$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: Hi84DQG0d8YVkKtbYODA4Aa+DummdIvb2yEcgZt0KW0= Subject key identifier: 9A:0B:2F:82:35:26:64:F8:D4:B4:58:41:57:AD:49:B6:6C:E2:77:F1 Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 042A Signing time: Thu 29 Oct 2026 00:30:13 +0000 Manifest this update: Thu 29 Oct 2026 00:30:12 +0000 Manifest next update: Thu 05 Nov 2026 00:30:12 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: AP27PlQYC5SondD9c1jJMYHA/+DRjtLke8pzz0txLCY=) 2: C7513D2484CC11F18B5F25E597A30FBC.roa (hash: qjU7k0c2AFRf9V00UA42zSZWvTGD4WQ9W16GHJB9dqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 00:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Oct 29 00:30:12 2026 GMT Not After : Nov 5 00:30:12 2026 GMT Subject: CN=6ae29394-d194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:83:9d:9f:8b:28:18:d8:c6:05:14:b4:c4:ee: 8d:63:24:e0:6a:80:b3:74:05:8e:b9:48:34:2c:bc: 9b:95:be:6a:83:4f:09:fb:c7:73:c7:9b:c8:4f:f4: 60:0d:39:70:78:c7:2a:e4:6f:ec:41:63:fa:5a:dc: 86:c1:d5:d3:ea:45:3d:a9:b0:7e:08:74:06:a3:a1: 36:8d:05:73:1c:66:33:02:09:68:fe:3f:a2:fd:a1: c4:0d:53:4f:55:89:76:e2:e0:9d:98:d0:10:20:ee: 6d:eb:15:5a:10:ec:a6:db:65:51:67:08:db:f4:5c: ee:19:c7:ff:f5:63:29:aa:01:0b:f7:b7:a7:f4:03: 85:75:bb:53:5b:01:d0:42:ba:41:15:10:e0:1d:93: c4:ef:99:4e:77:52:44:a2:7b:5d:4b:7d:21:34:fb: 59:5d:d0:40:48:8d:a2:93:18:a2:1d:e1:f3:05:f4: 76:9f:02:ce:bf:e0:f7:f2:94:2d:59:31:dc:66:6f: 95:39:2c:e1:a8:e4:e4:a1:27:a6:3d:2f:f2:98:d5: a1:86:96:e4:e1:00:72:16:0a:43:3d:66:4d:78:d8: 06:0f:26:85:e7:77:3a:17:3e:07:63:d8:ac:1c:f0: 62:3e:0e:eb:2b:66:79:33:bf:dc:b4:ff:eb:dc:71: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0B:2F:82:35:26:64:F8:D4:B4:58:41:57:AD:49:B6:6C:E2:77:F1 X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ad:9e:0a:ab:d3:7a:c5:42:58:0a:73:5a:56:51:52:e6:a8: 0c:35:45:58:c2:ce:1d:02:c5:45:ad:2e:00:f5:69:49:ef:fb: 05:a4:04:94:60:98:25:ca:b5:01:96:95:a3:84:1c:6b:64:08: 93:3c:c3:62:0f:2e:19:29:3b:f9:44:66:4c:29:fd:80:3e:57: 15:30:7a:0c:83:1a:b1:66:af:15:8b:4e:ce:45:c4:be:f3:b2: 7c:18:1e:6a:3f:24:c1:65:e1:60:7d:cd:78:70:66:3b:cb:e3: af:b1:7a:a4:80:cd:c5:e9:d6:f7:e3:e3:b8:b0:7f:b9:24:fb: c3:96:f7:45:8a:7a:70:ae:79:64:07:64:b8:5c:0e:15:73:c7: 2a:37:74:16:fc:56:da:30:5d:01:61:3b:f4:7e:27:b1:46:27: 2c:ce:4d:13:93:c9:80:77:5a:38:43:3d:62:b8:70:b5:1b:52: 61:d7:75:84:7a:fb:ee:81:0c:59:b5:b8:0c:3f:04:89:4d:58: 9c:d1:8c:16:fb:d4:d4:8c:91:fe:77:0e:99:17:48:af:2e:b4: ac:52:2a:16:4e:2e:bf:25:0e:e6:65:ca:b5:2a:e1:0f:f2:a2: 4d:02:e2:d9:3c:c0:bd:65:09:77:04:42:f6:bd:3f:d3:da:5e: 09:8f:d2:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjYxMDI5MDAzMDEyWhcNMjYxMTA1MDAzMDEyWjAYMRYwFAYD VQQDEw02YWUyOTM5NC1kMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgoOdn4soGNjGBRS0xO6NYyTgaoCzdAWOuUg0LLyblb5qg08J+8dzx5vIT/Rg DTlweMcq5G/sQWP6WtyGwdXT6kU9qbB+CHQGo6E2jQVzHGYzAglo/j+i/aHEDVNP VYl24uCdmNAQIO5t6xVaEOym22VRZwjb9FzuGcf/9WMpqgEL97en9AOFdbtTWwHQ QrpBFRDgHZPE75lOd1JEontdS30hNPtZXdBASI2ikxiiHeHzBfR2nwLOv+D38pQt WTHcZm+VOSzhqOTkoSemPS/ymNWhhpbk4QByFgpDPWZNeNgGDyaF53c6Fz4HY9is HPBiPg7rK2Z5M7/ctP/r3HHTSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoLL4I1 JmT41LRYQVetSbZs4nfxMB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKK2eCqvTesVCWApzWlZRUuaoDDVFWMLOHQLFRa0uAPVpSe/7BaQElGCYJcq1 AZaVo4Qca2QIkzzDYg8uGSk7+URmTCn9gD5XFTB6DIMasWavFYtOzkXEvvOyfBge aj8kwWXhYH3NeHBmO8vjr7F6pIDNxenW9+PjuLB/uST7w5b3RYp6cK55ZAdkuFwO FXPHKjd0FvxW2jBdAWE79H4nsUYnLM5NE5PJgHdaOEM9YrhwtRtSYdd1hHr77oEM WbW4DD8EiU1YnNGMFvvU1IyR/ncOmRdIry60rFIqFk4uvyUO5mXKtSrhD/KiTQLi 2TzAvWUJdwRC9r0/09peCY/SzQ== -----END CERTIFICATE-----Generated at Thu Oct 29 15:57:45 2026 by rpki-client