$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft File: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft (raw, json) Hash identifier: I9ZfqUvfDrsFRtcFfttKx6Pda6cVS+D1opy5Wcz2T9Q= Subject key identifier: 2A:3A:CB:72:33:D2:8A:AA:FA:52:35:78:2C:4C:05:9A:A7:ED:1E:46 Authority key identifier: 74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A Certificate issuer: /CN=A91CCDAE/serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft Manifest number: 3B Signing time: Sun 01 Mar 2026 10:00:13 +0000 Manifest this update: Sun 01 Mar 2026 10:00:12 +0000 Manifest next update: Sun 08 Mar 2026 10:00:12 +0000 Files and hashes: 1: dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl (hash: 2iCFU2+9UVaTRzPW9gQ0ssd4nlg5xPqyA+TqTx+AQgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCDAE, serialNumber=74D9FE1D616A73C8FD9D00A74A0E62C05A91E09A Validity Not Before: Mar 1 10:00:12 2026 GMT Not After : Mar 8 10:00:12 2026 GMT Subject: CN=69a40e2d-0ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:fa:23:e4:4c:73:d0:79:3c:89:88:a6:dc: 79:d9:8e:c1:77:0d:bd:34:16:20:df:76:7d:98:d7: 56:ab:56:1d:de:28:dc:c0:0b:8d:c3:08:00:f8:2a: 7f:6b:36:db:b6:f7:c8:54:87:bc:4c:14:6f:29:72: 97:f5:06:30:8e:0e:37:76:89:3d:67:28:37:4a:d0: 0c:81:f7:47:08:10:dc:f7:86:99:61:fe:b7:75:40: f4:f6:14:00:40:40:03:34:5e:86:a3:af:2b:e4:4d: b1:6a:14:43:3a:f4:ec:68:44:95:e4:6e:7d:b3:a1: 25:14:99:fe:aa:a1:22:6c:8a:9b:9c:18:c0:9f:b8: 2c:76:4d:59:3a:88:f3:5a:50:8b:b5:d8:5f:cb:99: 5f:60:9d:9b:7b:38:92:ac:28:d3:24:58:9f:88:93: 6d:fb:9b:ad:f9:2d:10:f8:d6:78:22:4c:b7:4f:fa: 4e:f7:11:58:77:6b:2c:8d:fa:5b:cf:0e:0f:e9:24: 8f:82:8f:39:8b:49:09:76:cd:12:d4:9d:bf:4d:2d: 75:e9:20:e1:4b:05:ad:78:e6:4c:22:c8:8d:05:7d: 9d:ff:5c:87:47:77:79:5b:1f:89:99:4a:2f:9e:6d: 82:e3:82:2e:36:31:54:9f:e4:22:b8:ef:43:dc:63: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3A:CB:72:33:D2:8A:AA:FA:52:35:78:2C:4C:05:9A:A7:ED:1E:46 X509v3 Authority Key Identifier: keyid:74:D9:FE:1D:61:6A:73:C8:FD:9D:00:A7:4A:0E:62:C0:5A:91:E0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/05C1ECFEC84211F08D979A7EC4F9AE02/dNn-HWFqc8j9nQCnSg5iwFqR4Jo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e2:fd:01:78:9d:72:66:8f:33:ad:bf:e7:98:0f:a8:f3:a3: 76:63:0a:06:61:e8:8a:61:02:75:fd:ae:d6:5c:45:ed:0e:4c: 8d:5d:9e:0c:39:18:20:c0:17:6a:a7:dc:77:df:c6:2f:ce:00: c6:81:56:99:e0:0c:aa:8e:dd:75:d1:b9:67:a4:2c:5a:83:70: c7:32:b9:20:91:ed:4c:a0:a1:9d:e7:d4:3e:5b:dc:b9:7d:59: 4e:1b:40:a1:e3:2c:d3:52:2a:86:28:61:ef:be:00:98:b2:0e: a3:6d:25:7c:4f:fd:53:a2:e7:7f:f9:ba:4b:2b:07:43:7e:b3: 5f:70:d3:31:61:1d:78:3e:7b:84:04:b8:6b:3d:58:6c:53:5e: 2c:01:95:ed:57:03:55:cd:a2:b8:44:3a:4d:da:2c:fe:a1:5f: 3f:2d:f3:7a:a6:65:64:72:45:6e:87:ca:2b:d1:87:2d:ac:a1: be:0f:53:a2:17:05:34:bc:f9:b7:c0:35:4e:a4:26:86:2d:ec: 74:b3:f8:a5:0c:14:e1:79:49:63:7b:19:58:bf:49:e8:17:d3: 0c:4a:fe:08:cb:44:89:42:0f:35:f1:d1:86:27:7a:e2:af:e8: a2:d8:39:0f:be:cb:70:6c:20:aa:0d:89:ac:21:0a:4d:84:f8: 72:3f:09:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0RBRTExMC8GA1UEBRMoNzREOUZFMUQ2MTZBNzNDOEZEOUQwMEE3NEEwRTYyQzA1 QTkxRTA5QTAeFw0yNjAzMDExMDAwMTJaFw0yNjAzMDgxMDAwMTJaMBgxFjAUBgNV BAMTDTY5YTQwZTJkLTBjZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Gfoj5Exz0Hk8iYim3HnZjsF3Db00FiDfdn2Y11arVh3eKNzAC43DCAD4Kn9r Ntu298hUh7xMFG8pcpf1BjCODjd2iT1nKDdK0AyB90cIENz3hplh/rd1QPT2FABA QAM0XoajryvkTbFqFEM69OxoRJXkbn2zoSUUmf6qoSJsipucGMCfuCx2TVk6iPNa UIu12F/LmV9gnZt7OJKsKNMkWJ+Ik237m635LRD41ngiTLdP+k73EVh3ayyN+lvP Dg/pJI+CjzmLSQl2zRLUnb9NLXXpIOFLBa145kwiyI0FfZ3/XIdHd3lbH4mZSi+e bYLjgi42MVSf5CK470PcY+CxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKjrLcjPS iqr6UjV4LEwFmqftHkYwHwYDVR0jBBgwFoAUdNn+HWFqc8j9nQCnSg5iwFqR4Jow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDREFFLzA1QzFFQ0ZFQzg0 MjExRjA4RDk3OUE3RUM0RjlBRTAyL2RObi1IV0ZxYzhqOW5RQ25TZzVpd0ZxUjRK by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZE5uLUhXRnFjOGo5blFDblNnNWl3RnFSNEpvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND REFFLzA1QzFFQ0ZFQzg0MjExRjA4RDk3OUE3RUM0RjlBRTAyL2RObi1IV0ZxYzhq OW5RQ25TZzVpd0ZxUjRKby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBw4v0BeJ1yZo8zrb/nmA+o86N2YwoGYeiKYQJ1/a7WXEXtDkyNXZ4MORggwBdq p9x338YvzgDGgVaZ4Ayqjt110blnpCxag3DHMrkgke1MoKGd59Q+W9y5fVlOG0Ch 4yzTUiqGKGHvvgCYsg6jbSV8T/1Toud/+bpLKwdDfrNfcNMxYR14PnuEBLhrPVhs U14sAZXtVwNVzaK4RDpN2iz+oV8/LfN6pmVkckVuh8or0YctrKG+D1OiFwU0vPm3 wDVOpCaGLex0s/ilDBTheUljexlYv0noF9MMSv4Iy0SJQg818dGGJ3rir+ii2DkP vstwbCCqDYmsIQpNhPhyPwk7 -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:25 2026 by rpki-client