$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft File: vDUKYanj3h4eWJC-0L6KhxJP3LE.mft (raw, json) Hash identifier: encgeYZyN+BAoHzkJdkef547Ei3CWQ23h6URkBrNyms= Subject key identifier: 68:AD:AE:E6:72:7F:FC:64:75:5E:6A:46:0E:81:7E:FC:51:9D:D0:F7 Authority key identifier: BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1 Certificate issuer: /CN=A91FC3D0/serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft Manifest number: 40 Signing time: Mon 21 Sep 2026 08:28:42 +0000 Manifest this update: Mon 21 Sep 2026 08:28:42 +0000 Manifest next update: Mon 28 Sep 2026 08:28:42 +0000 Files and hashes: 1: vDUKYanj3h4eWJC-0L6KhxJP3LE.crl (hash: fYyTEZU1GlypO8wdyNoSmAQj8pAO5kCT54Dy1ti9JhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC3D0, serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1 Validity Not Before: Sep 21 08:28:42 2026 GMT Not After : Sep 28 08:28:42 2026 GMT Subject: CN=6ab0eaba-11f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c4:1a:5d:3f:0e:13:c1:99:6b:91:f7:e9:1c: 2d:b5:56:8a:09:ed:b4:eb:8f:d9:50:5f:e1:99:b1: 6d:f9:a2:4c:6b:e4:24:4f:fe:b8:e8:62:f6:fa:3c: 43:78:02:63:89:7f:12:26:4c:a5:2f:a3:f9:69:c4: 73:5e:65:95:d1:85:9e:4d:b1:1a:d4:e3:de:21:a8: de:ef:e9:8a:cc:48:18:25:6f:f8:44:10:94:12:0d: f2:c5:1f:7d:10:fe:54:30:89:41:26:fb:7b:1d:fe: 10:63:2a:59:5f:9c:9b:fa:bf:4c:65:a2:c5:f9:22: a5:df:25:f9:cb:12:5b:21:5c:bb:97:5c:3a:b6:04: 01:89:21:a6:b1:e0:77:9c:d7:22:58:f5:ed:a8:e8: 51:a4:08:35:4f:94:02:5b:1d:55:23:86:24:ce:1b: 52:0e:be:1c:e5:3d:95:48:5c:e6:76:98:bf:70:4b: 5f:28:af:fc:7c:9a:1d:40:f6:92:0e:05:2b:18:da: c9:26:e8:85:99:03:85:b9:81:75:83:2c:fc:fd:16: 45:cb:93:c9:f6:55:be:07:00:f0:33:c2:54:46:d4: 1d:24:d9:fd:90:e6:6f:8c:99:ce:6e:c2:f2:96:b6: f4:e1:28:8e:23:80:a7:02:96:c1:e4:ae:49:59:0e: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AD:AE:E6:72:7F:FC:64:75:5E:6A:46:0E:81:7E:FC:51:9D:D0:F7 X509v3 Authority Key Identifier: keyid:BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:cf:e2:ad:93:a4:ff:37:27:80:80:71:9e:1b:34:16:d9:0d: 87:e9:3b:eb:b1:5d:67:c1:45:64:62:5f:3a:f8:0a:20:8b:f8: 00:60:22:ce:b0:29:0d:96:4c:7c:b6:71:1a:d8:d7:ea:c2:e2: 77:05:35:6e:3b:32:1a:cc:48:1b:3d:7b:a8:dd:4d:7f:1e:e2: 8d:02:03:a0:af:ae:60:f0:e0:ff:68:82:ae:8b:e2:f3:bd:66: 83:77:5f:96:88:0f:f7:7b:7a:66:bf:18:7f:81:60:0d:07:66: 7d:8b:2f:47:25:2a:7e:19:9d:00:49:1e:c9:75:5a:9d:7a:a7: 7b:ed:3e:9b:10:5c:1f:a2:72:bb:26:a9:4b:1f:46:11:c0:18: ad:ea:88:2f:b6:5b:ad:0d:54:f1:52:28:79:a1:46:d2:95:10: e0:93:80:0a:04:e8:8c:fa:fb:9a:13:71:c6:f3:05:58:7e:4b: b6:d2:32:ff:7e:5c:ad:ca:0a:01:77:5a:b1:5e:27:5f:75:d1: 91:78:a7:f6:bc:5f:98:ef:b5:65:38:f9:ec:d0:2f:7b:71:dc: a7:96:1c:82:15:e1:ad:40:6b:a8:fd:ce:85:ca:e9:e7:a4:63: f0:9f:f6:06:57:a9:32:94:5f:b1:a7:3d:79:e4:89:9a:c5:bb: 76:83:58:ee -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzNEMDExMC8GA1UEBRMoQkMzNTBBNjFBOUUzREUxRTFFNTg5MEJFRDBCRThBODcx MjRGRENCMTAeFw0yNjA5MjEwODI4NDJaFw0yNjA5MjgwODI4NDJaMBgxFjAUBgNV BAMTDTZhYjBlYWJhLTExZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtxBpdPw4TwZlrkffpHC21VooJ7bTrj9lQX+GZsW35okxr5CRP/rjoYvb6PEN4 AmOJfxImTKUvo/lpxHNeZZXRhZ5NsRrU494hqN7v6YrMSBglb/hEEJQSDfLFH30Q /lQwiUEm+3sd/hBjKllfnJv6v0xlosX5IqXfJfnLElshXLuXXDq2BAGJIaax4Hec 1yJY9e2o6FGkCDVPlAJbHVUjhiTOG1IOvhzlPZVIXOZ2mL9wS18or/x8mh1A9pIO BSsY2skm6IWZA4W5gXWDLPz9FkXLk8n2Vb4HAPAzwlRG1B0k2f2Q5m+Mmc5uwvKW tvThKI4jgKcClsHkrklZDvqfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaK2u5nJ/ /GR1XmpGDoF+/FGd0PcwHwYDVR0jBBgwFoAUvDUKYanj3h4eWJC+0L6KhxJP3LEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDM0QwL0IwOUIyRjRDNTQ0 NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0ZVdKQy0wTDZLaHhKUDNM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkRVS1lhbmozaDRlV0pDLTBMNktoeEpQM0xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD M0QwL0IwOUIyRjRDNTQ0NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0 ZVdKQy0wTDZLaHhKUDNMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDQz+Ktk6T/NyeAgHGeGzQW2Q2H6TvrsV1nwUVkYl86+Aogi/gAYCLOsCkNlkx8 tnEa2NfqwuJ3BTVuOzIazEgbPXuo3U1/HuKNAgOgr65g8OD/aIKui+LzvWaDd1+W iA/3e3pmvxh/gWANB2Z9iy9HJSp+GZ0ASR7JdVqdeqd77T6bEFwfonK7JqlLH0YR wBit6ogvtlutDVTxUih5oUbSlRDgk4AKBOiM+vuaE3HG8wVYfku20jL/flytygoB d1qxXidfddGReKf2vF+Y77VlOPns0C97cdynlhyCFeGtQGuo/c6FyunnpGPwn/YG V6kylF+xpz155Imaxbt2g1ju -----END CERTIFICATE-----Generated at Tue Sep 22 16:00:40 2026 by rpki-client