$ rpki-client -vvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft File: dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json) Hash identifier: vtwFC/TMsKPbkk86eiSGm1IUDy/c7K7rlpArsnVTafQ= Subject key identifier: F8:1F:72:98:2F:1C:BA:0B:A1:BE:31:81:FB:20:38:A2:4E:2E:5D:3E Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 Certificate issuer: /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft Manifest number: B1 Signing time: Wed 13 May 2026 07:17:39 +0000 Manifest this update: Wed 13 May 2026 07:17:38 +0000 Manifest next update: Wed 20 May 2026 07:17:38 +0000 Files and hashes: 1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: xZzmaZuUDcR8bWa9FmvAD3mVckAMt6itPMeoRL5uCAc=) 2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 07:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49 Validity Not Before: May 13 07:17:38 2026 GMT Not After : May 20 07:17:38 2026 GMT Subject: CN=6a042593-281f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:d2:fb:8e:0f:fd:ee:71:78:98:7e:be:44: c6:50:6b:d9:08:ee:b0:b3:cf:12:20:f1:23:be:c1: e9:b5:36:e3:89:7e:ae:d5:a7:dc:42:2c:26:51:47: 00:51:30:73:93:ce:3f:3f:f7:61:31:9b:01:0b:f9: 56:37:33:ba:1e:73:e3:6e:b4:13:c8:44:6f:71:3c: a6:18:2a:e7:fe:86:fd:52:e0:31:46:04:b5:e5:52: 49:62:35:6d:ac:2e:7d:1b:5f:5b:9e:1e:64:cd:6c: 38:7b:4a:95:96:b7:d2:24:15:b9:af:07:fb:45:ed: 7a:40:2b:b0:f3:dd:a0:02:af:67:eb:3e:c9:41:6d: dd:4b:fe:ef:ad:16:1e:90:af:94:65:46:bd:d5:5d: e7:68:84:3d:04:ca:5f:96:b7:19:b3:18:2f:79:4f: 47:6a:e8:be:0c:a7:cb:1e:7f:7c:fa:fd:f5:b7:b3: e0:cc:3f:96:4d:e3:96:c6:36:a7:6b:47:94:6a:37: 7b:c1:fe:b7:c8:9f:84:4a:de:a2:64:d6:63:a2:63: b9:aa:98:db:5d:f9:77:f1:b7:fd:a5:02:f8:36:cf: 88:ae:9e:0e:87:5d:a0:cb:cd:a4:fc:23:15:5a:e1: 91:58:1a:20:16:95:75:ec:aa:4a:34:e6:c7:aa:04: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1F:72:98:2F:1C:BA:0B:A1:BE:31:81:FB:20:38:A2:4E:2E:5D:3E X509v3 Authority Key Identifier: keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:d9:6d:90:f3:ad:06:50:10:a8:e1:d0:b4:23:0e:75:56:80: a3:40:3c:a7:00:c9:0f:29:ee:1a:8f:8a:b1:29:25:c2:ee:e9: fc:a0:7f:a1:d4:4c:76:df:b3:9d:62:f8:88:1d:5a:1b:a7:96: 55:45:99:74:60:57:2b:f4:e4:11:db:f7:52:2b:b8:96:1c:e9: 4d:74:07:2c:05:39:43:6d:7e:f8:c3:03:92:ff:5f:a7:db:d3: dc:7c:c8:a9:8a:a0:97:59:dd:12:3e:05:ef:0e:87:93:31:7a: dd:3d:82:cc:da:7c:94:6d:87:41:03:16:d7:86:52:6c:3b:b6: b1:f0:3c:80:b3:7f:d8:4a:9d:e0:e7:9e:6c:55:a5:26:d6:ac: a5:3a:2d:4f:41:3c:43:d2:d2:d1:32:3b:ed:a1:70:18:d6:72: d5:67:af:53:b7:7c:94:ae:77:7a:98:ce:4b:d3:49:04:1b:cd: 52:49:bd:21:ee:ee:67:7a:2e:de:d0:92:5e:03:9c:0a:3e:00: 7c:6c:5a:e7:11:80:03:7f:44:46:5c:95:d7:70:56:35:91:c3: b2:c2:fa:db:1d:30:f7:ea:df:c9:91:a5:4c:4f:69:96:a0:24: 8f:bf:36:19:fd:5f:35:52:2d:34:6c:ed:5e:9d:67:8a:ee:f4: 1c:7c:4c:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5QzIxMTAvBgNVBAUTKDc0RENFQUE4NTA2QTJCMzI3Rjg3QTQyRDA3NDFBQzM2 RUVERUVCNDkwHhcNMjYwNTEzMDcxNzM4WhcNMjYwNTIwMDcxNzM4WjAYMRYwFAYD VQQDEw02YTA0MjU5My0yODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonzS+44P/e5xeJh+vkTGUGvZCO6ws88SIPEjvsHptTbjiX6u1afcQiwmUUcA UTBzk84/P/dhMZsBC/lWNzO6HnPjbrQTyERvcTymGCrn/ob9UuAxRgS15VJJYjVt rC59G19bnh5kzWw4e0qVlrfSJBW5rwf7Re16QCuw892gAq9n6z7JQW3dS/7vrRYe kK+UZUa91V3naIQ9BMpflrcZsxgveU9Haui+DKfLHn98+v31t7PgzD+WTeOWxjan a0eUajd7wf63yJ+ESt6iZNZjomO5qpjbXfl38bf9pQL4Ns+Irp4Oh12gy82k/CMV WuGRWBogFpV17KpKNObHqgSzrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgfcpgv HLoLob4xgfsgOKJOLl0+MB8GA1UdIwQYMBaAFHTc6qhQaisyf4ekLQdBrDbu3utJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDlDMi9FM0EzREVFNjQ4 QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6Sl9oNlF0QjBHc051N2U2 MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROenFxRkJxS3pKX2g2UXRCMEdzTnU3ZTYway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDlDMi9FM0EzREVFNjQ4QzgxMUYwQjk1NzI2MUNDNEY5QUUwMi9kTnpxcUZCcUt6 Sl9oNlF0QjBHc051N2U2MGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKdltkPOtBlAQqOHQtCMOdVaAo0A8pwDJDynuGo+KsSklwu7p/KB/odRMdt+z nWL4iB1aG6eWVUWZdGBXK/TkEdv3Uiu4lhzpTXQHLAU5Q21++MMDkv9fp9vT3HzI qYqgl1ndEj4F7w6HkzF63T2CzNp8lG2HQQMW14ZSbDu2sfA8gLN/2Eqd4OeebFWl JtaspTotT0E8Q9LS0TI77aFwGNZy1WevU7d8lK53epjOS9NJBBvNUkm9Ie7uZ3ou 3tCSXgOcCj4AfGxa5xGAA39ERlyV13BWNZHDssL62x0w9+rfyZGlTE9plqAkj782 Gf1fNVItNGztXp1niu70HHxM5A== -----END CERTIFICATE-----Generated at Wed May 13 14:12:18 2026 by rpki-client