$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: zmKEj4d/2fQwky5d5f4czO0zBv3tG/dY6mHic6yH3qU= Subject key identifier: C6:DF:30:E5:69:5A:3A:F3:57:F6:25:1E:35:8B:D6:AC:37:2E:E4:1B Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 0600 Signing time: Sun 10 May 2026 22:57:58 +0000 Manifest this update: Sun 10 May 2026 22:57:57 +0000 Manifest next update: Sun 17 May 2026 22:57:57 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: 1xiVm+4fURpb29r7w3u3cgTofdZgive9dKGckxBS+64=) 2: 632B0D382CE911F189BCFB9BA3833773.roa (hash: u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 22:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: May 10 22:57:57 2026 GMT Not After : May 17 22:57:57 2026 GMT Subject: CN=6a010d76-30a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:50:85:3a:e4:86:d6:f9:dd:05:6b:b3:a0: ba:9e:0f:ee:01:74:0e:67:19:ce:a1:ee:ad:c0:74: 7e:fe:bf:e5:38:b8:16:5c:be:37:f7:21:f0:d1:80: 62:6a:95:79:79:27:0b:8e:72:e7:fb:10:6c:0d:56: c8:82:f0:8b:ff:5f:d2:1a:61:df:b4:f0:5b:27:d5: c6:7f:12:3f:4f:23:f5:f9:43:42:5d:bf:03:f7:7b: 58:02:85:27:7f:a6:16:75:c9:f6:7e:73:35:1a:11: 7f:c2:43:d0:cb:4a:2b:8b:6e:44:1c:b1:92:8e:25: be:87:7e:27:2e:2e:09:1f:00:e4:02:ba:6b:c6:df: ab:58:4a:df:66:0c:95:07:6b:93:c3:04:66:16:b5: 6a:63:6a:fc:45:d4:f8:25:60:e4:ca:c9:22:22:7a: ff:cd:7d:13:f4:c4:9e:5e:71:33:2a:c7:1d:2d:71: 34:f1:30:71:93:72:6f:f7:bf:0e:63:f8:0c:b2:e0: 52:9b:a7:8e:96:20:9e:73:1b:a3:cb:59:a3:7e:fa: 1d:6b:fd:eb:b9:34:cc:f3:13:e3:2e:21:a7:f5:22: 67:5a:64:4c:59:32:2e:60:23:b4:05:a5:62:39:d8: 44:0e:58:eb:9c:bd:13:b2:b4:62:61:33:b0:e5:82: e1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DF:30:E5:69:5A:3A:F3:57:F6:25:1E:35:8B:D6:AC:37:2E:E4:1B X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:f4:81:5a:03:e8:08:f7:77:da:66:2e:b4:9b:8b:f5:57:88: 0e:f1:36:24:6b:11:a4:11:35:27:2c:1b:79:35:2c:8b:4f:3a: 61:a5:d9:15:ee:9d:2b:0a:51:0f:9e:61:c2:89:44:27:6a:c8: 1d:16:b7:ea:9f:c3:ef:37:f5:ae:e9:40:73:30:44:cb:8b:71: e1:de:d3:91:d0:27:90:aa:2b:73:88:f6:0e:18:dd:17:20:fa: c2:25:81:bf:5f:b6:03:2b:f5:92:28:aa:0b:0a:7b:b2:44:60: 37:be:3f:74:dc:d9:01:86:bb:bc:0e:9c:50:da:ec:d6:c5:f5: ee:06:36:b2:45:b2:ec:21:e7:9d:de:98:fc:f6:3e:27:16:66: 76:01:90:7f:29:65:05:1e:3b:48:d2:a0:38:66:d4:f7:85:f4: 13:07:72:15:aa:68:02:e0:d1:ea:ff:ed:bd:9c:f7:f9:24:ce: f2:b2:32:91:90:a8:c7:d7:75:ba:0a:29:57:19:72:3a:43:dc: 14:2c:54:58:7f:26:a4:a4:e3:a4:01:57:a3:7a:d3:bb:13:07: 0c:75:53:3d:01:86:74:b1:cd:67:85:75:d6:da:50:bf:44:6b: c6:8b:27:f0:1d:bd:99:92:e0:9a:79:8c:e8:cc:93:90:12:19: c6:c9:b0:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYwNTEwMjI1NzU3WhcNMjYwNTE3MjI1NzU3WjAYMRYwFAYD VQQDEw02YTAxMGQ3Ni0zMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAivtQhTrkhtb53QVrs6C6ng/uAXQOZxnOoe6twHR+/r/lOLgWXL439yHw0YBi apV5eScLjnLn+xBsDVbIgvCL/1/SGmHftPBbJ9XGfxI/TyP1+UNCXb8D93tYAoUn f6YWdcn2fnM1GhF/wkPQy0ori25EHLGSjiW+h34nLi4JHwDkArprxt+rWErfZgyV B2uTwwRmFrVqY2r8RdT4JWDkyskiInr/zX0T9MSeXnEzKscdLXE08TBxk3Jv978O Y/gMsuBSm6eOliCecxujy1mjfvoda/3ruTTM8xPjLiGn9SJnWmRMWTIuYCO0BaVi OdhEDljrnL0TsrRiYTOw5YLhxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbfMOVp WjrzV/YlHjWL1qw3LuQbMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzfSBWgPoCPd32mYutJuL9VeIDvE2JGsRpBE1JywbeTUsi086YaXZFe6dKwpR D55hwolEJ2rIHRa36p/D7zf1rulAczBEy4tx4d7TkdAnkKorc4j2DhjdFyD6wiWB v1+2Ayv1kiiqCwp7skRgN74/dNzZAYa7vA6cUNrs1sX17gY2skWy7CHnnd6Y/PY+ JxZmdgGQfyllBR47SNKgOGbU94X0EwdyFapoAuDR6v/tvZz3+STO8rIykZCox9d1 ugopVxlyOkPcFCxUWH8mpKTjpAFXo3rTuxMHDHVTPQGGdLHNZ4V11tpQv0Rrxosn 8B29mZLgmnmM6MyTkBIZxsmwJg== -----END CERTIFICATE-----Generated at Tue May 12 23:25:49 2026 by rpki-client