$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: Chg8C2D0GBFU4X220UNa+t6KeUHpbdNLTkxC4l45Kh0= Subject key identifier: EF:99:9B:FA:DE:1C:E5:FA:DF:8E:40:ED:8D:4F:87:11:25:B8:65:0A Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 8F Signing time: Fri 17 Apr 2026 07:21:10 +0000 Manifest this update: Fri 17 Apr 2026 07:21:10 +0000 Manifest next update: Fri 24 Apr 2026 07:21:10 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: /Lq6J972C98ogOH0b7dT1MpRQTB5M3Gktv7UY8z7qMM=) 2: 44C226F2A5B111F095806166C4F9AE02.roa (hash: yD8SkPkAKN5+VowUi+qJexOJ8oP+7GjQ59FL3/Sa598=) 3: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: ZfwhMy+pX5aCJlJ8qOMcY95LqfN6RcWNdworol/4Bvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Apr 17 07:21:10 2026 GMT Not After : Apr 24 07:21:10 2026 GMT Subject: CN=69e1df66-ab58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:62:56:f3:cc:82:97:43:5e:ba:3d:0b:c5: 1c:e8:58:f2:b8:fe:7c:4a:d6:ef:ca:18:d6:f3:b7: 23:eb:0a:1e:49:78:05:0c:e5:39:2d:ef:1e:ca:1e: c9:c9:88:a0:67:d2:9d:b8:d7:5d:d0:65:b3:c8:b1: 25:0a:26:67:ca:c1:b1:c6:ee:63:e0:1b:b1:11:f3: eb:6f:56:2c:da:e3:47:dc:30:c7:e9:2a:d3:04:c8: 4e:ba:34:b6:bb:e4:38:43:eb:0a:d2:54:59:a3:15: c7:d8:d3:ef:c3:48:8f:70:b5:91:9e:fa:07:6d:ae: cb:40:d8:93:7e:d3:41:08:9a:e9:b4:ab:62:51:6f: 69:41:84:04:7e:b1:b1:6e:d7:9f:8c:99:72:4f:a0: da:ff:1c:f5:b2:22:4b:79:35:b1:5c:c9:62:38:06: 9a:8a:97:5a:42:c1:51:9d:15:02:4e:9e:a4:d7:9e: 03:a4:48:f0:d9:ca:4d:b3:83:3a:03:94:75:68:3a: fa:2e:60:6f:c9:e3:ea:51:c9:bf:90:16:6d:24:38: a1:46:f3:e7:0a:a8:d8:b5:cd:b7:41:13:28:bd:c8: c5:03:78:01:55:d2:b4:4e:4d:42:8d:cc:b9:90:8f: 21:0a:63:a1:1e:f5:70:ed:80:dc:9c:ee:ed:58:90: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:99:9B:FA:DE:1C:E5:FA:DF:8E:40:ED:8D:4F:87:11:25:B8:65:0A X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bb:d3:76:09:c0:f6:5b:bf:fd:c1:45:71:7d:d2:33:3c:c4: ad:2c:58:23:38:39:b7:cb:a1:96:8d:1c:b3:ff:3b:56:31:4d: 57:46:f5:a7:5e:1e:99:d0:01:3f:5b:d1:da:99:6a:40:fb:5d: 65:ea:5c:51:dc:09:cd:ea:70:c3:bb:a0:6e:23:ff:df:3f:07: 0e:79:00:82:cd:62:51:02:04:23:c1:eb:46:b7:ba:f4:41:95: d5:df:1c:eb:5e:e4:db:fe:7c:79:5b:81:ac:94:2c:23:28:71: 4f:be:30:34:ac:47:ba:a7:0c:a4:31:45:1f:64:e5:ea:e3:0d: cf:0c:0a:a7:f0:45:6b:7f:27:46:22:d4:b7:39:c3:c7:9c:55: 78:b5:cc:4b:87:14:a8:3c:b6:fb:8f:fe:28:2e:9f:67:a0:3f: 56:42:e5:78:e1:23:5d:0d:bc:c0:e4:8d:76:a1:c4:72:44:33: 22:6c:01:dc:aa:e9:23:49:62:8b:b3:5a:91:c1:13:e9:7a:a1: c3:21:e6:2b:5e:a4:68:b6:f6:ef:cf:b6:93:38:7e:7d:32:89: 36:73:0a:96:b6:ff:a6:f9:56:90:07:7c:78:e8:6c:d6:1e:2d: 30:ec:0a:38:3c:3d:9a:4b:c7:9f:f5:a3:14:a3:1b:85:13:44: c8:11:47:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYwNDE3MDcyMTEwWhcNMjYwNDI0MDcyMTEwWjAYMRYwFAYD VQQDEw02OWUxZGY2Ni1hYjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn9iVvPMgpdDXro9C8Uc6FjyuP58StbvyhjW87cj6woeSXgFDOU5Le8eyh7J yYigZ9KduNdd0GWzyLElCiZnysGxxu5j4BuxEfPrb1Ys2uNH3DDH6SrTBMhOujS2 u+Q4Q+sK0lRZoxXH2NPvw0iPcLWRnvoHba7LQNiTftNBCJrptKtiUW9pQYQEfrGx btefjJlyT6Da/xz1siJLeTWxXMliOAaaipdaQsFRnRUCTp6k154DpEjw2cpNs4M6 A5R1aDr6LmBvyePqUcm/kBZtJDihRvPnCqjYtc23QRMovcjFA3gBVdK0Tk1Cjcy5 kI8hCmOhHvVw7YDcnO7tWJDOYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+Zm/re HOX6345A7Y1PhxEluGUKMB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FI WnU5bW12bHpVa0REaVpORmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa7vTdgnA9lu//cFFcX3SMzzErSxYIzg5t8uhlo0cs/87VjFNV0b1p14emdAB P1vR2plqQPtdZepcUdwJzepww7ugbiP/3z8HDnkAgs1iUQIEI8HrRre69EGV1d8c 617k2/58eVuBrJQsIyhxT74wNKxHuqcMpDFFH2Tl6uMNzwwKp/BFa38nRiLUtznD x5xVeLXMS4cUqDy2+4/+KC6fZ6A/VkLleOEjXQ28wOSNdqHEckQzImwB3KrpI0li i7NakcET6XqhwyHmK16kaLb278+2kzh+fTKJNnMKlrb/pvlWkAd8eOhs1h4tMOwK ODw9mkvHn/WjFKMbhRNEyBFH/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:55 2026 by rpki-client