$ rpki-client -vvf rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft File: DGhYIowwF0gr3H85geiYuVbaoCk.mft (raw, json) Hash identifier: JU7rEHyp9mYBul+wTne4FmgAE/qGvRkec8P5MqqFLJk= Subject key identifier: 73:30:DF:21:26:72:B7:53:E0:B3:BB:3A:DB:B6:2C:C8:E0:6D:0C:18 Authority key identifier: 0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 Certificate issuer: /CN=A9170975/serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft Manifest number: DC Signing time: Thu 23 Jul 2026 08:23:48 +0000 Manifest this update: Thu 23 Jul 2026 08:23:47 +0000 Manifest next update: Thu 30 Jul 2026 08:23:47 +0000 Files and hashes: 1: DGhYIowwF0gr3H85geiYuVbaoCk.crl (hash: K58ChfehenXudRuwJzolPdSrSfiQ+d5ROcCydEqqvv8=) 2: B12A39803A2A11F09E37DB48C4F9AE02.roa (hash: CoN2ChPQA1qn/Xvwh+q1CXaNL7awqOvoz+KnawFyjQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170975, serialNumber=0C6858228C3017482BDC7F3981E898B956DAA029 Validity Not Before: Jul 23 08:23:47 2026 GMT Not After : Jul 30 08:23:47 2026 GMT Subject: CN=6a61cf93-1ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:c5:25:67:97:eb:18:94:79:c4:f0:f3:64: 04:45:07:b2:56:50:49:2d:04:36:4a:80:5d:6d:d6: 23:30:7d:a7:00:9a:8e:cf:c6:4e:78:24:77:9e:4e: 03:76:4e:e0:58:38:f5:3a:10:38:19:be:99:3e:84: f1:bf:2d:7e:2f:cc:df:b3:34:ae:97:71:43:ea:20: b5:39:5e:5a:46:22:c2:84:02:68:a1:74:25:66:60: b1:ff:bc:94:08:75:9b:e4:3a:93:63:44:2d:5f:f2: 39:b9:61:cf:98:aa:97:49:d6:5c:ab:41:15:4e:c4: 12:4b:11:80:5c:52:89:70:18:60:66:07:bf:3c:11: 86:4a:ca:4c:5c:54:64:99:16:df:f1:fd:4b:bd:f9: ed:df:ad:8a:fa:08:88:dd:ac:9d:a0:1e:ec:0d:99: 4a:2d:8b:57:4c:93:03:a0:fb:a5:92:35:36:3e:be: f2:c8:1f:59:c1:62:e7:b2:e7:94:1b:20:e8:f7:81: fe:7c:58:a0:3a:49:3c:41:b5:89:4d:1b:22:e1:af: 05:95:c6:27:ac:63:e6:17:fe:82:6e:13:5b:d1:c9: 20:98:20:95:f3:e2:ca:73:6a:9b:d3:10:7c:4d:02: ca:84:bd:c3:8a:5b:80:2c:37:b2:8e:41:ed:2d:91: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:30:DF:21:26:72:B7:53:E0:B3:BB:3A:DB:B6:2C:C8:E0:6D:0C:18 X509v3 Authority Key Identifier: keyid:0C:68:58:22:8C:30:17:48:2B:DC:7F:39:81:E8:98:B9:56:DA:A0:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGhYIowwF0gr3H85geiYuVbaoCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170975/67C7A42A3A2611F0BCCF5E1FC4F9AE02/DGhYIowwF0gr3H85geiYuVbaoCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:67:57:c1:d3:84:89:c0:1b:25:b7:7e:a7:c4:9f:6d:fc:04: 