$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json) Hash identifier: obHvwV47P3w0QMWsqKvxGeQrYi+PZi0yMAUK//Q50ik= Subject key identifier: AC:7E:8E:AD:F7:0C:50:A2:CE:BC:B7:CB:43:30:CD:F6:3A:67:30:4C Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft Manifest number: 020C Signing time: Mon 11 May 2026 03:02:23 +0000 Manifest this update: Mon 11 May 2026 03:02:23 +0000 Manifest next update: Mon 18 May 2026 03:02:23 +0000 Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: Yy06gxVJcAnw5NANCFmrpdWsR77Rp0JGdTRfUF+2Cek=) 2: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=) 3: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=) 4: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D Validity Not Before: May 11 03:02:23 2026 GMT Not After : May 18 03:02:23 2026 GMT Subject: CN=6a0146bf-e5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:20:2f:8b:99:e3:0f:0e:4c:85:59:39:2a: 43:82:b5:d4:54:bb:b8:77:44:b9:49:99:33:50:e2: bc:d6:b6:94:90:26:d6:9d:fc:62:d7:e7:a9:6b:ce: 9f:80:12:a0:ff:e5:1e:3d:44:41:d4:d2:69:8f:fa: 69:48:bf:ea:17:a9:2d:50:1b:46:de:f3:01:c8:b0: 95:e3:fb:7b:f0:b1:41:e0:63:fd:e4:96:03:f4:6b: 0c:26:5f:27:a9:cb:1a:33:a3:fa:e4:28:24:a7:7d: 44:10:ac:00:d8:df:49:7e:a8:66:63:ac:1e:cc:95: 0e:11:07:97:c4:b4:90:9d:78:d0:fb:10:df:6b:3e: 0a:94:fe:10:d8:de:f6:db:f2:1f:cf:f5:df:63:9f: 0b:ca:1e:6f:4c:28:48:ba:09:a5:fb:72:42:15:d9: c7:78:d0:da:3f:dd:60:c9:56:52:d8:38:ce:48:28: ae:6b:d4:7f:d6:2c:95:85:ea:60:8a:71:3f:60:7a: 5b:b7:2c:b8:37:8d:40:d5:c6:65:e1:2e:61:a6:96: bb:e0:9a:4e:35:da:9d:b8:27:f3:87:5d:2e:f6:24: 73:46:f8:09:d0:af:db:9e:f9:ed:5d:c9:8a:2a:a2: 53:b2:90:7c:a6:0b:7f:ad:d4:bc:e4:5e:cb:d3:cc: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7E:8E:AD:F7:0C:50:A2:CE:BC:B7:CB:43:30:CD:F6:3A:67:30:4C X509v3 Authority Key Identifier: keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d7:15:25:fd:01:54:5e:4f:96:f0:ce:4b:9b:e7:2f:81:de: e4:0d:5e:0b:02:8e:dd:f8:88:77:58:cd:c1:8c:c7:0f:14:c3: d9:1e:a8:fa:b3:79:0f:fb:2d:b5:72:f4:ea:53:18:56:59:95: 9d:0f:1e:d3:40:a3:cd:94:8b:6a:57:a3:7b:72:e8:33:0e:64: 0b:3d:5e:08:9a:fb:c9:dd:15:c9:82:f3:29:2c:fa:b3:64:bf: ca:b1:f5:c2:d5:89:5d:b9:12:42:bc:79:6f:27:fd:1a:1d:e9: 34:76:2e:d1:f1:2c:64:78:79:4f:7a:7d:ea:f2:f5:4d:fd:e4: 39:2c:2e:87:b7:3c:20:b5:c7:76:ce:f3:4e:df:6f:7e:5d:93: 06:38:4e:78:db:35:41:67:ac:a7:b9:e9:14:95:d8:ce:02:1c: d7:b6:ac:26:c4:18:e6:ce:2a:90:3d:12:ca:df:6b:fc:23:41: 40:9e:5f:26:d5:a5:4c:65:b9:b6:11:d8:f7:b7:ee:07:89:3a: ae:f8:f5:cd:b0:70:73:43:85:b3:97:21:97:35:3f:a6:85:7d: e8:71:10:fa:ce:f6:a3:c1:52:f8:92:a2:59:91:61:57:18:24: c6:48:e4:49:24:d6:7f:89:ec:a4:c8:ee:e0:da:ce:37:cc:97: 3b:39:80:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy QTFGMDA5MkQwHhcNMjYwNTExMDMwMjIzWhcNMjYwNTE4MDMwMjIzWjAYMRYwFAYD VQQDEw02YTAxNDZiZi1lNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsEgL4uZ4w8OTIVZOSpDgrXUVLu4d0S5SZkzUOK81raUkCbWnfxi1+epa86f gBKg/+UePURB1NJpj/ppSL/qF6ktUBtG3vMByLCV4/t78LFB4GP95JYD9GsMJl8n qcsaM6P65Cgkp31EEKwA2N9JfqhmY6wezJUOEQeXxLSQnXjQ+xDfaz4KlP4Q2N72 2/Ifz/XfY58Lyh5vTChIugml+3JCFdnHeNDaP91gyVZS2DjOSCiua9R/1iyVhepg inE/YHpbtyy4N41A1cZl4S5hppa74JpONdqduCfzh10u9iRzRvgJ0K/bnvntXcmK KqJTspB8pgt/rdS85F7L08z6gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKx+jq33 DFCizry3y0MwzfY6ZzBMMB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDMC9FNEVENTM5NDMxRDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNv dG9CU1dzUWZwODRxSHdDUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAetcVJf0BVF5PlvDOS5vnL4He5A1eCwKO3fiId1jNwYzHDxTD2R6o+rN5D/st tXL06lMYVlmVnQ8e00CjzZSLaleje3LoMw5kCz1eCJr7yd0VyYLzKSz6s2S/yrH1 wtWJXbkSQrx5byf9Gh3pNHYu0fEsZHh5T3p96vL1Tf3kOSwuh7c8ILXHds7zTt9v fl2TBjhOeNs1QWesp7npFJXYzgIc17asJsQY5s4qkD0Syt9r/CNBQJ5fJtWlTGW5 thHY97fuB4k6rvj1zbBwc0OFs5chlzU/poV96HEQ+s72o8FS+JKiWZFhVxgkxkjk SSTWf4nspMju4NrON8yXOzmApg== -----END CERTIFICATE-----Generated at Wed May 13 03:49:51 2026 by rpki-client