$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json) Hash identifier: ePsvd8T1Ah80Mt6sIwTI5WiuwbD8ahe6X4vFypisjbM= Subject key identifier: 5B:4B:48:B4:72:4D:83:03:4F:78:9E:CF:3C:26:CF:43:A8:6A:C2:0A Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft Manifest number: 01B2 Signing time: Fri 17 Apr 2026 03:44:51 +0000 Manifest this update: Fri 17 Apr 2026 03:44:50 +0000 Manifest next update: Fri 24 Apr 2026 03:44:50 +0000 Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: aPx1HXt6d5fc1Dvljx99Ob5+h+l/Ai0MeI9UXlgU1Ak=) 2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: lkWBayLACrcApYQdnN1KbRgTJ81JMGh+ZFCvad/cRz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0 Validity Not Before: Apr 17 03:44:50 2026 GMT Not After : Apr 24 03:44:50 2026 GMT Subject: CN=69e1acb3-3c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:4d:89:f2:7b:d1:d8:e9:24:50:98:ad:0c: 91:fb:ab:97:9d:37:43:e4:f8:2b:70:de:36:ac:91: d4:ac:27:b7:e6:ce:84:84:26:32:d2:79:e8:49:ed: 2b:c7:9e:76:9f:7b:b7:83:cb:12:9c:98:14:10:39: b6:b7:4c:1e:c6:41:fb:9e:7b:d8:30:1a:b6:e4:b1: a1:04:81:3b:d8:e5:d3:cd:bb:7e:3c:3a:7c:91:cb: a0:31:92:01:81:b0:ce:03:33:a3:bc:ce:11:ba:79: 51:43:a2:66:81:31:f5:10:2d:50:10:18:47:55:18: 50:68:f9:bd:41:4d:ed:c8:7e:9d:ae:68:85:eb:08: 67:ff:b1:71:95:1b:be:8d:10:67:18:f4:1a:0e:ea: 81:63:c4:17:c6:51:8e:ae:11:65:e1:81:26:ae:8b: 65:1a:fe:ad:dd:60:f5:d6:1a:1f:93:db:5f:61:8c: a3:97:29:2e:27:81:c8:24:23:54:94:83:79:8c:54: ba:6e:1a:88:a3:a8:de:ae:46:1d:e2:35:57:8a:f2: 37:75:8e:ea:1a:ea:24:e8:1d:2b:2a:c7:2a:dc:ad: e9:f0:53:c9:a2:db:1d:fc:e8:20:d3:5c:6c:3c:c3: c0:03:66:e4:05:d1:fa:4c:8b:30:91:92:5a:32:b9: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4B:48:B4:72:4D:83:03:4F:78:9E:CF:3C:26:CF:43:A8:6A:C2:0A X509v3 Authority Key Identifier: keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:fa:53:61:27:7f:c1:82:c5:06:e7:90:30:22:f6:86:3e:24: 8c:f0:48:b8:d3:d8:05:54:b6:f7:90:6a:5a:a6:de:2f:5e:ea: b1:c4:9f:48:6e:1b:01:d2:ca:98:2a:4d:5e:21:e2:e2:04:01: 44:86:80:21:00:8d:53:c3:1e:e4:fb:c5:4e:85:48:47:9f:35: 9b:f7:a2:6c:97:f5:09:43:55:5c:dc:c5:28:37:e9:3e:b0:eb: 09:29:39:48:60:37:06:7b:02:a7:2f:dd:48:5a:5a:b4:d3:00: 61:39:3d:8c:42:13:34:ec:78:51:69:64:1b:6c:5e:39:38:02: 9b:ed:e5:3d:ce:40:42:49:77:9f:a6:69:32:2d:96:53:62:1d: 3e:66:b4:48:d8:24:72:36:ab:13:5e:c7:71:3d:9c:4e:5c:89: 81:cb:cb:cc:84:32:6e:bb:e3:ca:7d:39:fc:1e:d0:a9:1d:57: b1:88:79:06:d8:2a:cf:6b:c6:16:37:00:94:a0:8e:27:ca:1b: b7:30:73:f8:8d:e9:4d:cc:99:00:a3:e5:59:8c:49:3a:26:bc: 9d:27:35:1e:c9:58:b1:43:33:03:55:24:a6:9c:5c:00:eb:86: f0:18:0c:0b:69:13:98:bf:1d:55:60:3e:64:e6:a4:61:36:63: 69:c5:4e:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0MTMxMTAvBgNVBAUTKDBGOTlCMUZFQ0ZBNTcwMDRGNjQzRDgyQkY1MTFDREQ0 NzQ3ODZEQTAwHhcNMjYwNDE3MDM0NDUwWhcNMjYwNDI0MDM0NDUwWjAYMRYwFAYD VQQDEw02OWUxYWNiMy0zYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdhNifJ70djpJFCYrQyR+6uXnTdD5PgrcN42rJHUrCe35s6EhCYy0nnoSe0r x552n3u3g8sSnJgUEDm2t0wexkH7nnvYMBq25LGhBIE72OXTzbt+PDp8kcugMZIB gbDOAzOjvM4RunlRQ6JmgTH1EC1QEBhHVRhQaPm9QU3tyH6drmiF6whn/7FxlRu+ jRBnGPQaDuqBY8QXxlGOrhFl4YEmrotlGv6t3WD11hofk9tfYYyjlykuJ4HIJCNU lIN5jFS6bhqIo6jerkYd4jVXivI3dY7qGuok6B0rKscq3K3p8FPJotsd/Ogg01xs PMPAA2bkBdH6TIswkZJaMrl4uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtLSLRy TYMDT3iezzwmz0OoasIKMB8GA1UdIwQYMBaAFA+Zsf7PpXAE9kPYK/URzdR0eG2g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQxMy83NTlBRDI0Q0FC OUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNBVDJROWdyOVJITjFIUjRi YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1bXhfcy1sY0FUMlE5Z3I5UkhOMUhSNGJhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQxMy83NTlBRDI0Q0FCOUUxMUVFOTYzRDMxN0RDNEY5QUUwMi9ENW14X3MtbGNB VDJROWdyOVJITjFIUjRiYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdfpTYSd/wYLFBueQMCL2hj4kjPBIuNPYBVS295BqWqbeL17qscSfSG4bAdLK mCpNXiHi4gQBRIaAIQCNU8Me5PvFToVIR581m/eibJf1CUNVXNzFKDfpPrDrCSk5 SGA3BnsCpy/dSFpatNMAYTk9jEITNOx4UWlkG2xeOTgCm+3lPc5AQkl3n6ZpMi2W U2IdPma0SNgkcjarE17HcT2cTlyJgcvLzIQybrvjyn05/B7QqR1XsYh5Btgqz2vG FjcAlKCOJ8obtzBz+I3pTcyZAKPlWYxJOia8nSc1HslYsUMzA1UkppxcAOuG8BgM C2kTmL8dVWA+ZOakYTZjacVOeA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:53:09 2026 by rpki-client