$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft File: DkAOOUTvUXdtyNgbU7art55NDV4.mft (raw, json) Hash identifier: YtKpOrXrgE92MBOpGBeUs6ttaoD6wWZFpCu6EUmB9BA= Subject key identifier: 40:7C:C8:5F:2A:6A:36:76:A9:99:F2:45:C9:ED:86:9E:1B:35:EB:D2 Authority key identifier: 0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E Certificate issuer: /CN=A9125A35/serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft Manifest number: 29 Signing time: Tue 19 May 2026 08:37:04 +0000 Manifest this update: Tue 19 May 2026 08:37:04 +0000 Manifest next update: Tue 26 May 2026 08:37:04 +0000 Files and hashes: 1: DkAOOUTvUXdtyNgbU7art55NDV4.crl (hash: tjoWEqT+IuyMMnMpqzUFn6fawu47zFHygzAwyUy0AFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A35, serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Validity Not Before: May 19 08:37:04 2026 GMT Not After : May 26 08:37:04 2026 GMT Subject: CN=6a0c2130-0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:06:7c:7e:67:b0:f8:96:58:cb:12:d9:49:9b: b0:7c:1d:7b:d7:d6:81:09:80:c8:97:4d:0f:da:d6: ee:12:96:1b:95:9e:6a:99:cb:a0:58:fc:1f:3c:f6: ba:d5:55:b3:41:b3:8c:92:b9:d2:f3:ac:d8:6f:16: da:7b:22:73:62:1e:d7:d6:d4:e8:e7:1a:d3:20:8b: 6f:d4:45:ad:47:da:0f:40:c1:34:68:33:31:47:97: d5:48:26:29:b0:f0:1a:1f:b3:98:73:73:34:57:7a: f2:3d:73:4c:e0:7f:67:2e:a7:d4:87:e4:9e:2f:35: 17:d8:6d:18:35:ed:7c:0c:78:16:15:25:f7:0a:f9: 96:56:68:32:3c:df:cb:f5:f1:d7:38:50:b3:71:ee: f2:02:28:4a:f5:03:46:f3:ba:7b:15:81:92:e9:97: c5:fe:ab:5d:07:f6:ac:78:9c:0c:9b:d9:6f:22:67: d7:03:98:ec:ed:89:80:f7:37:a6:67:f8:ed:81:4f: 30:92:a2:5b:86:ad:8f:c4:5a:d3:f7:c2:9e:1a:52: aa:5a:42:5b:20:7a:9b:b1:4f:ea:cd:4c:4e:80:f4: e3:ea:d0:6e:93:e1:ff:45:b3:dc:c1:c7:b3:45:1e: 3c:99:26:80:87:b2:df:44:dc:fb:79:34:a3:50:b9: e6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7C:C8:5F:2A:6A:36:76:A9:99:F2:45:C9:ED:86:9E:1B:35:EB:D2 X509v3 Authority Key Identifier: keyid:0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4a:63:16:77:0b:93:3d:be:f6:3c:ff:31:e1:af:fc:72:92: 6f:92:f7:bc:6c:ff:fc:46:3a:5e:6d:4b:f2:02:a7:6a:69:ae: b0:0b:14:e2:8c:b7:86:fc:20:3a:f3:b8:e0:4f:9e:b6:35:fa: fc:21:b3:69:8f:40:38:15:ce:94:70:71:66:06:97:f9:d9:14: 8f:be:a2:75:17:79:ac:ec:f7:8c:f2:19:8c:26:85:31:09:c4: db:b8:db:94:14:32:55:b9:6e:e8:08:65:a8:0a:ef:6d:f5:a0: 8d:c6:38:c8:96:6f:5c:1d:6b:f0:8f:dd:6b:df:9e:d2:b8:43: 04:e5:1f:d2:dd:84:eb:9c:d8:32:8f:79:bd:e1:68:36:0a:3a: a4:01:5d:d5:c1:f6:b1:cf:fb:56:61:80:56:8f:96:cd:26:e9: 3e:46:a6:d4:dd:90:b6:33:12:3f:44:21:8e:6c:13:1c:3f:8c: 5c:bf:b7:84:9a:0a:06:7f:ba:70:b0:20:35:a6:cc:d1:21:e0: 83:9d:38:af:8b:7d:dd:b6:1b:84:f2:ff:3f:2e:f6:8a:50:5a: a9:26:60:7c:85:2f:34:54:91:e9:ac:5a:39:10:24:ac:5b:0b: 5e:86:3d:58:30:7e:2e:52:82:0d:85:1e:ac:cf:8d:ea:ff:e8: 26:21:01:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUEzNTExMC8GA1UEBRMoMEU0MDBFMzk0NEVGNTE3NzZEQzhEODFCNTNCNkFCQjc5 RTREMEQ1RTAeFw0yNjA1MTkwODM3MDRaFw0yNjA1MjYwODM3MDRaMBgxFjAUBgNV BAMTDTZhMGMyMTMwLTBlMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnBnx+Z7D4lljLEtlJm7B8HXvX1oEJgMiXTQ/a1u4SlhuVnmqZy6BY/B889rrV VbNBs4ySudLzrNhvFtp7InNiHtfW1OjnGtMgi2/URa1H2g9AwTRoMzFHl9VIJimw 8Bofs5hzczRXevI9c0zgf2cup9SH5J4vNRfYbRg17XwMeBYVJfcK+ZZWaDI838v1 8dc4ULNx7vICKEr1A0bzunsVgZLpl8X+q10H9qx4nAyb2W8iZ9cDmOztiYD3N6Zn +O2BTzCSoluGrY/EWtP3wp4aUqpaQlsgepuxT+rNTE6A9OPq0G6T4f9Fs9zBx7NF HjyZJoCHst9E3Pt5NKNQuebPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQHzIXypq NnapmfJFye2Gnhs169IwHwYDVR0jBBgwFoAUDkAOOUTvUXdtyNgbU7art55NDV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1QTM1L0NFN0U5MUQ4MTZE MDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhkdHlOZ2JVN2FydDU1TkRW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGtBT09VVHZVWGR0eU5nYlU3YXJ0NTVORFY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 QTM1L0NFN0U5MUQ4MTZEMDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhk dHlOZ2JVN2FydDU1TkRWNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBSSmMWdwuTPb72PP8x4a/8cpJvkve8bP/8RjpebUvyAqdqaa6wCxTijLeG/CA6 87jgT562Nfr8IbNpj0A4Fc6UcHFmBpf52RSPvqJ1F3ms7PeM8hmMJoUxCcTbuNuU FDJVuW7oCGWoCu9t9aCNxjjIlm9cHWvwj91r357SuEME5R/S3YTrnNgyj3m94Wg2 CjqkAV3Vwfaxz/tWYYBWj5bNJuk+RqbU3ZC2MxI/RCGObBMcP4xcv7eEmgoGf7pw sCA1pszRIeCDnTivi33dthuE8v8/LvaKUFqpJmB8hS80VJHprFo5ECSsWwtehj1Y MH4uUoINhR6sz43q/+gmIQFd -----END CERTIFICATE-----Generated at Thu May 21 10:16:14 2026 by rpki-client