$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft File: drnTOfrNYrR-k-iITehQOW2877Q.mft (raw, json) Hash identifier: XPhgbQdPMhl+6VEsGLE9LcfXN3aON5Im+wwUBCOuvZw= Subject key identifier: 4F:08:55:1E:FC:32:7D:BB:8F:0C:B5:96:82:38:AB:B6:6A:58:1E:CE Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft Manifest number: 0BAC Signing time: Wed 22 Jul 2026 19:25:11 +0000 Manifest this update: Wed 22 Jul 2026 19:25:10 +0000 Manifest next update: Wed 29 Jul 2026 19:25:10 +0000 Files and hashes: 1: drnTOfrNYrR-k-iITehQOW2877Q.crl (hash: M5VwiFTSt67xI8e23z6ud9K3A8sgBNB201Z7GG9vg+Q=) 2: 4FFC83964CA311EE815AF017C4F9AE02.roa (hash: nvrbL4K8UTuSHUzb0sameKGMaeUHHtqeYardPlMzhKY=) 3: 83882F7AF83B11ECB4154E31C4F9AE02.roa (hash: NYJZvZPzyDgeHzpdsKVjfnf0vb6jVGfn+iXWogNI5w0=) 4: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (hash: bw6V3e8uxgz/w4mVGTTnR4lCFXMSeabuBZrROz8xFwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Validity Not Before: Jul 22 19:25:10 2026 GMT Not After : Jul 29 19:25:10 2026 GMT Subject: CN=6a611917-48e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:77:71:41:b4:0a:cf:17:5e:35:b7:f2:ef: 2d:22:7f:1e:cb:94:81:c0:f1:b4:8d:b9:77:1b:75: 99:06:cc:00:29:d8:0c:27:dd:6f:58:99:bc:91:ce: 3c:59:12:87:0e:56:7a:16:5b:51:cb:ce:fd:f2:2b: 7d:37:8a:43:ab:d1:3e:13:d0:63:72:99:36:c5:f2: 70:19:28:13:fd:c7:79:83:02:5e:73:6f:f1:a2:9a: 5b:24:4a:88:62:d0:60:d9:37:36:80:87:33:fb:ed: 07:35:90:be:64:9c:c7:0b:80:a1:ca:33:c1:af:d3: d2:ec:fd:cb:78:48:7c:79:19:57:53:23:cd:bf:35: f1:fd:df:af:e9:20:f1:a6:46:d1:ba:5a:84:62:5c: 96:08:e7:87:27:7c:37:bc:b9:93:ab:2c:5d:eb:de: 34:86:61:9a:9d:76:7f:60:1d:d6:2f:f8:90:59:a9: 8d:fb:97:8e:1f:6a:4c:3e:36:35:df:b1:c9:02:03: 69:ae:0c:fe:7f:a7:c6:48:5a:a4:4e:39:1d:b0:3d: 28:a6:c8:33:be:46:a0:fe:4f:a3:ed:8f:83:2a:62: f5:f9:da:1b:ed:03:89:48:92:64:07:7f:1c:01:4b: 17:b7:bf:37:40:70:f6:07:e2:86:7a:b0:4c:21:da: 39:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:08:55:1E:FC:32:7D:BB:8F:0C:B5:96:82:38:AB:B6:6A:58:1E:CE X509v3 Authority Key Identifier: keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ae:8b:f7:6c:67:c0:08:10:38:82:f3:27:ca:87:b5:26:ca: 38:84:da:e7:2d:77:f3:4d:f8:ec:15:5e:24:b0:d7:e0:50:9a: 51:e7:ad:fe:f4:7b:6f:20:df:bb:78:bf:e6:21:fa:de:6c:08: 48:f1:ff:ca:b6:92:1d:1a:af:91:ba:e2:4c:cf:d8:58:83:5f: 35:94:30:45:ce:71:c0:2d:79:2f:e8:33:0e:65:56:da:55:a4: 60:5a:3c:1e:4d:30:5d:3e:30:7a:d9:83:36:f1:f3:5b:4b:82: 20:e7:d4:86:5a:c6:6b:ce:73:8f:63:7d:e6:e4:46:9d:a4:33: 74:b5:62:12:4e:2d:41:49:4a:2e:3d:df:2a:7b:85:85:5e:c7: 3d:69:25:67:d0:3d:7d:6c:5b:99:9b:fc:41:70:d1:aa:38:61: 42:0d:32:01:ca:12:60:f8:fa:66:27:1e:e3:cd:cb:17:3d:9f: b0:92:45:0a:d2:f7:93:07:b0:0f:79:38:8c:2b:2d:48:46:4f: 8d:ce:32:4e:d5:61:2b:c6:d3:e9:fd:6b:92:fc:7b:9e:9d:3e: 01:4b:0e:b6:00:ea:e4:53:bd:31:d9:5f:23:35:36:57:d4:7c: d9:41:f3:51:0b:d7:2a:c2:9d:23:66:f8:f7:1b:4e:3b:c0:f3: 52:48:28:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5 NkRCQ0VGQjQwHhcNMjYwNzIyMTkyNTEwWhcNMjYwNzI5MTkyNTEwWjAYMRYwFAYD VQQDEw02YTYxMTkxNy00OGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnV3cUG0Cs8XXjW38u8tIn8ey5SBwPG0jbl3G3WZBswAKdgMJ91vWJm8kc48 WRKHDlZ6FltRy8798it9N4pDq9E+E9Bjcpk2xfJwGSgT/cd5gwJec2/xoppbJEqI YtBg2Tc2gIcz++0HNZC+ZJzHC4ChyjPBr9PS7P3LeEh8eRlXUyPNvzXx/d+v6SDx pkbRulqEYlyWCOeHJ3w3vLmTqyxd6940hmGanXZ/YB3WL/iQWamN+5eOH2pMPjY1 37HJAgNprgz+f6fGSFqkTjkdsD0opsgzvkag/k+j7Y+DKmL1+dob7QOJSJJkB38c AUsXt783QHD2B+KGerBMIdo5bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8IVR78 Mn27jwy1loI4q7ZqWB7OMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTZDQS83NDA5QjQ3QTRGQzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTlly Ui1rLWlJVGVoUU9XMjg3N1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFK6L92xnwAgQOILzJ8qHtSbKOITa5y1380347BVeJLDX4FCaUeet/vR7byDf u3i/5iH63mwISPH/yraSHRqvkbriTM/YWINfNZQwRc5xwC15L+gzDmVW2lWkYFo8 Hk0wXT4wetmDNvHzW0uCIOfUhlrGa85zj2N95uRGnaQzdLViEk4tQUlKLj3fKnuF hV7HPWklZ9A9fWxbmZv8QXDRqjhhQg0yAcoSYPj6Zice483LFz2fsJJFCtL3kwew D3k4jCstSEZPjc4yTtVhK8bT6f1rkvx7np0+AUsOtgDq5FO9MdlfIzU2V9R82UHz UQvXKsKdI2b49xtOO8DzUkgofQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:55:21 2026 by rpki-client