$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: d0ahfEUPL3GWtCdYAoStERuJy8E4W0OlBx/f0LeeKSw= Subject key identifier: 47:75:F2:93:C3:96:DF:55:EE:E6:E3:2F:ED:9D:AC:98:0A:A7:19:0E Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0DB3 Signing time: Mon 20 Jul 2026 15:37:32 +0000 Manifest this update: Mon 20 Jul 2026 15:37:32 +0000 Manifest next update: Mon 27 Jul 2026 15:37:32 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: KPLHymd7HZNpGCnA6nN3TQ4fjCbeUPqzGjnb/Cya3es=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: KN/qO3b9F5dp3gvVSi/2Av1F8gy5I+kWuZVNLBkzY6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Jul 20 15:37:32 2026 GMT Not After : Jul 27 15:37:32 2026 GMT Subject: CN=6a5e40bc-9b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:75:27:94:dc:7c:a7:98:71:3a:dd:f2:fb: ea:e6:53:7c:81:c5:49:04:95:34:81:0c:09:8a:56: 92:eb:ba:a5:59:84:34:64:d8:89:b2:2e:48:fe:f8: 5f:d7:8a:a5:e8:d8:ef:f6:f9:e8:cc:84:48:f0:14: bc:13:e8:b2:d4:43:f0:5d:b8:da:30:98:ea:cc:fa: 91:ca:eb:c5:04:aa:ff:ee:df:e8:bb:24:92:bc:7f: bd:ca:c7:90:79:2d:73:03:3f:27:d7:e6:7a:e7:83: 1f:59:6f:f4:69:fe:f8:f4:de:14:04:ff:77:dd:14: bb:63:d5:36:5b:2a:fb:13:3b:1b:f0:fd:b3:3c:59: c5:ba:09:7c:9d:2c:40:8e:56:25:7b:26:da:24:67: d7:3f:c8:b3:e5:ea:fb:bf:fc:ab:f0:60:65:42:14: d8:15:4e:8b:61:bc:5a:ac:e8:2b:72:64:f3:b8:fe: 7c:46:3a:34:b2:c5:25:40:51:2d:55:85:07:6e:c3: 9c:76:06:76:b0:27:1d:b7:f7:34:78:54:99:de:db: 55:c9:bc:74:18:82:39:2d:9f:51:c4:c6:31:3b:9d: e1:2b:01:14:29:df:d0:ac:de:60:bc:c8:db:0e:07: ee:c7:52:75:2f:87:b6:30:66:31:d5:f2:09:e2:48: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:75:F2:93:C3:96:DF:55:EE:E6:E3:2F:ED:9D:AC:98:0A:A7:19:0E X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:ba:2d:ba:8b:18:24:ac:3e:9a:bd:4d:52:79:f5:17:14: 98:0a:c3:33:69:0b:54:2c:57:fd:49:ef:67:8f:cb:b5:6d:c5: 0c:1b:3a:2a:a1:42:5d:c4:79:34:cf:82:f3:d0:6e:cf:8d:60: 76:19:4b:0e:78:8c:af:14:e4:2c:6e:b9:e1:e1:ad:8f:6d:5d: ae:11:8b:06:a9:a0:b6:fa:d2:f0:30:b8:3a:7c:4d:55:83:57: d7:06:52:f2:58:f8:14:4d:50:55:90:60:15:33:f0:8a:f4:4d: c7:b2:09:da:50:6b:42:ef:75:09:e7:36:82:35:fc:eb:3d:3c: c1:22:81:37:f3:d0:31:52:89:21:f1:eb:35:1f:a8:63:6c:61: 75:52:ff:ca:f0:45:94:43:8a:3e:94:1b:bc:0a:8b:33:de:d4: 0b:0d:f6:8b:0a:0e:e2:6b:93:c1:30:58:82:5a:80:cf:8f:ef: a8:ad:02:fd:33:76:fc:4e:5c:db:1b:5d:83:f2:ec:f2:9d:3b: 0f:15:14:51:bd:8d:40:2d:2c:34:71:e1:a7:38:3f:e9:33:07: fd:4d:21:99:a3:89:9c:3e:98:16:89:f3:5f:92:1e:e4:88:56: 08:d3:1e:ca:92:bf:7a:d8:8d:0f:bf:d9:58:b9:ae:7e:4c:ce: 6f:df:8e:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjYwNzIwMTUzNzMyWhcNMjYwNzI3MTUzNzMyWjAYMRYwFAYD VQQDEw02YTVlNDBiYy05YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1051J5TcfKeYcTrd8vvq5lN8gcVJBJU0gQwJilaS67qlWYQ0ZNiJsi5I/vhf 14ql6Njv9vnozIRI8BS8E+iy1EPwXbjaMJjqzPqRyuvFBKr/7t/ouySSvH+9yseQ eS1zAz8n1+Z654MfWW/0af749N4UBP933RS7Y9U2Wyr7Ezsb8P2zPFnFugl8nSxA jlYleybaJGfXP8iz5er7v/yr8GBlQhTYFU6LYbxarOgrcmTzuP58Rjo0ssUlQFEt VYUHbsOcdgZ2sCcdt/c0eFSZ3ttVybx0GII5LZ9RxMYxO53hKwEUKd/QrN5gvMjb Dgfux1J1L4e2MGYx1fIJ4kgxXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEd18pPD lt9V7ubjL+2drJgKpxkOMB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf7K6LbqLGCSsPpq9TVJ59RcUmArDM2kLVCxX/UnvZ4/LtW3FDBs6KqFCXcR5 NM+C89Buz41gdhlLDniMrxTkLG654eGtj21drhGLBqmgtvrS8DC4OnxNVYNX1wZS 8lj4FE1QVZBgFTPwivRNx7IJ2lBrQu91Cec2gjX86z08wSKBN/PQMVKJIfHrNR+o Y2xhdVL/yvBFlEOKPpQbvAqLM97UCw32iwoO4muTwTBYglqAz4/vqK0C/TN2/E5c 2xtdg/Ls8p07DxUUUb2NQC0sNHHhpzg/6TMH/U0hmaOJnD6YFonzX5Ie5IhWCNMe ypK/etiND7/ZWLmufkzOb9+OIw== -----END CERTIFICATE-----Generated at Tue Jul 21 17:58:23 2026 by rpki-client