$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json) Hash identifier: HY7v2lAg3599ZaS1DsAxBCFDUhaE+ULeFQnJqzvgmB4= Subject key identifier: EA:11:DA:15:F0:FD:5C:34:46:BF:3D:0B:FB:4B:06:6C:F1:96:99:C3 Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft Manifest number: 60 Signing time: Sun 01 Mar 2026 23:52:51 +0000 Manifest this update: Sun 01 Mar 2026 23:52:49 +0000 Manifest next update: Sun 08 Mar 2026 23:52:49 +0000 Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: /Ns60zWkQhuSgvF19opG2jdhxxK3qyzdRINGzxcrOm4=) 2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: C+v8DxSw3+udVzZSqwvQqRGQ9Pr2cv6HbsmEoxT6o4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314 Validity Not Before: Mar 1 23:52:49 2026 GMT Not After : Mar 8 23:52:49 2026 GMT Subject: CN=69a4d152-140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:be:9e:75:b1:8f:98:f9:2a:4e:53:5b:d3: 60:c2:1f:b1:68:ff:4b:bc:b1:87:9c:45:02:32:37: b0:9a:96:9f:6b:7f:6a:3d:97:b7:ca:cd:e4:28:b0: 00:83:5e:be:1f:09:6e:0b:09:7d:d2:12:02:b2:95: 5b:55:60:da:a9:f4:c9:f9:86:4f:e2:18:57:87:84: e2:9c:3b:3e:f7:db:cf:3a:6c:16:a1:80:36:b1:eb: c7:1b:d9:76:08:59:8d:62:8d:b3:5a:b3:8c:03:ae: e6:1c:4c:11:bf:c9:54:f6:22:19:52:8e:60:d1:c4: e2:28:69:5b:a5:f9:02:81:f0:7d:0a:3a:59:a8:b1: 2b:00:68:a3:43:62:f8:a8:0f:5b:1d:68:82:ff:41: 87:66:62:a6:b5:f7:64:b0:08:a7:d2:fb:81:8e:2e: cf:e3:99:b5:aa:b7:7b:e0:28:f2:09:f7:c7:85:0f: 13:77:c1:61:b9:22:03:95:ab:f0:82:7d:c6:ac:57: 3b:d1:8c:13:56:9c:25:67:ee:dc:3a:7e:ad:b1:a4: eb:2b:4e:e9:5f:63:21:39:1b:78:d9:e9:fd:18:de: c5:4a:2b:12:73:a4:53:73:0e:60:62:5d:ab:fa:c6: bf:60:5e:df:d4:22:94:3f:14:5e:bb:05:68:b6:5a: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:11:DA:15:F0:FD:5C:34:46:BF:3D:0B:FB:4B:06:6C:F1:96:99:C3 X509v3 Authority Key Identifier: keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a0:6a:4b:f2:5f:e1:98:a4:3b:42:58:85:34:b8:53:a5:ff: 61:8c:73:e7:7f:76:48:25:3b:73:0f:1e:9d:bc:94:e8:71:06: a9:ab:a4:c1:67:1c:22:04:41:ad:ca:10:82:4b:85:db:c5:fc: 15:e3:6d:21:e7:90:c2:b7:a2:0b:b9:46:7c:0a:7c:e1:72:bd: 15:f6:81:f1:fc:80:54:4e:b3:0e:9a:34:6a:b5:64:77:11:4e: 1c:76:76:13:0b:1e:3d:39:0a:9d:5b:49:47:f0:a6:95:22:d5: b9:8f:b9:79:4d:08:bb:1d:99:0f:17:e0:00:bc:fc:d3:a8:e4: 52:4e:d6:c2:f9:a1:df:28:3b:08:76:34:13:b9:fc:bd:d3:c3: 58:67:c1:05:57:ea:3a:1b:39:c4:19:a7:80:db:cf:99:94:74: 92:f2:a3:24:99:38:10:8e:39:55:16:30:68:08:f6:21:f3:31: 78:af:26:3d:49:d0:15:4d:83:d1:9f:22:80:07:bb:31:46:0d: d9:cc:e0:38:02:07:8e:da:f1:0f:d7:2d:83:0e:fb:79:e8:bc: 35:e4:9b:77:a9:cd:2f:36:9e:3f:d9:5f:5e:6a:14:1b:c5:23: 4c:86:b4:61:98:16:3e:e9:cc:82:5f:88:1d:2b:13:e5:19:df: a5:21:ab:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw QzY0RjMxNDAeFw0yNjAzMDEyMzUyNDlaFw0yNjAzMDgyMzUyNDlaMBgxFjAUBgNV BAMTDTY5YTRkMTUyLTE0MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOA76edbGPmPkqTlNb02DCH7Fo/0u8sYecRQIyN7Calp9rf2o9l7fKzeQosACD Xr4fCW4LCX3SEgKylVtVYNqp9Mn5hk/iGFeHhOKcOz732886bBahgDax68cb2XYI WY1ijbNas4wDruYcTBG/yVT2IhlSjmDRxOIoaVul+QKB8H0KOlmosSsAaKNDYvio D1sdaIL/QYdmYqa192SwCKfS+4GOLs/jmbWqt3vgKPIJ98eFDxN3wWG5IgOVq/CC fcasVzvRjBNWnCVn7tw6fq2xpOsrTulfYyE5G3jZ6f0Y3sVKKxJzpFNzDmBiXav6 xr9gXt/UIpQ/FF67BWi2WlvfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6hHaFfD9 XDRGvz0L+0sGbPGWmcMwHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5 MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC VHRsYTdvQWM3a3d4azh4US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAroGpL8l/hmKQ7QliFNLhTpf9hjHPnf3ZIJTtzDx6dvJTocQapq6TBZxwiBEGt yhCCS4XbxfwV420h55DCt6ILuUZ8Cnzhcr0V9oHx/IBUTrMOmjRqtWR3EU4cdnYT Cx49OQqdW0lH8KaVItW5j7l5TQi7HZkPF+AAvPzTqORSTtbC+aHfKDsIdjQTufy9 08NYZ8EFV+o6GznEGaeA28+ZlHSS8qMkmTgQjjlVFjBoCPYh8zF4ryY9SdAVTYPR nyKAB7sxRg3ZzOA4AgeO2vEP1y2DDvt56Lw15Jt3qc0vNp4/2V9eahQbxSNMhrRh mBY+6cyCX4gdKxPlGd+lIasl -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:41 2026 by rpki-client