$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft File: rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft (raw, json) Hash identifier: ZVESiqvD4AtrpDt8aZ1jOE/Jele1RWjkZUz5tfYzFf4= Subject key identifier: 52:10:F7:D6:EE:D5:50:A6:DB:DD:7C:FC:C6:7F:59:68:6A:2A:A1:AF Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft Manifest number: 07C6 Signing time: Sat 04 Apr 2026 21:13:04 +0000 Manifest this update: Sat 04 Apr 2026 21:13:04 +0000 Manifest next update: Sat 11 Apr 2026 21:13:04 +0000 Files and hashes: 1: rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl (hash: 9zxrYv9i2v4vjjO1g5vAsnDP7g2gtmUvBp8Eevi+ERU=) 2: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (hash: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c=) 3: BA4B22643AC911EBB83D7F0EC4F9AE02.roa (hash: jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Apr 4 21:13:04 2026 GMT Not After : Apr 11 21:13:04 2026 GMT Subject: CN=69d17ee0-0e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:27:94:e8:6b:75:ca:7c:11:76:c1:09:e2: 65:52:18:2e:74:ea:85:cc:34:d0:4d:69:bf:5d:32: 64:09:33:ac:c2:fd:18:81:f7:9d:17:60:f7:80:54: d8:03:70:b9:6a:c2:bd:3f:bf:a8:38:ab:50:55:7f: 1d:72:fc:a2:5a:54:6d:f4:20:a1:1d:0b:97:de:97: b3:12:17:db:19:5c:71:5b:be:a0:4d:c8:f7:df:69: 99:db:9c:eb:41:96:af:de:7d:6e:83:7d:bf:5e:7f: e8:a3:d3:76:1a:5d:66:f3:df:83:ce:5f:5d:a1:8f: 34:cd:a5:5e:4b:7b:20:63:04:75:9e:9d:4c:53:22: 79:a6:59:9c:2b:d4:a2:43:84:97:2a:1f:1d:bd:b8: 6d:c0:31:84:3f:0f:1e:ac:9b:87:94:ad:aa:4d:6d: 31:b8:aa:76:c9:a5:80:7f:b9:e4:b1:90:3a:8e:43: f5:0d:26:ce:8b:42:6f:16:04:21:95:54:b2:61:68: 4b:8e:f2:34:3d:94:57:aa:3f:1d:78:21:42:78:38: 61:00:bd:0c:d3:ce:9b:e0:a4:60:55:b7:64:db:4c: c9:d7:57:e2:c0:8f:5f:3c:17:2f:73:56:57:23:a6: 3f:d5:c6:36:21:28:85:32:95:6f:e8:bf:88:8d:1e: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:F7:D6:EE:D5:50:A6:DB:DD:7C:FC:C6:7F:59:68:6A:2A:A1:AF X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:58:ab:bd:80:6c:c6:0d:b2:da:c5:1c:54:6e:f5:54:b3:61: 94:1e:6b:1c:cc:dd:82:7a:91:70:71:d4:63:2f:09:0e:e3:4b: 49:08:04:6c:ab:1a:ed:a1:40:bd:6c:2f:5d:b7:33:2d:64:7c: 8c:10:93:ec:67:f6:26:8d:5e:fd:34:48:68:12:35:be:94:c5: 63:95:67:4f:56:6f:48:c4:67:3f:08:b4:d9:1b:a3:8b:ec:6a: 98:9d:40:70:a6:88:63:2c:8f:a0:2b:d0:17:4a:0a:3c:b1:a0: 77:b4:61:8f:bf:b6:4a:65:aa:87:22:e9:32:c1:60:13:f4:c8: c0:82:fe:e5:da:3e:b8:8a:a5:c5:d9:ad:b4:86:62:c2:89:75: ac:a9:57:52:35:e9:ba:73:eb:a8:88:e3:56:24:e0:b7:51:af: c5:4c:d3:44:2a:33:80:a5:2a:1a:90:32:a8:74:07:e3:dd:ce: de:62:68:4a:36:11:a5:a3:28:59:59:b8:7b:e9:03:5c:21:ad: 11:d6:28:57:a1:ba:47:2c:4f:9d:87:34:e8:0a:0e:dd:f5:57: b2:13:f8:44:98:25:c8:75:24:35:35:2d:dd:4f:1c:5e:68:4d: cf:bf:a7:19:f5:8f:c2:7a:29:0a:85:cd:ec:42:23:ac:cf:cd: 40:f8:7e:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjYwNDA0MjExMzA0WhcNMjYwNDExMjExMzA0WjAYMRYwFAYD VQQDEw02OWQxN2VlMC0wZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5L4nlOhrdcp8EXbBCeJlUhgudOqFzDTQTWm/XTJkCTOswv0YgfedF2D3gFTY A3C5asK9P7+oOKtQVX8dcvyiWlRt9CChHQuX3pezEhfbGVxxW76gTcj332mZ25zr QZav3n1ug32/Xn/oo9N2Gl1m89+Dzl9doY80zaVeS3sgYwR1np1MUyJ5plmcK9Si Q4SXKh8dvbhtwDGEPw8erJuHlK2qTW0xuKp2yaWAf7nksZA6jkP1DSbOi0JvFgQh lVSyYWhLjvI0PZRXqj8deCFCeDhhAL0M086b4KRgVbdk20zJ11fiwI9fPBcvc1ZX I6Y/1cY2ISiFMpVv6L+IjR7A/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIQ99bu 1VCm2918/MZ/WWhqKqGvMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzIzQy8wOTA3NDRDMjNBM0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVp NDZ5aGgwWTlxWjV6MWFyejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJlirvYBsxg2y2sUcVG71VLNhlB5rHMzdgnqRcHHUYy8JDuNLSQgEbKsa7aFA vWwvXbczLWR8jBCT7Gf2Jo1e/TRIaBI1vpTFY5VnT1ZvSMRnPwi02Ruji+xqmJ1A cKaIYyyPoCvQF0oKPLGgd7Rhj7+2SmWqhyLpMsFgE/TIwIL+5do+uIqlxdmttIZi wol1rKlXUjXpunPrqIjjViTgt1GvxUzTRCozgKUqGpAyqHQH493O3mJoSjYRpaMo WVm4e+kDXCGtEdYoV6G6RyxPnYc06AoO3fVXshP4RJglyHUkNTUt3U8cXmhNz7+n GfWPwnopCoXN7EIjrM/NQPh+rg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:13 2026 by rpki-client