$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: FO/VSYnaZwU7ax9dKlXhh3awcyUQyiixorB+5RxhskQ= Subject key identifier: 30:BB:CF:E8:70:FC:72:26:82:CF:B2:9D:F1:97:69:37:A0:EC:6B:18 Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 0389 Signing time: Sun 01 Mar 2026 01:39:01 +0000 Manifest this update: Sun 01 Mar 2026 01:39:00 +0000 Manifest next update: Sun 08 Mar 2026 01:39:00 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: 5j2qSJzRJifVpL3nxAQIy7l8LkW/BqRi5IToT8j+JLA=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: dymLbJxwcC+zoVbs1raLnxC102YzGfBqYVissSmUr50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Mar 1 01:39:00 2026 GMT Not After : Mar 8 01:39:00 2026 GMT Subject: CN=69a398b5-ee49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:57:63:e5:c5:40:c6:8e:e8:5b:6e:64:b1: d7:cc:5d:b9:f8:4a:d5:5f:5f:48:24:11:39:42:b1: 29:6b:82:34:90:63:e6:a1:2a:e6:e2:2a:2b:59:de: e4:ca:0a:73:05:42:d2:7d:88:0c:16:a1:07:44:1a: 49:36:3c:2f:84:57:b6:e0:2b:f7:4a:c0:ce:b8:32: 9d:7d:ed:c7:6b:c5:a7:2c:64:a6:b0:be:20:b8:0c: b1:b0:f6:d6:bd:c7:99:e8:9e:3a:64:c3:74:35:46: 81:c5:72:ca:0c:93:60:ce:64:ff:b3:83:fe:b6:58: 0a:b2:e5:a7:ec:cd:44:c8:2d:cb:d2:c8:8a:2a:c7: ad:d2:97:d5:f8:ba:83:80:be:b3:4b:04:9d:bc:9c: 58:8e:4a:33:58:2b:96:cf:dc:eb:8c:a4:bb:51:48: 81:3c:d5:8c:e2:fc:9c:2b:b0:41:0b:f0:a9:e7:2f: b5:a6:7c:2f:df:67:8d:6b:4d:a8:dd:aa:0c:58:86: b3:27:08:17:0c:22:5b:bd:c0:d5:49:05:02:d8:55: e6:0b:99:ae:f2:5a:c8:36:18:05:7b:b5:1f:60:b9: 9d:ef:4f:e0:96:fc:c0:6b:0a:e9:4b:e9:bf:d3:bb: 5e:10:20:c5:b7:ec:5b:10:0c:93:be:0c:fb:d8:55: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BB:CF:E8:70:FC:72:26:82:CF:B2:9D:F1:97:69:37:A0:EC:6B:18 X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:c3:21:9a:68:95:9f:fc:71:a3:66:27:0f:60:c3:75:d3: a8:5f:2c:f8:4d:d8:7d:ea:ab:8b:c2:7c:4f:34:c7:04:79:84: c1:17:f7:64:0b:d8:6c:d9:55:55:84:5d:82:63:fb:7d:ea:00: 50:9c:bd:fd:dd:0f:ac:8d:c4:cc:ae:5b:8b:80:29:3d:1f:52: 3f:22:8b:eb:f9:3b:86:aa:e8:de:c5:d7:4b:eb:7f:95:98:a2: 03:3f:55:4b:a7:39:e5:d2:c1:db:7a:eb:8e:16:33:af:30:e2: c9:b4:d9:23:d1:e3:73:cb:91:c6:35:46:29:29:95:45:0c:ad: ab:82:a5:86:aa:9e:eb:68:3a:59:c4:22:45:df:15:c5:fa:f4: f3:27:ac:d7:96:3d:a5:31:33:f8:68:ac:e6:df:49:ec:3e:07: 3f:7a:0c:83:f5:b3:1b:23:50:42:63:6d:50:0f:29:91:84:24: ab:69:36:31:b9:80:e0:1f:40:0a:9e:35:32:85:df:4d:19:4a: 7c:0d:c7:18:86:19:ab:31:18:52:dc:0d:bd:f4:b6:9b:cc:56: f2:5b:69:3e:06:a7:53:88:82:cd:2f:a3:44:66:cc:a6:b1:2e: ef:cd:77:57:7b:59:45:12:68:6e:ff:3d:18:17:50:26:3f:90: e5:75:35:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjYwMzAxMDEzOTAwWhcNMjYwMzA4MDEzOTAwWjAYMRYwFAYD VQQDDA02OWEzOThiNS1lZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6lXY+XFQMaO6FtuZLHXzF25+ErVX19IJBE5QrEpa4I0kGPmoSrm4iorWd7k ygpzBULSfYgMFqEHRBpJNjwvhFe24Cv3SsDOuDKdfe3Ha8WnLGSmsL4guAyxsPbW vceZ6J46ZMN0NUaBxXLKDJNgzmT/s4P+tlgKsuWn7M1EyC3L0siKKset0pfV+LqD gL6zSwSdvJxYjkozWCuWz9zrjKS7UUiBPNWM4vycK7BBC/Cp5y+1pnwv32eNa02o 3aoMWIazJwgXDCJbvcDVSQUC2FXmC5mu8lrINhgFe7UfYLmd70/glvzAawrpS+m/ 07teECDFt+xbEAyTvgz72FU3uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDC7z+hw /HImgs+ynfGXaTeg7GsYMB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX+zDIZpolZ/8caNmJw9gw3XTqF8s+E3Yfeqri8J8TzTHBHmEwRf3ZAvYbNlV VYRdgmP7feoAUJy9/d0PrI3EzK5bi4ApPR9SPyKL6/k7hqro3sXXS+t/lZiiAz9V S6c55dLB23rrjhYzrzDiybTZI9Hjc8uRxjVGKSmVRQytq4Klhqqe62g6WcQiRd8V xfr08yes15Y9pTEz+Gis5t9J7D4HP3oMg/WzGyNQQmNtUA8pkYQkq2k2MbmA4B9A Cp41MoXfTRlKfA3HGIYZqzEYUtwNvfS2m8xW8ltpPganU4iCzS+jRGbMprEu7813 V3tZRRJobv89GBdQJj+Q5XU1JQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:21 2026 by rpki-client