$ rpki-client -vvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft File: dd3NDNRiWKwZGsOQoskl2MA1qFc.mft (raw, json) Hash identifier: Gs+O2NIdCiANabiZrCTXOuJXu5+QFl8/8hMGMs76WiE= Subject key identifier: 9A:6A:BC:04:B5:F5:2C:66:37:30:73:DD:EA:18:CB:77:09:18:79:D8 Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 Certificate issuer: /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Certificate serial: 0F5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft Manifest number: 0F50 Signing time: Wed 22 Jul 2026 17:42:33 +0000 Manifest this update: Wed 22 Jul 2026 17:42:32 +0000 Manifest next update: Wed 29 Jul 2026 17:42:32 +0000 Files and hashes: 1: dd3NDNRiWKwZGsOQoskl2MA1qFc.crl (hash: IVIf3hma43kaBUNe2TSuEdAAiYy04LezU7FGam9I3pM=) 2: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (hash: epuRJDNpLBRjInLcr8wNqAbigHvQWwNVcLarPZoddFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3931 (0xf5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E04F, serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Validity Not Before: Jul 22 17:42:32 2026 GMT Not After : Jul 29 17:42:32 2026 GMT Subject: CN=6a610109-6018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:ba:90:98:b7:2b:d1:61:7a:61:69:8a:cf: 6e:4a:b3:09:3e:5f:da:a8:ca:8d:d9:22:9d:6d:f5: 07:7d:91:0c:a7:1f:a8:2d:17:2b:19:da:82:75:9a: a5:00:7f:05:f8:e5:35:17:31:b2:47:90:38:70:17: c3:0a:3b:4a:e7:15:5e:83:88:eb:92:4c:cd:cc:16: cb:7b:33:12:d6:3b:d9:4c:1e:83:78:df:17:a8:89: 42:81:51:72:a4:db:32:b9:41:00:e1:0b:7c:e3:24: 38:ef:b6:70:c9:a7:f8:3c:61:13:65:0f:d8:5a:c1: e8:3d:96:d1:33:ed:35:8c:a7:ab:d8:e0:1b:dd:23: 67:73:78:81:6f:fe:91:ae:93:96:af:c0:d0:6c:04: 00:ea:e0:7c:ca:f6:ab:3d:6f:c9:71:f6:42:05:a0: 07:70:03:0c:ad:0f:24:bd:5a:8c:2c:10:b3:6a:3d: a5:c8:8c:a0:31:e4:7d:fe:ad:cf:83:2d:7a:7b:7d: 8b:fd:23:29:42:23:44:82:05:37:da:34:ea:71:71: 94:f3:94:4f:7a:fc:41:68:d5:5d:3d:25:ac:d4:44: b2:24:55:52:64:00:fc:16:3f:71:3a:21:b9:8e:ae: c3:ba:95:b6:1b:bf:62:37:b6:ed:fe:b3:07:e9:c6: 84:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6A:BC:04:B5:F5:2C:66:37:30:73:DD:EA:18:CB:77:09:18:79:D8 X509v3 Authority Key Identifier: keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:0d:46:ca:84:32:63:fa:25:48:4b:0f:44:5b:04:b7:57:c1: bf:e1:ef:05:67:12:13:2b:4f:44:b8:9d:5b:d8:32:c0:48:3c: 21:23:24:a1:3c:97:cf:0a:99:f0:a2:c4:c0:51:86:0c:34:c2: f0:aa:55:c2:3a:f8:7d:92:44:e4:e0:dc:76:8d:ad:75:74:c4: 02:f6:df:3b:91:41:4c:6d:15:49:86:14:ba:4e:96:a2:6e:ea: 2e:c1:bd:4b:2b:05:01:91:e3:2d:90:c7:da:dc:35:5a:12:d3: 00:06:71:57:29:6e:9b:f3:7b:b7:e6:e1:db:7a:ce:30:ad:cf: ba:10:85:1f:d4:ff:f6:a5:8d:27:6d:e5:91:37:31:93:78:31: 06:5e:20:f6:27:78:67:f8:b4:5d:65:4b:15:dc:b8:db:2f:44: b3:cc:f3:33:be:ec:af:85:f0:a9:3f:7d:04:c9:41:ef:f0:a4: 1e:12:2c:70:15:9c:0e:e9:01:a2:f2:b0:c8:f7:c2:b8:09:91: ae:5a:b5:7d:5c:cc:5e:8c:65:1e:df:db:66:a5:24:9a:4d:50: ca:e4:a6:a1:18:91:4e:fe:fe:f2:b4:46:92:f6:e5:88:58:50: f4:6d:12:09:c5:42:7a:5c:47:21:22:0b:27:4c:eb:46:d0:01: ca:b2:17:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwNEYxMTAvBgNVBAUTKDc1RERDRDBDRDQ2MjU4QUMxOTFBQzM5MEEyQzkyNUQ4 QzAzNUE4NTcwHhcNMjYwNzIyMTc0MjMyWhcNMjYwNzI5MTc0MjMyWjAYMRYwFAYD VQQDEw02YTYxMDEwOS02MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqce6kJi3K9FhemFpis9uSrMJPl/aqMqN2SKdbfUHfZEMpx+oLRcrGdqCdZql AH8F+OU1FzGyR5A4cBfDCjtK5xVeg4jrkkzNzBbLezMS1jvZTB6DeN8XqIlCgVFy pNsyuUEA4Qt84yQ477Zwyaf4PGETZQ/YWsHoPZbRM+01jKer2OAb3SNnc3iBb/6R rpOWr8DQbAQA6uB8yvarPW/JcfZCBaAHcAMMrQ8kvVqMLBCzaj2lyIygMeR9/q3P gy16e32L/SMpQiNEggU32jTqcXGU85RPevxBaNVdPSWs1ESyJFVSZAD8Fj9xOiG5 jq7DupW2G79iN7bt/rMH6caEqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpqvAS1 9SxmNzBz3eoYy3cJGHnYMB8GA1UdIwQYMBaAFHXdzQzUYlisGRrDkKLJJdjANahX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTA0Ri80MTg1MzdGNDk3 MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdLd1pHc09Rb3NrbDJNQTFx RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkM05ETlJpV0t3WkdzT1Fvc2tsMk1BMXFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTA0Ri80MTg1MzdGNDk3MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdL d1pHc09Rb3NrbDJNQTFxRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFw1GyoQyY/olSEsPRFsEt1fBv+HvBWcSEytPRLidW9gywEg8ISMkoTyXzwqZ 8KLEwFGGDDTC8KpVwjr4fZJE5ODcdo2tdXTEAvbfO5FBTG0VSYYUuk6Wom7qLsG9 SysFAZHjLZDH2tw1WhLTAAZxVylum/N7t+bh23rOMK3PuhCFH9T/9qWNJ23lkTcx k3gxBl4g9id4Z/i0XWVLFdy42y9Es8zzM77sr4XwqT99BMlB7/CkHhIscBWcDukB ovKwyPfCuAmRrlq1fVzMXoxlHt/bZqUkmk1QyuSmoRiRTv7+8rRGkvbliFhQ9G0S CcVCelxHISILJ0zrRtAByrIXvg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:35:34 2026 by rpki-client