$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft File: DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json) Hash identifier: teP8bpipybt4yGke5dWuihb9dzjGRaDno9ZMhDvCIe0= Subject key identifier: D5:F4:6A:A6:C9:F6:C7:B0:02:B8:77:3B:B3:05:55:B9:69:9B:D3:72 Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 Certificate issuer: /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft Manifest number: 3525 Signing time: Sat 04 Apr 2026 15:09:23 +0000 Manifest this update: Sat 04 Apr 2026 15:09:22 +0000 Manifest next update: Sat 11 Apr 2026 15:09:22 +0000 Files and hashes: 1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: aT8PuHcGaY/Jnb5dOHC+LzKXEInilOW6IgVoPZxwnSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4 Validity Not Before: Apr 4 15:09:22 2026 GMT Not After : Apr 11 15:09:22 2026 GMT Subject: CN=69d129a2-4c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:cf:c1:1f:02:3c:e3:00:db:fa:33:e8:cf: fd:d6:bb:30:8b:69:55:3e:1f:87:66:41:01:39:0d: 90:c3:40:cb:f9:c9:aa:bd:a1:a6:c4:d3:bf:49:cf: a0:a0:77:1b:05:97:62:b5:e5:9b:dd:52:9d:f3:28: f6:04:72:e5:3e:7d:48:f9:53:4f:7b:2c:3d:81:e6: 92:a5:51:ce:05:27:5c:4b:fa:0c:d4:10:ca:e7:8f: f7:11:b7:05:91:30:a4:1b:7a:5e:6d:5e:bc:af:0b: d3:b7:12:fb:88:a2:a7:74:b1:f5:ac:c3:d1:b8:b7: 9d:bc:b3:e5:b9:ed:6d:8f:a7:e3:89:24:23:ea:03: cd:ea:64:47:f4:88:df:51:b8:bb:cc:ca:ab:a2:eb: 68:24:1a:21:01:eb:7e:c4:57:ea:15:f3:41:bb:c8: 6d:6b:9c:96:0d:21:a1:e7:75:9f:65:7b:94:43:2d: 6a:90:71:d3:3b:2d:72:e9:18:7c:1c:9c:03:f4:e5: a9:c9:16:32:27:7f:cf:fc:49:56:d9:f0:1f:39:8b: 5b:0a:02:7a:ce:49:9f:f7:8d:b3:19:14:eb:ac:9c: 77:24:55:51:b1:70:cc:bc:15:72:0d:3f:f9:26:56: 27:ca:f7:43:57:f8:40:05:75:f6:e4:11:f1:3a:ee: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F4:6A:A6:C9:F6:C7:B0:02:B8:77:3B:B3:05:55:B9:69:9B:D3:72 X509v3 Authority Key Identifier: keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c6:44:f0:a7:57:ef:7b:2c:f4:ca:ed:16:07:7d:99:5d:ec: a1:66:73:5d:a0:8d:b0:86:7e:cf:46:50:67:9f:1d:f0:2e:cb: 10:75:94:0f:2c:c3:47:ad:0b:5c:7e:1a:aa:78:a0:b9:94:5c: be:7b:4c:4b:85:02:ae:91:10:66:36:79:67:19:2a:93:76:55: db:83:04:86:b1:d2:e0:dd:27:83:98:ec:15:ba:81:05:a1:98: 77:59:bc:ae:fd:cc:28:35:45:20:82:7d:0c:d7:08:e9:0b:ea: 40:33:22:6c:04:79:b8:64:24:d7:62:9e:46:c6:2d:9c:49:e1: bd:1f:49:3b:da:c5:4b:f2:15:6e:d8:c3:3d:8c:22:bf:12:4c: 67:d2:1f:58:74:43:88:9d:dd:e2:10:ba:70:53:c6:90:7a:5f: 9c:a4:ec:16:39:4d:c0:12:fb:ea:25:3f:d9:71:98:6b:58:29: 33:b3:01:cc:29:18:64:88:4e:74:a1:31:63:42:aa:bb:a3:88: 2c:c6:2a:a3:cb:58:2e:9d:56:35:60:e2:74:a2:e6:5f:72:fe: 93:e7:f4:0e:80:16:7a:95:58:ec:7a:45:0b:85:eb:a9:07:98: c2:25:a0:a1:77:68:c1:98:9d:71:96:3a:9c:ab:30:40:5d:26: 06:3c:81:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENUYxMTAvBgNVBAUTKDBEOEUxNjAzRjVCNjNBQUM1NTkxOEJEMkZGREQyMTc0 RTMyMzlBRTQwHhcNMjYwNDA0MTUwOTIyWhcNMjYwNDExMTUwOTIyWjAYMRYwFAYD VQQDEw02OWQxMjlhMi00YzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApH7PwR8CPOMA2/oz6M/91rswi2lVPh+HZkEBOQ2Qw0DL+cmqvaGmxNO/Sc+g oHcbBZditeWb3VKd8yj2BHLlPn1I+VNPeyw9geaSpVHOBSdcS/oM1BDK54/3EbcF kTCkG3pebV68rwvTtxL7iKKndLH1rMPRuLedvLPlue1tj6fjiSQj6gPN6mRH9Ijf Ubi7zMqroutoJBohAet+xFfqFfNBu8hta5yWDSGh53WfZXuUQy1qkHHTOy1y6Rh8 HJwD9OWpyRYyJ3/P/ElW2fAfOYtbCgJ6zkmf942zGRTrrJx3JFVRsXDMvBVyDT/5 JlYnyvdDV/hABXX25BHxOu6jWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNX0aqbJ 9sewArh3O7MFVblpm9NyMB8GA1UdIwQYMBaAFA2OFgP1tjqsVZGL0v/dIXTjI5rk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q1Ri9ERkQ1NUI2MDFE QTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9xeFZrWXZTXzkwaGRPTWpt dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZNFdBX1cyT3F4VmtZdlNfOTBoZE9Nam11US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q1Ri9ERkQ1NUI2MDFEQTYxMUUyQTdDRjUwOUUwOEIwMkNEMi9EWTRXQV9XMk9x eFZrWXZTXzkwaGRPTWptdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnsZE8KdX73ss9MrtFgd9mV3soWZzXaCNsIZ+z0ZQZ58d8C7LEHWUDyzDR60L XH4aqniguZRcvntMS4UCrpEQZjZ5Zxkqk3ZV24MEhrHS4N0ng5jsFbqBBaGYd1m8 rv3MKDVFIIJ9DNcI6QvqQDMibAR5uGQk12KeRsYtnEnhvR9JO9rFS/IVbtjDPYwi vxJMZ9IfWHRDiJ3d4hC6cFPGkHpfnKTsFjlNwBL76iU/2XGYa1gpM7MBzCkYZIhO dKExY0Kqu6OILMYqo8tYLp1WNWDidKLmX3L+k+f0DoAWepVY7HpFC4XrqQeYwiWg oXdowZidcZY6nKswQF0mBjyBkw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:19 2026 by rpki-client