$ rpki-client -vvf rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft File: DAmet3to0aLfVJLHMbZNVB9VmwI.mft (raw, json) Hash identifier: 2FV/xjeKSkMPZLFmGyVJ4QNHlx6V2ZiLFiUZPoslhIs= Subject key identifier: 4E:C8:C0:82:C6:19:60:12:69:D5:2B:7C:0D:6D:7A:60:06:B1:85:B4 Authority key identifier: 0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 Certificate issuer: /CN=A91509A4/serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Certificate serial: 03AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft Manifest number: 03A3 Signing time: Fri 17 Apr 2026 00:38:03 +0000 Manifest this update: Fri 17 Apr 2026 00:38:03 +0000 Manifest next update: Fri 24 Apr 2026 00:38:03 +0000 Files and hashes: 1: DAmet3to0aLfVJLHMbZNVB9VmwI.crl (hash: mx9T9dKjWgMV48P2AO80PSiiLmd1xcWi1NVB3+jBZf4=) 2: 32F44056DB1911EC87E56C0DC4F9AE02.roa (hash: DNHpbbH0OLt61W1/5I9yLZt1WIT0NpFfbOWathJ7PW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509A4, serialNumber=0C099EB77B68D1A2DF5492C731B64D541F559B02 Validity Not Before: Apr 17 00:38:03 2026 GMT Not After : Apr 24 00:38:03 2026 GMT Subject: CN=69e180eb-dbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:39:76:91:f2:48:35:fc:4e:ec:af:36:2e: f5:ce:bd:9a:ab:ac:70:e1:d6:bc:60:3c:e0:32:9b: 9d:8b:9b:0f:0c:eb:2d:2e:e3:53:75:b3:f7:50:0b: f9:da:96:33:3d:ea:ed:8c:8d:8f:4e:5f:f7:ce:b8: 02:c8:74:d6:36:80:d1:0e:66:94:fa:95:0d:bd:ec: aa:cd:c0:88:07:f8:dd:b5:ec:96:d8:99:a5:23:02: 99:89:bc:39:2f:b4:84:3e:d5:3a:77:3a:be:71:51: 29:39:e2:48:48:4d:6e:db:96:6d:35:55:1e:5b:4d: 30:7d:30:cf:00:d1:e4:c8:11:ed:31:6e:a3:5c:eb: 1a:3c:21:d1:fe:f8:55:f3:b7:02:65:22:07:71:27: 12:a7:49:33:1b:49:a5:ee:1b:be:f2:fc:14:9d:a2: 75:26:62:80:0e:78:7f:85:a2:b0:41:e4:56:f3:f1: 2a:2e:76:b9:30:b8:5e:82:2f:b2:8c:22:d7:99:31: 12:15:8b:74:a7:f0:9d:35:39:79:1f:af:e7:0d:0b: 06:f8:cf:87:9a:86:4a:76:21:0a:a4:ec:63:fc:29: ab:08:39:bd:2d:e8:9e:1c:81:da:59:91:5a:98:35: 7b:8d:fd:fc:98:c1:85:88:09:99:58:86:3a:2d:33: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C8:C0:82:C6:19:60:12:69:D5:2B:7C:0D:6D:7A:60:06:B1:85:B4 X509v3 Authority Key Identifier: keyid:0C:09:9E:B7:7B:68:D1:A2:DF:54:92:C7:31:B6:4D:54:1F:55:9B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAmet3to0aLfVJLHMbZNVB9VmwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91509A4/DBAB936EDA7611ECA48FFC6CC4F9AE02/DAmet3to0aLfVJLHMbZNVB9VmwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ec:53:86:07:bb:03:0c:9d:17:a1:36:cd:ad:73:94:1c:34: 