$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json) Hash identifier: 0W39Ww/6A6UogF6zTgo26V4O0msAVeKDAgT4SGlT7ss= Subject key identifier: 98:98:22:9E:3A:79:DB:CD:AD:30:84:DC:87:9A:12:E4:8E:04:2A:8C Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17 Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft Manifest number: 76 Signing time: Sun 05 Apr 2026 07:09:36 +0000 Manifest this update: Sun 05 Apr 2026 07:09:36 +0000 Manifest next update: Sun 12 Apr 2026 07:09:36 +0000 Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: QWRjqbwG2Gap5sNucEnIzh4rCD8K5Cqp+jzVyfPZVGo=) 2: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: O2t9f2ogcGV3x7WMv8XiYkP5DDfbHONXGddoSTXjm4Q=) 3: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317 Validity Not Before: Apr 5 07:09:36 2026 GMT Not After : Apr 12 07:09:36 2026 GMT Subject: CN=69d20ab0-480f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:9a:dd:e9:5d:c1:82:40:6a:7c:9f:96:72: f2:70:15:46:e6:85:80:0b:60:c4:db:85:cb:1a:e9: 6c:42:30:6f:0b:ed:9a:6f:ec:89:5e:e6:47:5e:39: f5:7c:95:f3:1b:f8:35:75:2d:66:d8:57:9f:a5:a1: 15:43:ba:9d:ea:55:ce:19:0f:49:ee:d7:91:f6:30: e5:aa:bc:af:fe:a4:f8:f9:b7:ba:f5:21:12:e6:9c: 63:0f:6e:96:7c:bf:82:a6:24:1a:9e:0b:0e:bc:28: eb:b4:8e:74:27:c4:bd:d4:0b:dc:33:6b:00:6b:bb: 0b:78:7e:af:75:c6:99:e3:30:fc:d0:d3:2b:2b:94: 8e:cd:91:3e:b7:21:42:5f:f4:6f:b7:e6:74:0b:05: 7a:e9:e1:8c:ad:11:b6:72:7a:5f:e7:be:f3:38:96: db:0c:3c:0e:55:73:92:d2:5f:95:2f:7a:ed:91:de: 04:3b:b4:f7:ec:f9:0e:b1:e6:46:68:9b:f2:c7:29: 1f:1d:63:56:89:b3:e5:7b:12:67:4a:c8:b4:d0:7c: 9f:6c:21:e7:db:f2:ea:64:d3:47:eb:95:2c:e6:d4: f7:45:98:ba:99:3b:e0:ab:4c:81:ab:ae:e6:aa:03: c7:d9:d3:0d:1c:5d:5b:55:3e:b4:8d:28:03:92:41: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:98:22:9E:3A:79:DB:CD:AD:30:84:DC:87:9A:12:E4:8E:04:2A:8C X509v3 Authority Key Identifier: keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:54:26:2d:8a:cc:8d:fd:4c:5d:12:a0:43:1a:26:bc:9e:e3: d9:9d:10:36:9a:e6:10:d2:97:8b:bc:a8:b3:ec:6c:4b:60:4c: 7c:87:12:ad:ea:ec:1f:cf:8f:8a:d8:ea:80:26:38:1f:a2:ed: d0:5d:87:4c:e6:8b:ab:f7:87:8c:ab:3e:c4:8e:a1:6a:4c:17: 4b:41:a0:df:a7:7f:0f:fe:26:8a:6f:ad:ff:dd:64:50:03:0e: 86:94:6f:c6:fd:6d:85:d8:26:27:64:1c:3d:56:d2:18:12:49: 58:ae:44:ef:5e:d4:1d:cb:12:fa:60:20:bc:f5:0d:b4:1f:05: 39:74:8d:03:fd:3a:fb:60:4f:06:3a:3d:11:02:d2:87:e1:4c: c4:3d:18:c6:ee:57:30:ab:a5:1b:b8:1b:6a:00:06:8f:c0:68: 74:11:63:a5:a7:b0:b5:69:d4:a4:72:3a:d8:9f:5d:29:1a:fe: 73:28:8d:cb:40:ea:c2:c4:42:6d:ed:dc:47:d3:10:1e:de:0f: e3:87:d2:b8:1a:27:8c:20:6a:33:a9:b2:57:12:c6:cc:66:4e: 03:c5:45:f1:1a:c6:29:9e:7d:fc:eb:bf:da:bb:0f:e8:8e:7a: d7:26:3a:72:d4:e2:b6:d2:21:47:23:5c:a5:25:1b:e3:99:8e: 30:b1:45:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzNCNjExMC8GA1UEBRMoNzUxMUNCMzEzRUI4M0YxQzM5MDJBQTYzQzQzQjdBMDM2 QUNDNjMxNzAeFw0yNjA0MDUwNzA5MzZaFw0yNjA0MTIwNzA5MzZaMBgxFjAUBgNV BAMTDTY5ZDIwYWIwLTQ4MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLoJrd6V3BgkBqfJ+WcvJwFUbmhYALYMTbhcsa6WxCMG8L7Zpv7Ile5kdeOfV8 lfMb+DV1LWbYV5+loRVDup3qVc4ZD0nu15H2MOWqvK/+pPj5t7r1IRLmnGMPbpZ8 v4KmJBqeCw68KOu0jnQnxL3UC9wzawBruwt4fq91xpnjMPzQ0ysrlI7NkT63IUJf 9G+35nQLBXrp4YytEbZyel/nvvM4ltsMPA5Vc5LSX5Uveu2R3gQ7tPfs+Q6x5kZo m/LHKR8dY1aJs+V7EmdKyLTQfJ9sIefb8upk00frlSzm1PdFmLqZO+CrTIGrruaq A8fZ0w0cXVtVPrSNKAOSQbOFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmJginjp5 282tMITch5oS5I4EKowwHwYDVR0jBBgwFoAUdRHLMT64Pxw5AqpjxDt6A2rMYxcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3M0I2LzU0ODFBRkMwODFB QTExRjBCNENEQUQxQ0M0RjlBRTAyL2RSSExNVDY0UHh3NUFxcGp4RHQ2QTJyTVl4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZFJITE1UNjRQeHc1QXFwanhEdDZBMnJNWXhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 M0I2LzU0ODFBRkMwODFBQTExRjBCNENEQUQxQ0M0RjlBRTAyL2RSSExNVDY0UHh3 NUFxcGp4RHQ2QTJyTVl4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC8VCYtisyN/UxdEqBDGia8nuPZnRA2muYQ0peLvKiz7GxLYEx8hxKt6uwfz4+K 2OqAJjgfou3QXYdM5our94eMqz7EjqFqTBdLQaDfp38P/iaKb63/3WRQAw6GlG/G /W2F2CYnZBw9VtIYEklYrkTvXtQdyxL6YCC89Q20HwU5dI0D/Tr7YE8GOj0RAtKH 4UzEPRjG7lcwq6UbuBtqAAaPwGh0EWOlp7C1adSkcjrYn10pGv5zKI3LQOrCxEJt 7dxH0xAe3g/jh9K4GieMIGozqbJXEsbMZk4DxUXxGsYpnn3867/auw/ojnrXJjpy 1OK20iFHI1ylJRvjmY4wsUUz -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:56 2026 by rpki-client