$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: tefMttQTBnmNXrMh+OdT2mScRqv0KRVwSkLEmYbtMzw= Subject key identifier: 38:CD:24:FD:3C:1E:09:6A:47:76:C9:27:75:57:5E:2A:11:86:89:95 Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 024A Signing time: Sun 01 Mar 2026 03:02:00 +0000 Manifest this update: Sun 01 Mar 2026 03:02:00 +0000 Manifest next update: Sun 08 Mar 2026 03:02:00 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: 3Pd9ghu6nLkDXuXwuWz5TW4wNtdtrpWlp6aXkCZ6Yzg=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: oBuS5xinsgEEPRO4L87WKgJisQvCYTMja8uyPjXphjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Mar 1 03:02:00 2026 GMT Not After : Mar 8 03:02:00 2026 GMT Subject: CN=69a3ac28-75dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d0:c1:cf:92:fe:fd:18:cb:f6:2a:71:c9:89: 57:79:c2:c0:04:34:0e:9d:9a:e7:76:68:a4:6b:78: bc:dd:1d:a8:10:55:6c:dc:d3:1a:77:f7:50:74:42: d6:d3:f7:f4:e3:0c:c1:d2:9c:19:dd:48:66:be:b5: 06:45:4f:77:3c:f2:4a:3b:21:fe:a7:5b:3c:a7:1c: 8e:bf:ff:ee:54:09:df:06:97:53:13:eb:35:ff:9f: e9:7a:a9:1f:1c:4d:4b:68:e1:c6:5f:ab:70:98:d7: 0a:16:a5:f2:77:78:ba:d7:29:91:55:9d:28:26:5e: cc:b4:cc:12:be:48:dc:da:e0:89:22:c3:54:a6:ad: 30:b5:fe:ad:c9:62:38:da:55:fb:8e:e3:ef:6d:96: 2f:f6:b2:54:3f:f6:f7:78:b6:f7:0d:35:21:36:15: 99:21:d4:4f:ae:72:3d:fa:97:99:a3:db:03:94:3f: a5:96:62:9a:8c:01:37:f9:2f:ba:92:aa:cc:8c:a4: 19:fb:60:7c:ba:cf:e2:08:db:5f:49:10:d4:4c:36: 2f:14:2c:69:ef:d9:62:29:6c:2d:77:fe:30:4e:e0: 16:ab:8a:5d:cb:8d:88:22:f2:66:94:3b:e7:dc:48: be:d4:92:d6:a9:bc:75:20:74:dd:88:66:85:d6:e0: 0b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:24:FD:3C:1E:09:6A:47:76:C9:27:75:57:5E:2A:11:86:89:95 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:08:dd:b1:ca:8a:30:49:53:ca:d2:36:0a:63:3b:54:51: 13:36:b4:e6:03:4d:a8:7f:10:a3:21:d5:88:6d:2d:0d:1a:ee: d5:8d:2c:2e:b0:bb:96:57:b8:07:78:14:df:68:32:57:93:c3: 34:fd:83:75:ce:1c:df:67:6f:cc:f9:7d:45:2f:86:1c:51:df: cb:bc:6c:fc:84:43:8a:c1:a4:49:0a:4e:1f:d8:f4:44:d0:16: 1f:35:63:a7:c4:3b:c4:4a:13:f0:2e:6f:c6:20:93:6c:2a:b9: ed:3b:4a:9e:75:9b:f1:a5:6f:5a:da:bc:1f:c4:3a:b0:8b:eb: 3e:93:87:a6:57:0d:c0:b4:ea:40:ad:c5:b7:55:51:1f:db:a2: cd:f5:bf:c4:61:5d:16:50:a3:e7:af:d1:a7:68:b7:26:c0:9b: 9a:23:f3:b6:50:bd:59:64:cc:6f:53:24:f3:aa:dc:77:08:a2: fc:21:68:57:c5:64:0c:1b:81:da:09:80:e9:07:56:6a:5e:03: 2a:c9:92:0b:2b:7b:3c:f8:5f:35:da:e3:6e:92:e8:72:90:b2: 0e:9e:f4:17:01:3d:47:f9:b0:89:62:c5:b0:de:8a:20:6d:c3: 40:01:aa:0a:ff:90:e4:e9:8c:cf:5a:7c:a8:9e:09:fa:3e:34: 99:0f:42:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjYwMzAxMDMwMjAwWhcNMjYwMzA4MDMwMjAwWjAYMRYwFAYD VQQDDA02OWEzYWMyOC03NWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29DBz5L+/RjL9ipxyYlXecLABDQOnZrndmika3i83R2oEFVs3NMad/dQdELW 0/f04wzB0pwZ3UhmvrUGRU93PPJKOyH+p1s8pxyOv//uVAnfBpdTE+s1/5/peqkf HE1LaOHGX6twmNcKFqXyd3i61ymRVZ0oJl7MtMwSvkjc2uCJIsNUpq0wtf6tyWI4 2lX7juPvbZYv9rJUP/b3eLb3DTUhNhWZIdRPrnI9+peZo9sDlD+llmKajAE3+S+6 kqrMjKQZ+2B8us/iCNtfSRDUTDYvFCxp79liKWwtd/4wTuAWq4pdy42IIvJmlDvn 3Ei+1JLWqbx1IHTdiGaF1uALdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjNJP08 HglqR3bJJ3VXXioRhomVMB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmM8I3bHKijBJU8rSNgpjO1RREza05gNNqH8QoyHViG0tDRru1Y0sLrC7lle4 B3gU32gyV5PDNP2Ddc4c32dvzPl9RS+GHFHfy7xs/IRDisGkSQpOH9j0RNAWHzVj p8Q7xEoT8C5vxiCTbCq57TtKnnWb8aVvWtq8H8Q6sIvrPpOHplcNwLTqQK3Ft1VR H9uizfW/xGFdFlCj56/Rp2i3JsCbmiPztlC9WWTMb1Mk86rcdwii/CFoV8VkDBuB 2gmA6QdWal4DKsmSCyt7PPhfNdrjbpLocpCyDp70FwE9R/mwiWLFsN6KIG3DQAGq Cv+Q5OmMz1p8qJ4J+j40mQ9Cdg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:31:31 2026 by rpki-client