$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft File: DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft (raw, json) Hash identifier: ++S3El7dvITcFLkqywjowUSI5DShSoWysBUiu5SPDxE= Subject key identifier: F0:CA:FD:11:60:2A:EF:42:0D:22:54:DD:0F:80:F3:AC:D1:44:1C:D7 Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft Manifest number: 0135 Signing time: Sun 05 Apr 2026 05:00:43 +0000 Manifest this update: Sun 05 Apr 2026 05:00:43 +0000 Manifest next update: Sun 12 Apr 2026 05:00:43 +0000 Files and hashes: 1: DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl (hash: iYlHaJG9/VhzBJA9VPGtFSn/vhrD0L9eK9og8VcNpeQ=) 2: 6E7D3C16816811EF99DD7787C4F9AE02.roa (hash: tMsqu6nSNXbRdgdOGNgxf6SRIE8d03QJp/vSSHoCY4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Apr 5 05:00:43 2026 GMT Not After : Apr 12 05:00:43 2026 GMT Subject: CN=69d1ec7b-78a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a4:b9:2c:a8:f5:36:75:16:88:24:7f:a2:fb: 5f:46:e0:9d:a4:8f:bf:63:27:2d:5d:2e:94:87:b2: 92:e0:a4:1d:c6:62:1b:eb:6a:8a:5b:19:3f:4a:38: c1:64:91:d7:77:91:3a:93:61:4e:c5:d5:fc:0d:fc: 24:a5:ef:c2:8e:87:9a:82:1f:9a:91:90:d4:55:e2: 76:b9:d1:36:f2:96:d7:14:ad:2d:70:07:54:74:32: 33:f2:b7:a1:73:b5:a4:bd:9a:15:31:d5:5a:50:83: ff:84:8f:61:74:04:79:8e:65:d4:bf:1c:2a:25:1b: 7b:1a:03:0c:9d:71:ef:dd:9a:22:a7:d1:df:1e:0f: d6:43:00:01:20:ec:4f:62:d5:b5:ff:ca:72:5e:1d: 45:f2:ca:39:c7:7c:77:c2:8b:9f:c6:8c:19:93:2e: 60:1f:ba:09:44:0e:ba:83:9f:f4:8e:cb:46:f4:5a: f8:0c:32:dd:55:a1:61:fc:e6:87:bc:7b:3e:ff:98: b0:90:1d:7e:5e:eb:4a:24:c1:3b:bd:27:a6:29:7e: 97:4c:79:d7:11:be:ac:58:04:42:a6:ef:20:4a:f8: 89:ce:ba:c6:93:08:78:c2:b0:2d:76:97:91:02:70: 74:ac:db:42:0d:47:de:34:aa:86:d5:08:9a:ce:45: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CA:FD:11:60:2A:EF:42:0D:22:54:DD:0F:80:F3:AC:D1:44:1C:D7 X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d1:55:2a:8a:15:bc:f3:e8:8f:8a:f8:4b:85:07:db:41:ab: b1:48:65:53:15:52:aa:d4:2d:13:98:62:c3:97:44:3f:f3:d8: aa:54:f8:5d:d3:71:2d:59:d8:e3:72:d6:52:13:51:14:ff:1a: b8:73:c1:c4:35:29:ef:30:b3:b9:01:c3:76:24:cc:67:17:4a: 8a:5d:92:c4:80:e6:e7:f2:b1:9f:c8:9b:a0:c5:d5:52:a9:32: a4:fc:77:48:a5:36:22:67:54:4c:01:20:ac:8e:cd:db:7f:02: 85:a3:f3:4a:e9:8a:40:d0:18:ba:e7:d4:46:2f:bf:31:2b:4c: 0c:d9:78:ca:39:e3:f4:a5:53:3c:e9:bc:47:45:16:97:7c:93: ad:62:57:27:b5:93:32:ca:57:e0:b6:2e:ae:ef:66:44:2d:71: af:b2:8b:4e:a5:c1:fe:b5:bd:14:d7:a6:47:a2:19:fd:8f:d1: 78:58:a9:16:71:68:a0:0d:77:ac:a6:88:65:ec:29:f1:2d:2e: 39:51:f4:a1:ca:db:db:37:35:03:cb:1a:5c:f6:76:19:40:35: b9:78:72:6d:e9:38:fe:3d:1f:c9:10:15:1c:20:bb:0e:1a:aa: b9:93:43:c1:99:26:ab:a8:f4:f9:62:7e:df:81:48:67:ab:dd: 3c:3d:cb:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NkExMTAvBgNVBAUTKDBDREQ1MDU4MzJFQThDOUE0RDIzQjEwNjM3MjAxRDc5 NDI5NTY0QzAwHhcNMjYwNDA1MDUwMDQzWhcNMjYwNDEyMDUwMDQzWjAYMRYwFAYD VQQDEw02OWQxZWM3Yi03OGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1aS5LKj1NnUWiCR/ovtfRuCdpI+/YyctXS6Uh7KS4KQdxmIb62qKWxk/SjjB ZJHXd5E6k2FOxdX8Dfwkpe/Cjoeagh+akZDUVeJ2udE28pbXFK0tcAdUdDIz8reh c7WkvZoVMdVaUIP/hI9hdAR5jmXUvxwqJRt7GgMMnXHv3Zoip9HfHg/WQwABIOxP YtW1/8pyXh1F8so5x3x3woufxowZky5gH7oJRA66g5/0jstG9Fr4DDLdVaFh/OaH vHs+/5iwkB1+XutKJME7vSemKX6XTHnXEb6sWARCpu8gSviJzrrGkwh4wrAtdpeR AnB0rNtCDUfeNKqG1QiazkVKpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPDK/RFg Ku9CDSJU3Q+A86zRRBzXMB8GA1UdIwQYMBaAFAzdUFgy6oyaTSOxBjcgHXlClWTA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk2QS9ENEMxNjg4MjZB NkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpKcE5JN0VHTnlBZGVVS1Za TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi9ETjFRV0RMcWpK cE5JN0VHTnlBZGVVS1ZaTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEtFVKooVvPPoj4r4S4UH20GrsUhlUxVSqtQtE5hiw5dEP/PYqlT4XdNxLVnY 43LWUhNRFP8auHPBxDUp7zCzuQHDdiTMZxdKil2SxIDm5/Kxn8iboMXVUqkypPx3 SKU2ImdUTAEgrI7N238ChaPzSumKQNAYuufURi+/MStMDNl4yjnj9KVTPOm8R0UW l3yTrWJXJ7WTMspX4LYuru9mRC1xr7KLTqXB/rW9FNemR6IZ/Y/ReFipFnFooA13 rKaIZewp8S0uOVH0ocrb2zc1A8saXPZ2GUA1uXhybek4/j0fyRAVHCC7DhqquZND wZkmq6j0+WJ+34FIZ6vdPD3LbQ== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:27 2026 by rpki-client