$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: p6g8r/v7X/mMSBsR0WHr6KqGphf35hEMB4IJeHlaMBo= Subject key identifier: E2:63:3F:8E:0A:DC:B2:0B:AC:50:E2:55:31:A6:4D:42:E9:C4:A2:38 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 05F4 Signing time: Thu 16 Apr 2026 22:52:01 +0000 Manifest this update: Thu 16 Apr 2026 22:52:01 +0000 Manifest next update: Thu 23 Apr 2026 22:52:01 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: aTq88GAQcaHuUw2V/69ZxR7yOTsH2BPehqnun5VrVTA=) 2: 632B0D382CE911F189BCFB9BA3833773.roa (hash: u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Apr 16 22:52:01 2026 GMT Not After : Apr 23 22:52:01 2026 GMT Subject: CN=69e16811-33fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:52:fa:75:9d:52:a0:ae:48:39:50:7c:e8: 90:56:e0:7b:f8:51:b9:d8:f0:8d:e1:35:c8:c6:dc: d5:8a:03:77:66:3e:29:ea:f6:15:10:26:fa:8e:5b: f7:92:b7:61:22:27:3c:e7:c1:96:31:8e:c6:ae:48: 0d:f4:cc:2b:e5:34:f5:dd:c9:8f:9e:d2:fe:2e:f4: d4:6a:3e:2d:08:03:a2:ff:1b:4a:05:c4:ce:80:af: 0c:e3:b2:d6:26:1a:6a:b0:42:c4:c3:d6:28:d5:1b: ef:cc:7c:91:cf:20:82:6d:8f:4e:a6:ce:6e:4a:fa: f3:fe:0c:e7:47:0a:0f:3b:70:b6:eb:82:8e:50:f0: 15:1e:43:29:87:85:81:ae:d5:f1:57:3e:26:df:2b: eb:69:ab:6d:d8:75:93:6c:c9:a4:46:54:15:33:70: 93:3c:c6:dc:b0:4f:6a:eb:49:70:81:df:99:8f:c4: f9:69:8d:c2:66:76:89:b7:d2:73:4b:ca:d8:b4:57: a1:4c:9c:bb:f5:90:83:7e:26:cb:78:1d:04:35:bd: ce:14:a5:28:b8:aa:d3:bb:b8:32:47:3a:d1:c6:51: b6:26:83:bd:11:fc:de:d6:7e:d7:6b:bf:88:5f:f2: bc:aa:03:4d:df:28:3a:b9:34:73:f5:c8:b2:df:2c: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:63:3F:8E:0A:DC:B2:0B:AC:50:E2:55:31:A6:4D:42:E9:C4:A2:38 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:af:6e:21:88:2a:2f:41:37:6f:52:6c:e0:6f:27:bf:f5:7e: 9f:9e:24:0e:11:16:a8:4a:11:76:f6:0c:66:d5:75:02:3f:3e: 49:90:a2:45:bf:cd:b2:8e:2e:f1:99:ea:44:86:86:3c:31:01: b9:0b:1a:8a:0f:2f:db:f5:01:da:f2:6d:ba:c5:03:13:a4:10: 03:b0:d6:7c:34:51:dd:5b:c9:39:cf:5f:b0:f0:0c:54:be:d9: f2:f2:73:57:3f:01:2d:51:76:4a:51:2a:47:80:3b:c7:84:90: ce:87:b2:45:23:e5:b8:92:64:0f:82:14:c0:e4:6c:67:d2:9f: 7e:80:dd:dd:a4:48:53:81:8e:39:6f:47:8e:d0:7d:38:e7:9e: 49:3e:f7:97:d9:09:74:b1:78:67:9b:32:8a:51:fa:9f:45:4c: 48:49:de:a9:c5:b2:cd:34:27:dc:82:58:8e:f8:99:38:c6:fb: 07:94:b6:7a:9e:41:d1:30:7c:3c:44:5c:6b:98:f5:f0:f7:f8: 66:bb:e1:ad:b8:f3:2a:3e:ad:17:b1:43:ec:e9:02:b8:a1:4f: 11:f0:6a:9b:dd:13:92:fd:8e:15:eb:02:6a:c8:0c:7b:d3:d4: 70:3b:a3:d3:cb:a0:e1:e8:fe:32:26:7b:14:1a:0a:be:a0:c0: f4:65:95:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYwNDE2MjI1MjAxWhcNMjYwNDIzMjI1MjAxWjAYMRYwFAYD VQQDEw02OWUxNjgxMS0zM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9dS+nWdUqCuSDlQfOiQVuB7+FG52PCN4TXIxtzVigN3Zj4p6vYVECb6jlv3 krdhIic858GWMY7GrkgN9Mwr5TT13cmPntL+LvTUaj4tCAOi/xtKBcTOgK8M47LW JhpqsELEw9Yo1RvvzHyRzyCCbY9Ops5uSvrz/gznRwoPO3C264KOUPAVHkMph4WB rtXxVz4m3yvraatt2HWTbMmkRlQVM3CTPMbcsE9q60lwgd+Zj8T5aY3CZnaJt9Jz S8rYtFehTJy79ZCDfibLeB0ENb3OFKUouKrTu7gyRzrRxlG2JoO9Efze1n7Xa7+I X/K8qgNN3yg6uTRz9ciy3yzCPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJjP44K 3LILrFDiVTGmTULpxKI4MB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc69uIYgqL0E3b1Js4G8nv/V+n54kDhEWqEoRdvYMZtV1Aj8+SZCiRb/Nso4u 8ZnqRIaGPDEBuQsaig8v2/UB2vJtusUDE6QQA7DWfDRR3VvJOc9fsPAMVL7Z8vJz Vz8BLVF2SlEqR4A7x4SQzoeyRSPluJJkD4IUwORsZ9KffoDd3aRIU4GOOW9HjtB9 OOeeST73l9kJdLF4Z5syilH6n0VMSEneqcWyzTQn3IJYjviZOMb7B5S2ep5B0TB8 PERca5j18Pf4ZrvhrbjzKj6tF7FD7OkCuKFPEfBqm90Tkv2OFesCasgMe9PUcDuj 08ug4ej+MiZ7FBoKvqDA9GWVWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:09:58 2026 by rpki-client