc2N0E4RThBMEM3OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1 elFvUl9LNmRoTDRUYlE3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfxdjE1JEoKEUJO7uTrje1YFRFdL640Lao5ICn5TEuGcQ6+xJIcYrMQvBnEnSf a827ZFKfn2zfZC4XCc4Jf96n1P7+2Uu9StMofnCP9tBuN+CsVTogLiu6rvxGScoM hMObIWUD1TqoydhGeGU6sszzJMEcnyaYHKncw70cy4moPZYXJJbSaLx+8clVnp44 4UcmclyT5ACQdnCMVgbuGWIJrBfPreotUbGKdf9mbxuHGnd91h1RioASoDaejBCn f4eI7Q2FnfGcFSw5PdfapXlFwysk+i8W3e/ocSsserN0bc6XPnHmKOfEMZ1snncc vofFlrRqaMglWYS6//rHOsp/ -----END CERTIFICATE-----Generated at Sat Mar 7 14:31:40 2026 by rpki-client