$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: swHueMGlVQLRLUmbSqbR2VQ5T0kvZz433yBl9blWyho= Subject key identifier: 12:99:5A:C4:ED:4C:D8:EB:71:36:A7:DA:DE:0B:E0:0A:E6:39:D1:83 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: BB Signing time: Tue 05 May 2026 07:01:38 +0000 Manifest this update: Tue 05 May 2026 07:01:37 +0000 Manifest next update: Tue 12 May 2026 07:01:37 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: TB0oqNzsrnU7UBGi2C3qkB5uM6pP+2YIH4pSMeIoy+A=) 2: CA5B991430E111F09B76D311C4F9AE02.roa (hash: PEnLi/2yYSoy8XLBMGLd/6VOl25IvlE5IW4q9j8andY=) 3: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: QYbToAo1d6nye+FsjzAnvw3/lP4Nx+MEududWG8oDyc=) 4: 570B12E0562611F09F085F44C4F9AE02.roa (hash: fh4pbk7ZgyPKBaTjsRWjp1tC+xa/lcPj1cdrRM1oMjA=) 5: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: i0U6RLy91T9DkhNZtnLF7FlhidMvmsCPREqfKmoGIdU=) 6: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: reMz8lDbqv/5MKQ6Imr6fG4CgsSrFCmBFY2a5YJcGm4=) 7: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: XTFl/MyUGXYDLMXaMRa7HDON+jfgJcrSfnOokKAkziU=) 8: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: mmlD29Jwj8h5f301RfKicLwmF3TuYi2j0tYABjJXZO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: May 5 07:01:37 2026 GMT Not After : May 12 07:01:37 2026 GMT Subject: CN=69f995d1-587a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:e3:a5:5f:b0:5b:a7:d1:d8:36:35:53:d7: 95:04:56:96:e6:e6:b5:a0:2d:9e:86:03:cf:e9:90: 50:20:dc:1c:7e:88:7f:13:87:3b:01:1d:f4:fa:a5: fa:49:a3:3e:dd:10:4e:81:9b:ff:59:88:9a:83:49: fc:35:53:1c:ec:72:fb:0c:63:00:bb:35:24:0f:3a: 7a:31:22:c4:21:a5:a8:70:b6:80:f5:b1:37:9a:57: 49:4e:82:7c:97:26:f0:f6:e4:9c:5e:75:e1:d2:83: d3:7c:f9:3f:6a:c4:9e:c9:b7:3c:7a:3c:53:27:c5: 9e:d1:d0:6d:87:45:b5:92:45:2a:36:ef:ed:87:0a: 8a:33:ce:75:8b:93:f8:ce:88:1b:fb:6c:3e:3e:f9: e9:57:b0:88:1d:a1:8d:6a:e5:67:d0:12:19:d4:6a: be:91:52:7b:cf:82:70:51:29:49:1d:42:00:25:4c: 56:47:d7:1d:a8:f8:ae:28:53:03:f7:b1:d6:54:6a: 40:a2:fe:7f:a5:f0:49:dd:de:d3:8a:bc:8d:71:e7: 29:10:c6:cc:8c:c8:88:97:12:ba:da:a6:df:d7:43: 98:cf:d1:5f:9d:c2:26:db:65:8e:4b:d3:2b:21:23: 90:a9:db:fe:c1:2c:2d:a8:8c:61:9b:c9:41:51:15: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:5A:C4:ED:4C:D8:EB:71:36:A7:DA:DE:0B:E0:0A:E6:39:D1:83 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b7:a9:36:8f:42:bc:fe:71:c6:ab:90:79:42:20:bd:b5:4e: d8:66:d8:c1:a0:d5:ef:61:75:e7:aa:5d:8c:50:d4:22:74:32: 9c:b3:64:40:bf:59:34:48:05:20:6f:bb:77:5c:32:40:2e:07: 69:05:62:3a:f7:85:fd:a9:a9:ee:44:6b:d5:1b:76:92:fd:ed: e1:58:58:e4:b3:73:be:73:19:ea:ef:44:26:52:de:0e:4a:b8: 2c:e8:e0:9b:92:9e:a7:a6:5b:c5:f0:fe:be:e8:b3:d1:42:b7: e0:fa:b2:04:04:82:8c:7a:ef:6a:67:d5:10:ef:82:5a:32:5d: 36:d9:f3:88:c4:4f:13:42:b9:c7:30:b5:11:78:ff:22:27:f5: 47:9f:72:d7:5c:f0:b8:bf:dd:37:ff:a6:30:77:14:64:77:0d: 62:4b:0e:94:27:e1:61:70:09:a6:1c:aa:33:2d:85:b6:54:50: 9f:07:32:6b:42:6b:90:e9:22:85:f1:5d:fb:66:5e:6d:a6:52: 1b:66:ec:1c:aa:10:8f:7c:e1:c9:e1:41:6c:2a:d9:5a:71:eb: 41:c2:66:41:17:f7:91:7a:02:97:57:40:aa:33:82:0d:fb:0f: 1c:41:1a:d8:4f:b6:e0:c5:1f:92:10:38:ad:f6:4e:ff:63:e4: 25:74:84:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwNTA1MDcwMTM3WhcNMjYwNTEyMDcwMTM3WjAYMRYwFAYD VQQDEw02OWY5OTVkMS01ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBHjpV+wW6fR2DY1U9eVBFaW5ua1oC2ehgPP6ZBQINwcfoh/E4c7AR30+qX6 SaM+3RBOgZv/WYiag0n8NVMc7HL7DGMAuzUkDzp6MSLEIaWocLaA9bE3mldJToJ8 lybw9uScXnXh0oPTfPk/asSeybc8ejxTJ8We0dBth0W1kkUqNu/thwqKM851i5P4 zogb+2w+PvnpV7CIHaGNauVn0BIZ1Gq+kVJ7z4JwUSlJHUIAJUxWR9cdqPiuKFMD 97HWVGpAov5/pfBJ3d7TiryNcecpEMbMjMiIlxK62qbf10OYz9FfncIm22WOS9Mr ISOQqdv+wSwtqIxhm8lBURXgZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKZWsTt TNjrcTan2t4L4ArmOdGDMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZLepNo9CvP5xxquQeUIgvbVO2GbYwaDV72F156pdjFDUInQynLNkQL9ZNEgF IG+7d1wyQC4HaQViOveF/amp7kRr1Rt2kv3t4VhY5LNzvnMZ6u9EJlLeDkq4LOjg m5Kep6ZbxfD+vuiz0UK34PqyBASCjHrvamfVEO+CWjJdNtnziMRPE0K5xzC1EXj/ Iif1R59y11zwuL/dN/+mMHcUZHcNYksOlCfhYXAJphyqMy2FtlRQnwcya0JrkOki hfFd+2ZebaZSG2bsHKoQj3zhyeFBbCrZWnHrQcJmQRf3kXoCl1dAqjOCDfsPHEEa 2E+24MUfkhA4rfZO/2PkJXSEVw== -----END CERTIFICATE-----Generated at Wed May 6 03:27:50 2026 by rpki-client