$ rpki-client -vvf rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft File: dDFnWL6MokPEalI5oF7P8EkIOTc.mft (raw, json) Hash identifier: T6h2Bt27A0Kxl4s3kSPXFJWRkiVwPRHogSAXmX1BuFE= Subject key identifier: E2:F4:6F:AB:FD:7C:67:3B:EB:8C:5F:49:CF:90:73:A0:10:1D:C3:AC Authority key identifier: 74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37 Certificate issuer: /CN=A91968B6/serialNumber=74316758BE8CA243C46A5239A05ECFF049083937 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft Manifest number: 2F Signing time: Wed 15 Apr 2026 08:17:30 +0000 Manifest this update: Wed 15 Apr 2026 08:17:30 +0000 Manifest next update: Wed 22 Apr 2026 08:17:30 +0000 Files and hashes: 1: dDFnWL6MokPEalI5oF7P8EkIOTc.crl (hash: m+/CJM3G3hLUy88xKGppYn4ISRShK5BC8ggHwIeObRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91968B6, serialNumber=74316758BE8CA243C46A5239A05ECFF049083937 Validity Not Before: Apr 15 08:17:30 2026 GMT Not After : Apr 22 08:17:30 2026 GMT Subject: CN=69df499a-f7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9f:36:3c:f5:4e:f9:c4:6e:7a:47:ae:69:e2: 2a:4b:6c:9d:75:8a:e2:6c:2d:8e:dc:d5:3a:16:5d: 5b:f4:36:e2:63:5f:b4:73:31:04:c0:6e:e4:10:75: e9:d4:52:aa:e4:fa:b4:ef:3d:1a:5c:c3:b2:c2:74: a6:fa:4d:0d:d3:07:e9:9e:ab:32:70:26:63:37:54: 1c:f5:39:93:ec:21:87:c5:4e:9c:98:53:2b:df:75: 09:c2:93:9a:ff:51:e2:ee:7c:30:01:6a:c7:8b:4d: 6e:10:d2:8a:33:65:77:76:73:ce:a8:8a:90:be:05: e9:14:3c:2d:46:11:05:8f:15:2e:c4:90:ec:41:b3: 71:f6:76:15:b7:86:3b:7d:43:c8:bb:29:a6:3c:50: 94:29:52:1b:94:4c:b1:67:58:67:fa:c1:32:0c:19: ba:6d:42:99:e2:19:68:80:2f:48:0b:26:04:be:f8: 37:bd:8f:fe:89:b8:de:fb:08:44:88:06:40:11:5b: f3:9b:29:73:e7:61:d9:61:b0:d7:f6:18:36:ea:7b: 4b:8e:0d:c8:9e:ff:b1:90:97:93:50:07:4b:28:90: 95:59:44:02:04:0b:a3:ff:2a:c7:f2:d8:7b:ce:39: 33:e0:96:48:8b:cd:5f:80:e8:3e:31:4d:5b:5f:6b: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F4:6F:AB:FD:7C:67:3B:EB:8C:5F:49:CF:90:73:A0:10:1D:C3:AC X509v3 Authority Key Identifier: keyid:74:31:67:58:BE:8C:A2:43:C4:6A:52:39:A0:5E:CF:F0:49:08:39:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dDFnWL6MokPEalI5oF7P8EkIOTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91968B6/9439B9AEFB2711F093045E073B6F56BC/dDFnWL6MokPEalI5oF7P8EkIOTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fb:f9:c3:09:1e:35:eb:9a:8d:b9:0f:32:5b:be:02:73:da: 