$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft File: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft (raw, json) Hash identifier: o/qWngXRloo7UmqgsXjgNaAiSuXw7vNx+IwyDcg+rVQ= Subject key identifier: 2B:61:31:15:BB:05:FB:BA:99:C0:BE:DD:D2:BB:00:92:F6:36:71:4C Authority key identifier: 0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 Certificate issuer: /CN=A9112FE1/serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft Manifest number: 30 Signing time: Sun 01 Mar 2026 23:27:42 +0000 Manifest this update: Sun 01 Mar 2026 23:27:40 +0000 Manifest next update: Sun 08 Mar 2026 23:27:40 +0000 Files and hashes: 1: DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl (hash: aRM+tu15Kd2aezjQKiQ0/a4X6e0sj4oz2Wsr1gXIjWM=) 2: 7D2D672CDED711F0AB94945E506F56BC.roa (hash: I092lUbHTPyqI08H+trkIwLUS+cACGuVgfM1lS806Io=) 3: 5B694A50EAD711F0B1E9CBE6646F56BC.roa (hash: UEWOVoTQ4xp6OOkBixX7mmshmyRaVVdCqDXyxlBmgyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=0C58C6969EE64C4191AAB66963F409D45AEAF698 Validity Not Before: Mar 1 23:27:40 2026 GMT Not After : Mar 8 23:27:40 2026 GMT Subject: CN=69a4cb6e-61c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4a:80:16:1a:ef:21:29:39:3c:85:d2:45:de: 99:4b:05:69:01:83:55:a0:6e:20:62:97:58:b1:f3: c4:49:c1:b8:7e:db:7d:fb:bd:98:dd:e4:94:b6:a2: 6f:fe:90:b7:e2:ba:5a:04:a4:3a:0f:1d:6f:72:a3: 7b:53:b7:60:d2:7e:22:5c:cc:f3:fc:b7:7c:26:ef: 84:1e:87:b2:1d:85:bf:69:03:e6:05:09:eb:8c:cc: 92:d2:6a:79:02:9e:86:c9:4c:c8:03:1e:ea:3b:ea: b8:6d:e2:1c:61:45:c9:4a:58:47:7d:1f:ed:22:47: 76:c3:b9:f5:ca:7e:84:74:17:0c:b8:63:a4:fb:82: f7:11:6b:94:45:f8:33:a6:a9:cd:53:57:f0:66:67: 88:6a:a6:6e:82:a9:0f:2d:2c:fe:3e:f1:86:55:44: 61:b2:e2:59:3e:03:76:e5:3d:86:dd:c0:c0:6f:d1: a5:8a:2b:cf:1d:8c:f6:aa:6a:48:61:5b:ec:f8:8a: f9:6f:30:70:91:af:85:9b:0f:3e:b7:90:63:a5:88: ae:a3:0c:5e:25:25:40:20:65:e4:c4:14:a6:84:88: f1:02:e5:b9:ea:b2:4a:8c:14:d0:59:4f:12:78:fc: 9b:d3:32:2b:ea:1f:51:4c:ac:d9:b2:3c:19:b3:e8: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:61:31:15:BB:05:FB:BA:99:C0:BE:DD:D2:BB:00:92:F6:36:71:4C X509v3 Authority Key Identifier: keyid:0C:58:C6:96:9E:E6:4C:41:91:AA:B6:69:63:F4:09:D4:5A:EA:F6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/FB28D9F0DC9C11F0817E8961A2EE528E/DFjGlp7mTEGRqrZpY_QJ1Frq9pg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a4:7a:21:b4:ba:ad:92:17:b4:32:c1:79:6b:47:8c:63:c2: 