$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft File: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft (raw, json) Hash identifier: NYUoBstUocrtfaBst/sfje4ebpv+hjrlx8zNsRNwbzU= Subject key identifier: C3:FD:03:9E:6A:B4:7F:00:CB:1C:61:3B:D5:D2:5C:97:C3:A1:EB:9D Authority key identifier: 31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E Certificate issuer: /CN=A913CB06/serialNumber=31D4439467161068DD30457C3838FE6356927D3E Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft Manifest number: 65 Signing time: Tue 21 Jul 2026 10:06:27 +0000 Manifest this update: Tue 21 Jul 2026 10:06:26 +0000 Manifest next update: Tue 28 Jul 2026 10:06:26 +0000 Files and hashes: 1: MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl (hash: jITi/WA+8sghinoIuW04+GJBFUf3nF/Aj9yNfm7lpLM=) 2: 9DA60E087F3311F19D56764D8FA30FBC.roa (hash: Rt7PW/6uZ7cjq9gkzwDvAa35BI5KobAOVV29frmx7Uo=) 3: zIMBcS1h5k28JbgzmDO5wNcLsFw.asa (hash: A/o2qus8suyWDW6SSANxsLf7P5fJxtS5SMGCcpBavQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB06, serialNumber=31D4439467161068DD30457C3838FE6356927D3E Validity Not Before: Jul 21 10:06:26 2026 GMT Not After : Jul 28 10:06:26 2026 GMT Subject: CN=6a5f44a3-3fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:06:e9:2d:a8:a6:4d:d5:ea:cc:26:1c:da: fa:e8:40:f2:b8:de:12:3f:2f:29:13:a0:cd:f1:ae: da:72:06:50:81:07:3c:05:93:bd:22:9b:ae:bf:8a: f8:76:08:27:67:bd:4d:d7:68:97:05:f0:2e:95:49: 12:3a:23:cf:71:4a:ac:bd:5e:60:cf:8f:f7:22:f6: 08:57:c3:b4:9d:d2:77:fb:41:ba:ce:c9:37:eb:c1: d6:9f:c6:2f:8c:71:7e:c9:24:bf:e9:ae:d8:df:ca: 17:d9:e8:de:19:85:a9:27:8b:b9:b2:e7:4f:95:a3: 26:4f:b5:7e:5a:bd:b1:44:cc:01:04:47:76:f8:55: 4a:67:0c:fd:e1:f8:29:54:b1:d0:0c:91:fc:91:ae: 70:e7:a2:d0:78:a9:9e:58:6f:a7:d8:cb:8a:39:0d: 37:7c:72:d6:f7:fd:19:40:bd:c8:2c:bf:a5:eb:c3: 19:0b:28:b1:3c:14:5e:a8:e0:92:a0:17:74:4d:b4: 43:bb:f8:e2:79:44:df:d9:a9:82:c0:dc:aa:27:63: 99:03:da:ee:54:8d:59:63:ed:88:a9:4d:05:31:78: b3:a4:0e:3c:c1:bd:e3:00:bf:c3:e7:70:98:33:9c: 96:34:b3:2a:34:85:6b:91:78:d6:be:41:0b:de:de: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FD:03:9E:6A:B4:7F:00:CB:1C:61:3B:D5:D2:5C:97:C3:A1:EB:9D X509v3 Authority Key Identifier: keyid:31:D4:43:94:67:16:10:68:DD:30:45:7C:38:38:FE:63:56:92:7D:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/704D4BC207E411F1A34718A5213D8C67/MdRDlGcWEGjdMEV8ODj-Y1aSfT4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f0:ff:d7:6f:7e:ca:32:b6:cc:3a:09:f3:74:7c:dd:2a:f8: 