$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: wdpWE+1tbZAYEIUIuIF04P9+m5HKzQV7c6bAI0VhScQ= Subject key identifier: 09:6F:4E:55:3F:51:63:94:E9:49:DD:57:63:2A:DD:7A:FF:78:61:67 Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 01BA Signing time: Thu 23 Jul 2026 05:20:41 +0000 Manifest this update: Thu 23 Jul 2026 05:20:40 +0000 Manifest next update: Thu 30 Jul 2026 05:20:40 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: eorCR28ug2udEkLisjmD/n6OlFF1uMrO6UPl+Yt1tQk=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: QYTVlNYkrEiZ8aShj9m0JqEjCBGJlJp7vXx5mGyVS/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Jul 23 05:20:40 2026 GMT Not After : Jul 30 05:20:40 2026 GMT Subject: CN=6a61a4a9-7206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:e1:6b:61:17:44:64:42:f1:af:ea:8f:a8: e8:17:e3:59:6f:7f:e1:04:18:74:fb:3b:46:34:fe: f8:1c:48:29:6b:e5:60:8b:f8:09:70:96:28:5b:b6: 3c:ea:b1:14:dd:9d:8e:39:9f:de:26:e5:58:e7:90: 33:93:47:ce:f9:44:8c:e9:ad:eb:5b:78:ce:a5:61: 7f:33:c3:ce:26:43:07:44:e8:e9:93:55:19:d9:cd: 29:6b:0c:1a:25:72:5b:20:b7:f7:dd:81:a1:94:fa: 1a:8a:29:ea:3f:8d:b0:9f:d2:05:61:0d:87:4f:93: 46:07:0c:4c:12:f5:90:b8:6e:62:0c:3b:2e:d9:69: c1:9d:02:11:36:21:47:72:e1:e7:c5:72:c6:47:13: cf:3e:b2:0f:c2:b0:85:42:7b:5b:5f:49:78:e4:3a: b5:b9:8d:61:91:2e:ac:eb:97:c5:60:1b:61:ed:9e: 10:6d:f5:e8:a1:b6:82:a5:f0:8b:a2:c5:07:77:26: 4d:4f:30:d6:d6:76:63:9b:25:c7:28:17:cf:55:2c: 2b:92:1a:cc:f0:5f:13:7e:bb:0f:f6:73:95:68:74: 20:12:71:7b:0b:5a:09:36:ee:5d:b3:77:7d:8d:ea: 39:15:4b:c2:e2:70:8c:de:e3:cd:3c:d5:9e:d2:4a: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6F:4E:55:3F:51:63:94:E9:49:DD:57:63:2A:DD:7A:FF:78:61:67 X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:75:bf:0c:10:aa:0a:ee:40:0c:8e:e1:4c:e3:9c:02:b1:37: 27:8c:df:56:6d:ff:6c:42:7c:87:40:d8:d9:10:d8:ac:8d:db: b7:3b:15:b3:da:b8:78:b1:c9:84:8c:73:98:55:f6:c6:e5:b6: a9:17:4a:94:fd:a2:10:d5:59:18:4d:3a:f8:a5:67:db:99:13: ec:08:89:f1:72:d4:66:2e:b7:7e:2f:ec:af:ca:aa:87:91:1f: 27:43:04:e3:2a:70:57:b1:41:32:86:f2:a4:7d:66:89:b5:cc: 77:d7:9d:85:3a:a5:cc:72:79:b1:81:b1:61:18:e3:01:aa:f8: f7:0c:28:cb:96:6d:6a:59:23:92:ab:0b:5e:b7:f8:71:47:6f: 2f:f4:2f:00:05:4e:7c:47:bc:aa:52:79:1a:c9:0c:c8:e9:81: 47:c5:b1:93:9a:25:f8:21:a9:70:a2:2a:78:16:f7:b2:fe:6d: eb:cc:b7:d8:1b:17:cd:62:86:3e:99:2b:9a:e6:ad:67:1f:0b: f1:8a:f5:98:54:61:3e:3b:ae:05:49:66:ac:24:f2:3b:16:17: 79:56:e1:de:30:dc:dc:95:99:27:03:3b:16:67:9b:f7:98:f9: e5:47:6f:ab:b3:55:fe:76:63:d2:bd:d4:75:92:4b:d3:03:46: c8:24:77:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjYwNzIzMDUyMDQwWhcNMjYwNzMwMDUyMDQwWjAYMRYwFAYD VQQDEw02YTYxYTRhOS03MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRLha2EXRGRC8a/qj6joF+NZb3/hBBh0+ztGNP74HEgpa+Vgi/gJcJYoW7Y8 6rEU3Z2OOZ/eJuVY55Azk0fO+USM6a3rW3jOpWF/M8POJkMHROjpk1UZ2c0pawwa JXJbILf33YGhlPoaiinqP42wn9IFYQ2HT5NGBwxMEvWQuG5iDDsu2WnBnQIRNiFH cuHnxXLGRxPPPrIPwrCFQntbX0l45Dq1uY1hkS6s65fFYBth7Z4QbfXoobaCpfCL osUHdyZNTzDW1nZjmyXHKBfPVSwrkhrM8F8TfrsP9nOVaHQgEnF7C1oJNu5ds3d9 jeo5FUvC4nCM3uPNPNWe0komrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlvTlU/ UWOU6UndV2Mq3Xr/eGFnMB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHW/DBCqCu5ADI7hTOOcArE3J4zfVm3/bEJ8h0DY2RDYrI3btzsVs9q4eLHJ hIxzmFX2xuW2qRdKlP2iENVZGE06+KVn25kT7AiJ8XLUZi63fi/sr8qqh5EfJ0ME 4ypwV7FBMobypH1mibXMd9edhTqlzHJ5sYGxYRjjAar49wwoy5ZtalkjkqsLXrf4 cUdvL/QvAAVOfEe8qlJ5GskMyOmBR8Wxk5ol+CGpcKIqeBb3sv5t68y32BsXzWKG PpkrmuatZx8L8Yr1mFRhPjuuBUlmrCTyOxYXeVbh3jDc3JWZJwM7Fmeb95j55Udv q7NV/nZj0r3UdZJL0wNGyCR38w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:09 2026 by rpki-client