$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft File: DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft (raw, json) Hash identifier: A0fT5WarsIRbW8B8GIXqqFohUukgUjGTHuUPzzkD+BY= Subject key identifier: 78:60:FC:7A:AE:D0:9B:7E:3B:F3:59:14:89:8B:1B:F1:97:45:BC:31 Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Certificate serial: 0A9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft Manifest number: 0A91 Signing time: Tue 24 Mar 2026 19:20:39 +0000 Manifest this update: Tue 24 Mar 2026 19:20:39 +0000 Manifest next update: Tue 31 Mar 2026 19:20:39 +0000 Files and hashes: 1: DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl (hash: sIIVKaqLpSiE57voprkOKKp4qpZ5yIxIGRDyA1plQDg=) 2: A42489D8799211EAA230E17FC4F9AE02.roa (hash: ISmZrMAJhwcmsro9bEaqHnNsjBknpoO3JY21muedtdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Validity Not Before: Mar 24 19:20:39 2026 GMT Not After : Mar 31 19:20:39 2026 GMT Subject: CN=69c2e407-71c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:16:46:2f:19:34:c4:69:ed:ff:84:60:ce: b6:b9:ea:b4:ce:a1:6f:42:6c:37:72:bb:6f:93:21: e6:33:b8:39:8e:80:07:2f:99:a2:9f:a8:b0:24:06: 59:7e:6c:5e:4a:97:99:ac:ae:9f:08:85:fb:90:69: 3e:a7:56:a7:04:88:21:a6:83:92:a9:93:46:b3:45: 08:ad:b9:4f:67:28:24:ec:a7:8e:46:ea:b3:d5:4a: c2:b1:35:f3:46:77:a7:41:0a:86:0b:17:a6:e7:0f: cd:c0:65:1f:a0:b1:7f:56:36:cc:c0:95:83:70:db: b8:d1:89:ed:61:f2:bb:88:65:c3:aa:cd:9f:62:fa: 3b:3d:3a:5f:06:41:b0:e5:f3:96:7c:48:14:28:8d: dd:32:39:af:61:cd:c5:e7:3e:b0:48:9a:e5:ec:e6: 8f:4f:8a:2b:a9:dd:2e:54:69:5f:7c:77:f2:43:6e: 65:ee:84:46:a4:1a:77:b6:40:5a:21:a1:39:5a:15: 27:91:14:65:3b:8a:1b:77:3d:df:b6:c1:45:25:79: 14:f5:9f:80:e9:6b:5a:ce:a5:44:2f:cd:7e:ae:97: 42:95:17:59:58:ed:79:5d:5e:f3:18:63:2a:bf:d9: cf:1c:92:45:40:a6:5f:b5:4f:de:97:03:90:12:a8: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:60:FC:7A:AE:D0:9B:7E:3B:F3:59:14:89:8B:1B:F1:97:45:BC:31 X509v3 Authority Key Identifier: keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:5b:8a:07:18:0b:33:b3:3e:78:82:15:2c:55:4b:08:22:9b: 25:88:27:1a:0d:7d:dd:81:6b:bf:1e:57:0a:a5:20:6f:ab:ff: 55:87:8a:f7:de:1d:55:72:56:1f:5e:79:39:1b:c6:9b:aa:18: 8f:38:21:ac:c5:cb:88:04:1b:c6:91:5b:b9:1d:25:d8:60:c7: 2c:23:18:eb:e3:1d:97:ee:10:e4:25:cf:5f:55:e8:7b:0a:7c: f6:d7:d0:97:df:81:d9:f4:8a:a9:8f:e1:58:10:9b:4a:cc:c5: 5d:df:cd:f9:79:6f:38:22:fe:0a:b5:3d:94:1d:a6:8f:03:79: bc:78:a1:12:66:d3:8c:d3:d3:9a:a0:21:be:19:22:0b:93:51: 73:61:28:93:30:e3:c0:3b:de:8c:7e:7b:1e:14:6d:3b:5f:34: 35:47:9c:7d:83:e4:73:83:d2:65:2c:6f:28:45:0c:b7:93:d7: 50:df:30:84:d8:04:4c:16:10:4b:46:0e:27:33:55:3f:67:7b: c5:26:43:73:85:73:da:4b:26:1d:4c:dc:3e:72:62:74:a4:6f: b9:57:c7:80:15:17:42:75:73:d8:04:31:18:4d:35:e2:d5:7b: 87:b6:3d:f1:32:ab:1c:ef:39:f5:9b:c6:f8:fe:f7:f1:b9:29: 2d:3c:0a:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1 NjlGNTM4M0UwHhcNMjYwMzI0MTkyMDM5WhcNMjYwMzMxMTkyMDM5WjAYMRYwFAYD VQQDEw02OWMyZTQwNy03MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTUWRi8ZNMRp7f+EYM62ueq0zqFvQmw3crtvkyHmM7g5joAHL5min6iwJAZZ fmxeSpeZrK6fCIX7kGk+p1anBIghpoOSqZNGs0UIrblPZygk7KeORuqz1UrCsTXz RnenQQqGCxem5w/NwGUfoLF/VjbMwJWDcNu40YntYfK7iGXDqs2fYvo7PTpfBkGw 5fOWfEgUKI3dMjmvYc3F5z6wSJrl7OaPT4orqd0uVGlffHfyQ25l7oRGpBp3tkBa IaE5WhUnkRRlO4obdz3ftsFFJXkU9Z+A6WtazqVEL81+rpdClRdZWO15XV7zGGMq v9nPHJJFQKZftU/elwOQEqjTTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhg/Hqu 0Jt+O/NZFImLG/GXRbwxMB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5 MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkUzMS9BQjc5NTZENDc5MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1Y Y1JUbTFHV3dwdlZXbjFPRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN1uKBxgLM7M+eIIVLFVLCCKbJYgnGg193YFrvx5XCqUgb6v/VYeK994dVXJW H155ORvGm6oYjzghrMXLiAQbxpFbuR0l2GDHLCMY6+Mdl+4Q5CXPX1Xoewp89tfQ l9+B2fSKqY/hWBCbSszFXd/N+XlvOCL+CrU9lB2mjwN5vHihEmbTjNPTmqAhvhki C5NRc2EokzDjwDvejH57HhRtO180NUecfYPkc4PSZSxvKEUMt5PXUN8whNgETBYQ S0YOJzNVP2d7xSZDc4Vz2ksmHUzcPnJidKRvuVfHgBUXQnVz2AQxGE014tV7h7Y9 8TKrHO859ZvG+P738bkpLTwKsA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:42 2026 by rpki-client