$ rpki-client -vvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft File: DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json) Hash identifier: WMEVP88FG3XY2XRajCxB1pZ+hpbX3/yKf2tHM4byhOU= Subject key identifier: 8E:98:AA:84:04:C2:CE:3E:0F:BC:CB:40:38:6C:94:EB:B7:B8:EB:73 Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A Certificate issuer: /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft Manifest number: 01FB Signing time: Mon 11 May 2026 03:09:49 +0000 Manifest this update: Mon 11 May 2026 03:09:49 +0000 Manifest next update: Mon 18 May 2026 03:09:49 +0000 Files and hashes: 1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: lVqGWCwnOWDEBsVxufZMiKJTs5eTaJn1AlYpj7z0nD4=) 2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: 6/5fQKVgdzi8J2+DuKLmp0N2nLhrO/0HTpuAZFS2K3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A Validity Not Before: May 11 03:09:49 2026 GMT Not After : May 18 03:09:49 2026 GMT Subject: CN=6a01487d-8556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:9f:32:0f:42:f2:33:dc:c2:63:97:45:e3: be:46:56:64:50:18:cf:b1:ad:df:bd:90:c8:34:3b: 62:54:64:05:89:ab:82:3a:10:71:61:27:ca:05:5b: fa:d1:5b:90:fc:16:de:06:d7:0c:73:79:06:65:dd: c9:0c:c3:47:05:82:ea:b0:f1:0d:cf:36:43:d3:c8: 2d:45:76:c6:0e:aa:ea:78:3f:df:99:f1:fa:12:7f: cc:e5:2a:a7:74:71:5a:f9:cf:ce:0a:33:4e:37:31: ba:10:b2:71:ee:a5:ce:ff:59:aa:3b:ee:c7:17:c6: 07:3a:88:5c:cf:df:5e:04:5f:f9:af:14:ed:0e:55: 12:70:34:4d:ed:fc:e6:ae:6d:fe:38:f8:f5:9d:9e: 79:81:1b:f3:eb:d6:0e:02:86:94:96:3e:96:d7:e5: a4:6b:2a:14:cf:b9:71:e7:a2:39:2b:1c:48:0a:2d: 3a:8d:3d:16:93:e9:5a:d1:23:99:28:7b:6e:10:e9: d4:43:f9:2a:01:55:57:b6:1a:50:a7:39:50:cc:0b: a8:24:01:8a:d4:db:3b:c6:3c:91:ae:a3:9b:c5:0f: 07:1a:fe:9a:16:ed:86:91:bf:e0:3c:32:75:bc:85: 9d:a2:72:98:37:1d:8b:73:04:50:e9:92:53:dd:27: b0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:98:AA:84:04:C2:CE:3E:0F:BC:CB:40:38:6C:94:EB:B7:B8:EB:73 X509v3 Authority Key Identifier: keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:eb:9d:0f:67:5a:b4:0b:8c:96:c0:0a:3f:83:7a:34:15:5f: ed:0c:ae:13:ac:ee:1a:19:00:5f:04:0e:09:32:58:6a:0c:26: e4:29:76:1c:74:b7:fc:06:8d:be:4c:d0:17:9f:41:1b:b4:6a: 1f:f1:0a:17:62:4b:36:04:25:c1:13:f7:dd:c4:14:8a:6f:18: 25:7e:91:03:0a:37:fa:5c:67:07:ad:c5:a1:15:2c:6b:18:24: be:c9:be:fd:f6:4a:ef:b8:19:5d:2a:fd:54:ae:9b:b5:26:43: 3a:68:9c:45:f6:af:d2:42:fd:6c:c3:85:14:8a:9a:44:f7:eb: d4:40:a0:60:6f:e4:7f:b1:b7:53:67:21:95:bb:17:fb:c4:57: 09:ba:ed:d3:a2:51:3e:ed:32:34:fc:5b:63:7c:76:fa:ea:16: a7:1d:15:6b:19:34:62:6a:2a:6f:21:d6:76:2e:ef:c5:71:18: 2e:36:59:96:2e:67:de:6a:e9:40:f9:98:9a:55:79:ef:90:4d: 20:94:70:ac:ca:4c:0e:72:5e:95:98:63:cb:7c:09:28:fb:84: 0e:26:09:74:aa:58:df:7f:d6:87:b8:13:6d:7e:67:20:3b:97: 30:2d:fb:ee:db:8d:9d:08:03:c0:c7:a5:6c:bc:70:0d:f9:0d: b0:3e:29:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5 QzlCOTdDN0EwHhcNMjYwNTExMDMwOTQ5WhcNMjYwNTE4MDMwOTQ5WjAYMRYwFAYD VQQDEw02YTAxNDg3ZC04NTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVqfMg9C8jPcwmOXReO+RlZkUBjPsa3fvZDINDtiVGQFiauCOhBxYSfKBVv6 0VuQ/BbeBtcMc3kGZd3JDMNHBYLqsPENzzZD08gtRXbGDqrqeD/fmfH6En/M5Sqn dHFa+c/OCjNONzG6ELJx7qXO/1mqO+7HF8YHOohcz99eBF/5rxTtDlUScDRN7fzm rm3+OPj1nZ55gRvz69YOAoaUlj6W1+WkayoUz7lx56I5KxxICi06jT0Wk+la0SOZ KHtuEOnUQ/kqAVVXthpQpzlQzAuoJAGK1Ns7xjyRrqObxQ8HGv6aFu2Gkb/gPDJ1 vIWdonKYNx2LcwRQ6ZJT3SewFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6YqoQE ws4+D7zLQDhslOu3uOtzMB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2 N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq UlB0emxuWVAyVTJjbTVmSG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQuudD2datAuMlsAKP4N6NBVf7QyuE6zuGhkAXwQOCTJYagwm5Cl2HHS3/AaN vkzQF59BG7RqH/EKF2JLNgQlwRP33cQUim8YJX6RAwo3+lxnB63FoRUsaxgkvsm+ /fZK77gZXSr9VK6btSZDOmicRfav0kL9bMOFFIqaRPfr1ECgYG/kf7G3U2chlbsX +8RXCbrt06JRPu0yNPxbY3x2+uoWpx0Vaxk0YmoqbyHWdi7vxXEYLjZZli5n3mrp QPmYmlV575BNIJRwrMpMDnJelZhjy3wJKPuEDiYJdKpY33/Wh7gTbX5nIDuXMC37 7tuNnQgDwMelbLxwDfkNsD4pLw== -----END CERTIFICATE-----Generated at Wed May 13 02:53:16 2026 by rpki-client