$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft File: dNRNlor0Y--xfAgNX60BDErAl6o.mft (raw, json) Hash identifier: NbTCVCqwc888VwY0newxqBbIisvtPwDpDlLnVBDvZ4M= Subject key identifier: 4E:D4:AF:97:D1:34:52:38:4E:36:BE:F4:51:A6:0E:0D:75:A2:82:20 Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft Manifest number: 071C Signing time: Wed 22 Jul 2026 19:36:12 +0000 Manifest this update: Wed 22 Jul 2026 19:36:12 +0000 Manifest next update: Wed 29 Jul 2026 19:36:12 +0000 Files and hashes: 1: dNRNlor0Y--xfAgNX60BDErAl6o.crl (hash: s9d3wxw7nmqrGXde1HJPVeY3FWtLZu8y/9cdZMEsmqE=) 2: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (hash: Dc/AP1q1880Z3HHIDD3oFPRelHNNWO5cCeIAhTTwAeE=) 3: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (hash: YIMgtn+dQ8yJTeLxcT1UUhFPvR85/hE3R6ckZdnpSnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Jul 22 19:36:12 2026 GMT Not After : Jul 29 19:36:12 2026 GMT Subject: CN=6a611bac-174f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bf:80:c8:ae:e3:9a:b5:29:1b:1d:42:c5:be: 84:b4:24:50:e7:12:b0:98:52:25:b9:d7:1c:3f:99: a7:b3:91:eb:4f:82:31:4b:5f:56:27:a0:b0:e2:d6: 57:2c:bb:a8:ac:91:be:27:41:cf:a0:2d:00:1c:46: fe:43:13:63:fa:91:99:c3:8c:35:6c:93:e3:e8:9b: de:1e:0a:4d:9b:fc:11:48:00:e0:9a:0e:6f:7d:31: 57:2b:2c:e6:54:6e:3c:cd:26:3e:8f:d5:0d:fa:0b: 19:8a:ce:f1:a1:dd:45:09:38:4f:1d:fd:c0:81:49: d3:85:2c:d3:4d:9c:76:e5:e4:37:ec:30:51:9f:c8: 3e:f4:6f:3e:f0:03:dc:9d:e8:fa:8d:e8:b0:ce:22: e2:3f:e6:47:f3:3c:16:a5:15:21:36:5c:d3:3a:d0: 45:5f:83:da:12:26:07:de:e7:4e:19:63:fb:69:ef: 44:23:f1:32:5c:ca:39:58:a7:77:1c:0d:fe:16:1f: f5:5a:1e:fb:55:95:b0:ce:22:34:22:29:d0:72:1f: 3b:51:48:3e:d3:4d:e2:4f:61:2b:4b:86:3d:0c:59: 60:cb:7e:48:7b:59:9a:61:ce:55:ff:f7:34:d6:2c: 79:92:73:87:41:9d:f7:45:d9:5f:59:bd:01:3c:1d: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D4:AF:97:D1:34:52:38:4E:36:BE:F4:51:A6:0E:0D:75:A2:82:20 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:71:4c:82:5a:25:b0:86:e8:c0:e7:40:f6:20:56:e2:dc:cd: dd:8d:8c:3d:66:a1:cf:d1:8e:e7:3a:cd:71:48:fe:05:76:bd: 15:89:7e:bc:7c:fe:89:df:55:83:c7:21:90:f0:cd:10:d2:04: a4:99:03:de:91:c6:af:f4:1e:e4:c4:7d:08:5d:28:90:b9:bc: 3b:cb:ea:30:d8:a4:62:7b:9a:39:d4:05:61:89:27:c8:80:76: e0:91:bf:0d:51:0a:7e:38:28:5d:2a:72:f0:86:5b:f8:14:db: 1c:ce:9f:50:dd:67:4c:8b:6d:e7:9e:c8:35:d4:21:9d:f2:ab: 29:4f:72:c2:e7:b6:2c:f1:86:5b:85:b5:e4:bf:57:f8:fc:42: bf:ca:83:cb:53:d3:c4:56:cd:e3:11:03:14:1f:72:ef:4a:d0: 7e:c5:2c:20:29:bd:22:a0:53:38:e0:f3:38:01:cc:ef:02:eb: 05:ee:94:f9:a7:e1:9c:3f:2d:87:81:4f:94:99:5d:31:76:15: 0d:56:1a:cb:bf:a7:de:42:53:a6:1a:2d:4b:19:30:e4:89:7b: 7a:d2:a3:c8:d3:3e:49:e3:31:0b:72:c5:92:a4:14:75:35:57: 3a:60:50:c9:df:b1:78:bd:49:4f:a8:3a:7e:37:fa:74:d9:42: ac:7e:9b:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjYwNzIyMTkzNjEyWhcNMjYwNzI5MTkzNjEyWjAYMRYwFAYD VQQDEw02YTYxMWJhYy0xNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07+AyK7jmrUpGx1Cxb6EtCRQ5xKwmFIludccP5mns5HrT4IxS19WJ6Cw4tZX LLuorJG+J0HPoC0AHEb+QxNj+pGZw4w1bJPj6JveHgpNm/wRSADgmg5vfTFXKyzm VG48zSY+j9UN+gsZis7xod1FCThPHf3AgUnThSzTTZx25eQ37DBRn8g+9G8+8APc nej6jeiwziLiP+ZH8zwWpRUhNlzTOtBFX4PaEiYH3udOGWP7ae9EI/EyXMo5WKd3 HA3+Fh/1Wh77VZWwziI0IinQch87UUg+003iT2ErS4Y9DFlgy35Ie1maYc5V//c0 1ix5knOHQZ33RdlfWb0BPB0UFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7Ur5fR NFI4Tja+9FGmDg11ooIgMB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC82RUZDMEJFRTk4NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFkt LXhmQWdOWDYwQkRFckFsNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtHFMglolsIbowOdA9iBW4tzN3Y2MPWahz9GO5zrNcUj+BXa9FYl+vHz+id9V g8chkPDNENIEpJkD3pHGr/Qe5MR9CF0okLm8O8vqMNikYnuaOdQFYYknyIB24JG/ DVEKfjgoXSpy8IZb+BTbHM6fUN1nTItt557INdQhnfKrKU9ywue2LPGGW4W15L9X +PxCv8qDy1PTxFbN4xEDFB9y70rQfsUsICm9IqBTOODzOAHM7wLrBe6U+afhnD8t h4FPlJldMXYVDVYay7+n3kJTphotSxkw5Il7etKjyNM+SeMxC3LFkqQUdTVXOmBQ yd+xeL1JT6g6fjf6dNlCrH6bHg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:58:48 2026 by rpki-client