$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft File: DkAOOUTvUXdtyNgbU7art55NDV4.mft (raw, json) Hash identifier: eJtZr/zRLNnBxBDXJpf2e7v/4yYHZwwHdESBhCeJXMM= Subject key identifier: 54:C9:CA:88:D1:C7:E3:75:D9:67:30:04:1E:1B:50:94:F6:49:C7:50 Authority key identifier: 0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E Certificate issuer: /CN=A9125A35/serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft Manifest number: 0D Signing time: Wed 25 Mar 2026 08:16:21 +0000 Manifest this update: Wed 25 Mar 2026 08:16:20 +0000 Manifest next update: Wed 01 Apr 2026 08:16:20 +0000 Files and hashes: 1: DkAOOUTvUXdtyNgbU7art55NDV4.crl (hash: 7qkmuUzZE1YJ9cFF86mgb3WR2OKoe6tsCGXjvUJ7SfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A35, serialNumber=0E400E3944EF51776DC8D81B53B6ABB79E4D0D5E Validity Not Before: Mar 25 08:16:20 2026 GMT Not After : Apr 1 08:16:20 2026 GMT Subject: CN=69c399d5-94e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:01:a3:56:e0:df:51:e7:c0:3d:88:de:43: b3:39:ab:53:82:58:83:fa:22:20:44:e7:52:92:86: 77:65:dd:e7:3a:3b:e8:58:84:b5:fb:ae:05:b6:c5: 3d:be:02:87:47:55:1f:26:07:1e:2a:c6:3f:0d:7e: ae:b3:e6:ab:3c:ef:cc:17:4c:12:56:59:c3:0b:64: 1a:1d:03:ca:51:22:56:5d:e8:b3:73:b5:b1:82:b1: 88:60:1c:28:bf:82:55:ba:e0:f8:72:d3:b5:ca:fa: 4c:66:af:50:ad:46:55:7c:cc:75:a5:56:c5:b7:d1: 80:d4:89:e6:3a:4f:f2:84:7e:cb:36:f7:99:ef:9f: 5d:d9:ca:9a:59:69:6c:5d:f1:28:64:83:2d:5f:79: d7:ee:7f:ff:70:e0:b8:35:e6:b1:45:20:e6:36:7e: 5d:2f:25:87:e8:70:c1:ff:84:b4:66:07:5b:e0:e1: d0:d4:d0:8d:ea:b2:ea:03:b5:4c:d4:59:dc:b1:bc: 27:07:64:e5:f8:84:bb:99:68:39:46:44:d5:35:c3: 02:f9:ec:e0:c4:b2:7e:87:ab:21:19:5c:63:2f:c5: 4e:81:71:73:a1:45:d2:51:d9:60:a5:06:df:ed:bd: 51:01:0b:e9:b0:7f:bd:46:6b:c2:83:71:ca:5a:c5: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C9:CA:88:D1:C7:E3:75:D9:67:30:04:1E:1B:50:94:F6:49:C7:50 X509v3 Authority Key Identifier: keyid:0E:40:0E:39:44:EF:51:77:6D:C8:D8:1B:53:B6:AB:B7:9E:4D:0D:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DkAOOUTvUXdtyNgbU7art55NDV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A35/CE7E91D816D011F1B06D0A42303D8C67/DkAOOUTvUXdtyNgbU7art55NDV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:4f:d6:3c:6c:e9:74:0c:34:c5:f6:54:b7:b9:69:3e:91:f8: 4f:60:f4:f5:29:fb:f1:51:6f:44:73:8c:ac:97:cf:9c:34:7b: bb:e3:32:e8:4b:81:e6:0d:d1:9e:0b:1a:ad:fe:8c:0d:4a:15: 78:a9:ac:99:f1:bb:6e:d5:d7:60:1c:54:19:cd:f4:0f:50:23: 38:5a:60:02:6f:cb:c0:15:76:90:f7:d8:14:63:99:67:6c:d2: 5d:5c:84:b9:b7:d8:c2:a4:5a:8f:d0:1f:6d:57:55:dd:96:be: 70:b5:1d:71:3d:49:37:49:a6:ef:02:cd:bb:e8:cc:f6:b7:b0: 0a:34:db:b3:94:5e:a6:33:77:ae:62:f4:c7:59:c9:13:b4:4e: d8:98:9d:9d:f4:1a:2e:74:1d:fd:69:78:8a:5c:9e:f0:fa:cc: b9:ff:c6:b8:d4:6e:f1:2f:e3:d4:b6:dc:95:de:ec:0e:51:f1: e0:13:93:19:09:fe:0a:e3:98:ce:e2:85:70:13:ed:e9:f7:4b: 6e:a9:59:8b:f0:36:bb:80:73:bf:75:73:67:da:ce:b3:77:7c: 11:c1:79:27:f9:91:56:b8:2c:27:52:50:b5:94:fe:13:29:f8: 6a:82:7a:67:f3:6e:fb:0c:c0:31:e2:61:ca:c0:04:d5:bc:7d: 96:f2:a9:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUEzNTExMC8GA1UEBRMoMEU0MDBFMzk0NEVGNTE3NzZEQzhEODFCNTNCNkFCQjc5 RTREMEQ1RTAeFw0yNjAzMjUwODE2MjBaFw0yNjA0MDEwODE2MjBaMBgxFjAUBgNV BAMTDTY5YzM5OWQ1LTk0ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCysQGjVuDfUefAPYjeQ7M5q1OCWIP6IiBE51KShndl3ec6O+hYhLX7rgW2xT2+ AodHVR8mBx4qxj8Nfq6z5qs878wXTBJWWcMLZBodA8pRIlZd6LNztbGCsYhgHCi/ glW64Phy07XK+kxmr1CtRlV8zHWlVsW30YDUieY6T/KEfss295nvn13ZyppZaWxd 8Shkgy1fedfuf/9w4Lg15rFFIOY2fl0vJYfocMH/hLRmB1vg4dDU0I3qsuoDtUzU WdyxvCcHZOX4hLuZaDlGRNU1wwL57ODEsn6HqyEZXGMvxU6BcXOhRdJR2WClBt/t vVEBC+mwf71Ga8KDccpaxT/VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVMnKiNHH 43XZZzAEHhtQlPZJx1AwHwYDVR0jBBgwFoAUDkAOOUTvUXdtyNgbU7art55NDV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1QTM1L0NFN0U5MUQ4MTZE MDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhkdHlOZ2JVN2FydDU1TkRW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGtBT09VVHZVWGR0eU5nYlU3YXJ0NTVORFY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 QTM1L0NFN0U5MUQ4MTZEMDExRjFCMDZEMEE0MjMwM0Q4QzY3L0RrQU9PVVR2VVhk dHlOZ2JVN2FydDU1TkRWNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwT9Y8bOl0DDTF9lS3uWk+kfhPYPT1KfvxUW9Ec4ysl8+cNHu74zLoS4HmDdGe Cxqt/owNShV4qayZ8btu1ddgHFQZzfQPUCM4WmACb8vAFXaQ99gUY5lnbNJdXIS5 t9jCpFqP0B9tV1Xdlr5wtR1xPUk3SabvAs276Mz2t7AKNNuzlF6mM3euYvTHWckT tE7YmJ2d9BoudB39aXiKXJ7w+sy5/8a41G7xL+PUttyV3uwOUfHgE5MZCf4K45jO 4oVwE+3p90tuqVmL8Da7gHO/dXNn2s6zd3wRwXkn+ZFWuCwnUlC1lP4TKfhqgnpn 8277DMAx4mHKwATVvH2W8qmh -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:33 2026 by rpki-client