$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: Saf78hFRrPDYjAX9rji8+/egxhJc/couqE/arMK2QYw= Subject key identifier: 8D:4D:A0:75:B8:DF:C6:35:C3:93:B4:8B:09:2F:70:35:8D:86:FF:07 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: C4 Signing time: Thu 23 Jul 2026 08:54:57 +0000 Manifest this update: Thu 23 Jul 2026 08:54:56 +0000 Manifest next update: Thu 30 Jul 2026 08:54:56 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: w8t7XCSeOSUvsEtJCH7ByCLcS4bBHAm/+nztUUCiGLo=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: TNUwtV0t4ai+a9xbPAIji0Ma5LkcWxhYEVa6y6wNlPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Jul 23 08:54:56 2026 GMT Not After : Jul 30 08:54:56 2026 GMT Subject: CN=6a61d6e1-ce2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:91:d2:64:23:2e:ed:9f:bc:75:89:5b:33: 72:1c:ee:a3:3b:e1:24:73:21:26:ae:c6:5c:a9:67: cb:5e:d1:bf:9e:e6:5c:33:4a:2b:ac:a0:03:52:c0: e5:37:a2:9f:d6:ab:32:5a:40:5d:39:06:dd:7b:10: 91:6d:02:58:bb:d1:76:4c:18:fd:b6:dc:24:1b:8f: 39:87:ba:cb:9b:40:a6:dc:ad:ba:34:0e:b7:1d:bb: e1:1d:6d:47:62:29:79:6a:cd:b5:81:d6:25:50:bc: 53:1b:5a:67:09:ae:50:34:d9:5f:eb:0e:97:47:f1: c9:a1:0a:33:75:50:b9:82:5c:b0:ab:93:b9:ac:90: ea:d1:34:cb:8e:d1:63:01:bb:e5:2d:7b:ce:33:27: eb:09:95:2f:40:78:f7:f3:db:52:bd:97:a5:63:11: e5:bc:91:bd:be:74:50:d9:c9:e1:eb:b2:44:02:49: 4d:09:a2:96:f6:75:83:34:6a:06:12:f3:0e:0a:12: f4:79:35:c7:d2:ac:44:ed:34:55:13:29:d3:c6:8c: ec:37:b2:6f:6f:1d:de:82:4d:09:a9:a3:94:3a:50: 9e:ea:3e:02:83:09:da:a5:21:be:b9:8e:43:37:27: 30:a7:60:e2:09:d0:30:46:22:7c:d5:a4:0d:8c:ab: 8b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:A0:75:B8:DF:C6:35:C3:93:B4:8B:09:2F:70:35:8D:86:FF:07 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:16:bd:d6:c3:35:b1:ac:80:bf:77:dc:58:1e:3f:85:13:44: b4:d1:0a:27:c2:59:0d:6f:38:bc:3f:8c:f9:db:55:29:17:22: e0:05:c9:e4:b9:6f:d4:fa:14:1f:fa:ad:fd:e9:eb:a8:f8:09: d2:9c:d9:84:78:6f:94:71:dd:06:76:6d:3c:26:51:d7:62:7d: 18:63:de:6f:ba:fb:83:21:cd:2e:c2:fc:d0:73:91:96:a2:6d: 87:cd:32:88:97:6e:63:44:fa:a1:5a:e8:56:56:e3:ab:64:b2: cd:f9:96:8d:0f:e0:ef:d3:c0:4b:07:38:50:de:c4:f4:cb:62: 33:e1:83:07:70:ff:0f:8b:aa:88:da:e1:c1:48:38:49:93:f2: bf:b0:53:49:a5:ea:13:50:de:2e:46:40:32:56:1d:1f:3b:1e: 38:b3:18:c0:6e:25:64:8f:85:30:05:23:18:75:33:74:f0:64: a0:09:00:ad:26:7c:6a:64:d9:32:f0:ac:c8:2e:80:34:80:c1: de:7f:72:1f:23:56:f0:de:b6:49:e2:fd:db:e5:c5:9d:6c:7e: 32:fd:66:91:16:44:81:8f:11:d8:d5:45:90:49:d4:28:77:25: 7c:91:38:2e:72:53:cd:f0:65:4c:33:88:83:e3:50:47:c8:32: 7e:0a:dc:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYwNzIzMDg1NDU2WhcNMjYwNzMwMDg1NDU2WjAYMRYwFAYD VQQDEw02YTYxZDZlMS1jZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZaR0mQjLu2fvHWJWzNyHO6jO+EkcyEmrsZcqWfLXtG/nuZcM0orrKADUsDl N6Kf1qsyWkBdOQbdexCRbQJYu9F2TBj9ttwkG485h7rLm0Cm3K26NA63HbvhHW1H Yil5as21gdYlULxTG1pnCa5QNNlf6w6XR/HJoQozdVC5glywq5O5rJDq0TTLjtFj AbvlLXvOMyfrCZUvQHj389tSvZelYxHlvJG9vnRQ2cnh67JEAklNCaKW9nWDNGoG EvMOChL0eTXH0qxE7TRVEynTxozsN7Jvbx3egk0JqaOUOlCe6j4CgwnapSG+uY5D Nycwp2DiCdAwRiJ81aQNjKuLcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1NoHW4 38Y1w5O0iwkvcDWNhv8HMB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FI WnU5bW12bHpVa0REaVpORmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWBa91sM1sayAv3fcWB4/hRNEtNEKJ8JZDW84vD+M+dtVKRci4AXJ5Llv1PoU H/qt/enrqPgJ0pzZhHhvlHHdBnZtPCZR12J9GGPeb7r7gyHNLsL80HORlqJth80y iJduY0T6oVroVlbjq2SyzfmWjQ/g79PASwc4UN7E9MtiM+GDB3D/D4uqiNrhwUg4 SZPyv7BTSaXqE1DeLkZAMlYdHzseOLMYwG4lZI+FMAUjGHUzdPBkoAkArSZ8amTZ MvCsyC6ANIDB3n9yHyNW8N62SeL92+XFnWx+Mv1mkRZEgY8R2NVFkEnUKHclfJE4 LnJTzfBlTDOIg+NQR8gyfgrcsA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:04:11 2026 by rpki-client