$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: CmxIM7kzqAPdV3rmJtK1vYdF4UUtA+PByDd3yZJX9Dw= Subject key identifier: DF:8E:A0:36:FC:A4:A9:33:75:DC:CD:B9:4A:F6:40:1E:04:B5:1C:22 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 0587 Signing time: Sat 04 Apr 2026 23:02:42 +0000 Manifest this update: Sat 04 Apr 2026 23:02:41 +0000 Manifest next update: Sat 11 Apr 2026 23:02:41 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: /OP1XBo261v+l7iOfjjAVwuhrdQGbtItALLxiSf+EVI=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: O7zzjDBWEUSYqll/hl0eb8ojldYcS/JklLQk1YXiDkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC, serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Apr 4 23:02:41 2026 GMT Not After : Apr 11 23:02:41 2026 GMT Subject: CN=69d19891-e938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:d1:07:4d:56:7b:8d:8f:19:2b:75:56:53: 01:d2:1e:b3:ea:6a:2f:82:16:11:7f:26:da:44:cd: 85:3b:8e:63:83:3c:67:d0:95:eb:ea:34:fd:aa:15: 7b:03:6e:1f:d8:ea:8e:f3:38:35:4c:f8:fd:54:32: 8b:91:d3:dd:d6:13:ff:f8:d8:d1:12:3b:a6:21:a4: 2b:21:81:b8:2a:3c:56:37:d3:bb:8d:08:ff:67:b4: 60:09:9a:c1:f0:4f:16:6e:45:b7:bf:78:2c:f3:4a: 58:bf:91:6b:b3:9b:99:80:7b:fe:f8:1b:9c:4f:e3: 3e:ca:06:cc:bd:c6:83:b1:a6:59:ef:d9:a6:23:a5: f4:82:9d:32:35:58:24:94:d6:8c:4a:f4:fb:96:7d: e5:49:f6:73:03:c9:24:1c:fa:79:0a:84:9c:49:45: 8a:cc:aa:86:02:b6:c8:e7:7e:d1:7f:e5:9c:ce:3a: 07:a9:2a:ba:c8:00:fd:f4:b4:03:66:43:2c:6c:64: 4f:a1:83:24:85:67:15:b3:5f:8c:04:d2:64:31:14: 84:1e:25:c8:98:c0:8c:21:31:a8:6d:b9:e5:73:8c: 2a:dd:c0:53:e2:a6:e8:5b:e1:93:d2:6d:b5:e8:a5: 1f:c4:6e:f8:b2:b3:6e:0b:c8:ec:62:b1:1a:ee:fa: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8E:A0:36:FC:A4:A9:33:75:DC:CD:B9:4A:F6:40:1E:04:B5:1C:22 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a7:21:7a:97:85:08:ee:4c:3c:b1:be:41:97:9b:8c:71:c6: 1e:1e:a8:a2:64:16:e4:f4:95:ce:d3:cf:f8:bf:df:4d:c2:57: 98:04:ce:b4:80:71:5b:ad:97:7e:5f:b2:6f:21:a6:3c:18:bc: a0:87:9d:50:33:25:a7:ee:90:21:8a:9c:b9:be:8e:6d:d4:a6: 28:f2:91:c3:de:2b:c4:b6:8e:de:e3:fe:4f:7a:f6:9a:44:53: de:30:7f:ce:78:80:a3:ca:01:4e:63:99:35:57:8a:a7:6b:0b: c3:8c:66:19:c2:40:6d:76:8a:e5:88:77:7f:01:db:9f:f2:2d: 29:df:3c:2c:28:3c:91:17:fc:7e:24:b1:f7:98:e9:28:2a:2f: d5:29:90:af:f9:5f:32:9b:1b:04:28:37:b3:05:0c:a3:13:14: 54:90:e1:00:44:10:c2:e7:ae:25:81:6f:ed:8d:f3:ca:c3:3a: 36:cb:13:be:0a:e7:c8:ec:77:a0:0e:d3:bf:d6:6e:88:15:38: 2d:ba:59:a4:02:87:f5:d4:63:ce:a0:31:ee:42:c7:de:8f:c7: d5:d8:39:52:04:71:38:91:96:c1:1b:73:30:6b:5b:1d:df:00: 8d:a7:e3:35:1b:e2:c3:26:5f:d0:1a:f0:2a:3a:d4:a8:b7:32: 20:3d:53:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjYwNDA0MjMwMjQxWhcNMjYwNDExMjMwMjQxWjAYMRYwFAYD VQQDEw02OWQxOTg5MS1lOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnzRB01We42PGSt1VlMB0h6z6movghYRfybaRM2FO45jgzxn0JXr6jT9qhV7 A24f2OqO8zg1TPj9VDKLkdPd1hP/+NjREjumIaQrIYG4KjxWN9O7jQj/Z7RgCZrB 8E8WbkW3v3gs80pYv5Frs5uZgHv++BucT+M+ygbMvcaDsaZZ79mmI6X0gp0yNVgk lNaMSvT7ln3lSfZzA8kkHPp5CoScSUWKzKqGArbI537Rf+WczjoHqSq6yAD99LQD ZkMsbGRPoYMkhWcVs1+MBNJkMRSEHiXImMCMITGobbnlc4wq3cBT4qboW+GT0m21 6KUfxG74srNuC8jsYrEa7vr3cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+OoDb8 pKkzddzNuUr2QB4EtRwiMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMqchepeFCO5MPLG+QZebjHHGHh6oomQW5PSVztPP+L/fTcJXmATOtIBxW62X fl+ybyGmPBi8oIedUDMlp+6QIYqcub6ObdSmKPKRw94rxLaO3uP+T3r2mkRT3jB/ zniAo8oBTmOZNVeKp2sLw4xmGcJAbXaK5Yh3fwHbn/ItKd88LCg8kRf8fiSx95jp KCov1SmQr/lfMpsbBCg3swUMoxMUVJDhAEQQwueuJYFv7Y3zysM6NssTvgrnyOx3 oA7Tv9ZuiBU4LbpZpAKH9dRjzqAx7kLH3o/H1dg5UgRxOJGWwRtzMGtbHd8Ajafj NRviwyZf0BrwKjrUqLcyID1TAw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:47:03 2026 by rpki-client