$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: VQno9gZxl444U//50pnXnVhOQp3YlelAKqmuZSjz/x4= Subject key identifier: 1F:CD:B8:8F:8A:DF:12:26:E9:C4:A5:60:30:2B:EF:33:C7:E4:B7:B6 Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 03A4 Signing time: Sun 01 Mar 2026 01:33:43 +0000 Manifest this update: Sun 01 Mar 2026 01:33:42 +0000 Manifest next update: Sun 08 Mar 2026 01:33:42 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: fENPXMcrHKPiahba2SHlPdCYiunskHWdOTJfll3cCz4=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: U/JXwEqtoHC/7jQ68sFwAQsy+SIpyQHakkosmR6Gtvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Mar 1 01:33:42 2026 GMT Not After : Mar 8 01:33:42 2026 GMT Subject: CN=69a39777-c59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:d1:d1:9f:49:7e:99:af:96:37:da:a2:11: b9:a0:cb:54:a0:1f:c1:21:21:8a:8b:65:ae:cf:e3: cc:af:87:a5:00:98:3b:58:94:45:71:33:0a:7a:47: 8d:31:8e:45:b4:43:ad:16:fc:ea:95:8e:5d:04:1a: 06:06:03:d4:44:8f:9e:2c:0c:3d:dc:f9:18:33:9a: ea:cb:24:1c:96:7a:a5:15:5e:d0:f3:8c:eb:c2:0b: 9d:bf:d4:b0:59:cd:6e:79:e4:b8:ca:21:fd:86:2c: f1:27:f8:d0:99:af:86:93:5a:d7:cb:0b:54:b5:44: cd:db:ca:66:9e:e1:9e:a4:8e:85:c6:36:10:19:1e: 23:ff:59:75:30:02:ae:1f:7d:aa:aa:00:1c:f4:9c: c6:81:08:85:2b:68:0a:46:46:70:b0:bd:c8:78:1e: 79:9a:b2:f4:7b:ce:b5:d6:5a:f5:9b:22:d5:3b:61: 05:33:85:66:41:fc:e0:fb:68:18:d9:f2:31:15:30: d8:af:01:d0:9d:9c:f3:00:91:a9:67:0d:4d:6c:48: 68:44:57:1d:fa:71:e1:8a:f8:2c:8d:36:43:a4:ab: a9:01:c5:6c:fe:60:56:7f:47:a6:a6:5d:8a:9f:9c: 79:41:57:43:00:87:3b:3f:79:ef:c6:07:70:f0:28: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CD:B8:8F:8A:DF:12:26:E9:C4:A5:60:30:2B:EF:33:C7:E4:B7:B6 X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:54:c4:d8:e0:52:1a:0a:81:d6:5d:d3:68:bd:ad:a9:7f:52: d5:fb:6a:73:7e:a0:10:92:f6:89:b1:08:d4:8f:35:32:ce:77: 3a:10:c1:86:a8:80:41:72:c8:0f:af:74:0c:c0:9a:61:ff:1e: fd:a6:f1:ee:7c:40:d8:d2:f4:48:6e:e5:f7:92:2c:09:e6:e1: aa:af:d8:f2:55:5a:78:7b:e9:3e:3a:0e:66:c2:f0:c3:db:7f: 58:4e:ef:eb:db:88:cf:6b:b9:18:8c:78:7a:3b:54:51:04:12: 2c:8b:e7:d5:83:f8:9f:fd:57:6f:aa:5f:dc:ef:d5:bc:12:64: 39:2f:d8:19:6f:f1:90:d8:f6:f5:01:e1:cf:06:e0:aa:be:cb: 36:66:a8:c0:7e:ea:40:9c:0b:22:d6:5f:36:d8:8e:a6:8c:0e: c7:c8:29:d1:27:42:0d:36:23:43:9e:c8:06:f7:17:d7:90:3b: 2f:e4:b8:f7:59:c0:ef:3a:e2:1b:bb:0b:99:db:b0:ec:a0:c0: 6b:07:fb:18:72:85:4f:25:28:6a:f0:6f:67:d3:79:90:7c:4c: 49:aa:01:c2:48:57:c4:51:a4:04:0d:bd:65:77:7f:28:a0:f7: 46:ce:d7:b5:96:b4:c6:d7:11:1c:24:3a:7b:b1:eb:b7:27:69: 5a:98:bf:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjYwMzAxMDEzMzQyWhcNMjYwMzA4MDEzMzQyWjAYMRYwFAYD VQQDDA02OWEzOTc3Ny1jNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mXR0Z9JfpmvljfaohG5oMtUoB/BISGKi2Wuz+PMr4elAJg7WJRFcTMKekeN MY5FtEOtFvzqlY5dBBoGBgPURI+eLAw93PkYM5rqyyQclnqlFV7Q84zrwgudv9Sw Wc1ueeS4yiH9hizxJ/jQma+Gk1rXywtUtUTN28pmnuGepI6FxjYQGR4j/1l1MAKu H32qqgAc9JzGgQiFK2gKRkZwsL3IeB55mrL0e8611lr1myLVO2EFM4VmQfzg+2gY 2fIxFTDYrwHQnZzzAJGpZw1NbEhoRFcd+nHhivgsjTZDpKupAcVs/mBWf0empl2K n5x5QVdDAIc7P3nvxgdw8Ch3KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/NuI+K 3xIm6cSlYDAr7zPH5Le2MB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeFTE2OBSGgqB1l3TaL2tqX9S1ftqc36gEJL2ibEI1I81Ms53OhDBhqiAQXLI D690DMCaYf8e/abx7nxA2NL0SG7l95IsCebhqq/Y8lVaeHvpPjoOZsLww9t/WE7v 69uIz2u5GIx4ejtUUQQSLIvn1YP4n/1Xb6pf3O/VvBJkOS/YGW/xkNj29QHhzwbg qr7LNmaowH7qQJwLItZfNtiOpowOx8gp0SdCDTYjQ57IBvcX15A7L+S491nA7zri G7sLmduw7KDAawf7GHKFTyUoavBvZ9N5kHxMSaoBwkhXxFGkBA29ZXd/KKD3Rs7X tZa0xtcRHCQ6e7HrtydpWpi/IQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:21:41 2026 by rpki-client