$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json) Hash identifier: lbkVlmpu7v1z/gK4tMRj/lVuKKVoul694rC/Af9n7+A= Subject key identifier: 30:CA:A7:C4:C1:3C:56:64:40:E5:C2:8D:1F:C4:7C:C6:94:91:E2:2C Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 353A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft Manifest number: 3531 Signing time: Sat 04 Apr 2026 14:17:17 +0000 Manifest this update: Sat 04 Apr 2026 14:17:16 +0000 Manifest next update: Sat 11 Apr 2026 14:17:16 +0000 Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: NgbFkShHbrq/DpTUSa0XQ5R7O9ZhCsE3L0+XlxgvKNU=) 2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: ejSzcir65rLiTU/e/21Y3fbhfAZ1CL0WvA6cLtmCZRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13626 (0x353a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: Apr 4 14:17:16 2026 GMT Not After : Apr 11 14:17:16 2026 GMT Subject: CN=69d11d6d-028e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:7f:bb:fa:81:47:4c:ff:d2:41:82:48:6d: 34:6b:03:0e:5c:27:0a:24:19:cf:11:ed:2e:72:5e: be:af:10:3a:f1:d5:e0:cc:4b:ab:0d:53:e4:f3:82: d2:6d:b1:1c:8f:ba:02:1e:84:c2:4b:de:c8:9a:3a: 1b:0e:2d:e0:99:b3:41:41:4c:9b:7b:79:4e:08:ed: 50:17:50:ed:c7:d4:9c:ba:5c:14:c1:6f:a3:69:96: bc:66:95:be:06:c0:bd:eb:d4:af:50:46:41:83:27: 66:34:94:6f:a4:a7:45:57:19:9d:04:f9:81:36:da: 39:88:17:76:b7:0f:13:8b:0b:2e:bc:e1:d2:38:8f: 5e:e7:54:fb:96:14:31:e5:3d:3e:f1:2d:52:3c:ce: e8:ac:3a:6e:a0:0a:a9:20:0f:bd:a6:0f:52:cc:35: 54:9f:8f:00:3c:8c:22:00:e8:7a:c7:93:31:99:f1: 4d:cd:25:77:76:b2:e1:df:41:81:3e:1c:13:f5:de: ae:d8:d7:32:81:48:07:fc:12:c9:2b:50:21:45:19: 06:01:31:2a:8f:1e:30:6c:26:f6:46:82:bc:b7:48: d4:4e:c7:e5:51:2b:5e:e0:3d:42:a1:36:0d:3d:8a: ad:a2:98:03:f7:34:ff:b8:55:9a:1a:95:7c:65:c5: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CA:A7:C4:C1:3C:56:64:40:E5:C2:8D:1F:C4:7C:C6:94:91:E2:2C X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:68:f1:e3:2d:24:ff:70:ba:cb:b0:9d:9e:96:d5:2a:59:21: 9a:b9:e2:a2:fd:60:c5:3d:76:90:99:21:7a:4a:32:c0:60:1b: 48:92:f7:54:c6:02:64:d0:aa:0e:80:ea:2c:27:46:ed:79:28: 35:67:1c:00:11:bf:08:6e:84:29:8f:7e:09:d6:08:4c:22:89: 98:42:c6:36:55:11:41:f1:08:99:15:bd:9e:ec:f7:c0:b1:1b: ca:a1:e6:b1:86:4e:c6:91:b7:2c:5b:8b:4d:ba:ce:39:a7:b1: f5:e7:42:22:c9:3a:47:92:d9:4a:6f:ea:2c:bf:60:b8:7f:02: 0a:90:fe:16:8e:22:97:27:a1:0d:5c:ce:e5:14:88:32:23:b2: 42:2a:dd:8f:01:ee:87:43:1a:41:01:4e:f8:74:62:03:0f:7b: b0:16:8c:0f:85:04:9e:ad:84:fe:5c:37:69:c4:3c:6c:a1:b0: f1:4f:df:fd:ee:27:38:23:2e:05:99:01:3f:f8:e6:a9:20:90: fa:36:d9:12:9b:ab:bc:cf:21:da:b3:7c:49:f5:88:38:ee:1e: d9:21:15:8c:4b:59:11:33:e2:3c:5d:bb:dc:34:55:df:ca:44: 21:73:d9:9e:9f:92:0e:82:82:b2:7a:93:26:71:22:5b:8f:a6: 52:d0:a3:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjYwNDA0MTQxNzE2WhcNMjYwNDExMTQxNzE2WjAYMRYwFAYD VQQDEw02OWQxMWQ2ZC0wMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhfR/u/qBR0z/0kGCSG00awMOXCcKJBnPEe0ucl6+rxA68dXgzEurDVPk84LS bbEcj7oCHoTCS97ImjobDi3gmbNBQUybe3lOCO1QF1Dtx9SculwUwW+jaZa8ZpW+ BsC969SvUEZBgydmNJRvpKdFVxmdBPmBNto5iBd2tw8TiwsuvOHSOI9e51T7lhQx 5T0+8S1SPM7orDpuoAqpIA+9pg9SzDVUn48APIwiAOh6x5MxmfFNzSV3drLh30GB PhwT9d6u2NcygUgH/BLJK1AhRRkGATEqjx4wbCb2RoK8t0jUTsflUSte4D1CoTYN PYqtopgD9zT/uFWaGpV8ZcXT/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDDKp8TB PFZkQOXCjR/EfMaUkeIsMB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDYwRi81RTdFRDVFNDFENkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdI M1ZOUkZoT1FFdkR6SFlRSmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAomjx4y0k/3C6y7CdnpbVKlkhmrniov1gxT12kJkhekoywGAbSJL3VMYCZNCq DoDqLCdG7XkoNWccABG/CG6EKY9+CdYITCKJmELGNlURQfEImRW9nuz3wLEbyqHm sYZOxpG3LFuLTbrOOaex9edCIsk6R5LZSm/qLL9guH8CCpD+Fo4ilyehDVzO5RSI MiOyQirdjwHuh0MaQQFO+HRiAw97sBaMD4UEnq2E/lw3acQ8bKGw8U/f/e4nOCMu BZkBP/jmqSCQ+jbZEpurvM8h2rN8SfWIOO4e2SEVjEtZETPiPF273DRV38pEIXPZ np+SDoKCsnqTJnEiW4+mUtCjiw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:46 2026 by rpki-client