$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft File: dmXig10WAIXjHsJFIi1LL35IRAk.mft (raw, json) Hash identifier: bKrxhP+qO/8+sYx+8St1GzEVgMk8N+DC2VSdqdOIZ5g= Subject key identifier: DE:21:BF:D6:00:1D:80:69:5D:62:7B:A8:14:DB:22:9B:F1:59:19:3D Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft Manifest number: E4 Signing time: Thu 23 Jul 2026 08:18:15 +0000 Manifest this update: Thu 23 Jul 2026 08:18:15 +0000 Manifest next update: Thu 30 Jul 2026 08:18:15 +0000 Files and hashes: 1: dmXig10WAIXjHsJFIi1LL35IRAk.crl (hash: 0fnXANXv4lOzophWtEkhV1JI3nin6CmM/zrwJ2k5psc=) 2: CBDD09E430E111F09B76D311C4F9AE02.roa (hash: sY7EBkThUecrfKfG+kSCpuHCSj6wPtVy9PUYEZdqikI=) 3: 570B12E0562611F09F085F44C4F9AE02.roa (hash: /sJ2zjbBJwvHhohFygkIyei7pdLWS58sUBWjkvmnlA4=) 4: CAE10F4030E111F09B76D311C4F9AE02.roa (hash: juMHvZUG78CclBXRyslR4dpbF0KFYZrW0WvDaAAud4k=) 5: E73A5E40A28C11F0A6491A72C4F9AE02.roa (hash: is4OaleIvjgTfkRN81esClK4/HDDPHdtSZTyTH+9VPs=) 6: CC3E7A3A30E111F09B76D311C4F9AE02.roa (hash: 4VQy2uTuYmBTt5p4bl4BylIiGQ88q1IjeeXSwehmuI0=) 7: CA5B991430E111F09B76D311C4F9AE02.roa (hash: eRx8bbJu6in61S4okIsK48ZlBXinhwSR62SelJS9cC8=) 8: CB4E186A30E111F09B76D311C4F9AE02.roa (hash: iU6Wj2L6dhe3grsmDUQsEWobs2LTk0gYMSSAmstcjt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jul 23 08:18:15 2026 GMT Not After : Jul 30 08:18:15 2026 GMT Subject: CN=6a61ce47-8f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:4f:34:76:bd:4f:6e:7d:59:6c:bd:eb:ba: 1f:93:a8:e0:d1:2c:7a:56:10:6b:ad:ac:c7:d8:fd: 0c:09:37:1a:5f:94:78:04:3a:5a:33:2f:44:54:4c: 88:1e:b2:9e:c9:5f:a8:16:32:10:79:bb:3c:41:12: 5e:f9:3b:12:8a:ee:bc:64:b6:0e:0b:a1:dc:b6:4a: 1e:d6:c9:31:e6:ee:1a:33:9b:06:2f:bb:2d:2c:d1: cd:0f:7a:96:18:c5:d8:1a:52:c8:9c:34:af:e2:8c: 65:e1:58:2b:82:c0:56:d7:67:95:5a:93:e0:12:c8: 8e:ed:22:79:7e:10:19:0a:18:df:c9:6d:03:f1:70: 49:ab:78:56:3b:1b:b6:a6:18:bb:00:b3:1e:b2:d3: fd:5f:68:4f:29:b6:a9:d5:5a:66:a6:55:e7:ee:2e: 8d:7d:b4:22:79:41:cd:cd:1b:3e:b6:9e:1c:9c:e3: 59:48:68:59:26:93:a8:10:77:98:5c:b0:9f:21:09: 35:e9:d2:c4:5a:72:fd:13:96:26:31:93:56:c5:b4: 15:46:56:7c:d0:7a:1e:a5:44:e5:9b:67:60:e4:52: c9:3d:d4:44:e9:a7:77:da:0f:b4:81:4d:47:c3:2f: 