$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: uaTXAw6bZPF/8U0rfpQW+xn9xEWW74K0d789IX1o+m8= Subject key identifier: 40:22:6D:70:BF:92:5A:AE:6B:7D:63:5F:F8:AC:AC:36:ED:17:87:A3 Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: D8 Signing time: Fri 17 Apr 2026 06:21:05 +0000 Manifest this update: Fri 17 Apr 2026 06:21:05 +0000 Manifest next update: Fri 24 Apr 2026 06:21:05 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: W2fZslcm1fFFPx7O4r0XjntHacvBGVfxdipwurYXRF4=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: xU7kwYs59YnLCTdqLFIu2qc0IllPQRF7pPQXAgvdANE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: Apr 17 06:21:05 2026 GMT Not After : Apr 24 06:21:05 2026 GMT Subject: CN=69e1d151-d1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3f:17:3b:a9:ed:d0:09:d4:64:92:4e:d1:95: 60:ef:96:cb:50:6a:70:0f:88:59:c2:4a:aa:69:d3: 73:9e:57:4c:04:6b:00:fe:f0:ed:80:8c:39:56:c3: 7a:8b:40:8c:25:b7:30:c6:96:35:eb:fc:bf:2e:c9: b5:7a:ae:60:eb:f4:8c:53:f4:ff:9a:4e:11:9a:e4: 6c:fd:9d:1d:d5:c2:83:bf:88:68:e4:8d:05:88:f5: f7:c5:89:60:99:7f:c7:9e:c7:11:5e:c2:3f:46:2f: ea:32:31:a5:c8:5c:90:38:31:3f:60:5f:86:db:79: 53:49:51:81:24:85:9a:51:0f:d8:dc:89:45:8c:55: f0:ce:00:13:b2:7d:99:a3:2b:db:ac:a0:4c:11:5a: 4f:e7:30:a1:65:95:aa:4c:06:66:5c:6c:48:78:51: 37:f3:ba:2b:c7:2c:af:a6:32:20:b9:ad:15:df:b7: 4c:74:2f:d7:57:57:36:b3:5c:60:ff:68:af:80:3a: cb:d9:73:a6:38:1e:18:a1:f9:d1:cf:57:8b:5f:51: 35:99:66:3e:3b:df:74:6b:92:96:82:29:54:0b:36: 75:0f:6a:6f:2a:14:0d:92:f4:18:44:bc:3c:1e:ce: b6:32:a1:70:99:fc:bc:4e:d2:93:7d:a3:f8:94:a7: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:6D:70:BF:92:5A:AE:6B:7D:63:5F:F8:AC:AC:36:ED:17:87:A3 X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:09:bc:85:92:c5:0f:72:36:f1:5b:82:5e:27:40:ca:f0:b5: 10:6d:79:28:2f:84:63:8b:d2:17:17:9e:b7:97:f4:24:84:5f: 91:d7:83:04:b7:72:37:4a:ef:f7:56:22:62:45:44:8e:f4:5d: c0:db:ba:bb:82:f9:7a:f3:12:b3:6e:1e:c8:36:82:36:85:3c: fd:4c:b9:c4:70:1c:fa:12:14:19:cf:e5:41:6c:3a:c4:10:ce: 8e:c8:6a:3b:cb:d2:98:24:d7:06:62:b0:64:e3:4e:3f:62:ca: a5:f3:6e:61:ab:70:20:a9:00:55:b5:54:22:f4:0a:ae:7f:70: 64:f5:7b:d1:ab:3f:a0:15:47:82:dd:7c:36:f4:87:a9:09:5d: 62:8a:8d:2c:67:4a:60:87:82:c0:d9:cc:76:d8:e1:5c:c7:1b: c2:99:c3:90:ee:29:38:42:03:b4:bd:6a:83:e6:ea:52:aa:a8: 17:ec:8a:cf:c5:28:2e:fa:22:99:92:b6:7d:98:5f:61:3e:c3: 65:22:84:79:8a:3b:86:e4:6c:75:33:65:5b:89:13:7d:e3:89: 48:90:3f:55:9f:42:b4:14:b1:32:4d:fa:d4:86:c8:97:a3:20: 9f:b9:11:66:27:cd:6e:53:e8:5c:a3:f3:7c:23:ce:3a:d7:32: e4:ba:88:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QyODExMTAvBgNVBAUTKDc0MTY2NjY4QkU3NkI3Mzc1NzYzMTZFNTVEOUU2NDM5 RTY3MUNGNDcwHhcNMjYwNDE3MDYyMTA1WhcNMjYwNDI0MDYyMTA1WjAYMRYwFAYD VQQDEw02OWUxZDE1MS1kMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2j8XO6nt0AnUZJJO0ZVg75bLUGpwD4hZwkqqadNznldMBGsA/vDtgIw5VsN6 i0CMJbcwxpY16/y/Lsm1eq5g6/SMU/T/mk4RmuRs/Z0d1cKDv4ho5I0FiPX3xYlg mX/HnscRXsI/Ri/qMjGlyFyQODE/YF+G23lTSVGBJIWaUQ/Y3IlFjFXwzgATsn2Z oyvbrKBMEVpP5zChZZWqTAZmXGxIeFE387orxyyvpjIgua0V37dMdC/XV1c2s1xg /2ivgDrL2XOmOB4YofnRz1eLX1E1mWY+O990a5KWgilUCzZ1D2pvKhQNkvQYRLw8 Hs62MqFwmfy8TtKTfaP4lKeg6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAibXC/ klqua31jX/isrDbtF4ejMB8GA1UdIwQYMBaAFHQWZmi+drc3V2MW5V2eZDnmcc9H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDI4MS9GQjQyMTZFOEYy NzAxMUVGOUJGOEI1MzVDNEY5QUUwMi9kQlptYUw1MnR6ZFhZeGJsWFo1a09lWnh6 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHowYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDI4MS9GQjQyMTZFOEYyNzAxMUVGOUJGOEI1MzVDNEY5QUUwMi9kQlptYUw1MnR6 ZFhZeGJsWFo1a09lWnh6MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANwm8hZLFD3I28VuCXidAyvC1EG15KC+EY4vSFxeet5f0JIRfkdeDBLdyN0rv 91YiYkVEjvRdwNu6u4L5evMSs24eyDaCNoU8/Uy5xHAc+hIUGc/lQWw6xBDOjshq O8vSmCTXBmKwZONOP2LKpfNuYatwIKkAVbVUIvQKrn9wZPV70as/oBVHgt18NvSH qQldYoqNLGdKYIeCwNnMdtjhXMcbwpnDkO4pOEIDtL1qg+bqUqqoF+yKz8UoLvoi mZK2fZhfYT7DZSKEeYo7huRsdTNlW4kTfeOJSJA/VZ9CtBSxMk361IbIl6Mgn7kR ZifNblPoXKPzfCPOOtcy5LqIhA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:57 2026 by rpki-client