$ rpki-client -vvf rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft File: DcXOSilPLJOAqRNe4fBTByikzaY.mft (raw, json) Hash identifier: qdE2DSitrahKcw/IHIwsZl/jNJs4vB/3fIOneL0w1/k= Subject key identifier: 01:49:D6:9B:3C:87:7D:05:79:C8:E5:87:7A:CD:44:DD:02:E5:33:5A Authority key identifier: 0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 Certificate issuer: /CN=A912B4DB/serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Certificate serial: 353F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft Manifest number: 3532 Signing time: Sat 04 Apr 2026 15:11:25 +0000 Manifest this update: Sat 04 Apr 2026 15:11:25 +0000 Manifest next update: Sat 11 Apr 2026 15:11:25 +0000 Files and hashes: 1: DcXOSilPLJOAqRNe4fBTByikzaY.crl (hash: dzQvDfUqmxzEzKIx0dtDcTT/2anJmtammsfBsW+EM38=) 2: 7FE5F2CEDB9411E9832A463AC4F9AE02.roa (hash: 3sjWZooxRLY6I7soj41lsN2IJ+Dwn122aCRXMGhUs7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13631 (0x353f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B4DB, serialNumber=0DC5CE4A294F2C9380A9135EE1F0530728A4CDA6 Validity Not Before: Apr 4 15:11:25 2026 GMT Not After : Apr 11 15:11:25 2026 GMT Subject: CN=69d12a1d-74e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:e6:1c:fe:a7:6f:e8:84:b2:44:35:44:cb: 9b:42:81:55:9f:aa:cb:06:10:b4:2a:72:3c:83:2f: d1:17:d7:75:8b:1a:38:7b:32:b3:a7:8a:e4:8c:49: 2b:ae:0b:49:f1:1b:ce:26:bc:3f:97:fb:1a:ed:cc: d6:4c:d8:2d:7d:10:cf:0f:80:4f:33:6c:c5:20:19: 13:57:97:22:09:76:3b:3a:61:47:91:50:55:f4:b4: 40:0b:bb:6f:d1:02:e5:12:4b:c2:ce:66:58:55:2a: c1:e4:e3:7a:9b:89:4a:3e:d7:a7:91:82:cd:ef:e4: fc:86:d6:f8:de:bc:72:77:f3:a4:17:dc:a8:e0:34: 7d:7e:b4:b1:a2:71:e3:c8:08:67:d1:28:b6:f4:f3: 1c:a1:fb:6e:30:e7:57:5a:09:06:3e:3b:7b:a6:bb: 34:fc:8a:fe:28:59:34:2c:22:ff:39:8c:d8:b2:9a: e6:de:8d:c4:64:0a:be:39:00:7e:e3:56:35:2a:e1: 27:bd:73:bc:fc:7d:5d:bc:74:27:33:50:c5:71:dc: 1f:5a:d5:53:ba:2d:84:67:8f:25:ac:74:07:8e:27: 40:5e:96:b0:e1:ff:b1:b3:59:c5:7f:07:f5:64:2e: 50:d0:40:1c:55:c2:5f:cd:62:91:a1:08:4e:0f:96: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:49:D6:9B:3C:87:7D:05:79:C8:E5:87:7A:CD:44:DD:02:E5:33:5A X509v3 Authority Key Identifier: keyid:0D:C5:CE:4A:29:4F:2C:93:80:A9:13:5E:E1:F0:53:07:28:A4:CD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DcXOSilPLJOAqRNe4fBTByikzaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B4DB/5C50296C1DA811E2AB6BA6A208B02CD2/DcXOSilPLJOAqRNe4fBTByikzaY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8b:93:b4:56:02:97:a0:1c:39:49:52:6f:cd:4a:60:e5:8a: 