$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json) Hash identifier: SDRiahOKW72uvRyPNgDckIuPU3NGO5k2Atu7eP2bfio= Subject key identifier: 5A:B9:93:45:24:AA:64:99:36:A0:81:26:12:60:D9:9B:A7:13:BF:37 Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft Manifest number: 0AED Signing time: Sun 20 Sep 2026 19:19:27 +0000 Manifest this update: Sun 20 Sep 2026 19:19:26 +0000 Manifest next update: Sun 27 Sep 2026 19:19:26 +0000 Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: 8hueaXYbWce0bYJKYSDnfQce0ZheZ7jxDd8LvxmZC4A=) 2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: ISmZrMAJhwcmsro9bEaqHnNsjBknpoO3JY21muedtdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Validity Not Before: Sep 20 19:19:26 2026 GMT Not After : Sep 27 19:19:26 2026 GMT Subject: CN=6ab031bf-f133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:d9:d9:db:80:88:b5:3f:80:32:7b:f7:a4: 3d:58:e4:d3:24:22:cf:87:5e:1e:46:de:9d:0e:bd: 83:20:9a:4d:5a:50:26:68:ce:c1:33:f3:52:1b:2d: 32:fb:76:6e:f8:08:88:f0:8a:52:e6:c8:71:7c:ff: 34:82:a5:b0:f8:b6:ce:f5:87:f1:71:7f:4e:d8:ff: 62:be:a8:3b:dc:34:1d:d5:75:25:82:d7:d1:84:95: bb:e2:0b:0a:41:15:0a:57:59:28:58:5f:c0:97:89: e1:41:81:ef:eb:50:e6:58:46:f8:4d:c0:d9:84:1d: ab:1c:b6:f5:1b:21:6e:37:80:90:48:7f:23:0a:71: 6e:9c:49:15:c6:15:31:c4:ca:58:7c:b9:7d:c7:e1: 35:0a:0f:4c:7f:cd:89:23:91:12:d1:df:c5:9d:23: 1c:3f:21:10:2b:8e:ee:ed:d4:b8:48:90:b4:45:6b: b9:f9:c0:a3:45:1d:9f:dc:ba:20:9d:26:19:34:5a: 84:df:e4:6b:5e:e1:bd:99:91:c7:11:ec:01:d3:5d: a0:94:2e:cc:45:28:5c:84:6f:93:42:f8:a1:5c:1d: ac:f3:51:b8:93:c9:5d:6f:23:61:f0:22:0e:7b:30: c7:c6:55:d3:30:25:85:b2:20:aa:6e:3f:bd:95:b2: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B9:93:45:24:AA:64:99:36:A0:81:26:12:60:D9:9B:A7:13:BF:37 X509v3 Authority Key Identifier: keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ba:48:00:de:61:54:14:c1:dc:f2:7d:dc:6a:60:aa:bf:b2: ea:ce:58:b1:c3:5c:6a:20:fa:90:38:1e:8e:dd:46:64:aa:a2: 3d:8a:7c:d2:eb:52:01:56:19:3c:23:fc:b2:14:f2:18:ee:dd: 2f:d5:6d:1b:c8:c2:90:df:47:f8:bd:a8:92:63:45:90:e7:9e: 55:50:72:95:df:82:cd:3a:4c:44:54:3a:31:5f:db:09:d1:f6: 83:b5:c2:02:4a:65:8b:7c:0f:34:90:a4:5f:db:90:bf:cc:2a: 31:84:16:51:c4:64:de:1d:03:f0:cd:a5:ba:eb:71:32:9f:55: d1:33:07:47:95:ae:bd:a4:3e:b4:ca:42:6a:2e:b9:cb:50:a5: 2e:96:46:17:ac:0f:60:87:f2:54:66:9a:c3:3f:a1:44:4f:ad: cf:44:d3:cc:1d:ee:82:dd:78:cb:a8:50:93:8d:7f:1f:1e:63: 94:5e:46:e0:30:89:40:aa:26:3d:0a:5f:90:e2:1c:6c:35:c4: 4f:70:ef:4c:19:8d:b1:78:f5:27:65:57:84:2b:26:1a:78:3d: 76:29:0f:f8:67:6e:8c:b4:73:9e:a6:10:ae:33:b0:75:ac:76: 36:5d:96:24:bc:e8:f6:44:93:64:c6:f2:67:06:87:35:15:63: 1c:fc:3b:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1 NjlGNTM4M0UwHhcNMjYwOTIwMTkxOTI2WhcNMjYwOTI3MTkxOTI2WjAYMRYwFAYD VQQDEw02YWIwMzFiZi1mMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qvZ2duAiLU/gDJ796Q9WOTTJCLPh14eRt6dDr2DIJpNWlAmaM7BM/NSGy0y +3Zu+AiI8IpS5shxfP80gqWw+LbO9YfxcX9O2P9ivqg73DQd1XUlgtfRhJW74gsK QRUKV1koWF/Al4nhQYHv61DmWEb4TcDZhB2rHLb1GyFuN4CQSH8jCnFunEkVxhUx xMpYfLl9x+E1Cg9Mf82JI5ES0d/FnSMcPyEQK47u7dS4SJC0RWu5+cCjRR2f3Log nSYZNFqE3+RrXuG9mZHHEewB012glC7MRShchG+TQvihXB2s81G4k8ldbyNh8CIO ezDHxlXTMCWFsiCqbj+9lbJR7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFq5k0Uk qmSZNqCBJhJg2ZunE783MB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5 MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkUzMS9BQjc5NTZENDc5MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1Y Y1JUbTFHV3dwdlZXbjFPRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLpIAN5hVBTB3PJ93Gpgqr+y6s5YscNcaiD6kDgejt1GZKqiPYp80utSAVYZ PCP8shTyGO7dL9VtG8jCkN9H+L2okmNFkOeeVVByld+CzTpMRFQ6MV/bCdH2g7XC Akpli3wPNJCkX9uQv8wqMYQWUcRk3h0D8M2luutxMp9V0TMHR5WuvaQ+tMpCai65 y1ClLpZGF6wPYIfyVGaawz+hRE+tz0TTzB3ugt14y6hQk41/Hx5jlF5G4DCJQKom PQpfkOIcbDXET3DvTBmNsXj1J2VXhCsmGng9dikP+GdujLRznqYQrjOwdax2Nl2W JLzo9kSTZMbyZwaHNRVjHPw7rA== -----END CERTIFICATE-----Generated at Tue Sep 22 01:33:10 2026 by rpki-client