$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: Lfx9WUC3UBw+njo04UwCRYP1latGj2idH9rHI1APRK8= Subject key identifier: 83:BD:46:DC:C0:09:98:E5:C2:EA:E1:79:45:ED:EE:C2:30:AC:B0:93 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0D49 Signing time: Mon 02 Mar 2026 02:14:08 +0000 Manifest this update: Mon 02 Mar 2026 02:14:05 +0000 Manifest next update: Mon 09 Mar 2026 02:14:05 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: shNdmNyYb3lB46PtceqvqIsyCXMuFmzXzTaK+EmqXRo=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: YiSRee5vl7EyJJPjfDEZ2260d09lp/o9qHx1R/OGGjM=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: /AhmE34i61p6Wi2ThEiAHofXwlJ6VL0v1ZoTN8bzfIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Mar 2 02:14:05 2026 GMT Not After : Mar 9 02:14:05 2026 GMT Subject: CN=69a4f26f-40f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:dc:d1:d4:7e:be:26:24:fd:68:51:01:e8: 51:3d:a0:0c:28:db:89:2b:67:c9:1a:fc:99:1d:03: 5f:31:d8:4e:d1:75:98:97:2c:a7:c7:cf:a3:64:51: 92:f0:65:28:dc:d9:96:ce:54:fd:e1:ac:1e:aa:fd: 94:63:c0:e2:51:d9:a7:db:5c:97:a8:e1:0e:63:42: b0:d5:aa:b1:fc:0d:7b:25:9f:5d:5a:d7:d1:6a:0a: e2:bd:b9:58:e0:f6:31:78:31:38:4d:1b:78:1a:05: 06:a8:43:1b:a3:2f:2d:24:dc:93:e5:15:83:7d:5e: 56:61:c6:66:9e:3f:ab:14:c4:92:81:c7:8e:52:fa: d0:d6:65:fa:d0:fe:02:d2:f2:9d:53:60:f6:f7:73: 07:07:7f:18:f5:46:89:07:0d:c9:cf:cb:f3:e9:fd: 75:48:44:90:f9:ca:7c:8f:d8:43:ad:60:93:4d:c5: b9:3d:b3:1d:85:92:f9:f4:20:2d:0f:64:80:7e:2f: dc:f5:41:2a:54:b9:80:09:48:3d:ce:7d:b2:70:84: 4c:6f:90:11:a3:50:24:4f:ff:28:21:a6:53:7b:29: af:2a:c5:58:69:4f:21:eb:15:45:c2:88:2c:d5:7c: 60:bf:ac:8b:a2:56:fe:13:2e:e4:f6:9e:3e:93:a6: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BD:46:DC:C0:09:98:E5:C2:EA:E1:79:45:ED:EE:C2:30:AC:B0:93 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:0d:d9:a8:23:6c:79:c5:4b:a5:41:8d:50:df:86:32:65:ba: 6b:09:6e:f3:8d:f1:2b:8b:16:ea:bb:a2:d4:84:f8:de:a0:16: b2:2a:65:48:87:4f:cf:5e:71:ef:82:34:3a:c3:27:6d:80:99: 39:f2:64:71:2f:1c:3f:c7:2a:4e:76:1c:ca:80:fe:57:6e:2f: 1d:97:8d:9f:14:a1:a8:a6:db:19:e1:ac:be:31:25:1f:f4:95: 80:4d:a1:0d:52:fa:0a:be:c5:96:20:42:1a:50:bc:f1:54:d2: 42:a3:e5:79:53:56:53:ee:78:64:ae:f3:a3:97:05:5a:53:57: f7:a3:92:3e:4b:21:a1:e6:94:78:a5:9b:49:90:5b:96:de:ab: 10:74:cd:80:d4:d0:e7:f1:d2:43:33:34:5e:fb:31:b2:b5:d7: 86:c9:42:e2:8d:9b:83:16:9f:59:23:73:4e:0e:54:6b:ae:37: 8f:f6:d9:f1:03:2a:11:b1:c4:84:85:67:a4:c5:79:3f:1d:49: 17:d4:95:08:9a:e3:67:05:ee:3e:45:5d:48:c9:fd:d7:90:c8: 96:41:ed:a9:f1:9d:80:55:7d:0a:7c:dd:4a:b0:c3:f5:d7:2d: 10:7e:fa:9d:70:05:15:df:ad:ab:2e:a2:34:a9:e4:86:84:64: 6b:95:b1:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjYwMzAyMDIxNDA1WhcNMjYwMzA5MDIxNDA1WjAYMRYwFAYD VQQDEw02OWE0ZjI2Zi00MGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vrc0dR+viYk/WhRAehRPaAMKNuJK2fJGvyZHQNfMdhO0XWYlyynx8+jZFGS 8GUo3NmWzlT94aweqv2UY8DiUdmn21yXqOEOY0Kw1aqx/A17JZ9dWtfRagrivblY 4PYxeDE4TRt4GgUGqEMboy8tJNyT5RWDfV5WYcZmnj+rFMSSgceOUvrQ1mX60P4C 0vKdU2D293MHB38Y9UaJBw3Jz8vz6f11SESQ+cp8j9hDrWCTTcW5PbMdhZL59CAt D2SAfi/c9UEqVLmACUg9zn2ycIRMb5ARo1AkT/8oIaZTeymvKsVYaU8h6xVFwogs 1Xxgv6yLolb+Ey7k9p4+k6YJPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIO9RtzA CZjlwurheUXt7sIwrLCTMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApw3ZqCNsecVLpUGNUN+GMmW6awlu843xK4sW6rui1IT43qAWsiplSIdPz15x 74I0OsMnbYCZOfJkcS8cP8cqTnYcyoD+V24vHZeNnxShqKbbGeGsvjElH/SVgE2h DVL6Cr7FliBCGlC88VTSQqPleVNWU+54ZK7zo5cFWlNX96OSPkshoeaUeKWbSZBb lt6rEHTNgNTQ5/HSQzM0XvsxsrXXhslC4o2bgxafWSNzTg5Ua643j/bZ8QMqEbHE hIVnpMV5Px1JF9SVCJrjZwXuPkVdSMn915DIlkHtqfGdgFV9CnzdSrDD9dctEH76 nXAFFd+tqy6iNKnkhoRka5WxOA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:33 2026 by rpki-client