$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft File: DO-JBd1l6R5Qazs5nCCiIork_T8.mft (raw, json) Hash identifier: 62wV8z9VNxuelOcGmp8Rm2TGb+zJLC5zWCbwRzmlFC8= Subject key identifier: 7A:94:4C:ED:16:0C:E8:CB:6F:F0:4C:88:75:14:ED:BA:A9:46:22:C9 Authority key identifier: 0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F Certificate issuer: /CN=A91DB421/serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Certificate serial: 09E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft Manifest number: 09DA Signing time: Tue 12 May 2026 19:56:07 +0000 Manifest this update: Tue 12 May 2026 19:56:06 +0000 Manifest next update: Tue 19 May 2026 19:56:06 +0000 Files and hashes: 1: DO-JBd1l6R5Qazs5nCCiIork_T8.crl (hash: rFbDOXM4hiJYQG/pWrNLZiTEnJlN5PtVXKrqn3A/5/o=) 2: A9511B7AA0B511EA94365A38C4F9AE02.roa (hash: Odh6PwT4fG9VLouXcIwHNY2NadEY9PU7kLIfNQ4Io5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2530 (0x9e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB421, serialNumber=0CEF8905DD65E91E506B3B399C20A2228AE4FD3F Validity Not Before: May 12 19:56:06 2026 GMT Not After : May 19 19:56:06 2026 GMT Subject: CN=6a0385d7-6e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:08:9c:47:12:2d:c8:4d:14:60:df:85:e0: 8a:63:d1:15:3a:18:84:e5:39:08:e7:dc:dd:c6:49: 22:47:19:6a:66:e8:7e:97:f4:97:ab:dd:da:b3:5b: 92:39:cc:c3:54:4f:f5:c3:d6:54:ba:84:38:31:11: 5d:00:ae:90:4b:2d:e0:b0:7e:27:bb:17:82:4c:8d: cd:fa:ec:0d:8d:7c:3b:ba:f7:37:de:b2:47:cb:0b: f2:44:d9:6a:e4:e2:9e:44:8a:70:8a:07:7f:2f:da: b8:fb:51:a0:40:1e:8b:ed:ab:05:92:a4:20:9b:3e: ed:ee:6a:7c:83:ed:31:07:e3:3f:43:da:e5:e2:e3: 9a:bf:5b:76:dc:03:fa:18:3b:77:fb:5d:50:25:15: d0:95:1f:3c:e0:0d:11:6b:21:3f:fa:a9:71:ee:8b: 36:85:28:e4:41:09:af:b2:89:8f:fc:6e:b8:1e:54: 77:96:80:c3:e5:21:d5:cb:1f:59:2b:6c:e5:84:96: 08:2e:46:b9:cb:0a:44:cc:a0:c8:2d:75:04:92:b6: b8:bc:43:11:87:70:56:f2:ef:f5:81:d6:7c:4b:52: 08:56:68:8c:60:28:9d:c4:71:5f:9b:4b:d3:0f:66: 9b:0b:e9:27:90:85:ae:1c:39:52:03:e2:de:90:2e: 0a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:4C:ED:16:0C:E8:CB:6F:F0:4C:88:75:14:ED:BA:A9:46:22:C9 X509v3 Authority Key Identifier: keyid:0C:EF:89:05:DD:65:E9:1E:50:6B:3B:39:9C:20:A2:22:8A:E4:FD:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO-JBd1l6R5Qazs5nCCiIork_T8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB421/1198060AA0B411EA97719E35C4F9AE02/DO-JBd1l6R5Qazs5nCCiIork_T8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a0:08:ce:a4:df:91:93:72:2b:06:66:0e:b7:1e:85:4e:fa: 