$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json) Hash identifier: OMiddFRbffdh3VCpsWlCeM3ycZht+VuKdCwXAy84rIo= Subject key identifier: 21:8F:50:4A:A1:88:25:B7:AA:B5:B0:3F:21:BA:D6:DE:98:87:F0:93 Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Certificate serial: 0EB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft Manifest number: 0EA5 Signing time: Thu 16 Apr 2026 17:38:18 +0000 Manifest this update: Thu 16 Apr 2026 17:38:17 +0000 Manifest next update: Thu 23 Apr 2026 17:38:17 +0000 Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: tYdA9MHDvuUEbKgComuXvGg1Dc2wdziJfdRJkg23HYQ=) 2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: +8+LmzfERPVvTvelw5uwc+I3y328jDcfohQEW7SsOnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3763 (0xeb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236 Validity Not Before: Apr 16 17:38:17 2026 GMT Not After : Apr 23 17:38:17 2026 GMT Subject: CN=69e11e89-e08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:f7:60:03:c9:6a:92:d4:65:5e:7a:35:2f: 2c:dd:ca:f5:67:35:0e:1d:04:51:14:bd:98:3d:aa: 9d:7d:fd:7d:7b:6e:7e:bf:00:c8:34:e0:6b:67:15: 98:31:43:ee:44:57:53:17:52:bd:07:2e:d5:52:53: b5:a9:9a:e8:a5:04:3b:0b:5e:86:f4:07:90:20:97: 58:ee:91:5a:01:a0:d4:6d:48:97:e0:c6:41:23:b4: 16:6d:ca:aa:46:11:9f:c4:12:c9:d3:fc:94:d1:a2: 22:32:67:b4:b7:09:8c:a9:cc:68:bf:3e:0f:b5:f1: 87:bd:39:d3:19:1f:48:90:7c:2a:e1:0a:1b:c7:32: 5e:42:1f:22:24:2f:50:d4:1c:09:a0:1f:00:18:59: 24:1c:fa:0c:9e:ac:84:44:1e:69:bb:f4:9d:34:6e: f3:15:f5:39:b0:bd:84:8e:39:e5:bc:d7:48:de:e7: 61:79:eb:0a:68:ce:1a:97:b2:61:65:c4:b1:b3:0d: 6d:a3:03:38:84:50:f7:b5:fa:7e:cf:c5:67:cf:8e: 48:d9:c0:0c:0f:2b:b7:50:25:cf:f0:b3:49:4a:f5: 11:24:13:66:b7:54:d2:78:98:5e:cc:ff:df:24:5d: 64:3f:42:76:ef:cc:80:a9:61:8d:b2:cd:28:de:fe: 34:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:50:4A:A1:88:25:B7:AA:B5:B0:3F:21:BA:D6:DE:98:87:F0:93 X509v3 Authority Key Identifier: keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:58:91:5d:4a:76:3d:04:22:44:8a:2f:e1:b8:fc:27:06:3e: 61:3b:59:32:05:95:7b:be:fe:54:59:a7:2c:a6:99:39:45:34: 6f:14:d3:40:be:3e:8a:3f:69:5b:4f:08:3f:ae:01:53:80:fa: e4:eb:c0:87:00:a6:cf:73:d8:fd:2d:4b:85:fe:bc:dd:92:99: 48:fa:7e:21:96:2c:dc:f5:99:a5:72:ee:de:99:32:c0:d5:7e: b3:ff:d7:49:ea:39:4b:8f:a0:8a:f2:5a:0c:d0:69:ae:2b:20: 99:b6:e1:6c:28:f5:e0:3c:a1:5f:1c:69:ca:af:8d:ed:19:76: 61:e9:6c:77:11:ba:ab:88:31:5b:75:ec:18:fe:ce:56:e5:fe: e8:70:73:0b:71:df:74:22:91:ad:e1:8c:26:54:d5:28:17:1c: f6:d1:83:de:e5:2c:36:49:55:07:aa:bd:d0:9d:b2:91:90:78: 7e:7e:0f:58:69:8e:52:ca:e8:5a:67:ea:39:33:ae:b5:ae:98: e4:21:d1:2d:6c:d6:8d:e7:3d:67:19:16:f8:9e:83:48:44:d1: 62:33:39:37:31:0d:b4:c2:1e:fc:45:13:43:de:ce:ce:1d:98: d3:76:d5:a0:32:10:ce:b8:9e:f8:cb:79:9c:e9:9f:c0:9d:0e: 13:ed:bd:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzRDcxMTAvBgNVBAUTKDBFRDUyQTc2RjMxQzI0MjE3NEEyQUQxOTQ4MUM5NTcw M0I3MkUyMzYwHhcNMjYwNDE2MTczODE3WhcNMjYwNDIzMTczODE3WjAYMRYwFAYD VQQDEw02OWUxMWU4OS1lMDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlF33YAPJapLUZV56NS8s3cr1ZzUOHQRRFL2YPaqdff19e25+vwDINOBrZxWY MUPuRFdTF1K9By7VUlO1qZropQQ7C16G9AeQIJdY7pFaAaDUbUiX4MZBI7QWbcqq RhGfxBLJ0/yU0aIiMme0twmMqcxovz4PtfGHvTnTGR9IkHwq4QobxzJeQh8iJC9Q 1BwJoB8AGFkkHPoMnqyERB5pu/SdNG7zFfU5sL2EjjnlvNdI3udheesKaM4al7Jh ZcSxsw1towM4hFD3tfp+z8Vnz45I2cAMDyu3UCXP8LNJSvURJBNmt1TSeJhezP/f JF1kP0J278yAqWGNss0o3v40GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGPUEqh iCW3qrWwPyG61t6Yh/CTMB8GA1UdIwQYMBaAFA7VKnbzHCQhdKKtGUgclXA7cuI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzNENy9EQzdEODg2NEFF QjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pDRjBvcTBaU0J5VmNEdHk0 alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0VXFkdk1jSkNGMG9xMFpTQnlWY0R0eTRqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzNENy9EQzdEODg2NEFFQjAxMUU5OEQwOEUxM0NDNEY5QUUwMi9EdFVxZHZNY0pD RjBvcTBaU0J5VmNEdHk0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE1iRXUp2PQQiRIov4bj8JwY+YTtZMgWVe77+VFmnLKaZOUU0bxTTQL4+ij9p W08IP64BU4D65OvAhwCmz3PY/S1Lhf683ZKZSPp+IZYs3PWZpXLu3pkywNV+s//X Seo5S4+givJaDNBprisgmbbhbCj14DyhXxxpyq+N7Rl2YelsdxG6q4gxW3XsGP7O VuX+6HBzC3HfdCKRreGMJlTVKBcc9tGD3uUsNklVB6q90J2ykZB4fn4PWGmOUsro WmfqOTOuta6Y5CHRLWzWjec9ZxkW+J6DSETRYjM5NzENtMIe/EUTQ97Ozh2Y03bV oDIQzrie+Mt5nOmfwJ0OE+29Hw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:47:04 2026 by rpki-client