$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: Lpnt5GLFbEVHjMF4naDpqzVA3XncmGQOqCI+2ApLc/Q= Subject key identifier: 2A:1C:B7:AE:7C:27:51:16:B4:8A:E8:7F:FB:21:7F:09:80:2B:2E:1D Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 209B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 1914 Signing time: Mon 02 Mar 2026 01:46:52 +0000 Manifest this update: Mon 02 Mar 2026 01:46:50 +0000 Manifest next update: Mon 09 Mar 2026 01:46:50 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: BxhTkakTuVkVCtgkbxaW0Scpw2msjfT5iAcGAAn0LbY=) 2: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: HjkUEQsav5pUE/WVtKbSKskctR1MphO2V35javK4YnI=) 3: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: bLApvChK2zUe4CWUx9RU9qgAGAkxX8oSnJKH1tdA0/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8347 (0x209b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Mar 2 01:46:50 2026 GMT Not After : Mar 9 01:46:50 2026 GMT Subject: CN=69a4ec0c-6dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:b2:18:12:c4:3a:37:b5:85:6a:6e:dd:b7: 0e:f0:bb:29:b5:cd:d2:a7:86:d0:a8:bb:15:e9:0b: e0:79:42:4f:40:ce:58:93:bc:46:71:ac:be:bd:8d: fd:99:66:fc:7d:dd:93:71:7a:d1:b2:8b:a8:98:5c: 2d:44:32:24:ba:1a:92:dc:5e:a2:3f:e6:18:2f:5a: e1:e2:d9:8e:f2:2a:6e:be:9c:96:ca:1e:51:15:f5: a8:dc:39:72:1a:a6:a9:73:bd:92:bb:20:db:b3:b6: e6:1d:26:06:50:a8:86:34:3b:ea:7b:5e:2b:60:8c: 5a:cd:32:ab:af:73:ea:1c:2e:7c:25:64:9b:32:77: 4d:2c:47:6e:0b:e2:5b:a5:98:cc:65:22:12:3d:d6: 0e:f0:c7:55:6b:58:6e:3c:a4:95:6b:b0:3e:2c:b7: e5:36:65:bd:fd:f3:15:bb:7b:64:fd:41:70:37:30: c3:de:51:6c:1f:26:a9:c5:88:9d:27:1e:7e:4c:ec: 47:b1:2c:ee:d6:ef:7c:ca:05:b3:17:f3:c2:45:6c: 66:97:0f:32:8a:95:c6:73:7f:ca:29:5b:29:64:e9: 9c:2a:07:6c:fa:ed:e2:27:85:53:e7:e6:73:00:93: fc:c4:7a:2e:7d:16:97:10:12:77:8c:43:76:74:26: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:B7:AE:7C:27:51:16:B4:8A:E8:7F:FB:21:7F:09:80:2B:2E:1D X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0b:d1:45:33:e6:20:49:34:d8:cd:91:27:68:c9:13:b2:a0: d1:21:8f:eb:2a:92:39:80:54:0c:83:1d:8c:66:fe:61:08:5a: 58:fb:e3:64:4c:98:9e:00:cb:17:1c:e5:53:ba:7a:f1:28:a6: be:c8:ac:0d:1d:ee:03:08:ea:26:e7:e6:ce:dc:f8:32:13:80: 21:ed:3e:50:86:da:47:ae:7a:fa:c4:db:d2:38:96:a6:e3:11: ea:8b:5d:44:fa:b5:a2:2a:2e:1f:18:2b:3a:13:41:66:e2:0d: 12:4e:33:80:a8:ed:50:fe:bd:c8:3e:89:7c:f9:00:9b:48:9b: f8:f1:e5:64:48:18:a4:1e:91:19:bb:d3:c5:6a:3c:12:a7:d9: a1:a1:41:05:04:f9:0a:50:85:ac:63:e2:77:6b:ef:67:78:41: 3d:ee:4f:c5:94:03:37:ed:d3:6b:63:1b:dc:c8:f4:47:29:60: ae:a1:7d:39:02:29:ac:a3:1f:73:49:76:49:63:9a:ae:5a:a7: 34:15:93:d3:0c:b0:08:ac:fb:0d:d5:ed:ea:53:db:82:7b:cc: 3e:ed:03:d3:33:93:89:1b:92:83:67:47:5e:aa:ea:6f:c0:aa: dd:ac:5e:f2:ed:68:93:bb:02:f0:df:f8:e2:eb:23:95:cb:8a: ee:28:67:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjYwMzAyMDE0NjUwWhcNMjYwMzA5MDE0NjUwWjAYMRYwFAYD VQQDEw02OWE0ZWMwYy02ZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YOyGBLEOje1hWpu3bcO8Lsptc3Sp4bQqLsV6QvgeUJPQM5Yk7xGcay+vY39 mWb8fd2TcXrRsouomFwtRDIkuhqS3F6iP+YYL1rh4tmO8ipuvpyWyh5RFfWo3Dly Gqapc72SuyDbs7bmHSYGUKiGNDvqe14rYIxazTKrr3PqHC58JWSbMndNLEduC+Jb pZjMZSISPdYO8MdVa1huPKSVa7A+LLflNmW9/fMVu3tk/UFwNzDD3lFsHyapxYid Jx5+TOxHsSzu1u98ygWzF/PCRWxmlw8yipXGc3/KKVspZOmcKgds+u3iJ4VT5+Zz AJP8xHoufRaXEBJ3jEN2dCa6zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoct658 J1EWtIrof/shfwmAKy4dMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgvRRTPmIEk02M2RJ2jJE7Kg0SGP6yqSOYBUDIMdjGb+YQhaWPvjZEyYngDL FxzlU7p68SimvsisDR3uAwjqJufmztz4MhOAIe0+UIbaR656+sTb0jiWpuMR6otd RPq1oiouHxgrOhNBZuINEk4zgKjtUP69yD6JfPkAm0ib+PHlZEgYpB6RGbvTxWo8 EqfZoaFBBQT5ClCFrGPid2vvZ3hBPe5PxZQDN+3Ta2Mb3Mj0RylgrqF9OQIprKMf c0l2SWOarlqnNBWT0wywCKz7DdXt6lPbgnvMPu0D0zOTiRuSg2dHXqrqb8Cq3axe 8u1ok7sC8N/44usjlcuK7ihnEA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:31:58 2026 by rpki-client