7a:9e:aa:79:b0:7b:61:6f:cf:97:a9:14:4c:b2:09:f6:90:1f: 94:a2:19:03:69:d5:66:c6:5a:e2:8c:85:40:af:00:08:c3:83: 80:ac:89:bc:a4:44:06:8a:93:8b:2a:c5:e7:85:74:39:b0:c1: b3:75:0f:d1:e8:c4:e3:54:a9:e7:08:6e:97:14:c2:4f:14:ab: 1b:65:72:08:6a:0e:c0:21:ae:6f:3a:74:1f:2d:21:11:87:e5: 04:cc:f1:2b:ed:4d:b5:00:42:42:0d:6e:cb:3d:a9:b5:e6:dc: cc:54:56:b6:90:81:78:9f:e8:a6:74:8b:95:83:72:2f:3d:36: 0f:53:55:e6:d8:47:cc:f7:fc:e8:3f:0f:68:2e:f2:00:99:8b: 56:e5:75:ee:de:b3:32:0e:30:7e:87:2a:38:ad:36:da:ed:7f: dd:1d:55:5f:1a:e0:81:f2:34:48:61:54:66:d7:79:a9:11:52: c8:d3:cc:db:b7:00:df:73:67:c5:5e:ec:52:6e:6c:ec:bf:4a: 98:7c:a3:1e:e4:ef:df:42:c4:28:14:a7:8c:0c:c1:63:fa:19: 0e:c5:f3:f2:79:35:68:51:a3:62:69:df:2a:79:3b:d9:8a:87: fb:27:6b:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0MjExMTAvBgNVBAUTKDBDRUY4OTA1REQ2NUU5MUU1MDZCM0IzOTlDMjBBMjIy OEFFNEZEM0YwHhcNMjYwNTEyMTk1NjA2WhcNMjYwNTE5MTk1NjA2WjAYMRYwFAYD VQQDEw02YTAzODVkNy02ZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7IInEcSLchNFGDfheCKY9EVOhiE5TkI59zdxkkiRxlqZuh+l/SXq93as1uS OczDVE/1w9ZUuoQ4MRFdAK6QSy3gsH4nuxeCTI3N+uwNjXw7uvc33rJHywvyRNlq 5OKeRIpwigd/L9q4+1GgQB6L7asFkqQgmz7t7mp8g+0xB+M/Q9rl4uOav1t23AP6 GDt3+11QJRXQlR884A0RayE/+qlx7os2hSjkQQmvsomP/G64HlR3loDD5SHVyx9Z K2zlhJYILka5ywpEzKDILXUEkra4vEMRh3BW8u/1gdZ8S1IIVmiMYCidxHFfm0vT D2abC+knkIWuHDlSA+LekC4KmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqUTO0W DOjLb/BMiHUU7bqpRiLJMB8GA1UdIwQYMBaAFAzviQXdZekeUGs7OZwgoiKK5P0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQyMS8xMTk4MDYwQUEw QjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZSNVFhenM1bkNDaUlvcmtf VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RPLUpCZDFsNlI1UWF6czVuQ0NpSW9ya19UOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQyMS8xMTk4MDYwQUEwQjQxMUVBOTc3MTlFMzVDNEY5QUUwMi9ETy1KQmQxbDZS NVFhenM1bkNDaUlvcmtfVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiqAIzqTfkZNyKwZmDrcehU76ep6qebB7YW/Pl6kUTLIJ9pAflKIZA2nVZsZa 4oyFQK8ACMODgKyJvKREBoqTiyrF54V0ObDBs3UP0ejE41Sp5whulxTCTxSrG2Vy CGoOwCGubzp0Hy0hEYflBMzxK+1NtQBCQg1uyz2ptebczFRWtpCBeJ/opnSLlYNy Lz02D1NV5thHzPf86D8PaC7yAJmLVuV17t6zMg4wfocqOK022u1/3R1VXxrggfI0 SGFUZtd5qRFSyNPM27cA33NnxV7sUm5s7L9KmHyjHuTv30LEKBSnjAzBY/oZDsXz 8nk1aFGjYmnfKnk72YqH+ydrKQ== -----END CERTIFICATE-----Generated at Wed May 13 07:12:52 2026 by rpki-client