$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: YKQMdpE+tWQwCHpTuYl1IpJsWAQcZ9/cRnwKfrRBc2A= Subject key identifier: 75:46:E6:3E:E1:DB:AD:CE:6F:32:90:FF:17:C7:3B:22:7D:96:7B:4E Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 75 Signing time: Sun 01 Mar 2026 09:16:04 +0000 Manifest this update: Sun 01 Mar 2026 09:16:04 +0000 Manifest next update: Sun 08 Mar 2026 09:16:04 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: 4TmfCttC1gd3er/6u7BI0VejwhbXwRke3tV8SVBxMjU=) 2: 44C226F2A5B111F095806166C4F9AE02.roa (hash: Z5IARCPdVB3zQ2o9DruEtHimglf8XZQg6KsX+TluqNQ=) 3: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: 9Zb0Av6EsVPUvpAr5Wo6+2kZEuOjOMIuyYuVnzvL3ro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Mar 1 09:16:04 2026 GMT Not After : Mar 8 09:16:04 2026 GMT Subject: CN=69a403d4-9676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:6a:41:4e:ad:6f:41:08:48:24:14:f3:3a: 4f:32:77:1e:c5:9b:ce:6d:86:71:54:67:f1:e6:36: 72:c3:4f:f4:8d:e3:89:25:95:e2:0a:c6:c6:f1:19: 59:26:88:c3:0c:62:97:07:01:eb:16:0e:01:6d:3b: ba:6f:f2:59:87:da:72:74:e1:c5:12:94:1b:a9:e1: 0f:6e:dd:f5:19:a2:39:c5:8e:d9:fb:6f:78:6d:89: 61:a6:ce:0f:0c:a7:3c:a0:b8:e9:f6:a2:35:1b:14: d2:38:8e:43:64:fb:4a:4d:b3:12:e7:fb:d2:d0:cc: c2:f7:a7:2f:2b:74:56:29:15:3f:cb:2e:b0:bd:fd: 46:bd:8f:3b:52:34:7e:25:d2:65:58:cb:6c:17:72: 28:77:d3:66:4c:a0:a7:5c:6d:e7:a8:f6:38:df:03: b3:a8:5e:45:18:4e:b8:5b:81:b7:b7:93:1b:b8:5f: 10:81:2a:27:c0:dd:3f:74:55:cd:0c:af:df:1d:9c: 0c:09:60:7f:2f:65:71:c7:e3:54:9a:64:c0:53:53: 16:a8:b9:1b:9f:0c:3f:55:a2:4e:13:0b:bb:4b:de: d1:53:ff:45:78:e1:87:37:20:01:f5:9d:b2:33:13: cf:2a:17:97:0d:4a:a6:00:a5:fa:04:be:cf:d9:8d: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:46:E6:3E:E1:DB:AD:CE:6F:32:90:FF:17:C7:3B:22:7D:96:7B:4E X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:12:61:cb:27:58:06:8c:50:67:81:23:bf:19:70:f2:24:8d: 69:05:6f:19:71:7a:66:35:6a:e6:b9:b5:cf:cb:80:4a:62:50: 4a:6f:c6:f7:3c:6a:a8:a0:9b:85:10:a5:75:de:f9:75:be:40: 0f:3f:dd:cb:17:39:ee:15:aa:22:97:79:d7:af:53:34:0a:0d: f0:59:85:c0:80:6a:91:fc:8b:63:96:9f:8d:5f:c6:fe:30:02: 83:f2:2f:1e:d0:f8:35:e5:ea:24:f6:70:2c:9e:1a:5a:53:df: 83:0f:6e:83:be:f4:26:a9:13:e4:1e:b2:4e:c0:60:da:f8:53: ce:19:ad:68:97:43:1f:fa:0b:3f:e3:73:1d:e4:40:c6:62:b4: 3b:85:63:3c:5b:83:56:e3:0c:fc:1c:2e:75:be:7a:64:ef:e9: ef:7b:51:57:44:66:65:5d:fe:e4:88:77:42:32:f8:b8:d6:3a: 60:9d:93:5a:6c:c7:6b:7a:10:1c:74:6a:b1:ab:44:4e:3a:d9: 5b:d4:01:d3:54:cd:04:3e:b3:30:87:ff:73:59:13:bc:a5:f2: b4:19:80:28:ea:45:7f:ba:9f:09:e0:75:c8:ca:a9:96:80:72: 2c:d8:68:9a:c6:2f:f4:02:e0:4c:6e:74:d5:3f:bf:6a:72:78: 56:86:ec:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzI0NzExMC8GA1UEBRMoMEREQUJCRjMxRUVDNjg3NjZFRjY2OUFGOTczNTI0MEMz ODk5MzQ1OTAeFw0yNjAzMDEwOTE2MDRaFw0yNjAzMDgwOTE2MDRaMBgxFjAUBgNV BAMTDTY5YTQwM2Q0LTk2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOg2pBTq1vQQhIJBTzOk8ydx7Fm85thnFUZ/HmNnLDT/SN44klleIKxsbxGVkm iMMMYpcHAesWDgFtO7pv8lmH2nJ04cUSlBup4Q9u3fUZojnFjtn7b3htiWGmzg8M pzyguOn2ojUbFNI4jkNk+0pNsxLn+9LQzML3py8rdFYpFT/LLrC9/Ua9jztSNH4l 0mVYy2wXcih302ZMoKdcbeeo9jjfA7OoXkUYTrhbgbe3kxu4XxCBKifA3T90Vc0M r98dnAwJYH8vZXHH41SaZMBTUxaouRufDD9Vok4TC7tL3tFT/0V44Yc3IAH1nbIz E88qF5cNSqYApfoEvs/ZjRTrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdUbmPuHb rc5vMpD/F8c7In2We04wHwYDVR0jBBgwFoAUDdq78x7saHZu9mmvlzUkDDiZNFkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMjQ3LzMyMDQ0QkZFNzFF RTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGRxNzh4N3NhSFp1OW1tdmx6VWtERGlaTkZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz MjQ3LzMyMDQ0QkZFNzFFRTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUha dTltbXZselVrRERpWk5Gay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3EmHLJ1gGjFBngSO/GXDyJI1pBW8ZcXpmNWrmubXPy4BKYlBKb8b3PGqooJuF EKV13vl1vkAPP93LFznuFaoil3nXr1M0Cg3wWYXAgGqR/Itjlp+NX8b+MAKD8i8e 0Pg15eok9nAsnhpaU9+DD26DvvQmqRPkHrJOwGDa+FPOGa1ol0Mf+gs/43Md5EDG YrQ7hWM8W4NW4wz8HC51vnpk7+nve1FXRGZlXf7kiHdCMvi41jpgnZNabMdrehAc dGqxq0ROOtlb1AHTVM0EPrMwh/9zWRO8pfK0GYAo6kV/up8J4HXIyqmWgHIs2Gia xi/0AuBMbnTVP79qcnhWhuxK -----END CERTIFICATE-----Generated at Mon Mar 2 14:09:43 2026 by rpki-client