$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: IXoXZlopjbHa4p6lcYz/v1FTpExOtRf5kqdbVfgGCEQ= Subject key identifier: AB:11:04:80:C6:A4:79:EB:3F:78:0F:07:BE:DB:4A:30:D6:01:C6:AD Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 03D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 03D1 Signing time: Thu 21 May 2026 00:40:48 +0000 Manifest this update: Thu 21 May 2026 00:40:47 +0000 Manifest next update: Thu 28 May 2026 00:40:47 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: lyXGN8Uq07xDTxnw3dp9Ha/gyElzl1XPZSdoFZN4aMc=) 2: 26DB1136FDFC11ECBB977313C4F9AE02.roa (hash: AFmVmv37NUlEo5x7WE9IIUiZuSpldbgnkFyLK1YNOCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: May 21 00:40:47 2026 GMT Not After : May 28 00:40:47 2026 GMT Subject: CN=6a0e5490-5bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:02:aa:9d:e9:1c:a2:7f:a3:87:d1:26:a2: 04:f7:44:35:ef:ac:fd:de:0e:de:67:92:a3:11:e5: c8:42:24:5f:21:8e:42:81:1f:d2:9a:13:3f:74:db: cb:87:b4:ea:da:e4:e6:a0:31:6b:93:be:fd:90:0f: 51:eb:7e:f8:4d:c5:d4:0a:49:09:3d:56:45:d8:c7: c5:b6:e9:da:dd:d1:1d:fc:52:19:fd:f1:95:cd:75: 69:2b:75:2f:d9:4c:5b:47:ac:4f:67:92:a4:0d:e6: ee:af:75:a8:1c:09:3c:e2:f3:90:65:e1:45:77:3f: f1:22:34:3e:5a:e4:68:42:f3:f4:b2:aa:94:2f:08: d7:1e:0e:c6:8a:88:94:12:af:f5:91:2c:d8:53:2d: 3f:ed:eb:ab:89:8b:d4:2b:fc:2a:c2:d4:d9:6e:58: 36:07:99:71:09:7d:aa:dc:f2:96:12:c7:2a:e8:9d: 6b:e0:c5:20:9a:4b:88:4f:65:8d:f9:d1:e1:c3:61: 86:e6:e7:e8:8f:38:ff:16:06:5e:63:65:aa:f5:cf: 74:ce:d9:13:69:30:92:ab:97:54:e6:1f:a2:87:2c: 2c:06:db:70:ba:d9:66:c3:3c:b7:2d:b0:7e:62:7e: 2c:74:39:e9:02:a8:ad:ff:8b:49:26:47:fd:dd:30: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:11:04:80:C6:A4:79:EB:3F:78:0F:07:BE:DB:4A:30:D6:01:C6:AD X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0f:5b:a8:db:c0:86:f4:22:30:54:df:87:e7:0e:9b:d0:d2: 6d:ff:da:4e:0c:0b:7e:e5:a5:91:64:40:ce:1c:76:8f:a5:c0: 4f:64:d3:40:06:b2:6a:e4:54:9c:9c:05:3a:19:88:77:ca:64: b4:89:54:fc:58:ac:e6:59:3c:0d:bc:8b:8d:8a:f6:22:78:96: 82:9e:9a:2c:b0:bc:d6:16:a5:04:72:86:15:bd:bc:b4:e0:1b: 49:18:ed:98:e8:4b:c4:2b:c0:a6:6d:8f:66:67:1e:78:c2:3a: 13:70:4d:70:ed:36:c0:95:b6:70:8c:a3:68:21:ab:43:b3:69: 56:e8:8b:da:a5:72:7b:db:8e:3f:33:8b:07:65:f5:6c:ef:3c: 20:eb:0c:0f:f1:3a:ed:6d:74:ce:a7:a4:45:92:81:31:53:58: db:ab:c2:ba:10:14:f8:28:16:ff:57:70:7c:50:a7:3a:e3:87: db:cf:fa:28:e7:01:87:41:19:81:81:c2:df:bb:68:b2:7b:f8: 01:7e:3b:45:bd:25:18:fc:b8:5f:13:51:2c:25:3a:ea:45:1f: 8e:26:a5:60:48:26:1b:29:b1:ab:4c:4d:33:d2:73:8d:4f:20: 32:f3:91:b2:8f:f3:04:be:8f:0f:74:3a:ab:c4:aa:e3:ce:c1: 96:e7:d3:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjYwNTIxMDA0MDQ3WhcNMjYwNTI4MDA0MDQ3WjAYMRYwFAYD VQQDEw02YTBlNTQ5MC01YmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxECqp3pHKJ/o4fRJqIE90Q176z93g7eZ5KjEeXIQiRfIY5CgR/SmhM/dNvL h7Tq2uTmoDFrk779kA9R6374TcXUCkkJPVZF2MfFtuna3dEd/FIZ/fGVzXVpK3Uv 2UxbR6xPZ5KkDebur3WoHAk84vOQZeFFdz/xIjQ+WuRoQvP0sqqULwjXHg7GioiU Eq/1kSzYUy0/7euriYvUK/wqwtTZblg2B5lxCX2q3PKWEscq6J1r4MUgmkuIT2WN +dHhw2GG5ufojzj/FgZeY2Wq9c90ztkTaTCSq5dU5h+ihywsBttwutlmwzy3LbB+ Yn4sdDnpAqit/4tJJkf93TAGzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsRBIDG pHnrP3gPB77bSjDWAcatMB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhw9bqNvAhvQiMFTfh+cOm9DSbf/aTgwLfuWlkWRAzhx2j6XAT2TTQAayauRU nJwFOhmId8pktIlU/Fis5lk8DbyLjYr2IniWgp6aLLC81halBHKGFb28tOAbSRjt mOhLxCvApm2PZmceeMI6E3BNcO02wJW2cIyjaCGrQ7NpVuiL2qVye9uOPzOLB2X1 bO88IOsMD/E67W10zqekRZKBMVNY26vCuhAU+CgW/1dwfFCnOuOH28/6KOcBh0EZ gYHC37tosnv4AX47Rb0lGPy4XxNRLCU66kUfjialYEgmGymxq0xNM9JzjU8gMvOR so/zBL6PD3Q6q8Sq487BlufTHw== -----END CERTIFICATE-----Generated at Thu May 21 10:52:24 2026 by rpki-client