$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: KrgWU5sbRKoLyC+/msjGass7FXc12nXXUsKrdD/06KM= Subject key identifier: 0D:E3:7F:73:C7:30:7B:AB:8A:70:A2:23:75:4C:37:08:77:AA:BA:27 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 356C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 3538 Signing time: Sat 28 Feb 2026 14:51:43 +0000 Manifest this update: Sat 28 Feb 2026 14:51:42 +0000 Manifest next update: Sat 07 Mar 2026 14:51:42 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: YoGILnb+MSw0ZaXz63IxylzlCK+wuznW5HCYvVHEvkU=) 2: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: 8rkFFK7f8C4kg6amkqMwJcx/AiFRZZgVJDwHUVH6bkc=) 3: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: +mFUTPukNPCfcSKXNq7MZxHFPwbdlaeb+V/6jJQxtbQ=) 4: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: 1KOBUlBTgv8L/Zsa+ioCcjpPdWdcrbUzvA+4g3ZBS+I=) 5: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: bBddu/3OLqt+d3slS/y6PhHevDnsnnxmKe42ktA+yFg=) 6: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: lSWPTUh4J0nKVHlliNgvt5VbtwoFX73iOyHCm/Taymo=) 7: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: JbpclduToNt6wif+jf1iFpDYoHa8WCEDhdanIxzpDxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 14:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13676 (0x356c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Feb 28 14:51:42 2026 GMT Not After : Mar 7 14:51:42 2026 GMT Subject: CN=69a300ff-ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:8d:78:b4:35:a0:85:c8:9e:dd:d3:9a:fa: 25:de:6c:48:c2:6f:45:38:fd:87:21:02:7c:8f:86: 76:bb:1f:bb:fe:75:7b:b0:74:9c:8f:98:be:d7:67: ab:7b:9b:44:cd:0b:da:82:b9:3a:ea:f5:e0:7c:b3: ff:3d:e9:3f:b6:dd:61:f8:1a:d6:6f:91:c4:4d:30: 15:05:a6:71:2b:3b:0b:a4:6a:02:41:98:6d:77:e2: eb:ea:b2:49:19:1c:ff:f1:6e:3a:aa:09:42:5a:63: ab:49:d6:d9:11:e0:d4:e9:ca:9c:05:5c:b5:f2:af: 79:c8:0e:f2:92:1a:b5:62:eb:f2:cb:82:2c:f7:38: 27:98:8e:3d:56:c4:e2:85:d8:81:fc:7b:c2:6a:c4: 9a:6d:72:9e:9b:5c:2f:8f:6e:a0:01:b2:2e:d0:39: 8a:a9:28:a5:ae:04:a8:65:31:66:8a:8c:2d:8a:c0: fb:3c:2e:20:35:d2:ad:ce:e4:9b:f0:d5:d1:08:02: 91:45:7a:2f:03:a1:13:f2:59:f4:1d:6c:82:22:62: d9:36:77:67:ef:df:a5:ed:fa:59:dc:5b:1d:a6:a3: 73:f0:da:2e:15:68:c8:ab:a6:0d:c0:27:69:79:a1: f5:7b:ab:88:3f:e3:d8:d9:3b:d0:67:eb:f0:3d:6e: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E3:7F:73:C7:30:7B:AB:8A:70:A2:23:75:4C:37:08:77:AA:BA:27 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:76:7d:55:c6:0c:0c:b3:01:e3:ec:47:ec:06:65:4e:c2:b1: fa:28:ea:87:ce:af:17:f7:02:6d:03:8d:42:4d:4a:ad:63:60: 32:a6:77:a3:d4:92:1c:2d:9a:df:0b:c8:74:02:6e:b7:10:d3: 54:5e:67:1f:8c:60:63:3e:29:f5:44:e5:c7:40:6d:69:09:a2: e3:68:98:77:be:8a:28:a2:2e:a6:a2:c6:9c:9c:5a:30:7c:05: db:60:45:f4:c3:2a:79:98:7f:e2:49:0a:38:4a:a2:8a:cc:2b: d4:a0:00:92:b5:e0:e8:aa:3b:8d:67:e3:2d:f9:27:ea:b6:ec: 41:e8:05:e1:8c:bb:b9:b3:00:75:24:11:d1:7a:1c:d4:50:97: 5e:bc:02:25:b7:41:03:34:91:c6:87:47:14:ea:7a:e6:d6:88: 34:f4:12:71:d2:b9:12:68:0b:23:7b:62:42:07:ba:dc:aa:2c: 5c:f0:bd:d2:f3:c1:53:ad:53:3a:71:51:04:da:f7:96:f2:78: af:a0:61:51:bb:6c:c5:68:38:1e:b3:11:6d:3e:58:12:fa:4a: 19:87:e8:3f:5a:81:d5:ed:65:19:2f:85:f8:37:50:24:ff:69: 89:88:67:a4:a7:73:56:85:a1:e3:28:58:fa:56:74:18:97:b1: ee:8e:55:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjYwMjI4MTQ1MTQyWhcNMjYwMzA3MTQ1MTQyWjAYMRYwFAYD VQQDDA02OWEzMDBmZi1kZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmiONeLQ1oIXInt3Tmvol3mxIwm9FOP2HIQJ8j4Z2ux+7/nV7sHScj5i+12er e5tEzQvagrk66vXgfLP/Pek/tt1h+BrWb5HETTAVBaZxKzsLpGoCQZhtd+Lr6rJJ GRz/8W46qglCWmOrSdbZEeDU6cqcBVy18q95yA7ykhq1Yuvyy4Is9zgnmI49VsTi hdiB/HvCasSabXKem1wvj26gAbIu0DmKqSilrgSoZTFmiowtisD7PC4gNdKtzuSb 8NXRCAKRRXovA6ET8ln0HWyCImLZNndn79+l7fpZ3FsdpqNz8NouFWjIq6YNwCdp eaH1e6uIP+PY2TvQZ+vwPW4LDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3jf3PH MHurinCiI3VMNwh3qronMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiHZ9VcYMDLMB4+xH7AZlTsKx+ijqh86vF/cCbQONQk1KrWNgMqZ3o9SSHC2a 3wvIdAJutxDTVF5nH4xgYz4p9UTlx0BtaQmi42iYd76KKKIupqLGnJxaMHwF22BF 9MMqeZh/4kkKOEqiiswr1KAAkrXg6Ko7jWfjLfkn6rbsQegF4Yy7ubMAdSQR0Xoc 1FCXXrwCJbdBAzSRxodHFOp65taINPQScdK5EmgLI3tiQge63KosXPC90vPBU61T OnFRBNr3lvJ4r6BhUbtsxWg4HrMRbT5YEvpKGYfoP1qB1e1lGS+F+DdQJP9piYhn pKdzVoWh4yhY+lZ0GJex7o5VaA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:41:16 2026 by rpki-client