$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: lZ0j4lcsnfL3awVxOtUgkIfqrQtS7L05JfqQIhtjeME= Subject key identifier: D2:94:EC:54:5E:B1:E9:B2:21:2E:0A:CE:B1:A2:E7:2C:44:A6:D0:1D Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0868 Signing time: Wed 22 Jul 2026 21:24:22 +0000 Manifest this update: Wed 22 Jul 2026 21:24:21 +0000 Manifest next update: Wed 29 Jul 2026 21:24:21 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: XqTj6aMfilruzywNIPquDjhG33WuXdu9LMjNKy8xOpI=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) 3: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Jul 22 21:24:21 2026 GMT Not After : Jul 29 21:24:21 2026 GMT Subject: CN=6a613506-81ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bf:87:c0:c2:3d:a3:e2:6d:60:ea:99:6b:a9: 0c:a2:b7:01:78:19:02:6d:e5:38:9a:4a:03:a4:82: 61:9d:5b:71:b6:e1:16:93:bf:be:d7:4e:ba:67:bd: 2e:c7:2e:a1:e1:94:4a:08:3f:62:b4:19:89:fd:b8: 42:e1:3e:7f:30:db:ce:ea:9d:78:88:45:24:9c:71: db:ed:c6:51:3d:6e:c5:a6:83:3d:2c:7e:39:14:19: a5:98:6e:c0:7b:32:2d:e7:be:9a:66:2c:f9:cd:d9: c0:c8:ee:19:a4:7f:d1:79:82:52:c4:29:ec:1e:53: c3:57:ff:21:73:16:1b:4f:b4:e6:51:83:61:f0:79: 8c:74:1d:93:fd:b3:49:c4:98:49:43:83:39:16:e0: 11:47:71:96:97:33:c4:81:c9:0d:c3:db:b1:26:21: 88:ec:d9:8e:2c:bc:04:98:e7:89:4e:36:48:bc:d1: e1:a6:d6:73:f8:b4:fe:f3:98:40:96:d7:4a:6d:d5: b6:43:a1:78:e2:85:0e:d2:ff:e0:ae:34:99:6c:24: 40:59:9f:2f:81:e4:9c:dc:80:3a:2d:d8:8f:28:01: 43:8e:96:20:fb:e3:d2:28:94:70:0c:66:4e:0e:e3: a2:04:77:9e:6b:6e:da:04:4b:51:e8:57:b1:33:8e: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:EC:54:5E:B1:E9:B2:21:2E:0A:CE:B1:A2:E7:2C:44:A6:D0:1D X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2a:72:b0:e9:85:07:55:96:16:14:46:35:f5:e0:4f:5d:66: 02:2b:37:f5:6e:2e:45:40:75:60:ef:15:8e:a9:2d:11:5e:12: c3:53:6f:8e:9c:54:eb:8b:53:24:64:72:dc:16:ed:71:c2:32: e7:1f:ba:d0:63:76:6f:1e:99:8b:b4:c8:eb:59:61:6c:ca:90: 62:e8:bf:5a:a9:77:2e:0b:dc:47:48:9a:94:f8:66:fe:0d:d9: f5:eb:e9:57:05:c2:41:37:b7:00:c7:b0:2d:f5:bf:b2:33:14: 2b:81:ce:49:dc:6b:91:3a:c0:f0:f9:15:1f:12:d9:88:13:9d: 21:a3:16:46:80:6b:ce:9a:8e:64:26:42:85:9d:1e:f7:7e:ee: 18:6d:21:7a:32:17:36:98:bb:bd:c0:52:2f:05:a4:fa:f0:4d: ca:78:aa:c7:6a:f3:7d:14:44:7c:83:08:1d:5b:52:5a:d2:fe: 03:9b:3e:e1:7f:ce:77:44:39:cc:52:6b:1b:6d:65:4c:1b:7e: b6:2d:31:fb:52:b7:87:5a:b3:e1:5c:a7:ca:7f:c2:a7:89:2c: 0b:54:20:65:ec:2c:3e:01:9d:81:0b:e7:d7:58:c4:0f:43:d4: ee:05:4e:5e:be:08:f1:cc:e2:cd:c0:c0:11:6e:e5:02:b2:3f: 42:3e:9e:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYwNzIyMjEyNDIxWhcNMjYwNzI5MjEyNDIxWjAYMRYwFAYD VQQDEw02YTYxMzUwNi04MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwr+HwMI9o+JtYOqZa6kMorcBeBkCbeU4mkoDpIJhnVtxtuEWk7++1066Z70u xy6h4ZRKCD9itBmJ/bhC4T5/MNvO6p14iEUknHHb7cZRPW7FpoM9LH45FBmlmG7A ezIt576aZiz5zdnAyO4ZpH/ReYJSxCnsHlPDV/8hcxYbT7TmUYNh8HmMdB2T/bNJ xJhJQ4M5FuARR3GWlzPEgckNw9uxJiGI7NmOLLwEmOeJTjZIvNHhptZz+LT+85hA ltdKbdW2Q6F44oUO0v/grjSZbCRAWZ8vgeSc3IA6LdiPKAFDjpYg++PSKJRwDGZO DuOiBHeea27aBEtR6FexM45A+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKU7FRe semyIS4KzrGi5yxEptAdMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuSpysOmFB1WWFhRGNfXgT11mAis39W4uRUB1YO8VjqktEV4Sw1NvjpxU64tT JGRy3BbtccIy5x+60GN2bx6Zi7TI61lhbMqQYui/Wql3LgvcR0ialPhm/g3Z9evp VwXCQTe3AMewLfW/sjMUK4HOSdxrkTrA8PkVHxLZiBOdIaMWRoBrzpqOZCZChZ0e 937uGG0hejIXNpi7vcBSLwWk+vBNyniqx2rzfRREfIMIHVtSWtL+A5s+4X/Od0Q5 zFJrG21lTBt+ti0x+1K3h1qz4Vynyn/Cp4ksC1QgZewsPgGdgQvn11jED0PU7gVO Xr4I8czizcDAEW7lArI/Qj6eIA== -----END CERTIFICATE-----Generated at Fri Jul 24 13:22:36 2026 by rpki-client