$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json) Hash identifier: rXuEdEiMoBQtJPpwHHx5few2UFr98TNNfvGGL7GvZS4= Subject key identifier: 2C:9E:3D:04:4F:2C:1C:55:DD:74:E0:FB:A6:AF:00:E3:08:E8:3B:BE Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft Manifest number: 0278 Signing time: Wed 13 May 2026 02:03:09 +0000 Manifest this update: Wed 13 May 2026 02:03:09 +0000 Manifest next update: Wed 20 May 2026 02:03:09 +0000 Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: Qe/KhOp82NcrznJTUk2zUsqJRf8RmM5MZF8oqLzCvsE=) 2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9 Validity Not Before: May 13 02:03:09 2026 GMT Not After : May 20 02:03:09 2026 GMT Subject: CN=6a03dbdd-27ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:f6:a6:3a:30:06:85:ae:d2:d2:9c:22:10: b0:63:5c:56:20:9d:f6:97:65:bf:48:fb:b7:fb:5a: 01:32:03:58:1f:4f:dc:61:64:20:47:93:f5:6f:47: a0:2e:94:ea:ea:fa:d6:24:da:c5:20:73:91:76:81: 81:77:5f:ce:07:0b:eb:43:c7:ea:cf:f7:54:fd:d5: 8a:e1:cb:49:73:1c:47:39:b9:a6:8f:3d:ca:d3:52: 31:4d:89:ab:ed:e7:0c:2c:b3:75:00:86:8e:64:ae: 41:d2:cf:b8:5a:7e:b5:78:78:b2:c8:d0:a6:8e:80: a7:b0:8c:2c:83:97:2d:60:a5:4d:6b:90:cd:b8:4e: a9:07:35:d2:e7:42:85:5d:b9:72:10:21:53:76:d0: a5:87:44:87:28:ad:69:3b:11:84:99:86:88:5e:4b: 7e:3d:3d:37:36:36:3d:e5:ba:ad:69:c6:3d:9c:db: 6f:54:83:3e:90:2e:5d:1e:7c:50:e9:8a:bd:27:9c: b7:1c:d7:54:3f:d0:86:d7:3d:92:69:2f:6f:b6:c3: 67:b3:0d:7c:1c:09:32:a0:b7:3e:d1:eb:9f:b2:39: 4b:70:eb:9a:90:a2:44:67:e8:39:e2:4a:8d:f7:98: 4d:31:97:a6:10:a8:e7:4c:c0:77:3b:12:47:eb:d1: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:3D:04:4F:2C:1C:55:DD:74:E0:FB:A6:AF:00:E3:08:E8:3B:BE X509v3 Authority Key Identifier: keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:62:4f:6f:43:9a:12:24:62:67:e5:9d:ae:49:b3:77:90:a9: 82:7c:8a:97:81:ff:31:13:32:0b:63:65:dc:ad:0c:16:99:fe: 12:2d:91:f0:37:ac:b8:b5:6b:ac:1f:6d:27:c5:d9:67:6f:5d: cb:7e:fa:ca:95:0f:92:2a:99:1c:58:90:ed:c7:3c:8a:85:ab: c0:dc:0e:71:93:b3:c1:88:db:2a:8f:5e:39:b9:96:3f:0e:af: 4f:f2:aa:8f:27:5d:9c:6b:e4:72:9d:4b:97:a8:a9:9b:27:39: a5:69:b9:97:bf:35:a1:ab:4d:b2:07:ec:4a:e5:6a:f7:f7:57: 35:e5:95:c6:ab:54:d8:e3:23:fb:47:b4:5d:1d:68:3d:6f:33: 29:d1:33:e9:47:56:b9:f9:c9:0c:cf:f1:37:de:89:2f:c1:25: ef:f3:6d:9d:92:62:62:99:42:9f:22:a1:44:5f:ff:ec:d7:23: cd:dd:fc:2a:c5:9f:76:a1:70:d7:9d:4b:95:4b:be:e0:c7:9a: c4:9b:92:96:c6:a2:71:e3:03:0d:99:c3:69:2c:e5:68:45:e1: cb:b0:90:c9:da:c8:5b:69:1e:dc:92:0d:95:0e:3b:34:9a:26: 6b:82:43:b2:da:f1:9b:cc:e5:47:b4:91:4d:a1:19:63:8c:47: 84:e1:e0:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG NEE4OTVDRTkwHhcNMjYwNTEzMDIwMzA5WhcNMjYwNTIwMDIwMzA5WjAYMRYwFAYD VQQDEw02YTAzZGJkZC0yN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv/2pjowBoWu0tKcIhCwY1xWIJ32l2W/SPu3+1oBMgNYH0/cYWQgR5P1b0eg LpTq6vrWJNrFIHORdoGBd1/OBwvrQ8fqz/dU/dWK4ctJcxxHObmmjz3K01IxTYmr 7ecMLLN1AIaOZK5B0s+4Wn61eHiyyNCmjoCnsIwsg5ctYKVNa5DNuE6pBzXS50KF XblyECFTdtClh0SHKK1pOxGEmYaIXkt+PT03NjY95bqtacY9nNtvVIM+kC5dHnxQ 6Yq9J5y3HNdUP9CG1z2SaS9vtsNnsw18HAkyoLc+0eufsjlLcOuakKJEZ+g54kqN 95hNMZemEKjnTMB3OxJH69EvcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCyePQRP LBxV3XTg+6avAOMI6Du+MB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE eUtlSHZwUi14ZGIwcUpYT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOWJPb0OaEiRiZ+Wdrkmzd5CpgnyKl4H/MRMyC2Nl3K0MFpn+Ei2R8DesuLVr rB9tJ8XZZ29dy376ypUPkiqZHFiQ7cc8ioWrwNwOcZOzwYjbKo9eObmWPw6vT/Kq jyddnGvkcp1Ll6ipmyc5pWm5l781oatNsgfsSuVq9/dXNeWVxqtU2OMj+0e0XR1o PW8zKdEz6UdWufnJDM/xN96JL8El7/NtnZJiYplCnyKhRF//7Ncjzd38KsWfdqFw 151LlUu+4MeaxJuSlsaiceMDDZnDaSzlaEXhy7CQydrIW2ke3JINlQ47NJoma4JD strxm8zlR7SRTaEZY4xHhOHgmA== -----END CERTIFICATE-----Generated at Wed May 13 09:04:04 2026 by rpki-client