$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft File: dNRNlor0Y--xfAgNX60BDErAl6o.mft (raw, json) Hash identifier: FNLlpJdlm54n6pgoJCReqAbkq15QUXyvRBgQQfTTeFo= Subject key identifier: 9C:EC:30:17:EC:DD:B6:EE:19:2E:BB:01:FA:96:E5:0D:DF:9F:F1:74 Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft Manifest number: 073C Signing time: Tue 22 Sep 2026 19:02:41 +0000 Manifest this update: Tue 22 Sep 2026 19:02:40 +0000 Manifest next update: Tue 29 Sep 2026 19:02:40 +0000 Files and hashes: 1: dNRNlor0Y--xfAgNX60BDErAl6o.crl (hash: sKWmbTXGEIgtj6hV82vGadImRAOymH4Qd/obTB+tHis=) 2: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (hash: YIMgtn+dQ8yJTeLxcT1UUhFPvR85/hE3R6ckZdnpSnk=) 3: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (hash: Dc/AP1q1880Z3HHIDD3oFPRelHNNWO5cCeIAhTTwAeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Sep 22 19:02:40 2026 GMT Not After : Sep 29 19:02:40 2026 GMT Subject: CN=6ab2d0d1-af8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:70:34:63:75:bb:9c:2e:f4:d4:11:6d:72:1a: 30:b7:39:8d:2f:e2:55:38:3f:22:e7:01:86:30:63: b6:98:87:5e:d2:15:0d:7d:a1:cb:7c:c7:ec:cf:07: 9e:07:a2:64:69:18:f5:62:d9:10:72:f0:62:53:93: 69:c5:50:b1:7e:53:46:61:ba:ac:0b:9d:00:74:11: 69:19:cd:c0:81:31:66:c2:ea:c1:ff:6a:5a:a5:20: 40:1e:74:23:98:91:c8:58:75:20:86:ad:f7:0e:1a: 69:9c:5b:19:14:52:b5:06:9d:36:d2:2d:9d:48:cd: 90:b6:94:9e:43:a4:79:b2:4c:49:c6:21:9f:f7:81: a4:0f:70:89:16:4f:b1:3b:a7:0b:f4:f5:31:27:97: 80:46:4e:90:0e:c9:d7:d4:86:26:05:4f:69:96:a6: 5e:e8:67:7a:88:03:92:26:a6:c4:1e:b5:14:6e:ef: 96:ee:8e:d7:94:d4:e5:bb:5e:8c:b0:5b:ba:86:ef: f8:a0:e7:5b:ee:69:06:32:a6:8e:1b:a6:b9:f0:5f: 73:8a:7c:9d:7c:e2:05:58:5a:96:a8:a5:bf:c3:ee: 56:9a:01:a5:ef:f5:89:8a:ec:a6:97:ec:51:b7:92: c4:84:d8:33:fd:58:5a:de:03:75:38:f2:1d:e3:d2: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EC:30:17:EC:DD:B6:EE:19:2E:BB:01:FA:96:E5:0D:DF:9F:F1:74 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c8:4b:7d:69:96:b8:8a:52:8c:9a:1a:f7:65:8d:20:29:73: 0c:41:98:b6:aa:ef:d3:82:d3:d8:99:65:56:2a:b4:6c:e7:58: d0:90:96:5c:9b:e3:8c:6a:f0:e1:bc:af:47:57:0f:ac:f7:cd: 5c:21:21:ba:99:ef:9c:a0:da:af:e6:70:e8:dc:4d:7b:16:32: 7c:3f:8f:e9:a7:79:82:70:4d:67:e0:55:fa:e8:f3:bb:cd:f1: ad:8d:94:34:e7:c5:36:b6:f4:4c:f3:fd:54:20:ee:03:58:03: cb:5f:a7:17:bb:d8:00:4a:17:61:d2:f1:df:7c:86:81:8c:6c: 72:98:fd:f5:2f:3a:b5:03:4d:93:f0:b2:23:4c:a2:e7:81:06: a7:28:6f:5d:5f:e7:97:7c:27:ba:0d:20:e7:12:ae:13:f2:4a: ec:10:de:fc:ba:60:dd:df:4f:4e:a4:10:ba:b2:26:6b:27:12: 63:d2:a6:49:8b:d4:9b:e5:fb:92:71:86:9a:ce:ce:ef:13:51: 2e:08:e1:0c:2c:ab:c3:40:f6:49:f7:00:36:ea:63:9c:07:d9: 38:07:16:02:ac:e1:19:5a:41:f1:e5:06:91:5f:bd:67:98:7e: e8:62:5a:06:75:4a:58:d2:bd:65:bb:d1:d0:d4:31:cd:1a:b7: 72:0d:f3:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjYwOTIyMTkwMjQwWhcNMjYwOTI5MTkwMjQwWjAYMRYwFAYD VQQDEw02YWIyZDBkMS1hZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HA0Y3W7nC701BFtchowtzmNL+JVOD8i5wGGMGO2mIde0hUNfaHLfMfszwee B6JkaRj1YtkQcvBiU5NpxVCxflNGYbqsC50AdBFpGc3AgTFmwurB/2papSBAHnQj mJHIWHUghq33DhppnFsZFFK1Bp020i2dSM2QtpSeQ6R5skxJxiGf94GkD3CJFk+x O6cL9PUxJ5eARk6QDsnX1IYmBU9plqZe6Gd6iAOSJqbEHrUUbu+W7o7XlNTlu16M sFu6hu/4oOdb7mkGMqaOG6a58F9zinydfOIFWFqWqKW/w+5WmgGl7/WJiuyml+xR t5LEhNgz/Vha3gN1OPId49L4XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzsMBfs 3bbuGS67AfqW5Q3fn/F0MB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC82RUZDMEJFRTk4NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFkt LXhmQWdOWDYwQkRFckFsNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApMhLfWmWuIpSjJoa92WNIClzDEGYtqrv04LT2JllViq0bOdY0JCWXJvjjGrw 4byvR1cPrPfNXCEhupnvnKDar+Zw6NxNexYyfD+P6ad5gnBNZ+BV+ujzu83xrY2U NOfFNrb0TPP9VCDuA1gDy1+nF7vYAEoXYdLx33yGgYxscpj99S86tQNNk/CyI0yi 54EGpyhvXV/nl3wnug0g5xKuE/JK7BDe/Lpg3d9PTqQQurImaycSY9KmSYvUm+X7 knGGms7O7xNRLgjhDCyrw0D2SfcANupjnAfZOAcWAqzhGVpB8eUGkV+9Z5h+6GJa BnVKWNK9ZbvR0NQxzRq3cg3zMA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:07:38 2026 by rpki-client