7f:3f:4a:02:6d:68:88:e7:d1:87:84:24:c8:68:78:0b:9f:f0: 4b:8c:73:77:8f:0e:f4:0b:2f:d1:be:bf:3d:a4:e8:2b:ea:37: f1:db:09:4a:de:27:9b:eb:ed:9c:b6:15:41:c2:f6:0a:f3:1e: 20:fc:b7:55:40:24:ff:58:6e:cb:fd:81:76:06:c1:a0:8b:b1: 1b:81:d4:f5:df:59:19:91:97:bc:83:8f:70:45:e3:f0:9e:71: f1:ae:ad:7d:20:5a:c0:38:d5:6f:0b:29:3a:f5:59:07:0e:d3: 28:7a:e7:70:88:c6:d1:23:e1:ca:11:c4:4c:e9:93:69:33:a1: 80:a2:14:9f:70:f8:66:1a:d8:9d:c0:e1:0d:f0:a6:78:43:2a: 49:3d:b4:60:37:75:04:02:9d:d4:ac:ca:e4:65:dd:95:cb:83: 0a:b7:bc:55:cb:1a:8f:0f:30:ef:2b:01:17:b5:cb:28:a4:84: af:dd:5d:ec:0e:93:9a:a0:39:01:c7:0e:1c:1f:fa:35:c2:1e: 77:ed:c6:79:07:8c:39:c7:c1:40:43:ee:08:39:f1:59:c1:0e: ed:bc:60:80:62:25:89:14:49:9c:ac:60:2c:82:f2:a8:c9:c2: 0d:71:76:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NjhCNjExMC8GA1UEBRMoNzQzMTY3NThCRThDQTI0M0M0NkE1MjM5QTA1RUNGRjA0 OTA4MzkzNzAeFw0yNjA0MTUwODE3MzBaFw0yNjA0MjIwODE3MzBaMBgxFjAUBgNV BAMTDTY5ZGY0OTlhLWY3ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqnzY89U75xG56R65p4ipLbJ11iuJsLY7c1ToWXVv0NuJjX7RzMQTAbuQQdenU Uqrk+rTvPRpcw7LCdKb6TQ3TB+meqzJwJmM3VBz1OZPsIYfFTpyYUyvfdQnCk5r/ UeLufDABaseLTW4Q0oozZXd2c86oipC+BekUPC1GEQWPFS7EkOxBs3H2dhW3hjt9 Q8i7KaY8UJQpUhuUTLFnWGf6wTIMGbptQpniGWiAL0gLJgS++De9j/6JuN77CESI BkARW/ObKXPnYdlhsNf2GDbqe0uODcie/7GQl5NQB0sokJVZRAIEC6P/Ksfy2HvO OTPglkiLzV+A6D4xTVtfa3eNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4vRvq/18 ZzvrjF9Jz5BzoBAdw6wwHwYDVR0jBBgwFoAUdDFnWL6MokPEalI5oF7P8EkIOTcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2OEI2Lzk0MzlCOUFFRkIy NzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQRWFsSTVvRjdQOEVrSU9U Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZERGbldMNk1va1BFYWxJNW9GN1A4RWtJT1RjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 OEI2Lzk0MzlCOUFFRkIyNzExRjA5MzA0NUUwNzNCNkY1NkJDL2RERm5XTDZNb2tQ RWFsSTVvRjdQOEVrSU9UYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8+/nDCR4165qNuQ8yW74Cc9p/P0oCbWiI59GHhCTIaHgLn/BLjHN3jw70Cy/R vr89pOgr6jfx2wlK3ieb6+2cthVBwvYK8x4g/LdVQCT/WG7L/YF2BsGgi7EbgdT1 31kZkZe8g49wRePwnnHxrq19IFrAONVvCyk69VkHDtMoeudwiMbRI+HKEcRM6ZNp M6GAohSfcPhmGtidwOEN8KZ4QypJPbRgN3UEAp3UrMrkZd2Vy4MKt7xVyxqPDzDv KwEXtcsopISv3V3sDpOaoDkBxw4cH/o1wh537cZ5B4w5x8FAQ+4IOfFZwQ7tvGCA YiWJFEmcrGAsgvKoycINcXaX -----END CERTIFICATE-----Generated at Fri Apr 17 10:05:57 2026 by rpki-client