$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: u8PeGDx019zE2WQQivEIF6U9aXyTpxHs/7clUU8xRXQ= Subject key identifier: 87:64:23:DC:5A:04:F6:D9:B9:84:76:98:53:7E:C3:7E:38:CA:BF:96 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 17F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 17CE Signing time: Mon 02 Mar 2026 01:22:36 +0000 Manifest this update: Mon 02 Mar 2026 01:22:33 +0000 Manifest next update: Mon 09 Mar 2026 01:22:33 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: VRRIKgbplVihKqOtej8cVxLapXdasVFlUhRYkaVpwPA=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: G1K2oOJN8JSdZJH7sAiV+vdZ3tm2/QChp9HUt6nzUkw=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: eNCAWuAh5KW5qBuvE5k2vNN9F1eCn7J5iVfhenudu/g=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 6SGIVV8UzkYI8imkUH9CHf8Pfdrw5iBU8LEsd0w7wTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6133 (0x17f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Mar 2 01:22:33 2026 GMT Not After : Mar 9 01:22:33 2026 GMT Subject: CN=69a4e65b-300f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:5b:a2:82:be:f8:12:aa:c3:b3:16:3f:0a: d3:18:e9:9c:59:8f:d2:f6:b8:cf:d4:e6:8a:40:54: b2:ac:85:6c:07:ae:c8:1a:a0:ba:8a:01:1c:36:3e: 31:3c:87:98:23:6d:d4:f5:d6:96:9d:f1:e9:e1:64: 89:9a:d5:5c:a7:5b:df:6e:0d:49:5d:6b:a0:4e:5d: db:37:14:79:59:ad:1c:d9:4a:3c:52:9c:92:8e:f3: 84:87:9c:11:64:1d:76:37:dd:0f:fb:ed:0c:78:ca: af:85:6d:f5:57:21:39:54:f4:fa:47:2d:0e:e4:d8: 47:c1:cb:b6:ac:08:63:2a:63:c7:2e:bf:8f:32:0d: 61:df:b7:56:78:48:e3:ab:eb:95:72:64:3c:74:16: b6:56:3e:af:7e:58:07:51:c6:63:3c:81:09:f2:26: f7:e3:6c:7c:8d:6b:6e:e9:d0:5c:7d:c4:c0:4f:46: 0f:7f:fc:4c:9c:83:10:d6:f2:32:bb:b3:cb:28:66: 5e:9b:a1:0e:a9:58:72:fd:92:fb:01:8b:35:58:00: 48:f1:fc:20:49:cb:a9:be:fb:6a:93:15:a8:71:6d: 26:e9:d1:ad:e8:cd:84:fa:eb:02:d2:fe:0f:69:ef: 10:7e:4b:32:87:d4:e2:70:ae:80:c6:5b:f0:c7:7a: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:64:23:DC:5A:04:F6:D9:B9:84:76:98:53:7E:C3:7E:38:CA:BF:96 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:21:81:1f:e9:59:01:10:4e:bc:83:1e:03:97:e4:5f:08:a5: fd:e3:f4:41:35:ff:a9:f0:08:b1:cd:07:f1:8d:c0:78:f3:0c: 34:af:1b:cc:3f:69:38:0f:cd:c9:37:21:18:d4:a1:13:92:7f: c7:ed:c0:62:68:5d:d8:7f:a0:1a:46:22:68:12:55:44:88:59: 37:ae:54:f7:23:99:de:dc:fe:02:cc:f3:be:7f:28:c5:56:bb: 49:a4:d7:5c:23:ad:77:34:9b:f7:c3:f5:c4:da:7d:84:57:74: 31:dc:5a:44:64:04:1c:02:27:11:7b:08:a6:bc:19:8d:7e:27: 21:fc:61:66:66:48:da:bc:3b:50:02:c9:b8:e3:a9:30:49:0d: 20:8c:a8:7d:4b:a1:26:85:53:30:a2:92:a9:f9:26:10:b4:c2: 5a:5a:6b:be:7b:5c:21:8e:19:fd:7f:08:30:36:da:b2:39:02: 39:29:a1:ee:61:96:47:60:cc:1f:0d:51:f3:2d:05:b3:75:f9: 72:3e:31:1a:de:f5:ad:14:ad:48:dc:44:59:02:66:dd:9d:0c: 74:82:2b:1e:31:b6:83:95:4f:31:9e:99:81:ae:fd:c5:00:21: bd:d9:9a:c7:3c:85:fa:60:60:9b:f5:77:fb:e9:13:10:eb:98: e1:de:1c:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjYwMzAyMDEyMjMzWhcNMjYwMzA5MDEyMjMzWjAYMRYwFAYD VQQDEw02OWE0ZTY1Yi0zMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK5booK++BKqw7MWPwrTGOmcWY/S9rjP1OaKQFSyrIVsB67IGqC6igEcNj4x PIeYI23U9daWnfHp4WSJmtVcp1vfbg1JXWugTl3bNxR5Wa0c2Uo8UpySjvOEh5wR ZB12N90P++0MeMqvhW31VyE5VPT6Ry0O5NhHwcu2rAhjKmPHLr+PMg1h37dWeEjj q+uVcmQ8dBa2Vj6vflgHUcZjPIEJ8ib342x8jWtu6dBcfcTAT0YPf/xMnIMQ1vIy u7PLKGZem6EOqVhy/ZL7AYs1WABI8fwgScupvvtqkxWocW0m6dGt6M2E+usC0v4P ae8Qfksyh9TicK6Axlvwx3qr4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdkI9xa BPbZuYR2mFN+w344yr+WMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnSGBH+lZARBOvIMeA5fkXwil/eP0QTX/qfAIsc0H8Y3AePMMNK8bzD9pOA/N yTchGNShE5J/x+3AYmhd2H+gGkYiaBJVRIhZN65U9yOZ3tz+Aszzvn8oxVa7SaTX XCOtdzSb98P1xNp9hFd0MdxaRGQEHAInEXsIprwZjX4nIfxhZmZI2rw7UALJuOOp MEkNIIyofUuhJoVTMKKSqfkmELTCWlprvntcIY4Z/X8IMDbasjkCOSmh7mGWR2DM Hw1R8y0Fs3X5cj4xGt71rRStSNxEWQJm3Z0MdIIrHjG2g5VPMZ6Zga79xQAhvdma xzyF+mBgm/V3++kTEOuY4d4cfg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:05:58 2026 by rpki-client