$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json) Hash identifier: 8EOzimFppmPoAWfgkWb1auYrvhVYCjqn+MMLcdzVQfU= Subject key identifier: 45:31:E5:A7:9E:ED:0C:6D:9D:27:3C:8B:59:C1:07:DF:E5:59:AF:53 Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Certificate serial: 0AA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft Manifest number: 0A9D Signing time: Thu 16 Apr 2026 19:26:25 +0000 Manifest this update: Thu 16 Apr 2026 19:26:25 +0000 Manifest next update: Thu 23 Apr 2026 19:26:25 +0000 Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: +XO6zdh1uu7OQtsvK9pqfoi07lKJDc9rMeW2N6aH6eQ=) 2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: ISmZrMAJhwcmsro9bEaqHnNsjBknpoO3JY21muedtdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:26:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2728 (0xaa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Validity Not Before: Apr 16 19:26:25 2026 GMT Not After : Apr 23 19:26:25 2026 GMT Subject: CN=69e137e1-eb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:99:af:44:f8:f8:ec:ff:87:b4:81:5b:11:c4: 59:f8:42:be:e8:f7:a6:ce:86:0a:28:74:f5:6f:85: ea:2a:1d:11:1e:c8:4d:ee:2a:ff:b1:f2:24:4d:89: fb:b9:f3:d8:03:e9:e0:fd:ea:54:fa:f7:20:85:89: 8a:18:83:5c:0c:5b:0e:67:6d:b9:19:7c:3d:8b:54: d0:f2:2e:2c:e3:1e:b6:97:f4:9d:16:eb:f4:b2:ba: ce:78:31:68:d6:75:74:46:7d:c9:87:b3:c9:31:0a: 40:ab:57:a8:bf:a0:93:08:90:0c:1e:9e:e7:55:b8: 91:ea:b9:41:c2:7b:a2:c9:47:55:39:64:ff:d8:d0: 1d:ba:f1:12:97:da:d0:6c:76:00:07:40:75:c8:dd: 08:d5:b2:76:2f:2f:95:33:80:38:37:1b:54:b3:bd: 66:66:7c:9a:df:9b:11:9f:8f:e2:7a:4e:e3:c6:5d: 7a:bc:7b:3c:eb:b1:e2:9d:58:61:19:21:cd:28:01: ef:b9:33:33:8c:6d:b1:e7:51:41:86:21:ed:4d:75: 83:7e:cd:dc:d4:17:83:e9:78:b1:bd:29:47:79:bc: 52:d7:ac:86:76:da:85:73:bf:c4:43:8c:e2:b7:bb: 99:e8:17:c5:ac:41:1e:b4:ad:ab:80:70:10:97:5b: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:E5:A7:9E:ED:0C:6D:9D:27:3C:8B:59:C1:07:DF:E5:59:AF:53 X509v3 Authority Key Identifier: keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:96:fc:bc:6e:9e:13:d4:99:51:b7:46:6a:fb:1d:17:b0:43: a6:5a:6e:0b:ab:2f:d6:05:bc:38:3f:14:12:3d:40:47:3a:7b: 56:03:8f:ad:6f:b3:01:82:97:de:87:69:8e:56:99:b8:e8:79: 3d:5b:49:67:e2:90:fb:b9:78:b5:b4:86:b7:ba:60:0b:2d:7c: b6:6c:a0:6e:26:4f:3c:03:61:1f:5c:b8:8a:11:14:1a:40:21: 02:af:fe:32:ce:82:51:23:e2:da:a0:56:cc:ab:e1:54:f1:2b: b7:f9:5b:9f:86:9c:aa:fc:1e:90:10:93:5c:39:0f:0e:fe:b6: 92:34:ba:f1:0f:af:3b:e1:85:9e:15:c1:cd:41:90:ab:89:80: 27:d3:46:e4:ed:1d:c4:94:4a:7c:07:97:46:d3:b1:25:b0:e8: 25:ae:27:fd:a7:60:49:55:b1:4d:a1:29:8d:22:6a:cd:41:9f: eb:4f:42:70:c2:e3:9f:b4:9d:9d:3c:ba:33:e5:f3:dc:a3:ed: d1:e3:a1:7d:c0:d3:a4:94:f7:58:77:24:9e:bb:0c:87:aa:72: 3d:6c:bf:a4:6b:6e:32:ec:74:70:00:80:97:fa:56:0a:cb:25: 62:64:e5:18:74:fb:0e:83:56:b6:79:a0:c1:d1:42:60:97:f8: 57:3a:22:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1 NjlGNTM4M0UwHhcNMjYwNDE2MTkyNjI1WhcNMjYwNDIzMTkyNjI1WjAYMRYwFAYD VQQDEw02OWUxMzdlMS1lYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopmvRPj47P+HtIFbEcRZ+EK+6PemzoYKKHT1b4XqKh0RHshN7ir/sfIkTYn7 ufPYA+ng/epU+vcghYmKGINcDFsOZ225GXw9i1TQ8i4s4x62l/SdFuv0srrOeDFo 1nV0Rn3Jh7PJMQpAq1eov6CTCJAMHp7nVbiR6rlBwnuiyUdVOWT/2NAduvESl9rQ bHYAB0B1yN0I1bJ2Ly+VM4A4NxtUs71mZnya35sRn4/iek7jxl16vHs867HinVhh GSHNKAHvuTMzjG2x51FBhiHtTXWDfs3c1BeD6XixvSlHebxS16yGdtqFc7/EQ4zi t7uZ6BfFrEEetK2rgHAQl1s41QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUx5aee 7QxtnSc8i1nBB9/lWa9TMB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5 MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkUzMS9BQjc5NTZENDc5MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1Y Y1JUbTFHV3dwdlZXbjFPRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAepb8vG6eE9SZUbdGavsdF7BDplpuC6sv1gW8OD8UEj1ARzp7VgOPrW+zAYKX 3odpjlaZuOh5PVtJZ+KQ+7l4tbSGt7pgCy18tmygbiZPPANhH1y4ihEUGkAhAq/+ Ms6CUSPi2qBWzKvhVPErt/lbn4acqvwekBCTXDkPDv62kjS68Q+vO+GFnhXBzUGQ q4mAJ9NG5O0dxJRKfAeXRtOxJbDoJa4n/adgSVWxTaEpjSJqzUGf609CcMLjn7Sd nTy6M+Xz3KPt0eOhfcDTpJT3WHcknrsMh6pyPWy/pGtuMux0cACAl/pWCsslYmTl GHT7DoNWtnmgwdFCYJf4VzoicA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:04:42 2026 by rpki-client