$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json) Hash identifier: 6aKLTZnSdU+DeiC6Ikq/hUvHdXF5QI3/XvudrpcQRX4= Subject key identifier: 58:6D:48:41:2D:B2:59:9E:02:83:E5:82:13:09:D2:AC:5E:3D:0B:6C Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Certificate serial: 10F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft Manifest number: 10D7 Signing time: Sat 04 Apr 2026 17:12:48 +0000 Manifest this update: Sat 04 Apr 2026 17:12:48 +0000 Manifest next update: Sat 11 Apr 2026 17:12:48 +0000 Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: aWi+r1wPYxOOjXb2OlG0ihEzPSzCklJ8QpaUPWWDqsk=) 2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=) 3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4336 (0x10f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B Validity Not Before: Apr 4 17:12:48 2026 GMT Not After : Apr 11 17:12:48 2026 GMT Subject: CN=69d14690-3f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:2c:d5:4b:7b:b0:0e:d9:0d:01:a4:55:de: 21:e5:57:aa:bd:7d:99:7e:6e:88:57:41:5f:68:af: 97:a8:c2:ef:a6:bc:9d:f3:71:87:92:cb:c7:b8:46: 1f:23:38:94:bc:33:e6:57:22:01:26:0b:2f:cf:0e: cd:79:3d:e6:a8:24:a6:8e:c4:23:42:cb:f4:34:48: 6d:40:fa:52:9b:24:ec:65:f7:9f:7b:98:f0:3f:fd: 0a:5d:1a:25:7c:75:71:1e:aa:4c:17:71:f6:a8:a6: d5:43:ee:38:17:bc:71:b4:bf:f2:96:40:d1:02:15: 53:94:08:63:7f:cb:87:d7:1f:1b:62:5b:c9:c2:c9: 2b:11:1e:ae:41:73:1b:a0:2c:a0:47:fc:2c:87:df: 91:f7:c5:c0:17:39:c2:09:ad:61:b9:21:95:6a:84: eb:c3:c3:af:d2:b3:31:dc:de:4b:ae:70:0a:15:bb: 37:f1:7f:5f:c0:2d:70:a2:e8:13:4e:45:8d:b3:f8: 00:0c:79:cc:c1:c4:36:e8:52:0c:af:db:01:63:38: 84:20:0b:e2:65:72:66:a0:b5:52:3e:08:51:44:58: f9:c1:bd:fb:10:70:df:74:29:a2:06:26:04:a6:7d: ec:70:05:0b:64:e3:af:ba:78:ff:4b:ca:37:ba:6c: 9f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:48:41:2D:B2:59:9E:02:83:E5:82:13:09:D2:AC:5E:3D:0B:6C X509v3 Authority Key Identifier: keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:99:12:7c:14:80:d8:34:b3:98:f0:55:ec:39:3f:7a:79:12: 42:f4:d8:79:c0:09:bc:33:b1:01:c5:72:b2:50:5e:de:73:8f: 21:86:4e:68:0f:1a:41:58:3d:62:40:f0:42:18:05:bf:5a:ce: 57:26:35:ef:23:f6:79:05:57:80:5b:f7:3f:5d:11:bd:b5:5e: a5:da:88:f4:ac:8f:a7:b6:a8:87:01:6b:d3:6b:4b:d0:73:7f: 61:b9:ec:e1:17:8f:af:37:83:fb:e3:c3:e8:28:de:1c:33:9a: 58:b0:0d:45:34:30:0d:4b:80:f7:7c:a7:c6:80:59:d5:73:08: f5:d0:47:22:2c:de:ba:f7:b8:9f:02:83:73:71:e0:03:53:5e: 0e:10:3c:e0:66:de:44:ac:a0:5d:9a:40:83:56:80:81:da:68: d7:ad:cc:38:04:5b:4c:ad:85:c8:1d:9a:c4:d4:d6:ea:ed:1b: ca:45:c4:1c:a5:1a:4d:c2:d2:ca:71:aa:4c:b0:fc:e4:ab:92: 4d:c7:28:9d:40:9d:c2:c4:6a:27:43:fa:22:6b:f9:83:9e:37: c7:07:4e:b4:3f:13:23:ad:55:23:58:d7:7b:ec:50:a2:d8:83: c7:1b:b4:27:f4:a5:e6:23:5f:dc:d7:1a:2c:fa:bf:51:0a:62: c5:e2:12:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD QTNCQzgxOUIwHhcNMjYwNDA0MTcxMjQ4WhcNMjYwNDExMTcxMjQ4WjAYMRYwFAYD VQQDEw02OWQxNDY5MC0zZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJQs1Ut7sA7ZDQGkVd4h5VeqvX2Zfm6IV0FfaK+XqMLvpryd83GHksvHuEYf IziUvDPmVyIBJgsvzw7NeT3mqCSmjsQjQsv0NEhtQPpSmyTsZfefe5jwP/0KXRol fHVxHqpMF3H2qKbVQ+44F7xxtL/ylkDRAhVTlAhjf8uH1x8bYlvJwskrER6uQXMb oCygR/wsh9+R98XAFznCCa1huSGVaoTrw8Ov0rMx3N5LrnAKFbs38X9fwC1wougT TkWNs/gADHnMwcQ26FIMr9sBYziEIAviZXJmoLVSPghRRFj5wb37EHDfdCmiBiYE pn3scAULZOOvunj/S8o3umyffwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFhtSEEt slmeAoPlghMJ0qxePQtsMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct cnBSVEhiRGlZRVhLTzhnWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABpkSfBSA2DSzmPBV7Dk/enkSQvTYecAJvDOxAcVyslBe3nOPIYZOaA8aQVg9 YkDwQhgFv1rOVyY17yP2eQVXgFv3P10RvbVepdqI9KyPp7aohwFr02tL0HN/Ybns 4RePrzeD++PD6CjeHDOaWLANRTQwDUuA93ynxoBZ1XMI9dBHIizeuve4nwKDc3Hg A1NeDhA84GbeRKygXZpAg1aAgdpo163MOARbTK2FyB2axNTW6u0bykXEHKUaTcLS ynGqTLD85KuSTcconUCdwsRqJ0P6Imv5g543xwdOtD8TI61VI1jXe+xQotiDxxu0 J/Sl5iNf3NcaLPq/UQpixeIShQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:33 2026 by rpki-client