$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: 7Knhh8X0fZ+QY/Glnq8RSlta8+yvaFz0tH887v8SNs0= Subject key identifier: DD:3B:CA:03:15:4A:0E:39:31:D7:3E:24:84:3C:EB:7D:06:6A:6A:67 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: AF Signing time: Thu 11 Jun 2026 09:37:36 +0000 Manifest this update: Thu 11 Jun 2026 09:37:35 +0000 Manifest next update: Thu 18 Jun 2026 09:37:35 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: l1p0jkRYhJ7n80gqfnmHp/Gxrs+ypoMXqi1vBHpHNyg=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: TNUwtV0t4ai+a9xbPAIji0Ma5LkcWxhYEVa6y6wNlPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 09:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Jun 11 09:37:35 2026 GMT Not After : Jun 18 09:37:35 2026 GMT Subject: CN=6a2a81df-f881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:e9:66:b2:de:c7:28:39:90:f7:2f:ac:07: ea:11:b6:53:16:f6:b9:60:d8:8f:75:84:40:9b:2f: 7b:c5:03:2c:d0:72:cb:db:7b:53:5a:06:db:c2:9a: 96:92:41:3e:b4:85:0f:7d:5c:90:49:14:a7:76:7f: cb:6b:97:8f:a9:ba:04:24:0e:69:7f:62:bc:96:ed: 44:56:c4:f4:b1:76:5e:37:7d:0c:a1:73:6e:96:89: 39:a3:40:e2:3d:ab:97:ee:87:42:e6:0f:ce:12:07: 25:5c:ce:7b:e6:5d:21:9d:d8:bf:80:aa:e5:55:6c: 42:ee:2b:57:af:04:51:45:09:96:2d:ac:60:c3:61: 66:ee:ac:67:ae:53:8d:55:2d:42:b9:3f:e0:9d:ba: ef:bc:55:60:7d:2f:5f:eb:a0:e7:19:34:65:b3:7a: 05:4b:74:6c:fc:90:6f:c9:6d:38:13:92:97:17:25: 00:b2:30:ec:72:8f:ee:9f:96:b6:ab:96:64:67:77: fe:b3:01:23:88:11:97:8d:60:d7:db:a8:80:d1:08: 2d:d4:30:b1:f8:45:ff:77:74:21:bb:4d:4f:33:7f: 8e:cd:31:cf:e9:6d:c8:5f:3d:87:b9:5f:9f:f3:90: 7d:24:ec:cc:a6:11:5c:26:17:29:78:13:ce:f2:27: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3B:CA:03:15:4A:0E:39:31:D7:3E:24:84:3C:EB:7D:06:6A:6A:67 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7b:a3:84:b0:dc:c1:67:54:13:fa:09:46:77:50:02:65:9f: cb:74:bf:8b:0c:07:3d:84:89:8f:85:de:30:0b:f8:41:f4:f5: b7:48:60:0d:de:17:44:ba:93:23:72:e3:34:a1:22:c5:37:03: ac:c2:77:ba:9f:3f:75:89:d6:d5:cc:09:8a:c9:a4:8d:73:f1: 4b:7a:94:f2:1d:9c:e4:ff:78:37:4f:0c:d1:f5:64:08:f6:98: a3:39:55:ae:bf:6e:b4:89:43:8f:20:ce:3f:9a:d0:7c:f6:99: ab:95:c6:90:19:d1:b7:34:9b:91:96:dc:1d:f9:68:c8:e4:66: fa:0d:09:30:b1:6f:bc:83:85:f8:51:4c:31:85:8a:8c:ac:5e: d3:26:b8:c7:2e:9f:98:8f:f3:6e:bd:bb:29:3c:c3:b0:52:e2: d3:90:b8:5a:95:9a:3d:1f:f8:1f:b9:bb:7c:07:27:53:5d:c3: 78:62:45:e9:c3:1e:8e:aa:01:86:15:d7:48:1c:ba:18:6b:47: 54:18:3c:86:d5:c7:aa:c5:aa:c3:b3:b0:f7:cd:94:ef:e4:8e: cc:be:f1:f5:ba:a2:e7:77:42:29:f9:c0:1a:72:99:3e:f6:f4: ed:c8:f1:00:21:6b:ad:f9:f3:94:e7:3a:39:20:e8:31:01:50: a7:05:3f:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYwNjExMDkzNzM1WhcNMjYwNjE4MDkzNzM1WjAYMRYwFAYD VQQDEw02YTJhODFkZi1mODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9HpZrLexyg5kPcvrAfqEbZTFva5YNiPdYRAmy97xQMs0HLL23tTWgbbwpqW kkE+tIUPfVyQSRSndn/La5ePqboEJA5pf2K8lu1EVsT0sXZeN30MoXNulok5o0Di PauX7odC5g/OEgclXM575l0hndi/gKrlVWxC7itXrwRRRQmWLaxgw2Fm7qxnrlON VS1CuT/gnbrvvFVgfS9f66DnGTRls3oFS3Rs/JBvyW04E5KXFyUAsjDsco/un5a2 q5ZkZ3f+swEjiBGXjWDX26iA0Qgt1DCx+EX/d3Qhu01PM3+OzTHP6W3IXz2HuV+f 85B9JOzMphFcJhcpeBPO8idkFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN07ygMV Sg45Mdc+JIQ8630GampnMB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FI WnU5bW12bHpVa0REaVpORmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKnujhLDcwWdUE/oJRndQAmWfy3S/iwwHPYSJj4XeMAv4QfT1t0hgDd4XRLqT I3LjNKEixTcDrMJ3up8/dYnW1cwJismkjXPxS3qU8h2c5P94N08M0fVkCPaYozlV rr9utIlDjyDOP5rQfPaZq5XGkBnRtzSbkZbcHfloyORm+g0JMLFvvIOF+FFMMYWK jKxe0ya4xy6fmI/zbr27KTzDsFLi05C4WpWaPR/4H7m7fAcnU13DeGJF6cMejqoB hhXXSBy6GGtHVBg8htXHqsWqw7Ow982U7+SOzL7x9bqi53dCKfnAGnKZPvb07cjx ACFrrfnzlOc6OSDoMQFQpwU/8g== -----END CERTIFICATE-----Generated at Sat Jun 13 07:31:29 2026 by rpki-client