$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: kX1vd/Ke8PjKMpUOXMeaJFeHVOveHuGRfJn6IUAWcZg= Subject key identifier: 9E:EF:5E:9F:3C:CD:BD:7F:8C:1F:2F:A9:CC:F4:69:C0:56:FC:19:24 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0D70 Signing time: Tue 12 May 2026 18:01:56 +0000 Manifest this update: Tue 12 May 2026 18:01:56 +0000 Manifest next update: Tue 19 May 2026 18:01:56 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: vT/174lRaY5Mp7f6D6DoLpKvIwkPbY/dkKevU1yWI5I=) 2: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: 90DgDT5NeM7xQ03ACEtF57cO7mWeIuHF/7OMNDwtBac=) 3: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: MCYhaXeWm4Azn45D+8Hoz0m3yVVZUkz11sIQ3TDfy9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3478 (0xd96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: May 12 18:01:56 2026 GMT Not After : May 19 18:01:56 2026 GMT Subject: CN=6a036b14-f25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a7:ef:15:bd:61:55:c8:99:b6:70:15:aa:52: 09:87:01:14:4c:be:c9:cc:a4:81:2d:db:9f:78:35: 21:73:f3:15:9b:48:54:09:d8:a0:86:16:b0:aa:73: b6:cf:65:44:cd:56:42:0c:c6:e7:03:cc:5e:be:02: c9:0d:28:1f:3f:11:e3:37:e8:2a:d7:ee:4b:92:b9: 24:4f:1c:7e:47:7f:6c:85:a2:b5:b1:65:74:f1:1a: c8:09:75:a7:7e:5a:7b:4e:c5:b8:8f:b4:06:9c:52: b6:ed:de:e2:8c:ba:61:73:1c:87:b9:ac:2b:e1:d0: 7c:3b:f2:74:00:fd:cb:77:a5:93:f1:77:14:a3:02: d1:1e:8b:88:df:6f:22:46:8a:c0:05:53:1e:46:7f: b4:fe:68:31:a2:61:b7:91:dd:2b:cc:c3:8d:ee:18: 2e:c8:2e:e9:1a:25:0e:ae:15:b8:4b:47:06:d7:50: 54:9b:9e:5e:fe:fa:e4:cb:a9:68:c4:29:50:bd:5f: a9:c0:4b:35:bd:1c:bc:63:51:20:a0:48:9a:12:d5: d1:45:2e:94:3b:4f:36:b9:34:90:39:f0:79:fd:46: 39:2d:bd:2f:b1:b8:6e:f8:b3:aa:05:05:3a:e9:9d: e0:5d:6f:30:6d:4c:38:22:f3:5e:bc:72:6f:44:67: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:5E:9F:3C:CD:BD:7F:8C:1F:2F:A9:CC:F4:69:C0:56:FC:19:24 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2d:2f:2e:9a:9b:6c:f5:a7:c3:b9:3d:70:41:9f:27:6d:7a: 18:32:af:22:69:d9:3a:c8:21:d7:39:02:15:da:01:84:e9:93: 9c:1c:38:a9:f6:f1:4f:64:4e:56:1f:d9:ce:fa:bc:f4:03:79: b9:19:c3:e3:17:88:1f:ee:c0:25:0a:63:dd:e5:79:a2:bc:33: 2b:51:ae:74:36:aa:81:ca:91:e8:96:fe:e3:80:e4:12:c6:70: e1:f8:3c:eb:70:64:22:db:4e:ab:c4:b8:28:c3:17:04:29:c4: 0d:24:ad:66:3b:77:ff:47:be:00:55:b5:1d:e3:9c:0e:9c:65: b6:45:5a:49:7c:55:78:cf:6e:21:a4:80:f8:a9:25:77:9b:65: af:5e:08:4a:e5:d5:73:32:8b:99:fd:44:fd:6b:b6:53:dd:44: b6:31:9c:4b:b0:e8:a9:34:76:60:ab:73:a8:40:e6:65:58:8d: df:d1:91:52:ed:41:84:f8:8c:d5:a7:22:e7:6c:f5:47:68:7e: 55:b7:69:65:cb:a4:0e:2a:e3:63:ac:43:59:bb:72:51:16:3b: 0f:d8:3b:50:2d:28:68:8e:85:38:9d:0a:64:d6:4e:33:63:bd: 54:0c:01:b9:8c:f0:69:0b:b8:00:55:c1:41:f6:ba:17:1a:f2: ff:bb:ee:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjYwNTEyMTgwMTU2WhcNMjYwNTE5MTgwMTU2WjAYMRYwFAYD VQQDEw02YTAzNmIxNC1mMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwafvFb1hVciZtnAVqlIJhwEUTL7JzKSBLdufeDUhc/MVm0hUCdighhawqnO2 z2VEzVZCDMbnA8xevgLJDSgfPxHjN+gq1+5LkrkkTxx+R39shaK1sWV08RrICXWn flp7TsW4j7QGnFK27d7ijLphcxyHuawr4dB8O/J0AP3Ld6WT8XcUowLRHouI328i RorABVMeRn+0/mgxomG3kd0rzMON7hguyC7pGiUOrhW4S0cG11BUm55e/vrky6lo xClQvV+pwEs1vRy8Y1EgoEiaEtXRRS6UO082uTSQOfB5/UY5Lb0vsbhu+LOqBQU6 6Z3gXW8wbUw4IvNevHJvRGdoAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7vXp88 zb1/jB8vqcz0acBW/BkkMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWi0vLpqbbPWnw7k9cEGfJ216GDKvImnZOsgh1zkCFdoBhOmTnBw4qfbxT2RO Vh/Zzvq89AN5uRnD4xeIH+7AJQpj3eV5orwzK1GudDaqgcqR6Jb+44DkEsZw4fg8 63BkIttOq8S4KMMXBCnEDSStZjt3/0e+AFW1HeOcDpxltkVaSXxVeM9uIaSA+Kkl d5tlr14ISuXVczKLmf1E/Wu2U91EtjGcS7DoqTR2YKtzqEDmZViN39GRUu1BhPiM 1aci52z1R2h+VbdpZcukDirjY6xDWbtyURY7D9g7UC0oaI6FOJ0KZNZOM2O9VAwB uYzwaQu4AFXBQfa6Fxry/7vuFQ== -----END CERTIFICATE-----Generated at Wed May 13 15:13:43 2026 by rpki-client