$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: T3f8YrpRlrpzM19NGmBGv478dUEqecExkCzmZrPqyUQ= Subject key identifier: B6:8F:4E:BF:8E:0A:5F:91:28:39:38:BD:35:E8:C1:5A:FF:0C:5B:C1 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: ED Signing time: Wed 07 Oct 2026 07:06:09 +0000 Manifest this update: Wed 07 Oct 2026 07:06:09 +0000 Manifest next update: Wed 14 Oct 2026 07:06:09 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: G3T6wXFw+SY8R3xloscatbSyG6pRCI4GriJINtqz+F8=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: dHjg4aetmR+CT/hIpvOyBgw5vrSUKwUdGHYu9vF0GrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Oct 7 07:06:09 2026 GMT Not After : Oct 14 07:06:09 2026 GMT Subject: CN=6ac5ef61-6bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:6f:71:52:9b:25:80:f6:7f:fe:b1:d0:61: 88:00:05:b2:34:9f:78:0a:6e:0c:5f:39:a4:52:70: af:9c:9e:25:cd:b4:49:ee:9f:bc:4f:74:fa:5b:95: 8d:4b:07:62:a3:8c:0f:8a:4a:07:34:1b:e0:3b:95: 43:a0:f1:c4:bc:12:76:2d:26:72:8c:87:e0:9e:37: 67:cf:9a:d0:47:d7:45:8d:13:08:cd:48:b6:c3:48: 0c:de:9d:aa:56:4b:cb:e7:9a:c1:f9:6d:42:ec:9e: dd:1a:70:b9:b8:3f:5b:c4:5f:82:39:b1:5b:be:22: 0f:d8:83:7b:ab:6b:37:d8:fc:95:ff:49:27:e1:8c: 21:3a:03:fb:8f:ca:3d:3c:a5:58:ca:c0:d8:29:ed: a7:7b:0e:a0:cd:11:3d:be:0f:b4:1a:d7:04:79:d6: 8f:16:75:12:e6:76:bf:93:b5:e5:92:7c:1e:35:f9: 29:b4:55:6c:23:04:23:e1:ed:b1:f3:53:b9:c9:2b: 90:72:16:25:f7:26:f8:e7:a3:d6:74:9a:5f:b0:36: ef:db:7f:bd:7a:1b:10:e5:5d:76:e7:a4:8c:b7:ac: 8b:0a:de:8e:78:d0:ee:1c:3f:ed:35:be:3d:1b:97: 32:f0:6d:e1:95:24:de:ca:4d:00:4f:7a:01:79:1f: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8F:4E:BF:8E:0A:5F:91:28:39:38:BD:35:E8:C1:5A:FF:0C:5B:C1 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8a:4d:86:2d:89:c1:43:9e:56:18:44:7e:d4:42:fc:44:3d: 1e:40:50:34:99:22:76:4a:45:9b:58:7a:b6:9d:16:1d:65:57: 1b:8f:31:27:09:35:33:fd:fb:5f:c3:42:8b:2c:2e:d0:18:70: cb:30:dd:c5:1e:44:e0:0c:53:85:2e:e8:52:84:6e:63:7d:a7: e7:49:da:4e:83:01:66:c6:0b:40:35:23:8a:62:46:04:25:d8: 62:e1:2a:ef:eb:7f:9a:75:ff:36:e9:c3:e1:c0:aa:79:ef:a2: af:fd:ab:bd:8c:0d:0d:53:ea:6e:db:17:bb:ac:28:79:ee:df: be:4d:92:83:62:9d:73:d1:a5:f2:11:77:90:24:fb:54:2c:83: 3d:ce:49:87:e6:95:2b:a4:4c:15:90:30:64:22:93:ce:ef:3e: ee:0a:cb:bf:cc:5b:d6:47:ad:73:c8:e9:95:87:74:c2:40:35: 0c:52:64:11:b8:fd:db:17:3e:0c:68:06:22:2d:d6:49:dd:91: 86:a9:d2:86:65:a8:46:e3:91:dc:f1:7c:3e:6b:1e:77:21:74: b9:30:a0:7c:bd:22:c7:f9:14:b1:76:34:6f:8f:bc:b0:da:83: fc:e3:e3:46:c6:8d:aa:92:6e:87:08:ff:e5:8f:ff:bb:c2:b9: a8:ff:4d:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYxMDA3MDcwNjA5WhcNMjYxMDE0MDcwNjA5WjAYMRYwFAYD VQQDEw02YWM1ZWY2MS02YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4tvcVKbJYD2f/6x0GGIAAWyNJ94Cm4MXzmkUnCvnJ4lzbRJ7p+8T3T6W5WN Swdio4wPikoHNBvgO5VDoPHEvBJ2LSZyjIfgnjdnz5rQR9dFjRMIzUi2w0gM3p2q VkvL55rB+W1C7J7dGnC5uD9bxF+CObFbviIP2IN7q2s32PyV/0kn4YwhOgP7j8o9 PKVYysDYKe2new6gzRE9vg+0GtcEedaPFnUS5na/k7XlknweNfkptFVsIwQj4e2x 81O5ySuQchYl9yb456PWdJpfsDbv23+9ehsQ5V1256SMt6yLCt6OeNDuHD/tNb49 G5cy8G3hlSTeyk0AT3oBeR9QsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaPTr+O Cl+RKDk4vTXowVr/DFvBMB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FI WnU5bW12bHpVa0REaVpORmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHIpNhi2JwUOeVhhEftRC/EQ9HkBQNJkidkpFm1h6tp0WHWVXG48xJwk1M/37 X8NCiywu0BhwyzDdxR5E4AxThS7oUoRuY32n50naToMBZsYLQDUjimJGBCXYYuEq 7+t/mnX/NunD4cCqee+ir/2rvYwNDVPqbtsXu6woee7fvk2Sg2Kdc9Gl8hF3kCT7 VCyDPc5Jh+aVK6RMFZAwZCKTzu8+7grLv8xb1ketc8jplYd0wkA1DFJkEbj92xc+ DGgGIi3WSd2RhqnShmWoRuOR3PF8PmsedyF0uTCgfL0ix/kUsXY0b4+8sNqD/OPj RsaNqpJuhwj/5Y//u8K5qP9NNQ== -----END CERTIFICATE-----Generated at Thu Oct 8 19:54:00 2026 by rpki-client