25:18:a4:e3:c7:6f:3f:f3:39:5c:b6:c0:a1:24:b8:19:a4:7c: ac:9f:09:75:00:61:a1:5e:70:d8:82:36:31:fa:94:1c:7c:6b: 3b:07:0d:47:2d:86:ca:f8:0a:77:82:e1:4d:48:1f:fb:32:ea: a3:70:db:a0:4c:3f:3d:13:62:21:6c:12:46:a8:a3:ab:89:c5: de:7a:d4:50:e9:e0:bf:66:03:61:d0:b1:33:5a:4e:1b:a8:f5: 43:55:2a:17:3c:c1:a5:32:d2:37:1f:fb:86:3b:b3:4d:59:9a: c8:c4:d0:f2:82:c1:f0:36:9b:98:c6:42:be:7a:70:b2:55:4b: 6f:66:f4:93:8b:4f:70:3a:0d:08:17:42:ce:66:91:16:42:ec: 5a:bf:72:57:69:0d:50:36:50:a3:a3:ba:b1:9a:5e:44:ab:b0: 33:49:95:7d:39:31:ba:ad:5e:a4:af:df:81:f1:7b:20:98:ef: d7:71:03:3e:6b:38:e0:cc:f0:0a:c9:7d:5e:e0:5e:9f:5b:1e: 3f:da:00:4a:eb:16:3c:bf:c2:d6:ef:eb:21:58:7a:09:32:80: b8:4e:fb:45:5f:58:ec:1a:7c:79:58:66:6f:6c:47:2b:0d:f7: 41:98:35:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Q0IwNjExMC8GA1UEBRMoMzFENDQzOTQ2NzE2MTA2OEREMzA0NTdDMzgzOEZFNjM1 NjkyN0QzRTAeFw0yNjA3MjExMDA2MjZaFw0yNjA3MjgxMDA2MjZaMBgxFjAUBgNV BAMTDTZhNWY0NGEzLTNmZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCalgbpLaimTdXqzCYc2vroQPK43hI/LykToM3xrtpyBlCBBzwFk70im66/ivh2 CCdnvU3XaJcF8C6VSRI6I89xSqy9XmDPj/ci9ghXw7Sd0nf7QbrOyTfrwdafxi+M cX7JJL/prtjfyhfZ6N4Zhakni7my50+VoyZPtX5avbFEzAEER3b4VUpnDP3h+ClU sdAMkfyRrnDnotB4qZ5Yb6fYy4o5DTd8ctb3/RlAvcgsv6XrwxkLKLE8FF6o4JKg F3RNtEO7+OJ5RN/ZqYLA3KonY5kD2u5UjVlj7YipTQUxeLOkDjzBveMAv8PncJgz nJY0syo0hWuReNa+QQve3jfZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw/0Dnmq0 fwDLHGE71dJcl8Oh650wHwYDVR0jBBgwFoAUMdRDlGcWEGjdMEV8ODj+Y1aSfT4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDQjA2LzcwNEQ0QkMyMDdF NDExRjFBMzQ3MThBNTIxM0Q4QzY3L01kUkRsR2NXRUdqZE1FVjhPRGotWTFhU2ZU NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWRSRGxHY1dFR2pkTUVWOE9Eai1ZMWFTZlQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND QjA2LzcwNEQ0QkMyMDdFNDExRjFBMzQ3MThBNTIxM0Q4QzY3L01kUkRsR2NXRUdq ZE1FVjhPRGotWTFhU2ZUNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBy8P/Xb37KMrbMOgnzdHzdKvglGKTjx28/8zlctsChJLgZpHysnwl1AGGhXnDY gjYx+pQcfGs7Bw1HLYbK+Ap3guFNSB/7MuqjcNugTD89E2IhbBJGqKOricXeetRQ 6eC/ZgNh0LEzWk4bqPVDVSoXPMGlMtI3H/uGO7NNWZrIxNDygsHwNpuYxkK+enCy VUtvZvSTi09wOg0IF0LOZpEWQuxav3JXaQ1QNlCjo7qxml5Eq7AzSZV9OTG6rV6k r9+B8XsgmO/XcQM+azjgzPAKyX1e4F6fWx4/2gBK6xY8v8LW7+shWHoJMoC4TvtF X1jsGnx5WGZvbEcrDfdBmDVc -----END CERTIFICATE-----Generated at Wed Jul 22 03:09:02 2026 by rpki-client