57:06:9f:5f:11:e6:1a:fd:d1:dd:01:08:f7:db:62:c4:4d:9e: be:8d:c9:a3:c7:58:82:f3:cc:ee:db:b7:e5:ef:32:e0:27:84: ab:0d:4e:ff:bd:dd:74:29:68:8c:4b:75:5e:b6:59:3d:87:be: cc:11:ff:27:59:b7:2d:48:59:be:27:c6:95:3a:93:59:43:ec: fb:5e:f9:4f:34:78:54:4f:79:ef:14:f5:13:c9:b5:01:65:3b: b5:9d:c6:28:f5:47:f2:0e:f0:7b:4e:0b:36:5f:12:7a:8b:d3: 71:4b:f9:3a:ba:52:bb:64:6a:77:b3:3c:aa:55:ab:27:2a:cc: 62:97:42:c3:63:28:c4:44:e7:d2:48:6f:17:20:4a:32:e6:be: 66:97:bc:43:74:1d:51:19:87:d4:25:c8:6c:94:10:51:88:10: ca:5e:5d:82:ea:8a:f9:ce:ec:a8:d1:2c:f0:39:1d:42:aa:4e: e4:8c:1a:4d:ec:33:91:79:21:cc:86:f9:90:10:d9:04:94:45: 73:68:a1:24:2b:e6:1e:ca:61:73:73:41:1b:13:ce:cb:27:dc: 81:44:bc:c1:f2:f5:07:a6:64:47:5c:c9:6c:2a:7e:b6:29:3c: b2:cb:6d:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5NzUxMTAvBgNVBAUTKDBDNjg1ODIyOEMzMDE3NDgyQkRDN0YzOTgxRTg5OEI5 NTZEQUEwMjkwHhcNMjYwNzIzMDgyMzQ3WhcNMjYwNzMwMDgyMzQ3WjAYMRYwFAYD VQQDEw02YTYxY2Y5My0xYWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYvFJWeX6xiUecTw82QERQeyVlBJLQQ2SoBdbdYjMH2nAJqOz8ZOeCR3nk4D dk7gWDj1OhA4Gb6ZPoTxvy1+L8zfszSul3FD6iC1OV5aRiLChAJooXQlZmCx/7yU CHWb5DqTY0QtX/I5uWHPmKqXSdZcq0EVTsQSSxGAXFKJcBhgZge/PBGGSspMXFRk mRbf8f1Lvfnt362K+giI3aydoB7sDZlKLYtXTJMDoPulkjU2Pr7yyB9ZwWLnsueU GyDo94H+fFigOkk8QbWJTRsi4a8FlcYnrGPmF/6CbhNb0ckgmCCV8+LKc2qb0xB8 TQLKhL3DiluALDeyjkHtLZHsNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMw3yEm crdT4LO7Otu2LMjgbQwYMB8GA1UdIwQYMBaAFAxoWCKMMBdIK9x/OYHomLlW2qAp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk3NS82N0M3QTQyQTNB MjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9ER2hZSW93d0YwZ3IzSDg1Z2VpWXVWYmFv Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RHaFlJb3d3RjBncjNIODVnZWlZdVZiYW9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk3NS82N0M3QTQyQTNBMjYxMUYwQkNDRjVFMUZDNEY5QUUwMi9ER2hZSW93d0Yw Z3IzSDg1Z2VpWXVWYmFvQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALWdXwdOEicAbJbd+p8SfbfwEVwafXxHmGv3R3QEI99tixE2evo3Jo8dYgvPM 7tu35e8y4CeEqw1O/73ddClojEt1XrZZPYe+zBH/J1m3LUhZvifGlTqTWUPs+175 TzR4VE957xT1E8m1AWU7tZ3GKPVH8g7we04LNl8SeovTcUv5OrpSu2Rqd7M8qlWr JyrMYpdCw2MoxETn0khvFyBKMua+Zpe8Q3QdURmH1CXIbJQQUYgQyl5dguqK+c7s qNEs8DkdQqpO5IwaTewzkXkhzIb5kBDZBJRFc2ihJCvmHsphc3NBGxPOyyfcgUS8 wfL1B6ZkR1zJbCp+tik8sstt2w== -----END CERTIFICATE-----Generated at Fri Jul 24 12:37:01 2026 by rpki-client