$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft File: DkAOOUTvUXdtyNgbU7art55NDV4.mft (raw, json) Hash identifier: aI6LGSiMIYqs6y2Dd1dM2vnrSPDVMvcG3Ya1xj9Hrzc= Subject key identifier: 0B:09:3B:43:0D:D1:5B:8D:7A:00:2D:9F:A0:6A:E9:74:8E:21:CF:3E Authority key identifier: 0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E Certificate issuer: /CN=A9125A35/serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft Manifest number: 13 Signing time: Sun 05 Apr 2026 08:20:26 +0000 Manifest this update: Sun 05 Apr 2026 08:20:26 +0000 Manifest next update: Sun 12 Apr 2026 08:20:26 +0000 Files and hashes: 1: DkAOOUTvUXdtyNgbU7art55NDV4.crl (hash: UOvHN0A/SwoNaI1e/INSoq4A4ke3Suz7l68S4tVuLyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A35, serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Validity Not Before: Apr 5 08:20:26 2026 GMT Not After : Apr 12 08:20:26 2026 GMT Subject: CN=69d21b4a-92a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:07:55:85:d4:6f:1f:2b:91:74:6a:da:b3:37: e8:cf:d1:4e:dc:3d:f2:87:4a:56:45:6d:5c:c1:6f: bb:2a:7a:19:26:6c:3b:b7:d3:f5:43:e0:59:bd:4c: 08:6a:40:f9:45:b8:52:f7:05:92:43:06:87:8e:4c: ef:68:60:52:37:a5:be:f7:a5:13:2a:97:69:f1:f7: 86:26:11:dc:7e:f4:09:8c:d1:d6:16:57:4c:e4:68: ec:25:04:3d:86:4a:1e:f2:e0:8f:9c:4b:de:84:5b: 77:6c:6a:52:9f:55:d2:00:58:65:13:ba:c8:58:b1: 66:cc:d3:8f:72:06:a5:06:f2:b7:28:e0:d5:1c:cb: bc:9c:93:03:e7:e1:a7:41:41:22:c0:a6:9f:84:f1: 1e:1f:33:17:5a:1b:34:3e:24:d2:71:c2:a9:7a:83: f5:56:3b:d9:62:37:32:52:a4:1c:37:eb:5d:07:4a: ee:69:01:6f:7d:de:cc:dd:7c:0d:a4:af:e5:b5:aa: 6e:d8:d2:37:44:da:fa:e2:3b:f0:48:a3:75:a3:96: 28:cd:71:f9:7c:a6:93:c5:34:98:9f:1a:49:db:35: dc:60:9d:05:62:65:05:57:ab:f8:20:0b:d2:ac:d0: 88:c9:18:69:31:f1:a6:37:d2:fc:3a:e2:91:58:b9: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:09:3B:43:0D:D1:5B:8D:7A:00:2D:9F:A0:6A:E9:74:8E:21:CF:3E X509v3 Authority Key Identifier: keyid:0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7e:9a:72:32:c4:92:f6:fb:78:fb:19:6c:c9:7c:1a:05:4c: 45:31:d6:ba:58:5c:ce:44:f3:a9:b5:05:a6:a7:01:7f:64:90: a2:60:0b:ea:62:f3:f6:3c:df:5a:c0:a9:94:a5:a2:bb:30:2b: cb:b4:fe:bb:a7:c7:a9:a6:7a:53:5b:41:6b:18:9d:a5:fa:10: 97:38:13:56:ff:0a:57:c3:cb:a7:2f:1c:06:08:69:4e:f3:fe: 20:d8:c8:47:4b:fe:89:19:fd:32:f0:7c:5f:f9:49:5e:61:de: 1a:48:82:1b:60:e5:2b:7c:23:86:bd:11:38:ef:c8:c1:ec:22: 76:5a:3b:9b:10:7e:7c:40:80:fd:5a:b2:c4:ca:a1:cf:ac:42: 60:a4:85:f5:a8:e6:0e:24:e3:38:97:d3:56:a8:b7:16:fe:a9: 3c:6d:b1:61:04:06:a7:b6:1a:63:06:03:ce:46:3d:04:6a:08: 33:a0:ef:f2:b7:ba:8d:74:f5:2b:79:d1:72:8d:ec:bf:80:06: e4:26:2f:ac:f5:99:dd:76:a5:86:9b:d7:f9:10:2a:ce:2a:0f: 60:30:10:d4:0a:2a:80:7e:b1:3b:db:07:6b:61:62:82:d0:dd: dc:0e:cf:7d:ac:c6:10:52:b2:cd:75:a8:79:99:5e:f1:a1:e3: 5b:f3:77:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUEzNTExMC8GA1UEBRMoMEU0MDBFMzk0NEVGNTE3NzZEQzhEODFCNTNCNkFCQjc5 RTREMEQ1RTAeFw0yNjA0MDUwODIwMjZaFw0yNjA0MTIwODIwMjZaMBgxFjAUBgNV BAMTDTY5ZDIxYjRhLTkyYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkB1WF1G8fK5F0atqzN+jP0U7cPfKHSlZFbVzBb7sqehkmbDu30/VD4Fm9TAhq QPlFuFL3BZJDBoeOTO9oYFI3pb73pRMql2nx94YmEdx+9AmM0dYWV0zkaOwlBD2G Sh7y4I+cS96EW3dsalKfVdIAWGUTushYsWbM049yBqUG8rco4NUcy7yckwPn4adB QSLApp+E8R4fMxdaGzQ+JNJxwql6g/VWO9liNzJSpBw3610HSu5pAW993szdfA2k r+W1qm7Y0jdE2vriO/BIo3WjlijNcfl8ppPFNJifGknbNdxgnQViZQVXq/ggC9Ks 0IjJGGkx8aY30vw64pFYuaQTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCwk7Qw3R W416AC2foGrpdI4hzz4wHwYDVR0jBBgwFoAUDkAOOUTvUXdtyNgbU7art55NDV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1QTM1L0NFN0U5MUQ4MTZE MDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhkdHlOZ2JVN2FydDU1TkRW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGtBT09VVHZVWGR0eU5nYlU3YXJ0NTVORFY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 QTM1L0NFN0U5MUQ4MTZEMDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhk dHlOZ2JVN2FydDU1TkRWNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcfppyMsSS9vt4+xlsyXwaBUxFMda6WFzORPOptQWmpwF/ZJCiYAvqYvP2PN9a wKmUpaK7MCvLtP67p8eppnpTW0FrGJ2l+hCXOBNW/wpXw8unLxwGCGlO8/4g2MhH S/6JGf0y8Hxf+UleYd4aSIIbYOUrfCOGvRE478jB7CJ2WjubEH58QID9WrLEyqHP rEJgpIX1qOYOJOM4l9NWqLcW/qk8bbFhBAanthpjBgPORj0EaggzoO/yt7qNdPUr edFyjey/gAbkJi+s9ZnddqWGm9f5ECrOKg9gMBDUCiqAfrE72wdrYWKC0N3cDs99 rMYQUrLNdah5mV7xoeNb83eh -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:21 2026 by rpki-client