$ rpki-client -vvf rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft File: DSL_1HBKVK6e2tG35aTgNT9F2hc.mft (raw, json) Hash identifier: wO/lrKWFSf+5g3iVgQOfnC2x9JfWki2pzlDobEvPSUw= Subject key identifier: D0:09:18:89:8B:0A:44:94:B0:BA:65:77:2B:43:AE:DA:56:B9:89:3B Authority key identifier: 0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17 Certificate issuer: /CN=A917B04C/serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft Manifest number: 3B Signing time: Tue 21 Jul 2026 10:26:00 +0000 Manifest this update: Tue 21 Jul 2026 10:26:00 +0000 Manifest next update: Tue 28 Jul 2026 10:26:00 +0000 Files and hashes: 1: DSL_1HBKVK6e2tG35aTgNT9F2hc.crl (hash: NhHEYpuFEAiH6Tal3ETsiyAz1FIIQOvsJpbZtYRgXEw=) 2: 984616082C2A11F1B015EE939D833773.roa (hash: oF4VI5NZfC+UNgW9AHSKJ6DEAMeK3Nd3QJRoxE5Ngzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B04C, serialNumber=0D22FFD4704A54AE9EDAD1B7E5A4E0353F45DA17 Validity Not Before: Jul 21 10:26:00 2026 GMT Not After : Jul 28 10:26:00 2026 GMT Subject: CN=6a5f4938-0747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:90:fa:7f:50:05:f2:fa:0b:ce:29:70:00:14: 89:77:63:14:de:79:8e:df:3f:2e:51:98:dd:78:45: ee:a0:6a:0e:6b:66:5c:52:c4:06:99:c1:c6:b7:03: e6:fd:67:43:9e:b4:66:7d:ff:90:4e:ac:1a:9f:51: 21:11:3f:c0:ce:2f:46:fa:27:25:cf:ec:7c:f0:83: 85:e8:1d:55:7a:85:29:15:80:1d:be:29:25:ff:79: 7b:23:e2:16:d1:98:e4:da:12:ec:e7:3e:59:5b:2d: 68:c8:49:bb:53:b3:cc:90:be:d0:57:40:67:4c:c7: 71:46:79:36:71:29:04:69:d0:d8:4a:4f:d8:8e:9d: 64:3c:fd:67:20:db:1d:70:58:9e:08:8c:07:f1:26: dc:1e:3e:b1:ff:01:60:f0:3c:7d:20:79:a6:a3:20: 3f:07:73:4c:a9:b3:c0:c5:6f:27:ca:d6:82:29:cd: c4:19:95:3a:05:38:fc:32:9c:f3:1a:4b:30:33:b5: 59:c4:8b:46:3f:ce:6a:cc:a2:9b:37:77:92:ac:8c: 24:d4:3b:53:5d:31:20:d7:70:a9:1d:7f:9c:af:1f: c3:e1:10:f2:2f:74:ec:96:75:ac:48:c1:0e:ab:50: de:9f:9e:97:a1:93:08:47:83:a0:62:89:4c:96:03: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:09:18:89:8B:0A:44:94:B0:BA:65:77:2B:43:AE:DA:56:B9:89:3B X509v3 Authority Key Identifier: keyid:0D:22:FF:D4:70:4A:54:AE:9E:DA:D1:B7:E5:A4:E0:35:3F:45:DA:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DSL_1HBKVK6e2tG35aTgNT9F2hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B04C/11A2F3DA2C2711F19BAFCA1D9C833773/DSL_1HBKVK6e2tG35aTgNT9F2hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:39:e3:a2:62:c7:d9:ed:3e:b1:85:53:0a:01:e1:f0:a3:40: 