$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: fWg2HyF//UhXsLKkmTEZmizfhE9ft6xjObBLS1TJ9sM= Subject key identifier: 99:A9:AE:D0:53:FE:78:57:C0:02:9E:34:6D:F1:10:99:FC:5A:B5:6C Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 0647 Signing time: Tue 22 Sep 2026 22:24:05 +0000 Manifest this update: Tue 22 Sep 2026 22:24:04 +0000 Manifest next update: Tue 29 Sep 2026 22:24:04 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: elw5CsV8XfnGW1m32R7Fk+Nce2/Sj59zI7pyxRraNjI=) 2: 632B0D382CE911F189BCFB9BA3833773.roa (hash: szdIivrmaNOf2If91WlOqRLDy+pXayJTHQKBGeGvRTQ=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: sGiM6GvJxV9yJqw6hLJjsRcyN9Otue9M3LO38P82h9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Sep 22 22:24:04 2026 GMT Not After : Sep 29 22:24:04 2026 GMT Subject: CN=6ab30004-3f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:90:1b:e5:93:36:99:da:c7:fd:4b:23:44: 5b:a6:75:79:6b:20:a5:92:84:c2:e3:6e:b9:92:6c: 2f:71:56:89:fa:5f:a2:72:5b:0b:d9:55:a3:97:1d: f7:85:97:57:a0:91:de:ee:f5:aa:87:9d:9b:72:fb: 35:ef:ec:94:a5:42:f7:a3:16:b0:74:9f:5b:3f:f1: 25:d5:92:a7:06:46:fc:40:69:48:ea:43:e3:87:03: 5c:89:f8:d7:a9:8d:62:c8:27:d3:1e:54:d1:2c:82: 69:76:1c:7b:d2:28:1b:6b:67:11:e8:c2:85:32:88: 38:15:64:4b:65:d5:44:63:a0:dd:1a:51:59:a0:ce: b9:99:cc:c3:aa:d9:b1:23:54:2d:41:29:d8:6b:ca: 74:e5:50:a7:9e:2b:62:1d:e2:74:9c:15:3f:e3:4c: 1b:f8:70:eb:fb:8c:7f:4c:8a:64:41:7a:2f:0d:f5: e0:d5:f8:74:9e:6f:5c:62:24:bb:6c:3b:1a:81:b5: f8:b5:2e:d6:98:17:43:f9:7b:e9:7c:b2:d5:c7:28: 5a:ec:2b:31:8a:cd:bf:a8:9b:14:37:0a:fd:5b:3b: f1:99:46:cd:0c:0c:a2:63:f8:8e:1c:1b:31:f7:55: af:84:cf:a8:9f:65:d8:fd:08:0a:bf:04:87:c1:ac: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A9:AE:D0:53:FE:78:57:C0:02:9E:34:6D:F1:10:99:FC:5A:B5:6C X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a2:2f:f9:40:9a:99:c4:73:38:69:f4:b7:93:93:95:a1:fd: 72:5d:87:7d:df:0b:68:72:97:60:de:7c:af:ef:7e:3a:0d:4e: 97:d7:14:25:7c:00:65:88:f7:de:4f:8d:ff:a0:7c:8b:f9:a5: db:ee:ba:e6:49:88:ee:3e:a3:41:b8:8a:0b:c2:2f:76:ee:29: 13:25:c5:e5:30:94:de:ea:10:70:b2:bb:f9:c2:b4:56:57:91: 10:f8:7e:4c:3b:88:a7:f8:31:9c:b4:a8:77:72:e5:a8:32:b1: 23:34:81:8e:b4:ad:15:6d:bf:b5:2c:93:82:12:65:ad:ce:2b: 23:53:4c:fd:05:78:e3:83:4a:45:1a:46:a7:1d:fa:4e:33:1b: 9b:8b:c9:69:b2:19:0d:b6:f1:bf:4e:83:33:cd:5a:da:37:74: 46:22:11:eb:4a:85:6b:90:23:ab:57:cb:08:20:2f:cd:f6:92: bc:8c:ec:19:92:61:96:cf:34:a1:b2:c6:a8:2b:3f:ff:dc:05: 78:aa:8e:9b:ec:24:16:31:ac:f0:02:b2:9b:df:99:ea:3e:79: 8d:b3:d8:34:2d:5f:c7:f0:27:40:42:aa:c3:54:38:a7:6e:9b: 3d:5a:13:52:c1:84:67:26:6f:86:5d:97:93:bf:1e:5f:2b:fb: c0:c6:73:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYwOTIyMjIyNDA0WhcNMjYwOTI5MjIyNDA0WjAYMRYwFAYD VQQDEw02YWIzMDAwNC0zZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUmQG+WTNpnax/1LI0RbpnV5ayClkoTC4265kmwvcVaJ+l+iclsL2VWjlx33 hZdXoJHe7vWqh52bcvs17+yUpUL3oxawdJ9bP/El1ZKnBkb8QGlI6kPjhwNcifjX qY1iyCfTHlTRLIJpdhx70igba2cR6MKFMog4FWRLZdVEY6DdGlFZoM65mczDqtmx I1QtQSnYa8p05VCnnitiHeJ0nBU/40wb+HDr+4x/TIpkQXovDfXg1fh0nm9cYiS7 bDsagbX4tS7WmBdD+XvpfLLVxyha7Csxis2/qJsUNwr9WzvxmUbNDAyiY/iOHBsx 91WvhM+on2XY/QgKvwSHwaw+TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmprtBT /nhXwAKeNG3xEJn8WrVsMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKIv+UCamcRzOGn0t5OTlaH9cl2Hfd8LaHKXYN58r+9+Og1Ol9cUJXwAZYj3 3k+N/6B8i/ml2+665kmI7j6jQbiKC8Ivdu4pEyXF5TCU3uoQcLK7+cK0VleREPh+ TDuIp/gxnLSod3LlqDKxIzSBjrStFW2/tSyTghJlrc4rI1NM/QV444NKRRpGpx36 TjMbm4vJabIZDbbxv06DM81a2jd0RiIR60qFa5Ajq1fLCCAvzfaSvIzsGZJhls80 obLGqCs//9wFeKqOm+wkFjGs8AKym9+Z6j55jbPYNC1fx/AnQEKqw1Q4p26bPVoT UsGEZyZvhl2Xk78eXyv7wMZzEA== -----END CERTIFICATE-----Generated at Wed Sep 23 14:16:35 2026 by rpki-client