$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: Y8l4CgniC5uwQzFnz8TsbtyHdBklDITW6h54c633uRg= Subject key identifier: 99:48:C0:A4:E0:28:5C:B3:BF:E8:94:88:A8:B6:C7:DB:43:C9:62:FE Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: B1 Signing time: Wed 15 Apr 2026 06:43:16 +0000 Manifest this update: Wed 15 Apr 2026 06:43:16 +0000 Manifest next update: Wed 22 Apr 2026 06:43:16 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: 3Yh2R+pVJ1kMta7EE91S/RY+g5ncnxSztFWG7nNGWjI=) 2: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: reMz8lDbqv/5MKQ6Imr6fG4CgsSrFCmBFY2a5YJcGm4=) 3: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: QYbToAo1d6nye+FsjzAnvw3/lP4Nx+MEududWG8oDyc=) 4: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: mmlD29Jwj8h5f301RfKicLwmF3TuYi2j0tYABjJXZO0=) 5: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: XTFl/MyUGXYDLMXaMRa7HDON+jfgJcrSfnOokKAkziU=) 6: CA5B991430E111F09B76D311C4F9AE02.roa (hash: PEnLi/2yYSoy8XLBMGLd/6VOl25IvlE5IW4q9j8andY=) 7: 570B12E0562611F09F085F44C4F9AE02.roa (hash: fh4pbk7ZgyPKBaTjsRWjp1tC+xa/lcPj1cdrRM1oMjA=) 8: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: i0U6RLy91T9DkhNZtnLF7FlhidMvmsCPREqfKmoGIdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Apr 15 06:43:16 2026 GMT Not After : Apr 22 06:43:16 2026 GMT Subject: CN=69df3384-09ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:c0:0f:74:2b:6d:6c:a4:40:74:48:ba:b9: ba:76:21:1b:04:b0:1b:90:42:3a:bf:12:98:9a:b8: 8b:6b:6f:ce:b0:f3:88:9a:a3:11:7a:9b:a6:ce:2b: 9a:9a:78:94:d8:41:83:0e:54:37:96:a7:1f:0e:d5: 63:88:f0:3f:a1:94:de:51:75:b8:44:9d:23:09:5a: 25:ba:ef:f8:af:5a:cb:90:c1:67:22:8e:41:2d:d8: 75:f3:88:88:e0:62:aa:87:7f:46:8b:af:25:9a:e5: 4d:ce:93:ab:fb:d8:48:38:b1:7c:4b:15:36:45:cc: 9a:de:de:c7:ee:22:60:b3:55:d5:06:a8:aa:9f:6c: 78:7f:e3:8b:81:f5:b9:51:e0:ea:af:7f:35:14:88: 78:96:cb:50:63:b0:0b:6a:66:9b:a1:7a:d0:b8:31: af:02:5f:62:ad:67:13:cf:19:f2:91:57:7c:cf:8a: a3:2d:15:b2:2b:9a:a2:b7:37:44:a7:57:a2:30:8a: d6:00:6e:20:82:2b:a6:b6:20:78:1c:ac:ad:48:cf: 8a:6c:50:f1:3e:7a:e1:4a:2f:c8:be:1c:e4:cb:6f: 33:25:98:5d:b5:a0:aa:57:28:f7:e6:b4:ac:92:c9: 23:16:2d:c0:eb:01:5d:b7:2e:52:58:d4:51:80:b6: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:48:C0:A4:E0:28:5C:B3:BF:E8:94:88:A8:B6:C7:DB:43:C9:62:FE X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4a:ac:c3:e0:1a:d7:d6:14:e3:b6:35:50:62:cb:20:84:83: 63:4c:33:a7:97:c8:90:75:6f:42:d1:b6:d9:47:72:69:ae:0e: 09:10:45:9a:c7:fa:ea:2f:b6:7f:eb:73:54:31:26:ae:38:17: 27:8a:4a:0b:cd:1f:c0:98:41:ad:cb:2b:67:77:5f:60:52:ce: 28:18:db:fc:bc:fa:4c:d3:be:6e:d3:24:48:7f:80:d0:91:f6: f0:85:e3:ea:cb:f8:09:d8:af:8d:72:99:b8:8d:0c:4c:34:6d: 0d:4d:19:f9:fa:5f:57:bd:ba:29:4b:a1:6f:40:dd:67:56:90: 7b:e3:c2:02:d1:1f:37:5e:ca:68:06:e1:f4:e5:ae:a4:53:28: d5:09:f5:9c:4b:b4:0a:08:61:96:dc:39:13:b8:08:ca:64:cf: 4e:8b:ce:f4:c5:7a:d9:05:c6:9e:c5:6d:48:ab:42:6e:c4:5b: 35:d4:64:b7:ef:91:0c:92:6f:64:3f:68:1e:ae:79:33:6e:12: b2:6c:79:1d:f5:af:05:46:56:8e:23:34:a9:7d:01:86:02:0e: f3:37:b6:d6:ac:b1:bc:a7:d2:f2:fb:f0:b0:a7:a9:16:85:e2: 47:22:66:8a:49:4e:86:45:72:01:7f:ba:38:c4:cb:62:fb:c9: fc:5a:18:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwNDE1MDY0MzE2WhcNMjYwNDIyMDY0MzE2WjAYMRYwFAYD VQQDEw02OWRmMzM4NC0wOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PbAD3QrbWykQHRIurm6diEbBLAbkEI6vxKYmriLa2/OsPOImqMRepumziua mniU2EGDDlQ3lqcfDtVjiPA/oZTeUXW4RJ0jCVoluu/4r1rLkMFnIo5BLdh184iI 4GKqh39Gi68lmuVNzpOr+9hIOLF8SxU2Rcya3t7H7iJgs1XVBqiqn2x4f+OLgfW5 UeDqr381FIh4lstQY7ALamaboXrQuDGvAl9irWcTzxnykVd8z4qjLRWyK5qitzdE p1eiMIrWAG4ggiumtiB4HKytSM+KbFDxPnrhSi/Ivhzky28zJZhdtaCqVyj35rSs kskjFi3A6wFdty5SWNRRgLat3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlIwKTg KFyzv+iUiKi2x9tDyWL+MB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACEqsw+Aa19YU47Y1UGLLIISDY0wzp5fIkHVvQtG22Udyaa4OCRBFmsf66i+2 f+tzVDEmrjgXJ4pKC80fwJhBrcsrZ3dfYFLOKBjb/Lz6TNO+btMkSH+A0JH28IXj 6sv4CdivjXKZuI0MTDRtDU0Z+fpfV726KUuhb0DdZ1aQe+PCAtEfN17KaAbh9OWu pFMo1Qn1nEu0Cghhltw5E7gIymTPTovO9MV62QXGnsVtSKtCbsRbNdRkt++RDJJv ZD9oHq55M24Ssmx5HfWvBUZWjiM0qX0BhgIO8ze21qyxvKfS8vvwsKepFoXiRyJm iklOhkVyAX+6OMTLYvvJ/FoYTw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:22:30 2026 by rpki-client