$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json) Hash identifier: EGEx1j1g+56UgACsiEILHhACwcIi2W3vmftoB9CWjBU= Subject key identifier: 47:A1:00:AC:26:A6:4C:A0:D9:17:A8:D8:B3:22:50:CA:8E:3C:68:23 Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0E9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft Manifest number: 0F88 Signing time: Thu 16 Apr 2026 17:39:47 +0000 Manifest this update: Thu 16 Apr 2026 17:39:46 +0000 Manifest next update: Thu 23 Apr 2026 17:39:46 +0000 Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: UoFEJhOjhJAknptDIWSTP+OUNpsZ23gQALEoUnEI3ts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3740 (0xe9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: Apr 16 17:39:46 2026 GMT Not After : Apr 23 17:39:46 2026 GMT Subject: CN=69e11ee3-e1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:5e:11:da:6e:1c:11:82:85:ce:f0:a0:f7: b2:82:8e:62:35:2b:b8:3e:7c:01:8c:98:0b:e2:74: 54:48:77:25:99:0b:14:95:80:ad:69:08:f6:92:a3: b4:ce:b0:13:fb:56:45:c4:8c:04:ad:d9:96:0e:bd: a1:ba:7c:2f:79:1b:66:32:dd:90:c2:8d:69:20:85: 5e:05:db:37:54:63:94:2b:6c:d5:5c:fd:12:04:79: d1:f4:a3:8f:c2:ad:fe:d3:82:3d:00:3d:b4:40:62: 91:7c:c3:cc:7e:81:78:db:b7:72:0a:87:3a:d5:00: 3d:b9:a6:17:4e:70:4c:61:90:e1:9f:5f:cd:ca:5b: 03:71:c0:fe:4a:ff:4c:99:49:61:df:97:cb:23:95: b4:04:e4:7d:65:d2:63:ca:4e:47:36:e5:2d:4d:32: b6:c9:06:9a:d8:85:37:f2:97:0f:b2:88:78:54:c3: b8:df:dc:dc:f2:53:e4:59:31:26:69:9d:75:ce:64: 07:0d:96:da:3e:5b:96:94:24:c7:19:10:7c:56:5a: eb:54:87:d1:9d:ab:24:95:14:4f:fa:e5:4f:fa:9a: ef:2a:0e:ec:4b:24:d0:0f:b7:7e:6e:d3:2c:e9:4e: 42:3d:19:23:ee:76:d3:d7:cd:1b:72:64:89:c8:16: ea:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:00:AC:26:A6:4C:A0:D9:17:A8:D8:B3:22:50:CA:8E:3C:68:23 X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:aa:ca:90:d2:5c:25:e8:9b:50:cc:b5:2c:cc:92:d0:81:bf: 74:05:d3:dc:47:6b:9d:14:80:7d:75:5e:c6:87:33:ca:81:ae: 27:3c:26:62:3a:5e:28:b1:04:e7:dc:dd:7d:00:68:96:06:12: fe:ca:23:d8:3a:b5:df:9b:b5:d7:0c:6b:b5:fe:b2:cd:71:1c: 0e:46:e2:c8:26:72:1e:64:bc:a9:3e:b4:4e:cb:74:35:8d:03: b8:f4:c7:95:fc:64:f7:f7:a1:c0:16:f1:96:80:46:31:15:05: 3e:31:94:d3:21:6b:f4:07:b1:6f:90:80:92:95:ac:2b:de:49: f2:5e:fa:64:70:44:a8:d4:c0:79:77:06:c4:d0:90:15:c4:97: 96:db:84:ba:f7:d6:85:8f:3d:ec:40:62:b3:62:e3:2a:0b:46: 84:6a:36:02:2d:05:42:5d:2c:22:02:1a:cd:70:cb:f4:d1:c2: b8:35:b5:fa:eb:c6:d1:d3:87:9b:4f:bc:f5:67:59:ab:58:0a: cc:b5:c0:44:47:26:38:4c:4e:bc:41:34:c5:b9:9e:fb:e7:c2: c2:a0:2f:0c:08:41:4c:be:ea:e0:fb:c3:bf:5f:a0:8d:0f:a0: b3:cf:56:a9:1c:33:db:b5:36:98:00:6d:33:f4:ee:0b:b2:e3: 06:23:fc:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjYwNDE2MTczOTQ2WhcNMjYwNDIzMTczOTQ2WjAYMRYwFAYD VQQDEw02OWUxMWVlMy1lMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1leEdpuHBGChc7woPeygo5iNSu4PnwBjJgL4nRUSHclmQsUlYCtaQj2kqO0 zrAT+1ZFxIwErdmWDr2hunwveRtmMt2Qwo1pIIVeBds3VGOUK2zVXP0SBHnR9KOP wq3+04I9AD20QGKRfMPMfoF427dyCoc61QA9uaYXTnBMYZDhn1/NylsDccD+Sv9M mUlh35fLI5W0BOR9ZdJjyk5HNuUtTTK2yQaa2IU38pcPsoh4VMO439zc8lPkWTEm aZ11zmQHDZbaPluWlCTHGRB8VlrrVIfRnasklRRP+uVP+prvKg7sSyTQD7d+btMs 6U5CPRkj7nbT180bcmSJyBbqLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEehAKwm pkyg2Reo2LMiUMqOPGgjMB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s UG81VzF3SVA5dnZGdnh5d0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWarKkNJcJeibUMy1LMyS0IG/dAXT3EdrnRSAfXVexoczyoGuJzwmYjpeKLEE 59zdfQBolgYS/soj2Dq135u11wxrtf6yzXEcDkbiyCZyHmS8qT60Tst0NY0DuPTH lfxk9/ehwBbxloBGMRUFPjGU0yFr9Aexb5CAkpWsK95J8l76ZHBEqNTAeXcGxNCQ FcSXltuEuvfWhY897EBis2LjKgtGhGo2Ai0FQl0sIgIazXDL9NHCuDW1+uvG0dOH m0+89WdZq1gKzLXAREcmOExOvEE0xbme++fCwqAvDAhBTL7q4PvDv1+gjQ+gs89W qRwz27U2mABtM/TuC7LjBiP8RA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:21:05 2026 by rpki-client