70:9f:11:d7:6c:c6:9a:56:49:09:43:0f:3a:70:07:9d:bc:1f: c2:b1:a0:33:4c:fb:c7:ef:1f:6c:3c:04:93:0f:91:03:e5:cd: e1:fe:9c:e8:ca:07:43:a2:7c:10:76:78:bd:78:92:33:f5:90: 50:07:37:fc:bc:39:04:4a:3f:0a:41:64:b8:8c:8c:be:e9:c7: 1d:66:3d:8d:26:a2:2c:c2:14:05:eb:ee:19:43:26:88:55:fb: 5d:11:72:d5:a4:c9:41:76:42:8d:1d:62:64:33:63:44:a8:d0: d7:9e:74:be:21:f0:98:1b:2d:87:e3:b0:c1:e9:ab:19:9c:a8: f8:22:7e:ec:86:66:00:9f:00:b9:58:71:d2:8c:8d:09:94:dd: 19:6e:02:a8:55:14:14:b2:56:10:82:60:f1:c7:99:b6:a3:bf: 67:54:48:ee:97:52:fb:36:d1:49:36:52:11:71:3d:91:20:73: 75:36:cb:f2:ce:67:f9:bc:8f:85:a6:96:fb:fc:c7:f7:71:61: 96:95:c8:01:93:35:b0:4b:ba:ab:bd:9e:28:2f:4a:9a:59:d8: 3a:b4:56:95:1a:f2:67:5f:e3:20:4b:68:79:aa:12:21:fa:8e: 94:ea:de:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjA0QzExMC8GA1UEBRMoMEQyMkZGRDQ3MDRBNTRBRTlFREFEMUI3RTVBNEUwMzUz RjQ1REExNzAeFw0yNjA3MjExMDI2MDBaFw0yNjA3MjgxMDI2MDBaMBgxFjAUBgNV BAMTDTZhNWY0OTM4LTA3NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+kPp/UAXy+gvOKXAAFIl3YxTeeY7fPy5RmN14Re6gag5rZlxSxAaZwca3A+b9 Z0OetGZ9/5BOrBqfUSERP8DOL0b6JyXP7Hzwg4XoHVV6hSkVgB2+KSX/eXsj4hbR mOTaEuznPllbLWjISbtTs8yQvtBXQGdMx3FGeTZxKQRp0NhKT9iOnWQ8/Wcg2x1w WJ4IjAfxJtwePrH/AWDwPH0geaajID8Hc0yps8DFbyfK1oIpzcQZlToFOPwynPMa SzAztVnEi0Y/zmrMops3d5KsjCTUO1NdMSDXcKkdf5yvH8PhEPIvdOyWdaxIwQ6r UN6fnpehkwhHg6BiiUyWA3+/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0AkYiYsK RJSwumV3K0Ou2la5iTswHwYDVR0jBBgwFoAUDSL/1HBKVK6e2tG35aTgNT9F2hcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCMDRDLzExQTJGM0RBMkMy NzExRjE5QkFGQ0ExRDlDODMzNzczL0RTTF8xSEJLVks2ZTJ0RzM1YVRnTlQ5RjJo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvRFNMXzFIQktWSzZlMnRHMzVhVGdOVDlGMmhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC MDRDLzExQTJGM0RBMkMyNzExRjE5QkFGQ0ExRDlDODMzNzczL0RTTF8xSEJLVks2 ZTJ0RzM1YVRnTlQ5RjJoYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZOeOiYsfZ7T6xhVMKAeHwo0BwnxHXbMaaVkkJQw86cAedvB/CsaAzTPvH7x9s PASTD5ED5c3h/pzoygdDonwQdni9eJIz9ZBQBzf8vDkESj8KQWS4jIy+6ccdZj2N JqIswhQF6+4ZQyaIVftdEXLVpMlBdkKNHWJkM2NEqNDXnnS+IfCYGy2H47DB6asZ nKj4In7shmYAnwC5WHHSjI0JlN0ZbgKoVRQUslYQgmDxx5m2o79nVEjul1L7NtFJ NlIRcT2RIHN1Nsvyzmf5vI+Fppb7/Mf3cWGWlcgBkzWwS7qrvZ4oL0qaWdg6tFaV GvJnX+MgS2h5qhIh+o6U6t6h -----END CERTIFICATE-----Generated at Tue Jul 21 17:49:35 2026 by rpki-client