6e:ea:0d:28:5e:3a:aa:89:8f:62:62:ed:1e:20:86:45:af:8e: b3:17:d2:d0:0a:1e:c4:64:ef:9a:44:dd:a0:65:cc:98:72:11: f3:88:b4:a9:b1:99:12:f2:f0:aa:39:41:4c:4e:67:ac:54:43: 11:86:39:73:31:77:56:78:62:09:9d:c0:b1:2b:25:e3:76:42: 67:ca:c2:00:dc:1a:18:45:8d:25:46:17:a3:c1:56:3c:ae:e8: 74:c9:43:bd:ba:77:d4:34:30:36:81:2f:ea:09:b1:48:97:43: 2b:d7:de:a7:fa:dd:91:d2:60:54:bb:a7:e3:51:f9:9f:69:0a: 14:a4:28:20:ca:77:70:9f:cc:a7:22:f3:5f:b7:30:a3:36:5b: 4f:48:3c:4d:f7:d6:24:fc:c5:48:65:fd:bd:7c:a6:3c:15:5f: ba:d9:0e:70:d3:9e:1f:7e:25:bb:1e:da:c0:b8:12:b4:a3:16: 5d:66:17:e9:85:17:29:5d:0d:1d:36:0d:8f:83:f9:9b:4e:65: 86:fe:cc:8b:43:10:70:8e:fa:38:79:32:95:bb:9d:4d:db:c0: e2:38:32:12:ba:15:e6:a1:1b:43:a9:bd:3b:fd:7c:ec:0f:78: f9:88:f4:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoMEM1OEM2OTY5RUU2NEM0MTkxQUFCNjY5NjNGNDA5RDQ1 QUVBRjY5ODAeFw0yNjAzMDEyMzI3NDBaFw0yNjAzMDgyMzI3NDBaMBgxFjAUBgNV BAMTDTY5YTRjYjZlLTYxYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuSoAWGu8hKTk8hdJF3plLBWkBg1WgbiBil1ix88RJwbh+2337vZjd5JS2om/+ kLfiuloEpDoPHW9yo3tTt2DSfiJczPP8t3wm74Qeh7Idhb9pA+YFCeuMzJLSankC nobJTMgDHuo76rht4hxhRclKWEd9H+0iR3bDufXKfoR0Fwy4Y6T7gvcRa5RF+DOm qc1TV/BmZ4hqpm6CqQ8tLP4+8YZVRGGy4lk+A3blPYbdwMBv0aWKK88djPaqakhh W+z4ivlvMHCRr4WbDz63kGOliK6jDF4lJUAgZeTEFKaEiPEC5bnqskqMFNBZTxJ4 /JvTMivqH1FMrNmyPBmz6HndAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK2ExFbsF +7qZwL7d0rsAkvY2cUwwHwYDVR0jBBgwFoAUDFjGlp7mTEGRqrZpY/QJ1Frq9pgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0ZCMjhEOUYwREM5 QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVHUnFyWnBZX1FKMUZycTlw Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREZqR2xwN21URUdScXJacFlfUUoxRnJxOXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0ZCMjhEOUYwREM5QzExRjA4MTdFODk2MUEyRUU1MjhFL0RGakdscDdtVEVH UnFyWnBZX1FKMUZycTlwZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCapHohtLqtkhe0MsF5a0eMY8Ju6g0oXjqqiY9iYu0eIIZFr46zF9LQCh7EZO+a RN2gZcyYchHziLSpsZkS8vCqOUFMTmesVEMRhjlzMXdWeGIJncCxKyXjdkJnysIA 3BoYRY0lRhejwVY8ruh0yUO9unfUNDA2gS/qCbFIl0Mr196n+t2R0mBUu6fjUfmf aQoUpCggyndwn8ynIvNftzCjNltPSDxN99Yk/MVIZf29fKY8FV+62Q5w054ffiW7 HtrAuBK0oxZdZhfphRcpXQ0dNg2Pg/mbTmWG/syLQxBwjvo4eTKVu51N28DiODIS uhXmoRtDqb07/XzsD3j5iPS7 -----END CERTIFICATE-----Generated at Mon Mar 2 04:07:43 2026 by rpki-client