$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: xbGouq0hROFImRj1crUNnm2VBjSy8I3g8hht1+VUUPc= Subject key identifier: 3D:09:8F:D9:13:22:6B:6B:B4:B0:FF:3B:F0:B5:6A:85:17:FE:7D:09 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 05FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 05E6 Signing time: Tue 24 Mar 2026 22:41:18 +0000 Manifest this update: Tue 24 Mar 2026 22:41:18 +0000 Manifest next update: Tue 31 Mar 2026 22:41:18 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: h9xVjtZBQ5SwFp8EklqAZHmfMQkjFW1joG/d6m5SErU=) 2: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=) 3: EE99A422139111F1BDC8075D3B3D8C67.roa (hash: 12f6EfI1i+dU5oUXg6t+6gD1txmwBSRiv2UbFpsTXu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Mar 24 22:41:18 2026 GMT Not After : Mar 31 22:41:18 2026 GMT Subject: CN=69c3130e-cf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:f0:a8:8f:17:32:56:32:75:74:4f:38:d6: e2:f1:d0:79:b9:bf:3a:1f:fc:fb:9c:de:89:59:ef: 0f:3f:19:33:7d:3b:a9:4e:11:72:38:14:f1:7a:e2: df:61:16:51:55:fb:b1:74:9f:68:24:5c:86:e6:1d: 07:1d:2c:34:9f:bf:7f:87:a4:52:87:cd:9d:bb:fc: 2d:77:44:1e:1a:49:29:6c:31:a7:d5:ff:75:99:22: d7:65:5e:1e:f2:13:22:cc:83:54:de:45:87:26:c3: 4f:82:55:cb:2b:0f:5d:03:4b:01:20:8d:00:af:fd: 34:18:04:29:91:e6:87:67:ce:b5:00:16:8e:88:a7: d5:08:ba:3a:6d:d5:ed:d2:87:cf:ac:71:b9:4d:01: 07:86:ef:94:b4:a6:11:75:ff:39:d0:d5:3e:12:55: 69:0c:1c:5b:da:15:6a:f9:7e:60:a4:a5:60:00:32: e2:80:a6:e5:a5:f3:e4:88:0c:57:e3:79:89:a9:68: 5e:51:0a:37:7f:60:bf:c9:23:43:98:3a:2c:fb:bb: 1f:65:62:9f:c6:a7:18:90:cc:83:50:1e:c1:50:19: ba:42:73:a9:45:b3:33:49:0f:7c:cc:25:2a:c2:5c: e6:5c:75:5a:cf:62:f5:38:85:34:9d:b8:e1:34:3b: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:09:8F:D9:13:22:6B:6B:B4:B0:FF:3B:F0:B5:6A:85:17:FE:7D:09 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a8:d2:f2:2d:4a:59:e0:12:7e:67:a7:65:48:ae:ce:50:68: 5f:81:7f:be:01:12:ae:89:67:dd:8b:41:b7:12:48:ab:b7:b3: 73:d9:25:59:59:cc:78:d2:55:97:f0:db:21:e9:68:62:ed:eb: 6c:84:46:58:ab:82:db:b0:ce:f4:1e:7c:29:13:7d:d9:a3:b4: cb:ce:b5:a4:c0:a7:df:1f:e8:d9:3f:a6:01:ab:24:42:8f:8e: 01:92:99:04:6b:85:9d:2d:1b:66:61:1d:6f:87:0a:44:5b:bb: 91:47:59:26:ce:d3:68:8a:cb:bc:d7:cc:e0:28:94:53:57:8a: 72:27:a2:0d:d4:12:48:a9:0a:c8:f9:ed:c1:91:32:53:22:32: 88:24:25:e8:d0:2b:16:56:0d:6a:e3:78:b3:78:df:2a:4d:f1: 7e:fb:76:9e:f9:bc:32:f0:fc:37:3a:95:8b:3c:e6:49:fc:4d: 3c:18:94:5d:fb:3d:30:8e:b5:52:e9:32:43:28:96:85:7c:82: 28:42:f9:e9:f1:95:53:ec:d0:73:f9:18:68:6d:55:6a:54:6b: 8e:61:d9:dd:e1:ed:82:e8:30:64:ec:ff:94:71:8c:43:e2:5c: 0d:82:99:f0:c3:ce:66:65:66:2d:90:68:b1:68:6e:52:d1:19: f7:43:f6:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYwMzI0MjI0MTE4WhcNMjYwMzMxMjI0MTE4WjAYMRYwFAYD VQQDEw02OWMzMTMwZS1jZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsDwqI8XMlYydXRPONbi8dB5ub86H/z7nN6JWe8PPxkzfTupThFyOBTxeuLf YRZRVfuxdJ9oJFyG5h0HHSw0n79/h6RSh82du/wtd0QeGkkpbDGn1f91mSLXZV4e 8hMizINU3kWHJsNPglXLKw9dA0sBII0Ar/00GAQpkeaHZ861ABaOiKfVCLo6bdXt 0ofPrHG5TQEHhu+UtKYRdf850NU+ElVpDBxb2hVq+X5gpKVgADLigKblpfPkiAxX 43mJqWheUQo3f2C/ySNDmDos+7sfZWKfxqcYkMyDUB7BUBm6QnOpRbMzSQ98zCUq wlzmXHVaz2L1OIU0nbjhNDuFtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0Jj9kT ImtrtLD/O/C1aoUX/n0JMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFKjS8i1KWeASfmenZUiuzlBoX4F/vgESroln3YtBtxJIq7ezc9klWVnMeNJV l/DbIeloYu3rbIRGWKuC27DO9B58KRN92aO0y861pMCn3x/o2T+mAaskQo+OAZKZ BGuFnS0bZmEdb4cKRFu7kUdZJs7TaIrLvNfM4CiUU1eKcieiDdQSSKkKyPntwZEy UyIyiCQl6NArFlYNauN4s3jfKk3xfvt2nvm8MvD8NzqVizzmSfxNPBiUXfs9MI61 UukyQyiWhXyCKEL56fGVU+zQc/kYaG1ValRrjmHZ3eHtgugwZOz/lHGMQ+JcDYKZ 8MPOZmVmLZBosWhuUtEZ90P2vw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:04:02 2026 by rpki-client