$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft File: D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json) Hash identifier: k7Js1AzqaVp73emqBKk4Lf0CxTxgWMvL1U5xFe6M0C8= Subject key identifier: EF:61:65:BA:99:02:F7:AB:88:81:CD:50:D0:4D:8E:05:C1:A5:4C:CC Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 Certificate issuer: /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Certificate serial: 1C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft Manifest number: 1C6C Signing time: Mon 02 Mar 2026 00:03:28 +0000 Manifest this update: Mon 02 Mar 2026 00:03:25 +0000 Manifest next update: Mon 09 Mar 2026 00:03:25 +0000 Files and hashes: 1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: PlZmL2zF0KrNiab4s6tdHg6PBc6kATTxHJg+njq38zY=) 2: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: 7oC71FjkJ5B715SyOcRhNyUfxRr9+87yPAPblr+sAys=) 3: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: 5NO1VG8ffGg8ouNISZKDorz5L4A29bF5w+6XJMA45m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7296 (0x1c80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467 Validity Not Before: Mar 2 00:03:25 2026 GMT Not After : Mar 9 00:03:25 2026 GMT Subject: CN=69a4d3cf-7687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:b7:e7:dd:90:3e:84:31:06:c6:df:5c:20: 8b:f1:e5:8f:66:7f:a4:2f:11:36:8b:78:51:dd:5e: be:d1:55:c7:93:46:ea:27:12:8b:1c:99:70:60:96: 92:15:98:fd:8a:a7:aa:4b:c2:4b:ad:4b:15:bd:90: 39:02:2b:15:93:8b:f8:ff:23:67:63:67:d4:f2:24: 1a:0e:7b:48:31:f4:de:4f:2e:3e:4d:a5:15:63:f2: d2:9a:b7:9e:41:6e:d6:99:a0:3c:e9:6e:b7:2b:90: ad:79:73:13:a8:07:30:7a:4c:7a:0b:f3:cc:6e:93: f4:c3:be:01:4a:3d:0a:ed:3f:41:b8:70:ca:85:3f: 39:f8:17:7c:b1:74:b8:90:de:3b:e2:97:70:ae:0c: 7d:8e:d3:fb:14:0d:e4:0b:e2:09:63:e6:3c:09:da: 90:c7:db:5b:b5:2a:c1:70:53:81:fa:be:70:96:ee: 60:16:97:6d:e9:39:d9:33:0f:b0:f4:d9:35:b6:e7: fb:d0:71:da:18:75:e4:42:ef:05:62:1b:cf:ce:fa: 7a:a2:6a:9a:55:a4:52:2c:f9:a3:45:65:a7:01:e6: 61:a3:3c:5e:1d:83:3f:ab:6f:b5:6c:c1:29:7c:d2: 3e:2e:8b:17:bd:0e:72:7c:bb:7a:03:1e:01:f3:e5: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:61:65:BA:99:02:F7:AB:88:81:CD:50:D0:4D:8E:05:C1:A5:4C:CC X509v3 Authority Key Identifier: keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a6:f4:c5:0a:45:d9:71:b6:d6:4b:fa:3a:e0:35:a9:4a:9e: 02:ba:67:d6:05:68:5d:d6:3e:a1:4c:12:62:fd:09:55:91:31: a0:1a:d4:86:25:28:7e:31:0e:97:ef:f1:97:a6:5f:ee:93:6f: bd:11:7e:78:9c:3d:c9:ef:cb:9c:6b:57:60:45:12:72:10:8f: 61:56:b9:56:06:52:18:2f:54:54:e8:eb:c6:a1:cc:5f:5d:5d: 34:8a:3c:87:b1:59:ec:5d:85:f0:bd:f7:a5:0c:e5:ef:ee:ae: c9:a6:cf:7c:25:b4:50:09:df:cc:b7:51:fe:f9:74:d6:f5:f9: a5:7d:b4:ef:61:25:9c:8f:a8:ae:f0:fd:2a:6e:70:f2:70:83: 0d:a5:bf:46:e9:55:f3:e3:fc:0c:34:fd:c4:79:01:fe:99:7f: 82:83:c9:61:bd:dc:c7:c1:20:92:cb:7f:9e:4e:28:58:a9:fc: b3:a5:4b:44:60:75:f7:09:36:9d:07:9f:19:a4:d8:8a:c5:4e: da:be:e6:96:8d:fa:05:23:2b:6f:66:07:30:a9:28:3b:0e:b2: 08:4c:91:a3:b3:a2:6e:b2:c6:e0:cd:4f:36:62:fc:b2:94:68: e3:5a:06:7c:bf:70:a7:e1:13:b0:fc:47:96:78:00:51:35:2f: 42:97:02:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1 QUEwRTk0NjcwHhcNMjYwMzAyMDAwMzI1WhcNMjYwMzA5MDAwMzI1WjAYMRYwFAYD VQQDEw02OWE0ZDNjZi03Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshC3592QPoQxBsbfXCCL8eWPZn+kLxE2i3hR3V6+0VXHk0bqJxKLHJlwYJaS FZj9iqeqS8JLrUsVvZA5AisVk4v4/yNnY2fU8iQaDntIMfTeTy4+TaUVY/LSmree QW7WmaA86W63K5CteXMTqAcwekx6C/PMbpP0w74BSj0K7T9BuHDKhT85+Bd8sXS4 kN474pdwrgx9jtP7FA3kC+IJY+Y8CdqQx9tbtSrBcFOB+r5wlu5gFpdt6TnZMw+w 9Nk1tuf70HHaGHXkQu8FYhvPzvp6omqaVaRSLPmjRWWnAeZhozxeHYM/q2+1bMEp fNI+LosXvQ5yfLt6Ax4B8+U72wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9hZbqZ AveriIHNUNBNjgXBpUzMMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1 QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUYyMC82NUE5QTI0MkY1QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9l eWhsRnhodHlrZzlhb09sR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjab0xQpF2XG21kv6OuA1qUqeArpn1gVoXdY+oUwSYv0JVZExoBrUhiUofjEO l+/xl6Zf7pNvvRF+eJw9ye/LnGtXYEUSchCPYVa5VgZSGC9UVOjrxqHMX11dNIo8 h7FZ7F2F8L33pQzl7+6uyabPfCW0UAnfzLdR/vl01vX5pX2072ElnI+orvD9Km5w 8nCDDaW/RulV8+P8DDT9xHkB/pl/goPJYb3cx8Egkst/nk4oWKn8s6VLRGB19wk2 nQefGaTYisVO2r7mlo36BSMrb2YHMKkoOw6yCEyRo7OibrLG4M1PNmL8spRo41oG fL9wp+ETsPxHlngAUTUvQpcClw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:22 2026 by rpki-client