$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft File: dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json) Hash identifier: cV+vAZ3IOHRyudP8f+uaALIlZLwK1HdUQkrGd5jBcRA= Subject key identifier: 7D:B0:75:45:08:C6:13:10:DD:F0:BC:7F:FC:4A:BD:02:46:66:33:27 Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37 Certificate issuer: /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft Manifest number: 18 Signing time: Sun 01 Mar 2026 10:29:45 +0000 Manifest this update: Sun 01 Mar 2026 10:29:44 +0000 Manifest next update: Sun 08 Mar 2026 10:29:44 +0000 Files and hashes: 1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: Y+9y33B0cD38gqT1mfSXoqGkrhpbLCgWxLn6lzGRQTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937 Validity Not Before: Mar 1 10:29:44 2026 GMT Not After : Mar 8 10:29:44 2026 GMT Subject: CN=69a41518-a7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:23:a7:d5:1f:98:21:db:88:e5:be:7e:9a: 48:e5:d8:3c:3b:92:26:f2:cd:6c:d7:61:4f:da:b6: 3f:1e:6b:0d:93:07:c7:b1:2c:03:2d:1e:aa:e3:5c: d2:11:e9:69:86:69:c4:91:40:84:39:bb:98:31:3a: a4:c4:62:e9:c5:79:0c:ca:61:3c:d1:34:99:88:e7: c0:be:b7:5c:c3:12:29:f7:71:13:ec:41:d4:61:40: c1:d4:2c:4d:5b:d2:78:ef:e6:9d:0a:3c:0d:72:56: 69:4e:2f:6d:02:4c:88:3b:e5:3c:54:ab:d5:18:8c: 6d:57:0c:d5:96:8f:a6:02:29:3f:01:e0:9f:c0:29: c3:31:fe:28:e0:ab:f9:0f:08:ed:59:67:9d:e4:93: 0c:0e:a7:0d:de:ed:b3:91:6f:6b:52:e8:52:92:24: 5b:0a:ee:7e:ec:fb:da:6c:2b:c1:c5:d9:fe:7f:40: 34:e0:02:a7:a0:0b:b8:b0:cd:65:7a:81:62:90:03: c4:02:b0:97:95:52:09:77:db:e9:be:ff:8e:18:b1: c2:5b:a8:90:0c:3c:48:59:14:84:31:78:a6:d5:64: 02:4d:bc:59:e5:3e:d5:cb:fc:25:25:8d:75:2f:2b: ec:c7:12:6f:3a:25:bc:35:2c:ef:3f:b1:38:a0:04: bf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:75:45:08:C6:13:10:DD:F0:BC:7F:FC:4A:BD:02:46:66:33:27 X509v3 Authority Key Identifier: keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:1c:07:7c:f8:0d:cc:7d:c1:ca:e8:46:4b:62:61:d6:be:25: d0:01:98:24:f7:d4:85:03:c4:08:78:11:19:89:57:66:de:b4: 57:d3:e0:9a:a7:58:69:ad:4f:d0:26:ea:06:5d:48:e9:2d:31: 3c:b8:d1:0f:cd:2a:da:82:ca:7f:55:b5:e8:6f:1e:76:ec:34: 6c:0e:93:a7:c8:f9:de:56:83:df:ed:1d:3a:00:c2:62:07:e0: d8:27:f8:b3:d9:08:e2:5f:e6:e1:f9:00:41:1d:f9:d7:db:ef: db:0d:7a:aa:9d:a5:45:1e:0b:87:1e:6c:fb:41:a1:ca:30:79: 2b:26:0b:bd:c3:0d:39:38:54:29:80:98:f9:60:de:fe:9e:70: 89:f2:f7:89:b4:3f:cc:9b:a8:3d:be:26:1b:f5:4e:90:9c:e5: 58:c9:9a:21:f6:3d:9b:07:a6:2e:ef:1b:10:cc:24:85:22:60: 35:29:a3:c1:9b:9c:f9:61:a9:61:22:20:27:71:19:18:df:4b: 64:70:b5:50:e5:b3:7f:3e:c5:08:3c:fd:86:e3:93:bf:66:44: 56:62:a3:39:f5:2a:18:4c:87:3b:4b:de:6b:7d:17:ef:f7:d2: 58:fa:8c:e9:79:65:d5:47:b2:26:35:a4:ef:61:8e:f2:bc:f1: ba:88:34:38 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjhCNjExMC8GA1UEBRMoNzQzMTY3NThCRThDQTI0M0M0NkE1MjM5QTA1RUNGRjA0 OTA4MzkzNzAeFw0yNjAzMDExMDI5NDRaFw0yNjAzMDgxMDI5NDRaMBgxFjAUBgNV BAMTDTY5YTQxNTE4LWE3ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqmSOn1R+YIduI5b5+mkjl2Dw7kibyzWzXYU/atj8eaw2TB8exLAMtHqrjXNIR 6WmGacSRQIQ5u5gxOqTEYunFeQzKYTzRNJmI58C+t1zDEin3cRPsQdRhQMHULE1b 0njv5p0KPA1yVmlOL20CTIg75TxUq9UYjG1XDNWWj6YCKT8B4J/AKcMx/ijgq/kP CO1ZZ53kkwwOpw3e7bORb2tS6FKSJFsK7n7s+9psK8HF2f5/QDTgAqegC7iwzWV6 gWKQA8QCsJeVUgl32+m+/44YscJbqJAMPEhZFIQxeKbVZAJNvFnlPtXL/CUljXUv K+zHEm86Jbw1LO8/sTigBL8FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfbB1RQjG ExDd8Lx//Eq9AkZmMycwHwYDVR0jBBgwFoAUdDFnWL6MokPEalI5oF7P8EkIOTcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2OEI2Lzk0MzlCOUFFRkIy NzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQRWFsSTVvRjdQOEVrSU9U Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZERGbldMNk1va1BFYWxJNW9GN1A4RWtJT1RjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 OEI2Lzk0MzlCOUFFRkIyNzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQ RWFsSTVvRjdQOEVrSU9UYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADHAd8+A3MfcHK6EZLYmHWviXQAZgk99SFA8QIeBEZiVdm3rRX0+Cap1hprU/Q JuoGXUjpLTE8uNEPzSragsp/VbXobx527DRsDpOnyPneVoPf7R06AMJiB+DYJ/iz 2QjiX+bh+QBBHfnX2+/bDXqqnaVFHguHHmz7QaHKMHkrJgu9ww05OFQpgJj5YN7+ nnCJ8veJtD/Mm6g9viYb9U6QnOVYyZoh9j2bB6Yu7xsQzCSFImA1KaPBm5z5Yalh IiAncRkY30tkcLVQ5bN/PsUIPP2G45O/ZkRWYqM59SoYTIc7S95rfRfv99JY+ozp eWXVR7ImNaTvYY7yvPG6iDQ4 -----END CERTIFICATE-----Generated at Mon Mar 2 00:05:03 2026 by rpki-client