$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft File: dNRNlor0Y--xfAgNX60BDErAl6o.mft (raw, json) Hash identifier: XZJRgLSbIwbu3uPO/irDzLRbslJ32Wt/aIL717es8+4= Subject key identifier: 2C:F7:17:65:56:9A:C7:E9:C9:30:FD:9E:46:56:1C:BF:FE:6C:23:99 Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft Manifest number: 0733 Signing time: Fri 04 Sep 2026 19:07:13 +0000 Manifest this update: Fri 04 Sep 2026 19:07:13 +0000 Manifest next update: Fri 11 Sep 2026 19:07:13 +0000 Files and hashes: 1: dNRNlor0Y--xfAgNX60BDErAl6o.crl (hash: u0vcnI/YvJBtAop6JH5BTGaaMJT8ukCBHTQKDirC6Q4=) 2: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (hash: Dc/AP1q1880Z3HHIDD3oFPRelHNNWO5cCeIAhTTwAeE=) 3: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (hash: YIMgtn+dQ8yJTeLxcT1UUhFPvR85/hE3R6ckZdnpSnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Sep 4 19:07:13 2026 GMT Not After : Sep 11 19:07:13 2026 GMT Subject: CN=6a9b16e1-52a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:30:de:12:00:74:ee:27:35:5d:04:70:fa: 7d:a1:60:01:72:0b:0c:6a:a4:af:d2:9c:d1:f6:57: b3:a8:4e:60:10:26:c4:d4:68:29:08:33:b9:17:76: 3b:64:2e:e3:e1:b7:73:7c:06:65:c0:9f:8b:c4:c3: 10:10:ed:d9:72:d6:65:42:7c:0f:cf:06:0e:ab:b7: b1:33:da:c8:bc:aa:d3:e6:a5:d9:a1:10:3b:b0:39: 31:57:13:4c:17:81:e2:4d:77:41:ec:f1:93:d7:01: c4:83:c4:01:5c:5d:0d:9a:a3:b0:a3:9b:e0:c3:40: 33:25:e8:84:3b:ee:e4:cd:b8:96:05:7f:32:70:1d: d2:a7:78:fb:26:79:3f:ad:5f:e6:50:2e:34:b1:cc: ad:fb:32:23:5a:99:3f:b0:06:8a:8c:02:05:6e:1f: d5:b6:6f:a1:dc:20:e1:9b:a4:25:be:f0:63:d3:42: 75:2f:e3:49:82:59:86:1b:d2:5a:af:f0:c6:02:c9: 50:7c:77:b5:50:a1:50:f1:58:31:62:02:b5:80:e2: 0e:00:7b:cc:c8:83:4f:19:11:5b:c5:65:67:88:3d: 59:cc:25:59:d0:2a:36:2f:44:72:a1:4e:af:16:17: e2:62:11:6f:37:73:8e:ba:e6:1f:40:4f:8b:f6:a2: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F7:17:65:56:9A:C7:E9:C9:30:FD:9E:46:56:1C:BF:FE:6C:23:99 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:0c:17:53:e0:bd:7c:e4:6e:28:d9:de:64:4d:05:bd:52:35: ea:63:79:4d:1b:30:6a:87:ec:4b:e8:eb:65:43:52:74:a5:60: ec:38:ac:90:70:23:40:5f:ae:27:40:18:12:2c:78:bd:44:53: 51:2e:7e:b3:d6:6c:0b:58:44:0e:73:72:18:05:b6:3b:ce:e8: 67:b0:c4:5c:14:d9:cb:8a:22:25:71:11:69:cd:14:b9:fc:82: a3:0b:73:72:34:cc:3e:ca:81:43:25:79:96:91:98:f7:19:68: 6b:ca:e9:31:0b:31:57:dd:30:cc:41:85:66:ea:ab:52:04:55: 88:ec:f4:10:b5:d5:d2:da:3b:4a:75:dc:e7:52:95:11:6b:d1: 82:af:a0:4c:44:c2:84:38:6a:99:33:19:6c:ef:73:df:38:9d: df:10:29:59:b0:49:db:d6:75:b9:b6:c4:f4:d4:2e:36:e6:18: e0:c2:f3:f5:b5:a3:2e:63:43:9a:8c:7f:87:03:a5:b2:be:0a: 19:80:29:c1:66:8f:da:b6:bd:e7:43:b8:84:0b:f7:6d:4c:40: 22:53:98:4e:88:e7:73:fb:a2:ef:d3:95:43:d2:dc:26:2b:ff: b3:3d:15:1f:99:f6:44:33:20:67:f1:1a:14:e6:dd:0d:fc:b1: c8:0c:1e:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjYwOTA0MTkwNzEzWhcNMjYwOTExMTkwNzEzWjAYMRYwFAYD VQQDEw02YTliMTZlMS01MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFIw3hIAdO4nNV0EcPp9oWABcgsMaqSv0pzR9lezqE5gECbE1GgpCDO5F3Y7 ZC7j4bdzfAZlwJ+LxMMQEO3ZctZlQnwPzwYOq7exM9rIvKrT5qXZoRA7sDkxVxNM F4HiTXdB7PGT1wHEg8QBXF0NmqOwo5vgw0AzJeiEO+7kzbiWBX8ycB3Sp3j7Jnk/ rV/mUC40scyt+zIjWpk/sAaKjAIFbh/Vtm+h3CDhm6QlvvBj00J1L+NJglmGG9Ja r/DGAslQfHe1UKFQ8VgxYgK1gOIOAHvMyINPGRFbxWVniD1ZzCVZ0Co2L0RyoU6v FhfiYhFvN3OOuuYfQE+L9qIMhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCz3F2VW msfpyTD9nkZWHL/+bCOZMB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC82RUZDMEJFRTk4NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFkt LXhmQWdOWDYwQkRFckFsNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvQwXU+C9fORuKNneZE0FvVI16mN5TRswaofsS+jrZUNSdKVg7DiskHAjQF+u J0AYEix4vURTUS5+s9ZsC1hEDnNyGAW2O87oZ7DEXBTZy4oiJXERac0UufyCowtz cjTMPsqBQyV5lpGY9xloa8rpMQsxV90wzEGFZuqrUgRViOz0ELXV0to7SnXc51KV EWvRgq+gTETChDhqmTMZbO9z3zid3xApWbBJ29Z1ubbE9NQuNuYY4MLz9bWjLmND mox/hwOlsr4KGYApwWaP2ra950O4hAv3bUxAIlOYTojnc/ui79OVQ9LcJiv/sz0V H5n2RDMgZ/EaFObdDfyxyAweRw== -----END CERTIFICATE-----Generated at Sat Sep 5 02:32:51 2026 by rpki-client