$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: PG8ja7vYhMqR8Ueb17KEu7d49/zbL62XflCPrKGMROE= Subject key identifier: E2:9A:05:CD:A9:51:BE:80:E8:B2:CD:41:B2:0A:5F:CF:87:5A:88:88 Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0A74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 0A6B Signing time: Tue 12 May 2026 19:41:23 +0000 Manifest this update: Tue 12 May 2026 19:41:22 +0000 Manifest next update: Tue 19 May 2026 19:41:22 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: Fk9JDkj36WWHyPP2D16wez1DWd/nLu4R508pHDo2XIc=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ERhX+neEQpWaGHgDx788YR3fYNG7D/j2H84jmEv5law=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2676 (0xa74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: May 12 19:41:22 2026 GMT Not After : May 19 19:41:22 2026 GMT Subject: CN=6a038263-611f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:93:2d:c3:de:38:32:77:55:0f:bd:57:06: 40:36:8a:3a:7e:6c:0f:58:bb:30:c2:6c:f5:3d:0f: 8c:fe:2b:f0:55:4d:47:cc:0f:c3:9e:54:8d:32:23: 64:95:3b:cc:c7:a2:e5:16:ce:e0:cc:b7:ef:62:54: 39:4f:30:1c:81:6e:fd:1b:f8:76:b0:ee:7b:60:8a: 75:c8:d2:d4:fa:18:f4:86:99:d0:a4:b8:76:b3:b1: dd:7c:78:70:14:8d:74:0c:fd:d9:17:0a:a9:aa:c4: 98:05:00:2e:5b:db:99:e7:87:33:7f:15:0d:29:e3: 9a:e5:ce:cf:b4:08:47:6a:f6:a9:f3:85:a2:5b:f8: 1a:cc:d6:02:a7:58:64:24:cb:56:2a:ba:10:36:40: 93:1e:0e:12:31:66:d6:f9:16:74:8d:11:f3:b2:c7: 8d:53:d1:94:83:73:2d:05:c0:83:17:dc:a7:fe:70: de:f5:b2:08:58:fd:01:49:22:f7:25:66:b9:09:2d: da:70:aa:4d:74:91:98:31:b2:1d:91:a4:e7:f8:39: 34:6f:8b:14:2b:36:4d:4a:4f:9f:42:8d:38:8e:0b: 51:01:53:77:44:23:7a:85:32:39:0d:e8:bf:91:f0: 9b:58:e6:e9:b9:bd:34:cc:84:76:c1:1f:86:c8:b0: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9A:05:CD:A9:51:BE:80:E8:B2:CD:41:B2:0A:5F:CF:87:5A:88:88 X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:87:a5:c8:ac:59:77:a6:e6:6a:f1:32:b9:8d:b8:63:b5: 0e:57:bc:e7:20:48:ae:bc:25:e2:e0:33:b0:45:61:2e:87:a5: 28:94:20:19:de:f9:c7:5c:00:8b:60:d2:67:dc:80:8a:8f:89: b4:fd:11:1d:15:34:3e:d8:8d:77:01:5c:7e:ec:dd:d9:d1:5d: e8:68:90:5e:87:eb:1b:8f:59:2b:39:9d:d9:a5:3d:61:e1:9a: 76:70:60:60:64:22:31:79:7c:14:fb:a6:98:d8:41:2c:11:5a: fc:04:0f:45:7e:0b:ec:60:fe:19:23:c9:97:72:4b:2d:70:21: 46:12:1b:66:12:e6:98:c3:43:17:18:d8:ff:c5:40:16:5b:49: 2a:c4:4c:72:3f:7c:cc:3b:47:06:f8:8c:b9:d1:66:30:6a:e0: 25:89:18:eb:8f:99:d8:87:e4:3f:23:7e:5e:50:88:27:2c:3c: 48:85:6f:16:ed:4c:99:8e:bd:7b:98:5f:13:da:f9:85:dc:19: cd:58:9e:d5:30:74:c4:0c:eb:b3:ce:55:77:88:56:26:f9:9d: 15:2d:e6:18:87:0f:eb:f9:82:14:5b:2f:ba:e8:ee:2d:7f:ba: 89:77:a2:4f:b9:10:3b:7b:4b:cf:ae:c4:2a:67:3e:cf:59:25: 6a:c1:e0:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjYwNTEyMTk0MTIyWhcNMjYwNTE5MTk0MTIyWjAYMRYwFAYD VQQDEw02YTAzODI2My02MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoCTLcPeODJ3VQ+9VwZANoo6fmwPWLswwmz1PQ+M/ivwVU1HzA/DnlSNMiNk lTvMx6LlFs7gzLfvYlQ5TzAcgW79G/h2sO57YIp1yNLU+hj0hpnQpLh2s7HdfHhw FI10DP3ZFwqpqsSYBQAuW9uZ54czfxUNKeOa5c7PtAhHavap84WiW/gazNYCp1hk JMtWKroQNkCTHg4SMWbW+RZ0jRHzsseNU9GUg3MtBcCDF9yn/nDe9bIIWP0BSSL3 JWa5CS3acKpNdJGYMbIdkaTn+Dk0b4sUKzZNSk+fQo04jgtRAVN3RCN6hTI5Dei/ kfCbWObpub00zIR2wR+GyLAiSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOKaBc2p Ub6A6LLNQbIKX8+HWoiIMB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAohGHpcisWXem5mrxMrmNuGO1Dle85yBIrrwl4uAzsEVhLoelKJQgGd75x1wA i2DSZ9yAio+JtP0RHRU0PtiNdwFcfuzd2dFd6GiQXofrG49ZKzmd2aU9YeGadnBg YGQiMXl8FPummNhBLBFa/AQPRX4L7GD+GSPJl3JLLXAhRhIbZhLmmMNDFxjY/8VA FltJKsRMcj98zDtHBviMudFmMGrgJYkY64+Z2IfkPyN+XlCIJyw8SIVvFu1MmY69 e5hfE9r5hdwZzVie1TB0xAzrs85Vd4hWJvmdFS3mGIcP6/mCFFsvuujuLX+6iXei T7kQO3tLz67EKmc+z1klasHgYw== -----END CERTIFICATE-----Generated at Wed May 13 17:03:05 2026 by rpki-client