0b:46:b5:7a:b8:a6:db:72:01:9e:24:af:27:91:a9: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:21:BF:D6:00:1D:80:69:5D:62:7B:A8:14:DB:22:9B:F1:59:19:3D X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:90:98:83:c9:bf:18:da:52:6a:98:05:79:57:b2:3a:98:95: 0c:54:85:3a:f1:ba:cc:ee:e7:e8:0e:e0:b4:83:40:4d:3c:29: 20:9b:50:2f:ea:db:5f:07:a3:fd:cb:ec:1e:33:95:2e:5e:ac: 34:77:12:3f:88:0e:ec:45:6d:a8:0f:79:9b:97:35:96:de:2d: 3b:d0:99:9b:6e:d7:ca:1e:93:31:ef:22:2c:cd:73:d5:b8:0a: bd:60:81:78:1f:bc:05:83:6b:aa:be:62:38:86:f4:e1:98:88: 58:e0:4d:d6:42:91:8b:31:8b:ed:fe:96:9c:3f:ca:fe:b0:e0: b6:02:90:9f:01:b1:83:e1:42:85:88:d4:e0:0a:ad:b6:8a:4d: c4:1d:62:d0:fc:13:c5:cd:63:aa:11:27:ac:36:22:97:64:eb: 1b:2e:83:63:19:b9:a5:ae:ff:7a:cf:a9:79:c0:cf:c9:59:55: d3:e0:37:3a:e3:cd:6c:b0:dd:43:d9:c8:64:df:06:60:f2:57: b4:4f:e8:03:34:22:99:60:55:b2:b2:c0:f4:db:a5:b6:83:67: 2c:ef:61:4b:41:14:12:bb:97:0b:39:88:8a:53:0b:12:65:8f: f3:7d:e5:78:61:aa:7c:fd:b0:33:f3:1c:7b:ca:37:ab:3d:12: 0e:2a:62:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwNzIzMDgxODE1WhcNMjYwNzMwMDgxODE1WjAYMRYwFAYD VQQDEw02YTYxY2U0Ny04ZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX1PNHa9T259WWy967ofk6jg0Sx6VhBrrazH2P0MCTcaX5R4BDpaMy9EVEyI HrKeyV+oFjIQebs8QRJe+TsSiu68ZLYOC6Hctkoe1skx5u4aM5sGL7stLNHND3qW GMXYGlLInDSv4oxl4VgrgsBW12eVWpPgEsiO7SJ5fhAZChjfyW0D8XBJq3hWOxu2 phi7ALMestP9X2hPKbap1VpmplXn7i6NfbQieUHNzRs+tp4cnONZSGhZJpOoEHeY XLCfIQk16dLEWnL9E5YmMZNWxbQVRlZ80HoepUTlm2dg5FLJPdRE6ad32g+0gU1H wy8LRrV6uKbbcgGeJK8nkal9PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4hv9YA HYBpXWJ7qBTbIpvxWRk9MB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REZDOS84RDM1RTgyRTMwMkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJ WGpIc0pGSWkxTEwzNUlSQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN5CYg8m/GNpSapgFeVeyOpiVDFSFOvG6zO7n6A7gtINATTwpIJtQL+rbXwej /cvsHjOVLl6sNHcSP4gO7EVtqA95m5c1lt4tO9CZm27Xyh6TMe8iLM1z1bgKvWCB eB+8BYNrqr5iOIb04ZiIWOBN1kKRizGL7f6WnD/K/rDgtgKQnwGxg+FChYjU4Aqt topNxB1i0PwTxc1jqhEnrDYil2TrGy6DYxm5pa7/es+pecDPyVlV0+A3OuPNbLDd Q9nIZN8GYPJXtE/oAzQimWBVsrLA9NultoNnLO9hS0EUEruXCzmIilMLEmWP833l eGGqfP2wM/Mce8o3qz0SDipimg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:08 2026 by rpki-client