$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json) Hash identifier: j89LUfgVa7iEycANJtFdkn3b3F25srC8xdSGs/hJJkg= Subject key identifier: 20:89:E3:44:5E:5E:15:C0:81:16:8D:EE:75:54:92:AB:D3:4D:12:27 Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft Manifest number: 34 Signing time: Sun 01 Mar 2026 10:01:50 +0000 Manifest this update: Sun 01 Mar 2026 10:01:50 +0000 Manifest next update: Sun 08 Mar 2026 10:01:50 +0000 Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: IpAdpToSBIfLtLfPBEGN7OkU9L1HBglpXuYfXd6PsOY=) 2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: 78e6dSdExXaAKBzwmHjzD00gobnkz3dKF66D62nRc9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Validity Not Before: Mar 1 10:01:50 2026 GMT Not After : Mar 8 10:01:50 2026 GMT Subject: CN=69a40e8e-e263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:f9:ac:ec:b6:d2:d7:e2:dd:6f:ca:e5:57: 67:f7:ea:cf:56:4c:ae:0f:4c:35:6e:fa:ff:3c:91: 84:a4:57:16:a9:c9:5b:61:d0:15:47:14:8a:fb:d2: 41:3f:f2:a4:ed:65:82:48:6a:76:33:65:6d:01:38: 92:c1:e0:4b:0a:66:41:8c:ba:f9:19:94:cb:38:05: a0:f8:c5:43:1e:95:a8:d2:53:17:57:81:b4:dd:ba: 25:93:89:02:80:26:ca:81:d5:4e:e8:b7:6c:d3:e7: aa:50:bc:79:95:7e:78:ed:b2:91:34:b5:77:12:48: 0c:d0:91:d3:0f:d9:69:27:12:0c:c9:e8:d1:5b:44: 8f:85:e4:9b:98:15:8d:be:30:53:a9:5f:b1:b0:76: 75:54:1f:cc:40:b7:60:46:29:75:a3:b8:b0:5e:05: 76:47:e7:2f:c1:b1:b6:56:c7:c9:d7:f1:cb:99:fa: 24:96:e1:5d:3c:37:29:17:62:bc:3d:bf:18:8d:cc: 96:e4:b5:a1:d0:fe:27:36:97:18:3a:10:94:3c:93: 38:42:e9:41:58:42:f0:72:90:eb:41:9b:b9:41:fe: 53:b3:00:e0:5e:89:1c:74:04:3b:36:8a:4c:ab:e4: 5a:7a:f7:78:16:23:99:e9:33:b1:67:d4:9d:4a:1a: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:89:E3:44:5E:5E:15:C0:81:16:8D:EE:75:54:92:AB:D3:4D:12:27 X509v3 Authority Key Identifier: keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c4:03:61:b8:b1:be:48:21:d8:a8:fe:c6:19:9f:8e:62:a8: 89:d6:e7:2e:4a:c2:54:96:1d:20:ed:6b:d3:4a:36:fb:62:1f: f5:07:89:5b:8f:eb:5b:3a:05:82:9c:c3:03:d3:46:ed:5a:47: 3b:31:27:05:71:89:06:00:9e:bb:82:4f:b1:0b:fe:e3:c9:f0: aa:29:29:7b:76:a8:be:96:de:e1:b6:6d:5a:eb:91:2b:bf:b7: d5:8d:d6:33:4c:35:c5:fa:3a:1b:10:19:30:ee:fd:d0:54:49: 98:92:42:24:c7:b6:05:10:35:cd:31:3c:7e:3e:40:4f:49:39: 5d:34:10:06:31:44:9e:37:c8:c1:5b:40:e0:b3:26:66:9b:b0: a4:d2:0c:1d:22:ca:fa:70:be:75:dc:83:42:19:3b:39:74:2e: b3:f9:9d:fa:79:6c:c2:6c:fb:03:a2:a0:0b:40:6e:96:37:7e: a2:ee:30:dc:7a:b1:cd:c3:95:f6:b2:2a:f0:23:d4:3f:aa:fb: eb:38:ef:b7:a2:44:b7:21:23:d0:96:a6:fc:d0:44:6e:5f:d0: 76:50:b8:11:f7:5d:83:d0:45:ce:86:e8:f3:41:2b:4c:e9:b4: d8:ff:d7:41:f3:5c:7f:cf:d2:3f:3d:5d:ec:cc:94:41:0c:c5: 37:57:7b:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDJEODExMC8GA1UEBRMoQTJEMEU3REY4OEFCNjlEQjZFMDU5QTMwNjRFNEREQzFF NkZDOUQxOTAeFw0yNjAzMDExMDAxNTBaFw0yNjAzMDgxMDAxNTBaMBgxFjAUBgNV BAMTDTY5YTQwZThlLWUyNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFD/ms7LbS1+Ldb8rlV2f36s9WTK4PTDVu+v88kYSkVxapyVth0BVHFIr70kE/ 8qTtZYJIanYzZW0BOJLB4EsKZkGMuvkZlMs4BaD4xUMelajSUxdXgbTduiWTiQKA JsqB1U7ot2zT56pQvHmVfnjtspE0tXcSSAzQkdMP2WknEgzJ6NFbRI+F5JuYFY2+ MFOpX7GwdnVUH8xAt2BGKXWjuLBeBXZH5y/BsbZWx8nX8cuZ+iSW4V08NykXYrw9 vxiNzJbktaHQ/ic2lxg6EJQ8kzhC6UFYQvBykOtBm7lB/lOzAOBeiRx0BDs2ikyr 5Fp693gWI5npM7Fn1J1KGm75AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIInjRF5e FcCBFo3udVSSq9NNEicwHwYDVR0jBBgwFoAUotDn34iradtuBZowZOTdweb8nRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMkQ4Lzk0OTZENzRFQzkx MTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0dUJab3daT1Rkd2ViOG5S ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3REbjM0aXJhZHR1Qlpvd1pPVGR3ZWI4blJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MkQ4Lzk0OTZENzRFQzkxMTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0 dUJab3daT1Rkd2ViOG5Say5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvxANhuLG+SCHYqP7GGZ+OYqiJ1ucuSsJUlh0g7WvTSjb7Yh/1B4lbj+tbOgWC nMMD00btWkc7MScFcYkGAJ67gk+xC/7jyfCqKSl7dqi+lt7htm1a65Erv7fVjdYz TDXF+jobEBkw7v3QVEmYkkIkx7YFEDXNMTx+PkBPSTldNBAGMUSeN8jBW0DgsyZm m7Ck0gwdIsr6cL513INCGTs5dC6z+Z36eWzCbPsDoqALQG6WN36i7jDcerHNw5X2 sirwI9Q/qvvrOO+3okS3ISPQlqb80ERuX9B2ULgR912D0EXOhujzQStM6bTY/9dB 81x/z9I/PV3szJRBDMU3V3tK -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:40 2026 by rpki-client