4d:57:a7:fb:76:da:7d:39:8f:86:03:f8:02:5f:08:53:fd:35: b3:cd:fc:97:1c:bd:64:44:47:ff:2c:50:2e:ac:11:c1:d3:68: e9:16:59:ce:27:25:6d:fa:48:9f:5d:fc:b7:55:26:fa:1d:0f: fd:d1:0a:6a:c2:67:6b:2e:00:b7:36:4a:1c:bb:82:0f:64:91: b1:35:0d:c2:ed:9c:ff:8f:a1:43:10:45:5a:ca:65:a5:0c:ab: b1:0b:d0:c6:0d:dd:fb:e7:36:f5:69:3c:68:e8:83:f0:9c:3b: 6c:76:1c:d6:9e:3e:a6:df:9b:44:be:ad:f5:65:ea:b4:47:7e: 11:09:6b:85:d0:02:6f:93:7f:bb:39:d6:60:32:c1:9e:98:0c: ad:eb:28:e4:11:43:d7:4b:a0:f6:3f:09:ef:58:f9:1a:33:25: aa:ed:eb:28:db:ed:cb:49:43:18:54:ca:5d:2e:73:11:ce:70: fa:28:2e:68:b1:59:cc:ea:67:d7:ae:c9:62:83:45:23:d1:43: c0:7d:70:c4:d7:02:e6:97:da:c6:07:dc:9d:8e:67:a9:d9:ef: a7:71:2e:19:11:10:5e:01:6d:6f:1b:78:e2:73:80:2a:c6:d4: d6:1c:12:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI0REIxMTAvBgNVBAUTKDBEQzVDRTRBMjk0RjJDOTM4MEE5MTM1RUUxRjA1MzA3 MjhBNENEQTYwHhcNMjYwNDA0MTUxMTI1WhcNMjYwNDExMTUxMTI1WjAYMRYwFAYD VQQDEw02OWQxMmExZC03NGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ3mHP6nb+iEskQ1RMubQoFVn6rLBhC0KnI8gy/RF9d1ixo4ezKzp4rkjEkr rgtJ8RvOJrw/l/sa7czWTNgtfRDPD4BPM2zFIBkTV5ciCXY7OmFHkVBV9LRAC7tv 0QLlEkvCzmZYVSrB5ON6m4lKPtenkYLN7+T8htb43rxyd/OkF9yo4DR9frSxonHj yAhn0Si29PMcoftuMOdXWgkGPjt7prs0/Ir+KFk0LCL/OYzYsprm3o3EZAq+OQB+ 41Y1KuEnvXO8/H1dvHQnM1DFcdwfWtVTui2EZ48lrHQHjidAXpaw4f+xs1nFfwf1 ZC5Q0EAcVcJfzWKRoQhOD5YarwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFJ1ps8 h30Fecjlh3rNRN0C5TNaMB8GA1UdIwQYMBaAFA3FzkopTyyTgKkTXuHwUwcopM2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjREQi81QzUwMjk2QzFE QTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExKT0FxUk5lNGZCVEJ5aWt6 YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RjWE9TaWxQTEpPQXFSTmU0ZkJUQnlpa3phWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjREQi81QzUwMjk2QzFEQTgxMUUyQUI2QkE2QTIwOEIwMkNEMi9EY1hPU2lsUExK T0FxUk5lNGZCVEJ5aWt6YVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM4uTtFYCl6AcOUlSb81KYOWKTVen+3bafTmPhgP4Al8IU/01s838lxy9ZERH /yxQLqwRwdNo6RZZziclbfpIn138t1Um+h0P/dEKasJnay4AtzZKHLuCD2SRsTUN wu2c/4+hQxBFWsplpQyrsQvQxg3d++c29Wk8aOiD8Jw7bHYc1p4+pt+bRL6t9WXq tEd+EQlrhdACb5N/uznWYDLBnpgMreso5BFD10ug9j8J71j5GjMlqu3rKNvty0lD GFTKXS5zEc5w+iguaLFZzOpn167JYoNFI9FDwH1wxNcC5pfaxgfcnY5nqdnvp3Eu GREQXgFtbxt44nOAKsbU1hwSAw== -----END CERTIFICATE-----Generated at Mon Apr 6 15:10:02 2026 by rpki-client