$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: dv+60jZHrEy0tRraH+HlZoANqBBgvLJB2jJBnE1zcqk= Subject key identifier: 6B:E0:73:63:A5:78:3B:A4:69:4E:F2:D8:85:9E:A7:0A:6F:A3:12:4D Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: 98 Signing time: Sun 01 Mar 2026 08:42:00 +0000 Manifest this update: Sun 01 Mar 2026 08:41:59 +0000 Manifest next update: Sun 08 Mar 2026 08:41:59 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: OLZ0XSQC34Uc5BD4Wlw386NCd+TNYFyKRJDPdrVl6hs=) 2: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: qvmxAIblo8LoVtJQCEVB0mOCUBhb2PQ/53hCphSqwWE=) 3: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: 4EnYQ2VSNQD0o3dL265fkKkyLcx5j9mcOc/dYLCsIwo=) 4: 570B12E0562611F09F085F44C4F9AE02.roa (hash: CaHNy+5XgMUOPof5CFjhIu8D1eRPSffz8Arg3q0Y77U=) 5: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: tcOXOuYgGu+RB0bUc2Sne4w/DApsR3iV2dNestsnCuc=) 6: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: xPkqxoVSxyXeKSaq5jtn4/m5jr8BJckiAgNe5WWb60U=) 7: CA5B991430E111F09B76D311C4F9AE02.roa (hash: KDnCMQ2nRjU0Va+lifX6vSdvj7g5AOqm8qx3ZCAL398=) 8: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: fV/0Vo51myrGthfe3wjSyvx/kYCAyZZZpPfFqvBV/w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Mar 1 08:41:59 2026 GMT Not After : Mar 8 08:41:59 2026 GMT Subject: CN=69a3fbd8-2763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:9d:5d:12:e7:16:dd:8b:e5:88:aa:9b:e6: 04:ce:05:36:e5:c7:b4:13:5f:77:6d:41:16:a1:10: 12:80:1a:f9:b7:7e:96:6b:ca:c1:bf:e6:63:02:c4: 90:35:a8:44:36:e8:43:1b:1d:7e:61:c7:4b:19:9b: 0f:f1:0a:c8:29:b7:4b:d9:24:0d:6a:23:f4:e9:3d: 0f:dd:1a:d6:8c:dc:a4:15:ca:bd:ad:9e:38:24:e9: 42:64:c8:54:59:9f:4d:a8:f9:48:e8:49:ec:32:f5: 5e:fd:45:4e:8a:b7:1d:34:3a:75:ae:72:86:ed:97: 90:2f:5b:0f:40:56:06:9f:c1:c7:5a:68:66:35:79: d1:9f:da:a7:0a:ae:3d:fb:ea:81:cf:99:2e:8f:5e: fd:5c:65:79:98:35:ef:61:c8:16:16:0f:80:70:68: eb:00:76:34:77:2f:ef:e1:1b:d4:3d:a9:e3:c6:94: dd:10:74:c7:b7:03:56:18:84:29:7f:45:51:73:d0: 53:b9:36:60:8b:87:1d:6c:06:11:57:de:ba:9c:12: 58:b8:89:80:86:73:3e:9c:9f:31:fe:8d:04:a2:0f: 77:9b:0e:8f:11:19:65:97:48:96:ac:6c:12:d4:f3: ff:1a:72:7a:1a:24:e1:8d:72:b4:b7:51:e4:f1:96: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E0:73:63:A5:78:3B:A4:69:4E:F2:D8:85:9E:A7:0A:6F:A3:12:4D X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:b2:9b:a6:0e:02:19:65:93:1c:52:ef:31:85:8e:a7:04: aa:a8:e8:23:2e:d0:78:98:36:3e:2b:0e:cb:ff:c3:43:6f:61: 9c:d0:54:40:f9:91:86:44:3c:44:14:02:0e:b6:3e:20:0e:96: ea:bf:82:cc:ef:78:d9:7f:fb:d2:40:5b:8f:76:fb:b2:92:16: d7:73:3a:70:f3:34:c5:79:b0:dc:b2:6a:34:ff:a2:cd:68:6b: 18:ee:1b:c5:30:4e:39:b2:c5:05:61:48:bf:26:b6:05:45:a1: de:ef:cc:9b:47:ea:1a:31:37:0b:27:95:59:e7:4a:7a:65:56: 63:f7:a2:6c:80:7c:98:d7:10:63:1a:d8:dd:7b:7f:f0:3f:05: 24:30:db:5d:84:0f:ee:85:77:5a:46:52:06:2b:b3:65:fc:fc: b1:f2:c2:65:6f:c7:58:22:65:19:b6:df:02:81:68:f6:08:5a: c1:dd:d1:d0:83:82:11:56:31:0b:ea:80:f5:6c:0d:07:f9:fc: 55:40:91:70:04:d0:75:51:77:46:5b:e8:f5:19:50:2e:2f:26: 59:47:4e:55:18:ec:47:42:3c:e2:ba:1a:94:23:12:ba:7e:58: df:99:7e:60:27:64:6c:ad:a9:13:d7:03:87:fa:8f:5a:6f:d8: a1:3b:63:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwMzAxMDg0MTU5WhcNMjYwMzA4MDg0MTU5WjAYMRYwFAYD VQQDEw02OWEzZmJkOC0yNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAqdXRLnFt2L5Yiqm+YEzgU25ce0E193bUEWoRASgBr5t36Wa8rBv+ZjAsSQ NahENuhDGx1+YcdLGZsP8QrIKbdL2SQNaiP06T0P3RrWjNykFcq9rZ44JOlCZMhU WZ9NqPlI6EnsMvVe/UVOircdNDp1rnKG7ZeQL1sPQFYGn8HHWmhmNXnRn9qnCq49 ++qBz5kuj179XGV5mDXvYcgWFg+AcGjrAHY0dy/v4RvUPanjxpTdEHTHtwNWGIQp f0VRc9BTuTZgi4cdbAYRV966nBJYuImAhnM+nJ8x/o0Eog93mw6PERlll0iWrGwS 1PP/GnJ6GiThjXK0t1Hk8ZaMywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvgc2Ol eDukaU7y2IWepwpvoxJNMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPjmym6YOAhllkxxS7zGFjqcEqqjoIy7QeJg2PisOy//DQ29hnNBUQPmRhkQ8 RBQCDrY+IA6W6r+CzO942X/70kBbj3b7spIW13M6cPM0xXmw3LJqNP+izWhrGO4b xTBOObLFBWFIvya2BUWh3u/Mm0fqGjE3CyeVWedKemVWY/eibIB8mNcQYxrY3Xt/ 8D8FJDDbXYQP7oV3WkZSBiuzZfz8sfLCZW/HWCJlGbbfAoFo9ghawd3R0IOCEVYx C+qA9WwNB/n8VUCRcATQdVF3Rlvo9RlQLi8mWUdOVRjsR0I84roalCMSun5Y35l+ YCdkbK2pE9cDh/qPWm/YoTtj5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 07:41:21 2026 by rpki-client