$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json) Hash identifier: Kim6+NL6M2mXBAhi0YzPGMNLlY/BHHNjnBd0m3uaWro= Subject key identifier: 7E:3B:61:EF:FD:F7:22:52:A9:75:64:DC:69:F5:34:75:25:84:B0:C2 Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Certificate serial: 35FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft Manifest number: 35B6 Signing time: Mon 20 Jul 2026 14:28:01 +0000 Manifest this update: Mon 20 Jul 2026 14:28:00 +0000 Manifest next update: Mon 27 Jul 2026 14:28:00 +0000 Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: td0Wf7fLL/4CvpjWyRMiGjWRsHTdL4jJmQd9/eHsssI=) 2: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=) 3: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=) 4: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=) 5: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13819 (0x35fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Validity Not Before: Jul 20 14:28:00 2026 GMT Not After : Jul 27 14:28:00 2026 GMT Subject: CN=6a5e3071-8d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:90:39:7c:9b:06:8d:c5:72:21:28:35:90: 75:25:52:30:f3:ba:60:3c:32:e8:36:2e:bd:79:a1: 15:77:84:52:1f:e6:53:a8:35:30:7a:bc:e4:bb:dd: 7d:e8:bf:1c:1d:c2:c3:4f:5f:42:ad:cc:6d:0a:60: b0:11:e5:95:d3:a3:72:18:8d:65:b2:f4:0f:fd:df: b3:fb:ad:ee:fd:32:ab:cf:b3:e9:ae:df:bc:8b:d5: a7:34:6d:00:b9:fa:48:c7:ce:2d:6b:91:6b:ad:91: 0a:0b:11:dd:79:b5:e1:6e:8f:f6:99:09:94:fd:e0: a5:1e:3a:22:cb:ea:20:e1:47:c0:d8:14:ce:af:91: 25:26:5d:0a:a0:8e:60:c4:e0:cb:c5:4b:ec:d8:1a: 63:7d:16:2c:a1:f6:1f:12:ac:84:d3:f7:dd:61:01: f4:84:63:4a:c2:df:b4:31:e9:34:eb:31:c3:8f:06: 6b:82:38:51:e2:0d:40:78:d8:a2:43:fa:f4:c6:2b: 2a:1f:d9:bf:bc:63:81:71:ee:3d:a3:aa:66:0f:9d: 34:5a:98:5e:fb:6e:1c:76:09:68:28:8b:cb:72:e8: a1:62:a8:7d:33:b6:39:6c:e0:b3:fd:08:99:99:0b: 9b:34:9b:ea:78:98:83:b9:2a:64:5e:bf:8b:7c:60: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3B:61:EF:FD:F7:22:52:A9:75:64:DC:69:F5:34:75:25:84:B0:C2 X509v3 Authority Key Identifier: keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:87:09:8f:ce:95:5a:8d:72:ac:50:f9:ec:11:9e:ce:08:59: 2a:85:f4:99:72:df:79:be:07:54:7c:64:2b:c2:60:f9:0c:55: f8:2e:6c:88:d1:48:90:84:34:43:2f:1d:07:57:10:ee:0a:aa: 30:b3:7a:b3:c4:18:62:11:b1:e7:75:ad:fe:62:ef:ee:6b:32: d6:23:f0:bd:c8:30:8a:71:c3:3c:d9:2d:22:4c:12:c4:a1:2b: f8:73:e9:b7:86:82:f6:97:2e:95:cf:9c:2b:02:70:61:f5:72: e0:4e:85:9e:64:3b:08:f4:37:b3:72:52:dc:87:9c:f6:c4:75: 39:ae:32:ef:8c:48:c5:c2:f0:b9:1c:4f:93:4e:0f:09:e9:ca: eb:d1:38:1b:c5:50:5e:df:79:8a:d0:0a:02:e3:48:42:65:58: ca:5a:48:44:2c:fa:0f:a2:2b:6d:19:f4:17:04:61:87:37:33: 72:0b:af:73:9b:30:19:67:25:ca:b0:d7:2b:e1:6e:87:05:c3: d7:df:6d:8d:5c:9a:ca:96:6f:b4:ab:44:60:d9:6c:93:43:1e: 48:5a:17:e9:66:66:3d:e9:1d:e7:fc:d0:a1:63:69:81:bc:db: e7:00:88:ed:bf:8b:52:50:bc:8b:bc:5a:f3:08:ae:3f:75:9f: 50:1a:79:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTExMTAvBgNVBAUTKDBERTE2NzlEMjFEMzlCNjFGMDI2NTBBNDE0RUM5RDA0 NjJDNUU0MTgwHhcNMjYwNzIwMTQyODAwWhcNMjYwNzI3MTQyODAwWjAYMRYwFAYD VQQDEw02YTVlMzA3MS04ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk2QOXybBo3FciEoNZB1JVIw87pgPDLoNi69eaEVd4RSH+ZTqDUwerzku919 6L8cHcLDT19CrcxtCmCwEeWV06NyGI1lsvQP/d+z+63u/TKrz7Pprt+8i9WnNG0A ufpIx84ta5FrrZEKCxHdebXhbo/2mQmU/eClHjoiy+og4UfA2BTOr5ElJl0KoI5g xODLxUvs2BpjfRYsofYfEqyE0/fdYQH0hGNKwt+0Mek06zHDjwZrgjhR4g1AeNii Q/r0xisqH9m/vGOBce49o6pmD500Wphe+24cdgloKIvLcuihYqh9M7Y5bOCz/QiZ mQubNJvqeJiDuSpkXr+LfGDO+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH47Ye/9 9yJSqXVk3Gn1NHUlhLDCMB8GA1UdIwQYMBaAFA3hZ50h05th8CZQpBTsnQRixeQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBMS82MDdBRTk1NDFE ODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0ySHdKbENrRk95ZEJHTEY1 QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlRm5uU0hUbTJId0psQ2tGT3lkQkdMRjVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBMS82MDdBRTk1NDFEODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0y SHdKbENrRk95ZEJHTEY1QmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHIcJj86VWo1yrFD57BGezghZKoX0mXLfeb4HVHxkK8Jg+QxV+C5siNFIkIQ0 Qy8dB1cQ7gqqMLN6s8QYYhGx53Wt/mLv7msy1iPwvcgwinHDPNktIkwSxKEr+HPp t4aC9pculc+cKwJwYfVy4E6FnmQ7CPQ3s3JS3Iec9sR1Oa4y74xIxcLwuRxPk04P CenK69E4G8VQXt95itAKAuNIQmVYylpIRCz6D6IrbRn0FwRhhzczcguvc5swGWcl yrDXK+FuhwXD199tjVyaypZvtKtEYNlsk0MeSFoX6WZmPekd5/zQoWNpgbzb5wCI 7b+LUlC8i7xa8wiuP3WfUBp5eg== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:40 2026 by rpki-client