$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft File: DkAOOUTvUXdtyNgbU7art55NDV4.mft (raw, json) Hash identifier: oQwLNfdd6wnoNm2fHLBIwus3pdSWPWGhoJJGtSxCdB4= Subject key identifier: 7E:F6:BC:FB:4D:66:BE:51:E6:75:A1:29:D5:BD:E8:69:0B:A3:C4:40 Authority key identifier: 0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E Certificate issuer: /CN=A9125A35/serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft Manifest number: 19 Signing time: Fri 17 Apr 2026 08:38:34 +0000 Manifest this update: Fri 17 Apr 2026 08:38:33 +0000 Manifest next update: Fri 24 Apr 2026 08:38:33 +0000 Files and hashes: 1: DkAOOUTvUXdtyNgbU7art55NDV4.crl (hash: Ypa7//S/VjyCoopiCkNBToqdRjAncl16TivZJ0zmVho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A35, serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Validity Not Before: Apr 17 08:38:33 2026 GMT Not After : Apr 24 08:38:33 2026 GMT Subject: CN=69e1f18a-6510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:81:11:6a:4c:93:c9:83:dd:dc:7c:6f:78:d0: a3:16:47:0a:ef:28:7e:60:a3:40:d3:d4:e8:ee:3b: 1e:a3:3b:90:82:10:a9:f4:7b:03:79:81:c5:18:4f: ad:bf:42:aa:e2:10:36:e5:26:df:12:c3:17:c4:ba: d9:fc:49:89:66:6e:6d:e1:c0:20:eb:a1:69:8e:c9: 3f:c6:c9:a2:7a:59:10:04:4e:01:29:58:eb:df:6f: a0:f2:7b:71:25:1b:f1:0e:05:59:7f:7c:af:7d:4a: b7:ea:8d:dd:53:de:e3:d3:c0:88:49:bc:3a:3b:f6: 2a:40:84:9c:9e:8d:5f:09:2b:9e:d3:70:1c:c9:13: d0:af:7e:99:70:35:7f:1f:99:37:ed:19:ed:73:17: 11:35:df:bc:75:eb:7e:8d:d1:ad:af:87:1c:a6:b9: 07:bd:a4:9f:7f:b1:d7:96:1f:8e:eb:7b:df:14:e6: d9:b2:5b:40:a1:fd:d1:f4:f8:44:7a:28:74:78:1b: 07:79:97:6f:97:99:26:25:0b:dd:f7:a7:a4:0a:75: fe:46:28:a4:ed:07:06:69:d0:a0:5b:37:03:87:6a: 2c:81:28:42:15:eb:73:62:34:14:64:5e:d5:10:5f: e2:b4:07:6f:51:d5:84:a3:68:54:1b:a0:e2:19:3c: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F6:BC:FB:4D:66:BE:51:E6:75:A1:29:D5:BD:E8:69:0B:A3:C4:40 X509v3 Authority Key Identifier: keyid:0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f2:62:be:0f:b2:d8:4a:06:a2:d3:ef:f4:11:6c:86:58:6a: 59:67:92:b3:23:79:6d:c3:af:35:73:a1:97:51:4c:ec:42:9e: e6:42:fc:1f:92:a7:52:2c:78:ab:a5:40:13:ba:35:5c:39:f0: bc:93:96:d9:d2:33:54:69:25:5a:b2:f5:90:c9:c1:11:8c:a9: b3:52:cf:12:b2:9d:64:4d:8b:7a:9b:24:39:4b:90:ab:25:2b: ab:79:54:86:a9:bb:a8:5d:1d:75:89:20:a1:af:63:c1:b5:f2: e8:28:61:c6:c4:a4:f1:0f:53:59:72:c6:b6:cf:2b:38:3a:d3: db:05:24:93:f5:ad:d0:33:a7:23:7a:7a:2f:31:cf:85:00:2b: 51:04:d6:15:7c:f2:10:75:63:94:3f:93:a9:09:f0:45:fd:12: 9c:b1:34:a4:28:9d:79:66:f1:f4:82:a2:09:fd:c9:d3:4c:a9: 6b:ae:9c:69:d9:f2:17:49:10:1f:a9:fa:ac:1f:c0:de:ed:4a: db:1b:f1:7f:50:c0:91:8d:8a:f6:87:33:cd:fc:6b:b7:f3:17: 49:e3:8d:f5:0c:12:1d:50:c2:01:a3:6f:34:d5:81:ba:98:d8: 2c:e0:a3:cc:9f:44:45:2c:33:22:3c:6d:6a:02:4c:2e:6e:8b: 63:09:8d:1b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUEzNTExMC8GA1UEBRMoMEU0MDBFMzk0NEVGNTE3NzZEQzhEODFCNTNCNkFCQjc5 RTREMEQ1RTAeFw0yNjA0MTcwODM4MzNaFw0yNjA0MjQwODM4MzNaMBgxFjAUBgNV BAMTDTY5ZTFmMThhLTY1MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqgRFqTJPJg93cfG940KMWRwrvKH5go0DT1OjuOx6jO5CCEKn0ewN5gcUYT62/ QqriEDblJt8SwxfEutn8SYlmbm3hwCDroWmOyT/GyaJ6WRAETgEpWOvfb6Dye3El G/EOBVl/fK99Srfqjd1T3uPTwIhJvDo79ipAhJyejV8JK57TcBzJE9CvfplwNX8f mTftGe1zFxE137x1636N0a2vhxymuQe9pJ9/sdeWH47re98U5tmyW0Ch/dH0+ER6 KHR4Gwd5l2+XmSYlC933p6QKdf5GKKTtBwZp0KBbNwOHaiyBKEIV63NiNBRkXtUQ X+K0B29R1YSjaFQboOIZPNcRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfva8+01m vlHmdaEp1b3oaQujxEAwHwYDVR0jBBgwFoAUDkAOOUTvUXdtyNgbU7art55NDV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1QTM1L0NFN0U5MUQ4MTZE MDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhkdHlOZ2JVN2FydDU1TkRW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGtBT09VVHZVWGR0eU5nYlU3YXJ0NTVORFY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 QTM1L0NFN0U5MUQ4MTZEMDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhk dHlOZ2JVN2FydDU1TkRWNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC48mK+D7LYSgai0+/0EWyGWGpZZ5KzI3ltw681c6GXUUzsQp7mQvwfkqdSLHir pUATujVcOfC8k5bZ0jNUaSVasvWQycERjKmzUs8Ssp1kTYt6myQ5S5CrJSureVSG qbuoXR11iSChr2PBtfLoKGHGxKTxD1NZcsa2zys4OtPbBSST9a3QM6cjenovMc+F ACtRBNYVfPIQdWOUP5OpCfBF/RKcsTSkKJ15ZvH0gqIJ/cnTTKlrrpxp2fIXSRAf qfqsH8De7UrbG/F/UMCRjYr2hzPN/Gu38xdJ4431DBIdUMIBo2801YG6mNgs4KPM n0RFLDMiPG1qAkwubotjCY0b -----END CERTIFICATE-----Generated at Fri Apr 17 23:29:10 2026 by rpki-client