$ rpki-client -vvvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft File: DPzMWYD1fmvITfEbTFcZNdJdrMo.mft (raw, json) Hash identifier: heNfvWu8xYC7czoX4YsZPBPn8a5vDNTF8ZXvECAseEo= Subject key identifier: 36:DB:D2:17:1A:F9:11:DC:31:64:1D:8F:2D:70:44:63:D0:EE:AF:F9 Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft Manifest number: 1637 Signing time: Sun 20 Sep 2026 19:08:15 +0000 Manifest this update: Sun 20 Sep 2026 19:08:14 +0000 Manifest next update: Sun 27 Sep 2026 19:08:14 +0000 Files and hashes: 1: DPzMWYD1fmvITfEbTFcZNdJdrMo.crl (hash: gYanELb9ka5kbhbixFGAQu42jPAgc2y4MMtCTGZE6IU=) 2: CB04F4409BE611EF8AFF947CC4F9AE02.roa (hash: be575fG+iblag7YB0IV4I9E1dYSZltWkgSJOsEAQvSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: Sep 20 19:08:14 2026 GMT Not After : Sep 27 19:08:14 2026 GMT Subject: CN=6ab02f1f-3d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:ef:04:39:48:e7:b8:14:41:9d:9c:b5:28: db:8d:0e:bb:88:13:7d:f1:4f:0a:e2:d6:bd:bf:c9: f4:02:d6:d4:44:cd:44:f8:aa:c0:f9:35:76:f3:3b: 21:9f:63:57:e3:af:cf:b1:8d:7a:a9:3b:3c:5f:5a: 61:14:03:ef:2c:6d:11:60:a5:fe:99:14:c9:c0:d4: 78:02:bb:4c:bf:4e:f5:36:1c:35:b3:eb:07:f3:0e: 05:1b:96:b2:45:da:89:3c:af:bb:93:8f:70:ed:62: 86:24:8d:5d:39:d2:96:7a:39:56:46:9e:d3:b6:e2: 8b:e9:a2:41:c7:1e:da:1e:a5:a8:45:cc:6a:51:af: 45:31:7a:41:aa:89:ad:69:8b:29:31:77:cf:93:48: cc:06:38:5a:65:bb:7e:2c:72:7a:b7:98:1f:5c:6e: 2a:34:21:72:aa:f8:fa:7a:4e:8e:49:b8:12:c7:51: 2f:9a:53:3e:3a:e5:ee:56:f4:06:d7:d4:f0:a0:04: 15:05:9b:d7:32:a6:ad:94:7f:eb:c9:5e:61:fd:56: 8b:d7:1f:16:c3:3f:46:2e:46:86:d0:18:50:0b:d1: 4b:dd:5f:56:b7:7f:af:dc:13:97:1e:60:13:28:f1: 4a:db:36:4d:9d:9d:21:ad:23:9b:4d:9c:eb:64:a5: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DB:D2:17:1A:F9:11:DC:31:64:1D:8F:2D:70:44:63:D0:EE:AF:F9 X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:42:e3:b7:62:3a:e2:87:5b:1c:b2:4d:5f:74:8c:4b:e8:86: 92:7b:60:d3:db:ed:5d:e5:a6:7a:4f:2c:44:6d:5e:3e:f5:fa: 78:6a:13:9e:df:65:3e:4d:9e:ae:13:ed:3f:39:2a:bc:96:3e: db:30:65:9c:bc:4f:a3:cd:b7:4d:c6:c9:b3:87:52:2e:ee:66: a6:7e:73:a5:c3:1d:0b:93:a0:b0:e8:c6:c0:ea:d2:04:e2:44: 44:98:79:e5:5a:33:78:3c:b5:d3:86:41:9a:fe:d4:c3:e7:bf: 04:a4:b2:08:05:f4:64:b3:db:94:b3:c3:c0:bf:7a:69:65:99: 0c:4a:8e:1b:11:6c:34:57:1b:cc:9f:62:c8:05:fa:30:20:89: 39:6f:1c:f6:90:3f:05:1d:af:85:b5:e7:9d:c6:9b:fa:5e:f6: da:00:f4:62:09:17:ba:ac:31:3a:fb:3b:4e:31:6d:b8:7b:67: 44:dd:f7:a8:9a:83:2e:4b:48:e1:70:e5:54:00:6d:5f:78:43: 92:34:76:6c:60:db:bc:53:e9:a8:5e:97:0d:e1:45:d9:15:ef: db:26:14:09:98:6a:58:04:73:34:32:b6:08:ef:93:22:0c:89: 5f:27:0a:77:f9:97:e7:e5:b1:f2:52:b6:25:bd:e7:fc:65:9a: d4:07:bf:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDBDRkNDQzU5ODBGNTdFNkJDODRERjExQjRDNTcxOTM1 RDI1REFDQ0EwHhcNMjYwOTIwMTkwODE0WhcNMjYwOTI3MTkwODE0WjAYMRYwFAYD VQQDEw02YWIwMmYxZi0zZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfLvBDlI57gUQZ2ctSjbjQ67iBN98U8K4ta9v8n0AtbURM1E+KrA+TV28zsh n2NX46/PsY16qTs8X1phFAPvLG0RYKX+mRTJwNR4ArtMv071Nhw1s+sH8w4FG5ay RdqJPK+7k49w7WKGJI1dOdKWejlWRp7TtuKL6aJBxx7aHqWoRcxqUa9FMXpBqomt aYspMXfPk0jMBjhaZbt+LHJ6t5gfXG4qNCFyqvj6ek6OSbgSx1EvmlM+OuXuVvQG 19TwoAQVBZvXMqatlH/ryV5h/VaL1x8Wwz9GLkaG0BhQC9FL3V9Wt3+v3BOXHmAT KPFK2zZNnZ0hrSObTZzrZKXvqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbb0hca +RHcMWQdjy1wRGPQ7q/5MB8GA1UdIwQYMBaAFAz8zFmA9X5ryE3xG0xXGTXSXazK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZtdklUZkViVEZjWk5kSmRy TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZt dklUZkViVEZjWk5kSmRyTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWULjt2I64odbHLJNX3SMS+iGkntg09vtXeWmek8sRG1ePvX6eGoTnt9lPk2e rhPtPzkqvJY+2zBlnLxPo823TcbJs4dSLu5mpn5zpcMdC5OgsOjGwOrSBOJERJh5 5VozeDy104ZBmv7Uw+e/BKSyCAX0ZLPblLPDwL96aWWZDEqOGxFsNFcbzJ9iyAX6 MCCJOW8c9pA/BR2vhbXnncab+l722gD0YgkXuqwxOvs7TjFtuHtnRN33qJqDLktI 4XDlVABtX3hDkjR2bGDbvFPpqF6XDeFF2RXv2yYUCZhqWARzNDK2CO+TIgyJXycK d/mX5+Wx8lK2Jb3n/GWa1Ae/iw== -----END CERTIFICATE-----Generated at Mon Sep 21 19:49:43 2026 by rpki-client