26:b1:b8:a3:e3:6d:71:e6:e9:14:75:be:f8:a6:e9:e4:bd:ba: bf:6e:03:31:75:96:02:15:f9:0e:7b:8b:c7:67:ce:b4:63:4f: b5:aa:59:f4:13:69:9b:2b:37:96:35:d8:d4:dd:24:35:8b:46: 3f:9c:c2:be:0d:be:c8:a8:f5:02:49:43:ca:af:51:21:0b:89: 61:2a:57:86:00:f3:80:fa:b3:a0:ca:ac:75:87:58:29:5e:81: 86:aa:5e:a8:a2:ec:7c:c0:5b:57:c8:8d:f4:7a:8c:59:00:c7: c8:91:da:74:8b:51:8a:68:7d:5e:f2:67:33:be:f3:17:b0:8f: 0e:26:37:4b:f1:48:58:96:37:be:77:76:8a:93:cb:e8:dc:3a: 92:6a:d3:b8:6a:2b:2b:cf:6f:1d:b9:67:52:92:21:0f:1d:e1: 79:d4:c6:45:29:8e:90:9e:7a:b2:d8:5d:5e:fc:eb:d5:1a:45: f4:93:eb:94:35:0c:fa:c8:e6:2d:4b:1a:71:34:a9:a2:ee:86: ca:f0:50:18:8d:89:7c:35:82:ac:dc:cb:46:2a:62:c2:15:06: 83:7c:32:62:63:46:f4:d5:cc:90:2b:a4:63:4b:ea:75:58:3f: 9f:20:fb:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5QTQxMTAvBgNVBAUTKDBDMDk5RUI3N0I2OEQxQTJERjU0OTJDNzMxQjY0RDU0 MUY1NTlCMDIwHhcNMjYwNDE3MDAzODAzWhcNMjYwNDI0MDAzODAzWjAYMRYwFAYD VQQDEw02OWUxODBlYi1kYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcQ5dpHySDX8TuyvNi71zr2aq6xw4da8YDzgMpudi5sPDOstLuNTdbP3UAv5 2pYzPertjI2PTl/3zrgCyHTWNoDRDmaU+pUNveyqzcCIB/jdteyW2JmlIwKZibw5 L7SEPtU6dzq+cVEpOeJISE1u25ZtNVUeW00wfTDPANHkyBHtMW6jXOsaPCHR/vhV 87cCZSIHcScSp0kzG0ml7hu+8vwUnaJ1JmKADnh/haKwQeRW8/EqLna5MLhegi+y jCLXmTESFYt0p/CdNTl5H6/nDQsG+M+HmoZKdiEKpOxj/CmrCDm9LeieHIHaWZFa mDV7jf38mMGFiAmZWIY6LTOf3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7IwILG GWASadUrfA1temAGsYW0MB8GA1UdIwQYMBaAFAwJnrd7aNGi31SSxzG2TVQfVZsC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDlBNC9EQkFCOTM2RURB NzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBhTGZWSkxITWJaTlZCOVZt d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RBbWV0M3RvMGFMZlZKTEhNYlpOVkI5Vm13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDlBNC9EQkFCOTM2RURBNzYxMUVDQTQ4RkZDNkNDNEY5QUUwMi9EQW1ldDN0bzBh TGZWSkxITWJaTlZCOVZtd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO+xThge7AwydF6E2za1zlBw0JrG4o+NtcebpFHW++Kbp5L26v24DMXWWAhX5 DnuLx2fOtGNPtapZ9BNpmys3ljXY1N0kNYtGP5zCvg2+yKj1AklDyq9RIQuJYSpX hgDzgPqzoMqsdYdYKV6BhqpeqKLsfMBbV8iN9HqMWQDHyJHadItRimh9XvJnM77z F7CPDiY3S/FIWJY3vnd2ipPL6Nw6kmrTuGorK89vHblnUpIhDx3hedTGRSmOkJ56 sthdXvzr1RpF9JPrlDUM+sjmLUsacTSpou6GyvBQGI2JfDWCrNzLRipiwhUGg3wy YmNG9NXMkCukY0vqdVg/nyD7mw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:11:25 2026 by rpki-client