$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: IBrlknWZ7VtDshT/fPCYvslhP1q7r0a7BwlphUuNAb4= Subject key identifier: 8B:0F:53:9E:4B:0D:61:19:88:10:8F:21:2E:C1:59:26:80:10:F2:48 Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 01D5 Signing time: Sun 01 Mar 2026 04:17:51 +0000 Manifest this update: Sun 01 Mar 2026 04:17:51 +0000 Manifest next update: Sun 08 Mar 2026 04:17:51 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: cl6cdr6yyJ74AloI8CY+GLXWtswb3tYap0KI7G9kHSk=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: jXDiNUfmAph8KmmhKCwstWhLejYXnSu0uk3x3qOWIK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: Mar 1 04:17:51 2026 GMT Not After : Mar 8 04:17:51 2026 GMT Subject: CN=69a3bdef-52af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:5d:5b:f6:12:e0:a0:08:f8:11:c7:29:f4: ca:44:84:c9:66:21:87:ff:4a:e1:2d:db:51:5a:f9: 40:35:14:59:7b:31:5c:c8:96:72:b5:19:d8:51:48: a2:25:5a:8d:63:96:31:d4:92:1f:44:39:d6:ed:28: 7b:50:d7:c5:15:d6:f2:f8:69:83:b2:9a:00:f0:02: 22:23:b3:c1:36:21:db:4d:36:28:d5:93:b6:21:bc: 61:03:e2:fa:f1:e7:b5:ed:e7:eb:d5:33:a1:4a:5e: a2:bc:ee:6a:c8:3f:0c:0d:39:1e:e2:7d:07:54:1c: 38:42:d9:fa:54:c1:05:9f:ee:36:16:72:4d:2a:54: d6:e1:12:73:3b:91:b5:44:b2:03:aa:b5:bf:14:b8: e3:d6:a1:18:51:9f:9e:ee:67:3c:aa:fa:3b:d7:f4: 24:56:11:9d:7c:1c:49:f7:12:57:37:c1:80:2e:02: ec:b9:39:98:9b:8f:ad:75:3e:44:29:b0:8d:b8:85: 09:ca:31:42:87:40:bc:c3:0e:4a:10:1b:b0:e1:c3: 8d:64:90:10:a5:09:8c:9b:98:7a:5f:28:0f:54:35: 87:3e:33:a2:32:51:2f:bd:6a:b4:b8:4f:5d:7a:c2: 7d:a5:7e:fc:f9:ae:4f:63:02:dd:5d:ab:44:bd:f6: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0F:53:9E:4B:0D:61:19:88:10:8F:21:2E:C1:59:26:80:10:F2:48 X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:bf:4e:32:64:74:0e:4b:2c:e8:62:33:d0:92:22:ad:44:26: 48:71:39:36:3d:35:41:b4:7a:a5:35:e3:17:cc:1a:89:77:29: 32:d5:aa:f6:bd:3a:5d:54:d9:35:92:53:bb:9f:d1:ff:27:17: ef:44:5f:e0:0a:f6:3b:e7:aa:e4:0d:e9:e2:4f:2c:5e:14:42: 63:c6:4c:36:25:a1:c3:20:36:84:ef:76:d9:02:ee:b8:66:4c: 69:48:f0:01:c4:a7:ca:fd:3f:97:a8:46:cf:ca:fa:73:c2:2b: 14:b6:2d:7c:75:bc:64:43:7d:db:3e:a9:04:e4:07:d1:d3:2e: e7:77:4a:6d:56:c6:c8:9a:be:7d:10:0b:a4:59:bc:85:90:66: 4f:e2:11:c5:3b:1a:f8:5a:78:bd:65:c2:9a:a8:14:e0:9d:2f: 54:c2:ac:48:4b:fe:94:f5:53:b9:57:dc:7b:e1:f5:a2:01:b3: 2c:ce:89:16:f3:f9:8c:f4:b7:79:90:6c:98:a8:37:82:b3:f1: 23:eb:43:36:32:22:ae:ff:f9:00:9b:d5:43:53:06:2d:f0:be: ef:9a:b0:86:89:51:f0:4e:99:f6:71:e5:7e:0e:ea:83:81:63: 3d:8c:b1:1a:a5:c8:6d:b7:cf:cc:af:9e:e6:7a:72:61:75:49: 32:6f:bc:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjYwMzAxMDQxNzUxWhcNMjYwMzA4MDQxNzUxWjAYMRYwFAYD VQQDDA02OWEzYmRlZi01MmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhhdW/YS4KAI+BHHKfTKRITJZiGH/0rhLdtRWvlANRRZezFcyJZytRnYUUii JVqNY5Yx1JIfRDnW7Sh7UNfFFdby+GmDspoA8AIiI7PBNiHbTTYo1ZO2IbxhA+L6 8ee17efr1TOhSl6ivO5qyD8MDTke4n0HVBw4Qtn6VMEFn+42FnJNKlTW4RJzO5G1 RLIDqrW/FLjj1qEYUZ+e7mc8qvo71/QkVhGdfBxJ9xJXN8GALgLsuTmYm4+tdT5E KbCNuIUJyjFCh0C8ww5KEBuw4cONZJAQpQmMm5h6XygPVDWHPjOiMlEvvWq0uE9d esJ9pX78+a5PYwLdXatEvfYBwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsPU55L DWEZiBCPIS7BWSaAEPJIMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAob9OMmR0Dkss6GIz0JIirUQmSHE5Nj01QbR6pTXjF8waiXcpMtWq9r06XVTZ NZJTu5/R/ycX70Rf4Ar2O+eq5A3p4k8sXhRCY8ZMNiWhwyA2hO922QLuuGZMaUjw AcSnyv0/l6hGz8r6c8IrFLYtfHW8ZEN92z6pBOQH0dMu53dKbVbGyJq+fRALpFm8 hZBmT+IRxTsa+Fp4vWXCmqgU4J0vVMKsSEv+lPVTuVfce+H1ogGzLM6JFvP5jPS3 eZBsmKg3grPxI+tDNjIirv/5AJvVQ1MGLfC+75qwholR8E6Z9nHlfg7qg4FjPYyx GqXIbbfPzK+e5npyYXVJMm+8qQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:43 2026 by rpki-client