$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft File: vDUKYanj3h4eWJC-0L6KhxJP3LE.mft (raw, json) Hash identifier: Gvg2OmR8mOBa/xgSPCzrzdJAbP93uvthKI9N1iUjF1M= Subject key identifier: 78:E2:DD:28:17:CF:7F:CD:1C:25:7B:1F:BF:89:A9:BF:CA:C8:29:EA Authority key identifier: BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1 Certificate issuer: /CN=A91FC3D0/serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft Manifest number: 02 Signing time: Wed 20 May 2026 14:19:12 +0000 Manifest this update: Wed 20 May 2026 14:19:12 +0000 Manifest next update: Wed 27 May 2026 14:19:12 +0000 Files and hashes: 1: vDUKYanj3h4eWJC-0L6KhxJP3LE.crl (hash: QlJ/tnbITrEJd4X7ldCn+GThJs8c6IoUNuWTv1q2yQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC3D0, serialNumber=BC350A61A9E3DE1E1E5890BED0BE8A87124FDCB1 Validity Not Before: May 20 14:19:12 2026 GMT Not After : May 27 14:19:12 2026 GMT Subject: CN=6a0dc2e0-a3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:8e:f3:6a:4e:9b:ff:80:4d:69:44:72:f7: 84:de:d7:b2:ae:d2:50:88:91:23:fb:03:8b:c5:02: 18:3a:83:f6:a7:bb:74:f8:de:ab:6b:07:f8:55:c6: 74:00:a5:14:be:9a:30:80:60:98:ff:e9:3d:89:6a: 9e:ed:93:74:02:a4:ab:97:6c:a0:46:aa:7f:bc:49: ed:08:66:f1:57:ca:e5:42:ca:0c:33:67:cb:2a:62: 4f:00:e5:90:13:ef:34:56:6c:7b:e1:78:a7:d0:7b: 1b:be:22:42:c8:23:64:91:09:37:4a:35:f8:e9:fc: d5:a1:3a:93:e3:45:c6:36:a3:3e:28:a3:47:ea:b1: 18:e8:34:69:79:8e:87:9b:af:5f:ab:d1:f6:da:a2: b3:ed:07:52:d5:9b:e6:1f:62:43:84:5d:48:0d:9e: 4f:dc:19:70:df:4b:2e:fc:91:24:d8:bd:2f:06:68: 48:bf:2a:7b:bf:32:23:0c:e3:3c:80:ec:ad:4b:8e: ab:2f:6e:60:da:89:98:19:91:90:a4:b8:c4:95:82: 98:58:af:cb:d6:dc:65:d2:e3:6c:35:ae:b5:90:19: 10:be:22:f4:a5:8b:98:07:15:cf:77:41:34:ac:40: f6:58:76:72:de:e2:4c:92:ef:37:e6:6d:01:f8:ef: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E2:DD:28:17:CF:7F:CD:1C:25:7B:1F:BF:89:A9:BF:CA:C8:29:EA X509v3 Authority Key Identifier: keyid:BC:35:0A:61:A9:E3:DE:1E:1E:58:90:BE:D0:BE:8A:87:12:4F:DC:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vDUKYanj3h4eWJC-0L6KhxJP3LE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC3D0/B09B2F4C544611F18EF4CDA7A7833773/vDUKYanj3h4eWJC-0L6KhxJP3LE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ba:b8:a3:68:75:03:95:6e:e3:58:13:62:78:e2:d7:d7:13: 99:73:83:f7:b6:5d:7e:10:31:51:2a:a1:f6:32:44:be:e9:3a: 35:53:65:a6:0e:3b:d6:1a:d4:cb:be:fe:df:4a:62:35:15:08: 2c:b8:27:00:74:75:37:b2:7d:a2:28:84:f0:1a:8f:66:0f:48: 52:eb:18:bd:87:9c:da:e3:6d:7d:3f:e1:0f:03:2c:8c:6d:ae: 1a:62:91:76:35:91:b7:87:a7:93:46:cb:38:43:f3:a5:30:f4: 99:21:89:d9:06:af:eb:9a:fe:e6:cb:40:8e:b7:16:d4:fb:84: ba:fe:23:6f:22:91:ee:21:c5:0e:a3:1c:e5:4e:3d:a4:51:cb: 5a:20:2e:c9:b4:a5:2b:a2:27:19:ae:c8:19:7f:ad:58:b2:8a: e0:f8:ac:ff:2e:3a:c3:c9:5b:7d:80:85:45:09:af:3d:c9:5d: 8f:f2:73:c6:84:6a:a7:01:c1:96:20:cf:c2:84:46:24:e2:fc: 3f:aa:fd:14:ff:ab:b7:69:bb:e6:78:4b:ae:08:28:79:d4:cf: 6d:c0:23:87:02:6d:b5:cf:b1:13:5a:e8:4f:03:5d:a0:5c:88: 26:75:20:19:98:67:15:d4:60:71:45:b7:5b:12:28:1d:48:4f: c6:1c:29:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzNEMDExMC8GA1UEBRMoQkMzNTBBNjFBOUUzREUxRTFFNTg5MEJFRDBCRThBODcx MjRGRENCMTAeFw0yNjA1MjAxNDE5MTJaFw0yNjA1MjcxNDE5MTJaMBgxFjAUBgNV BAMTDTZhMGRjMmUwLWEzYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4f47zak6b/4BNaURy94Te17Ku0lCIkSP7A4vFAhg6g/anu3T43qtrB/hVxnQA pRS+mjCAYJj/6T2Jap7tk3QCpKuXbKBGqn+8Se0IZvFXyuVCygwzZ8sqYk8A5ZAT 7zRWbHvheKfQexu+IkLII2SRCTdKNfjp/NWhOpPjRcY2oz4oo0fqsRjoNGl5joeb r1+r0fbaorPtB1LVm+YfYkOEXUgNnk/cGXDfSy78kSTYvS8GaEi/Knu/MiMM4zyA 7K1LjqsvbmDaiZgZkZCkuMSVgphYr8vW3GXS42w1rrWQGRC+IvSli5gHFc93QTSs QPZYdnLe4kyS7zfmbQH477mNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeOLdKBfP f80cJXsfv4mpv8rIKeowHwYDVR0jBBgwFoAUvDUKYanj3h4eWJC+0L6KhxJP3LEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDM0QwL0IwOUIyRjRDNTQ0 NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0ZVdKQy0wTDZLaHhKUDNM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdkRVS1lhbmozaDRlV0pDLTBMNktoeEpQM0xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD M0QwL0IwOUIyRjRDNTQ0NjExRjE4RUY0Q0RBN0E3ODMzNzczL3ZEVUtZYW5qM2g0 ZVdKQy0wTDZLaHhKUDNMRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWurijaHUDlW7jWBNieOLX1xOZc4P3tl1+EDFRKqH2MkS+6To1U2WmDjvWGtTL vv7fSmI1FQgsuCcAdHU3sn2iKITwGo9mD0hS6xi9h5za4219P+EPAyyMba4aYpF2 NZG3h6eTRss4Q/OlMPSZIYnZBq/rmv7my0COtxbU+4S6/iNvIpHuIcUOoxzlTj2k UctaIC7JtKUroicZrsgZf61Ysorg+Kz/LjrDyVt9gIVFCa89yV2P8nPGhGqnAcGW IM/ChEYk4vw/qv0U/6u3abvmeEuuCCh51M9twCOHAm21z7ETWuhPA12gXIgmdSAZ mGcV1GBxRbdbEigdSE/GHCmh -----END CERTIFICATE-----Generated at Thu May 21 09:34:29 2026 by rpki-client