$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: f2e49klSXHNw3TnMvQIqIJaE7T4xtivIwsVqQcsYe0o= Subject key identifier: 24:CF:D9:7B:E1:D5:AE:CF:EE:EE:45:DC:1F:C9:55:42:C7:7C:3C:A4 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: 9B Signing time: Mon 11 May 2026 07:38:58 +0000 Manifest this update: Mon 11 May 2026 07:38:58 +0000 Manifest next update: Mon 18 May 2026 07:38:58 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: lNIHGjYTe1acRWbR5WBoqcosR4BwqMYyDQPancicdN4=) 2: 44C226F2A5B111F095806166C4F9AE02.roa (hash: yD8SkPkAKN5+VowUi+qJexOJ8oP+7GjQ59FL3/Sa598=) 3: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: ZfwhMy+pX5aCJlJ8qOMcY95LqfN6RcWNdworol/4Bvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: May 11 07:38:58 2026 GMT Not After : May 18 07:38:58 2026 GMT Subject: CN=6a018792-8472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:87:88:59:b6:bc:ea:3b:ff:91:f0:be:cd: 07:2b:0c:6c:fb:32:e8:bd:eb:74:9e:0c:fa:5a:b6: 77:04:43:c7:41:16:62:c0:33:5b:f9:53:2d:e2:c6: 3b:71:cb:3f:7d:c2:98:55:8f:25:8d:b0:2d:ba:d0: 97:9e:95:2f:e4:3f:8d:32:0b:6d:89:bb:04:03:20: 44:f2:fa:0b:13:5e:60:7c:c7:f4:94:14:6b:4b:28: 5a:64:2c:95:4b:14:b4:27:0c:33:85:10:f5:40:f1: 6f:a2:55:67:2a:3a:60:82:4a:d4:f5:d2:79:f5:a9: b9:2a:2c:ce:2e:63:48:41:5a:57:f9:d0:46:83:db: 59:22:af:7a:c1:24:9b:0c:6b:e5:04:a0:27:20:2c: 1b:db:57:c6:00:09:7e:2b:57:4a:33:34:fe:e5:4b: d6:1c:61:e3:6d:7f:69:63:dc:5f:fc:92:99:6e:18: a8:93:c9:c7:30:dd:f5:12:61:28:77:42:3b:2a:05: 20:77:ef:2a:c7:ea:fe:10:1c:ef:dc:f4:de:d4:1f: 0a:08:39:8c:34:78:25:46:ca:d2:05:45:c8:9e:1f: f3:c9:4d:5d:9d:49:51:3d:52:bc:c5:53:5e:5e:15: 01:fa:5b:69:e8:7a:d4:d4:45:ea:16:50:72:6b:ce: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:D9:7B:E1:D5:AE:CF:EE:EE:45:DC:1F:C9:55:42:C7:7C:3C:A4 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fe:ea:94:21:cd:c3:44:ba:52:81:c5:ae:ab:0a:bf:92:48: 67:02:e6:9b:dd:6f:0d:68:70:9a:22:2a:20:a7:2d:03:cf:e5: 05:9b:db:bc:ae:eb:74:28:4c:bf:30:38:3d:42:56:15:52:85: c2:c8:49:6d:a0:c3:45:63:b3:35:0f:2a:a5:ed:17:2c:05:44: 2a:d3:25:5f:2f:f6:14:ea:28:82:fb:0a:fe:52:67:1b:c7:e6: f9:ec:1b:ce:40:11:5c:df:a2:91:45:44:ca:18:a9:12:ca:a9: e5:ea:d7:2c:e5:4c:84:ff:d8:58:e2:b7:d5:0c:bd:07:75:33: b2:36:36:0a:fa:0a:ce:e1:2e:f0:e2:d3:45:1d:e1:e0:f7:fe: ba:1d:34:51:fb:17:57:28:4a:10:90:db:26:b3:99:9a:6a:7c: 51:42:d3:ec:92:b8:cf:ed:c8:9c:53:6a:2b:01:94:bd:1d:bd: e9:6e:c8:3f:a7:f6:b0:fa:80:3c:8a:31:61:44:0a:31:29:c9: d1:f8:b5:fe:1a:74:3d:1c:28:6e:64:df:34:c8:06:eb:ca:ad: 18:af:84:d5:e5:de:41:22:03:38:ed:09:89:0c:9f:f2:f2:06: 61:53:fd:8e:75:71:33:d7:83:26:28:30:fc:f7:cd:b6:d3:f9: 38:c3:35:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYwNTExMDczODU4WhcNMjYwNTE4MDczODU4WjAYMRYwFAYD VQQDEw02YTAxODc5Mi04NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC2HiFm2vOo7/5Hwvs0HKwxs+zLovet0ngz6WrZ3BEPHQRZiwDNb+VMt4sY7 ccs/fcKYVY8ljbAtutCXnpUv5D+NMgttibsEAyBE8voLE15gfMf0lBRrSyhaZCyV SxS0JwwzhRD1QPFvolVnKjpggkrU9dJ59am5KizOLmNIQVpX+dBGg9tZIq96wSSb DGvlBKAnICwb21fGAAl+K1dKMzT+5UvWHGHjbX9pY9xf/JKZbhiok8nHMN31EmEo d0I7KgUgd+8qx+r+EBzv3PTe1B8KCDmMNHglRsrSBUXInh/zyU1dnUlRPVK8xVNe XhUB+ltp6HrU1EXqFlBya87QYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTP2Xvh 1a7P7u5F3B/JVULHfDykMB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FI WnU5bW12bHpVa0REaVpORmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAP7qlCHNw0S6UoHFrqsKv5JIZwLmm91vDWhwmiIqIKctA8/lBZvbvK7rdChM vzA4PUJWFVKFwshJbaDDRWOzNQ8qpe0XLAVEKtMlXy/2FOoogvsK/lJnG8fm+ewb zkARXN+ikUVEyhipEsqp5erXLOVMhP/YWOK31Qy9B3UzsjY2CvoKzuEu8OLTRR3h 4Pf+uh00UfsXVyhKEJDbJrOZmmp8UULT7JK4z+3InFNqKwGUvR296W7IP6f2sPqA PIoxYUQKMSnJ0fi1/hp0PRwobmTfNMgG68qtGK+E1eXeQSIDOO0JiQyf8vIGYVP9 jnVxM9eDJigw/PfNttP5OMM1MQ== -----END CERTIFICATE-----Generated at Wed May 13 10:55:44 2026 by rpki-client