$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json) Hash identifier: N0J3hQCY6W3Fr4QVOW6vkT93Tg31cS/cEFlg39j4oQM= Subject key identifier: 7A:D8:27:51:32:92:78:EF:E7:75:85:80:26:4F:35:FB:A7:CF:CE:13 Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0EEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft Manifest number: 1028 Signing time: Sun 20 Sep 2026 17:38:12 +0000 Manifest this update: Sun 20 Sep 2026 17:38:12 +0000 Manifest next update: Sun 27 Sep 2026 17:38:12 +0000 Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: GtWRyXcL77GCgFu8QrQwu7JEJyZg8PguCQSZN7fTd74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3820 (0xeec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: Sep 20 17:38:12 2026 GMT Not After : Sep 27 17:38:12 2026 GMT Subject: CN=6ab01a04-4c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:e3:79:ae:ef:e8:0c:c3:05:c1:11:f4:c1: f4:58:22:fe:2c:e0:fa:62:ec:5a:c2:8c:32:c6:15: 56:f7:4c:e5:36:ac:88:74:1f:9e:b2:3e:28:8f:15: f0:70:50:cc:30:46:37:87:65:58:b5:8e:6e:ec:6f: 1b:4a:7f:40:d2:01:74:57:bf:bc:50:70:d1:a0:ad: c9:03:70:aa:37:4b:e6:ee:e1:26:13:7f:4f:6b:25: 59:72:0f:3c:7d:7d:8e:b4:68:6b:cd:e0:a8:cd:51: 1f:71:3f:13:fd:8e:89:25:2f:5d:c3:75:4a:1a:68: a9:97:5e:80:2e:b5:ed:11:d7:9d:2e:d6:7a:e8:8c: fd:7b:c6:ea:65:a4:24:c9:6e:40:31:fb:e6:45:97: 08:7e:62:89:1f:0b:b5:65:33:b5:d6:dd:fe:60:4d: 1f:d3:91:ce:60:c6:47:cc:4d:12:3a:9b:76:be:25: 8f:7c:24:6e:27:60:6e:4c:2c:fe:0c:5c:06:51:99: bb:54:37:e7:af:49:af:6f:01:c5:93:32:7b:9a:ed: 61:ee:4f:49:9c:45:2e:38:7f:15:5e:52:37:76:d8: c6:a8:d1:15:30:60:14:c6:8e:6c:41:5c:76:5d:b3: f1:74:57:e8:52:f9:6b:88:e0:ce:4d:ab:2c:f1:08: 74:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D8:27:51:32:92:78:EF:E7:75:85:80:26:4F:35:FB:A7:CF:CE:13 X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:56:5b:39:73:48:23:7c:5a:bf:2a:57:ec:eb:9e:0e:82:db: cf:30:65:c1:93:c3:90:3d:80:4a:dc:ea:93:fc:a8:4a:12:75: c3:96:dd:b7:14:32:bc:4d:85:6a:13:66:55:33:46:b4:c8:91: 8b:fd:05:49:51:a8:75:98:94:0b:85:d5:f4:3c:58:6a:18:a8: ca:b6:1a:de:45:4d:46:f3:0c:f4:dd:2a:a0:67:b3:95:51:7a: 36:ef:14:78:2d:be:76:7c:85:22:10:01:b1:aa:6d:4f:b3:c2: 31:71:b8:ca:c6:44:2b:f0:ef:0a:32:79:1e:64:07:57:0e:5b: e1:6a:32:59:e7:c0:52:42:de:1d:df:54:67:12:d5:95:62:68: 2d:00:9b:38:a2:66:a6:0a:1a:71:b3:97:70:1e:75:40:d7:c2: 9b:57:d6:6a:cd:14:fc:6c:c9:22:3b:55:3e:14:12:bf:d4:23: 58:5c:75:ce:61:15:96:f1:c6:ac:e4:58:c2:20:e9:7f:14:5f: 38:9c:73:4d:2f:48:3f:6c:17:2d:84:63:2d:6f:af:79:7d:dd: ee:88:43:cd:a0:cb:d6:4f:e1:2a:7c:cd:1a:da:ba:d8:53:26: ae:81:e6:4d:0c:cf:08:2b:c5:a3:d9:92:a7:27:a4:7f:88:91: c7:46:fe:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjYwOTIwMTczODEyWhcNMjYwOTI3MTczODEyWjAYMRYwFAYD VQQDEw02YWIwMWEwNC00YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGrjea7v6AzDBcER9MH0WCL+LOD6YuxawowyxhVW90zlNqyIdB+esj4ojxXw cFDMMEY3h2VYtY5u7G8bSn9A0gF0V7+8UHDRoK3JA3CqN0vm7uEmE39PayVZcg88 fX2OtGhrzeCozVEfcT8T/Y6JJS9dw3VKGmipl16ALrXtEdedLtZ66Iz9e8bqZaQk yW5AMfvmRZcIfmKJHwu1ZTO11t3+YE0f05HOYMZHzE0SOpt2viWPfCRuJ2BuTCz+ DFwGUZm7VDfnr0mvbwHFkzJ7mu1h7k9JnEUuOH8VXlI3dtjGqNEVMGAUxo5sQVx2 XbPxdFfoUvlriODOTass8Qh0vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHrYJ1Ey knjv53WFgCZPNfunz84TMB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s UG81VzF3SVA5dnZGdnh5d0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgVZbOXNII3xavypX7OueDoLbzzBlwZPDkD2AStzqk/yoShJ1w5bdtxQyvE2F ahNmVTNGtMiRi/0FSVGodZiUC4XV9DxYahioyrYa3kVNRvMM9N0qoGezlVF6Nu8U eC2+dnyFIhABsaptT7PCMXG4ysZEK/DvCjJ5HmQHVw5b4WoyWefAUkLeHd9UZxLV lWJoLQCbOKJmpgoacbOXcB51QNfCm1fWas0U/GzJIjtVPhQSv9QjWFx1zmEVlvHG rORYwiDpfxRfOJxzTS9IP2wXLYRjLW+veX3d7ohDzaDL1k/hKnzNGtq62FMmroHm TQzPCCvFo9mSpyekf4iRx0b+wg== -----END CERTIFICATE-----Generated at Tue Sep 22 17:21:24 2026 by rpki-client