$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: BxZWGDfvbNDboR1C5fmRgJ4XKQgcVEVtDP2bEVV3jw0= Subject key identifier: FF:0A:E9:B8:5D:69:DD:AC:6B:38:C9:0F:00:08:F7:40:8C:2F:65:CB Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 20AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 1926 Signing time: Sat 04 Apr 2026 17:04:36 +0000 Manifest this update: Sat 04 Apr 2026 17:04:35 +0000 Manifest next update: Sat 11 Apr 2026 17:04:35 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: 2+1EpdHTFUr+msF6P8howJ7m9Ehhanv3q+KmJ8DbZ90=) 2: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: bLApvChK2zUe4CWUx9RU9qgAGAkxX8oSnJKH1tdA0/4=) 3: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: HjkUEQsav5pUE/WVtKbSKskctR1MphO2V35javK4YnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8365 (0x20ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Apr 4 17:04:35 2026 GMT Not After : Apr 11 17:04:35 2026 GMT Subject: CN=69d144a3-a6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:d5:91:22:d2:18:02:68:9c:40:b6:f8:31: 2a:c9:69:4f:76:7c:2a:82:dd:ac:df:cd:44:99:40: 7c:46:2f:3d:f6:ba:9b:57:e9:68:f7:b4:b2:c5:6f: cb:f3:c8:2d:f8:49:c2:45:57:02:58:ac:e7:c6:5e: c2:ed:d3:4e:7a:65:1c:c6:72:1e:3a:3a:2a:ba:95: a4:c3:fd:21:a1:62:d0:b2:61:b2:0d:93:90:7a:3f: b5:b9:63:8d:b0:50:2a:31:b7:cd:7d:09:87:c4:27: b0:c4:00:3c:67:2d:fd:10:1d:16:09:cb:51:81:0e: c7:0a:b2:de:58:5f:fb:dd:fc:0c:6c:0c:05:26:d3: 07:6d:25:b5:d3:3f:cb:bf:a6:78:dc:24:ff:f4:9e: ec:d0:97:77:6c:df:8b:ae:84:d7:5d:0c:22:20:8b: 7e:fe:2f:3c:f8:24:ee:27:40:c5:26:7a:1f:e3:d1: 2e:aa:9d:42:2a:90:d4:7d:a2:b7:f2:08:3c:76:3a: 43:00:85:e0:03:d1:b7:f7:19:4d:e2:f8:22:6a:ea: eb:68:c2:1e:f6:ae:84:64:94:d6:b0:a4:cc:03:78: 83:a7:1c:37:53:e6:4d:3b:00:16:14:7b:0d:dc:45: 6c:15:21:02:2d:a0:6f:d6:4f:66:81:b8:c3:03:4e: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:E9:B8:5D:69:DD:AC:6B:38:C9:0F:00:08:F7:40:8C:2F:65:CB X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ee:9a:33:8b:a9:5b:0c:32:25:f3:59:5e:69:af:14:f5:94: 89:e1:7a:77:0a:09:6d:ac:7b:d3:93:ce:3b:d1:be:65:b1:ee: ea:b5:0a:1e:af:20:59:5f:70:b2:c6:4b:ce:04:66:48:88:04: c7:82:8b:ff:03:3f:de:8b:00:c5:45:a3:2a:4b:0b:b9:75:ca: 4b:7f:ec:7c:ad:9b:a9:33:50:f6:a2:c3:a3:df:5f:4a:86:6c: 85:f3:60:65:b2:08:f0:91:24:08:4f:b5:3e:d0:46:64:e6:15: 33:66:30:2f:68:46:26:ec:8d:6f:d2:d6:36:1c:d8:46:ab:c8: 55:dc:6b:47:02:c0:8c:e0:4a:69:09:01:60:72:82:5f:f9:f9: 61:0e:61:8d:7b:2f:30:7f:ba:5c:b1:6b:23:e5:26:b9:b6:ed: 7d:f4:ce:ec:78:51:a0:b5:f2:9a:fd:e2:1d:ce:85:91:d8:77: d6:4c:55:3d:57:06:1f:ff:a4:06:b1:6c:95:45:f8:f8:7c:09: 54:53:dd:c2:8a:c0:dd:be:c4:b8:41:4b:87:e3:3a:59:89:58: a1:f1:aa:e6:35:1a:a8:b2:10:3c:32:77:b6:c4:0a:6f:2e:c6: 50:5a:29:1d:4e:6f:74:93:b5:a5:3d:67:db:70:0c:24:81:c9: 38:4e:6c:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjYwNDA0MTcwNDM1WhcNMjYwNDExMTcwNDM1WjAYMRYwFAYD VQQDEw02OWQxNDRhMy1hNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmPVkSLSGAJonEC2+DEqyWlPdnwqgt2s381EmUB8Ri899rqbV+lo97SyxW/L 88gt+EnCRVcCWKznxl7C7dNOemUcxnIeOjoqupWkw/0hoWLQsmGyDZOQej+1uWON sFAqMbfNfQmHxCewxAA8Zy39EB0WCctRgQ7HCrLeWF/73fwMbAwFJtMHbSW10z/L v6Z43CT/9J7s0Jd3bN+LroTXXQwiIIt+/i88+CTuJ0DFJnof49Euqp1CKpDUfaK3 8gg8djpDAIXgA9G39xlN4vgiaurraMIe9q6EZJTWsKTMA3iDpxw3U+ZNOwAWFHsN 3EVsFSECLaBv1k9mgbjDA06oWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8K6bhd ad2sazjJDwAI90CML2XLMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa+6aM4upWwwyJfNZXmmvFPWUieF6dwoJbax705POO9G+ZbHu6rUKHq8gWV9w ssZLzgRmSIgEx4KL/wM/3osAxUWjKksLuXXKS3/sfK2bqTNQ9qLDo99fSoZshfNg ZbII8JEkCE+1PtBGZOYVM2YwL2hGJuyNb9LWNhzYRqvIVdxrRwLAjOBKaQkBYHKC X/n5YQ5hjXsvMH+6XLFrI+UmubbtffTO7HhRoLXymv3iHc6Fkdh31kxVPVcGH/+k BrFslUX4+HwJVFPdworA3b7EuEFLh+M6WYlYofGq5jUaqLIQPDJ3tsQKby7GUFop HU5vdJO1pT1n23AMJIHJOE5sJg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:47 2026 by rpki-client