$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: FQwRLWRdAvwJpB76PKzTBQjO9rr5j8YOZhmcQGcbNKA= Subject key identifier: 2F:2E:A5:E5:AD:2D:A4:21:E0:F5:2D:3C:65:39:C0:DB:9A:90:9E:AE Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0CD7 Signing time: Wed 22 Jul 2026 19:19:24 +0000 Manifest this update: Wed 22 Jul 2026 19:19:23 +0000 Manifest next update: Wed 29 Jul 2026 19:19:23 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: gYCzcAXaErQVJHUeAeVNZ+cnKbMpyVZGHHsnclDKAYQ=) 2: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: LCPMT0hgRgxkY6g8i6rd3I6r5PrzQRSGvYCOXRlNG28=) 3: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: M9hrVMTzZX+RhBo3mKRURH0NS+fV+W9LRBlbRm5uCWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Jul 22 19:19:23 2026 GMT Not After : Jul 29 19:19:23 2026 GMT Subject: CN=6a6117bb-b960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:0e:4c:3c:7a:75:43:22:85:9b:a4:be:d8: 87:87:0c:9b:c6:04:90:fb:b6:a8:68:8d:c3:f7:41: 58:04:15:f8:c2:86:77:63:e8:92:08:12:da:70:81: 4f:a9:bd:ee:e2:f8:fd:81:7f:16:72:8d:a9:ea:f3: 75:23:e3:f7:4d:7a:88:00:84:ac:72:10:77:7b:19: b7:52:a4:57:cf:17:32:c5:d0:a9:da:84:8f:40:b6: e2:a2:64:cf:2a:f3:2c:c8:be:56:36:a6:7d:8f:c0: 8e:64:a6:fb:ec:56:46:50:fa:0b:d7:73:47:ac:9d: 54:01:d2:0e:fb:44:c4:ea:da:c2:15:9d:fc:0a:b9: 1c:e7:96:11:59:1e:cc:45:dc:5f:d9:0f:95:9c:2c: 2c:d6:2b:ab:3e:18:51:78:b2:da:28:c6:80:bf:ea: 44:f2:05:f6:45:19:ce:f9:9a:04:b6:73:45:b5:41: 33:d4:7d:0a:f8:17:47:10:cc:0b:a2:b2:38:86:31: 11:70:fa:d2:68:ae:9e:15:6d:83:45:9a:74:4f:3e: de:34:b3:63:d5:48:b6:1d:70:62:af:d6:b9:5b:ec: 1a:1a:8c:b2:28:5e:64:41:30:d5:3f:d5:6a:29:e6: 0d:d8:c4:1d:16:5a:41:86:55:8a:cc:ca:ef:49:f6: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2E:A5:E5:AD:2D:A4:21:E0:F5:2D:3C:65:39:C0:DB:9A:90:9E:AE X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:74:77:f5:b6:a0:54:0a:01:2b:2a:88:f8:01:0c:9a:51:e9: 5c:f5:e3:9c:eb:07:33:31:73:49:24:de:27:0c:b4:32:8e:72: 4e:77:87:57:8b:e6:ca:ac:da:68:a1:42:40:92:b7:c8:f0:59: 48:30:01:94:3f:6e:39:98:1b:9f:16:a8:3a:a5:c9:3d:5b:4e: b4:b9:ee:8f:10:bf:a8:1e:c4:93:9a:ac:91:5e:fd:94:b8:53: 0a:2a:cf:25:f0:0f:12:db:bf:ec:dd:83:44:8a:09:49:64:11: 17:1d:54:29:ce:3e:37:98:1b:4f:54:e5:db:e4:89:b2:03:82: db:05:dd:a5:09:4a:8d:2a:15:84:0f:8d:b6:47:2d:d2:d9:02: 75:4a:de:ab:00:20:51:74:74:28:bf:97:4b:a1:68:00:46:90: 3d:74:04:ac:d8:ed:4e:e4:7d:07:63:1b:b8:d1:d9:01:6b:81: 2e:ef:d1:1f:38:aa:9b:db:26:12:ce:46:f6:e6:11:9e:eb:ec: c3:a5:90:6c:e4:1f:21:a7:61:43:00:2f:64:77:f1:eb:a6:fe: 0c:88:de:ec:17:69:98:b3:18:21:3b:0d:7b:7d:ae:6f:d7:5a: 03:b6:12:6f:76:01:f0:8d:65:0e:b1:93:d9:9d:97:93:e6:73: d1:8d:8c:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjYwNzIyMTkxOTIzWhcNMjYwNzI5MTkxOTIzWjAYMRYwFAYD VQQDEw02YTYxMTdiYi1iOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJcOTDx6dUMihZukvtiHhwybxgSQ+7aoaI3D90FYBBX4woZ3Y+iSCBLacIFP qb3u4vj9gX8Wco2p6vN1I+P3TXqIAISschB3exm3UqRXzxcyxdCp2oSPQLbiomTP KvMsyL5WNqZ9j8COZKb77FZGUPoL13NHrJ1UAdIO+0TE6trCFZ38Crkc55YRWR7M Rdxf2Q+VnCws1iurPhhReLLaKMaAv+pE8gX2RRnO+ZoEtnNFtUEz1H0K+BdHEMwL orI4hjERcPrSaK6eFW2DRZp0Tz7eNLNj1Ui2HXBir9a5W+waGoyyKF5kQTDVP9Vq KeYN2MQdFlpBhlWKzMrvSfZ1XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC8upeWt LaQh4PUtPGU5wNuakJ6uMB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGHR39bagVAoBKyqI+AEMmlHpXPXjnOsHMzFzSSTeJwy0Mo5yTneHV4vmyqza aKFCQJK3yPBZSDABlD9uOZgbnxaoOqXJPVtOtLnujxC/qB7Ek5qskV79lLhTCirP JfAPEtu/7N2DRIoJSWQRFx1UKc4+N5gbT1Tl2+SJsgOC2wXdpQlKjSoVhA+Ntkct 0tkCdUreqwAgUXR0KL+XS6FoAEaQPXQErNjtTuR9B2MbuNHZAWuBLu/RHziqm9sm Es5G9uYRnuvsw6WQbOQfIadhQwAvZHfx66b+DIje7BdpmLMYITsNe32ub9daA7YS b3YB8I1lDrGT2Z2Xk+Zz0Y2Mkg== -----END CERTIFICATE-----Generated at Fri Jul 24 08:32:31 2026 by rpki-client