$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft File: dNRNlor0Y--xfAgNX60BDErAl6o.mft (raw, json) Hash identifier: mZSFnvOKQhCgDIG36ZyhTXWLzqfyHb1qUdqxTmF27L4= Subject key identifier: 4A:1C:1C:1C:DE:CD:47:81:ED:C4:67:B2:23:10:53:28:F0:83:03:F6 Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 072C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft Manifest number: 071B Signing time: Mon 20 Jul 2026 19:37:17 +0000 Manifest this update: Mon 20 Jul 2026 19:37:17 +0000 Manifest next update: Mon 27 Jul 2026 19:37:17 +0000 Files and hashes: 1: dNRNlor0Y--xfAgNX60BDErAl6o.crl (hash: EqSpDSGHsYUY87QJRVp3QjDzzas/InI2JvnOlrf5aMI=) 2: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (hash: Dc/AP1q1880Z3HHIDD3oFPRelHNNWO5cCeIAhTTwAeE=) 3: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (hash: YIMgtn+dQ8yJTeLxcT1UUhFPvR85/hE3R6ckZdnpSnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Jul 20 19:37:17 2026 GMT Not After : Jul 27 19:37:17 2026 GMT Subject: CN=6a5e78ed-0c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:09:56:7d:42:28:fe:cc:ad:d8:b5:7d:15: 64:8e:fc:54:65:69:e5:bd:eb:44:6c:f3:9f:c1:f8: ac:fb:40:48:8d:4a:9d:73:53:e9:06:7d:33:1f:e6: 50:79:5e:74:9b:5f:a2:dd:f7:7b:3a:da:2b:71:27: 04:d1:dd:b4:c2:bc:fb:3a:5d:da:9b:c5:94:1f:3b: 69:9b:f6:a1:05:e5:c7:75:28:bb:82:80:7b:a3:7c: 85:47:d4:aa:60:1b:6b:35:8d:f9:86:a4:bc:b6:f1: df:7e:97:8e:e1:60:97:aa:60:34:0c:8b:9e:a7:83: 6d:f7:89:2e:40:79:41:17:c9:ff:08:22:c0:57:b0: c1:38:78:e9:c5:b8:4d:91:76:5f:4f:08:83:0e:47: ac:fa:18:9c:27:e9:98:8c:37:51:7e:1c:cc:e9:6f: cf:7c:00:83:64:c3:88:95:99:3e:65:17:c6:d1:22: cf:3a:45:76:f3:6c:4b:ab:58:fd:e7:79:8a:d6:8d: a6:ad:0f:bc:e4:25:02:82:31:0c:00:0e:c4:82:60: 9d:c5:7f:76:f0:71:c8:41:b1:1c:98:4f:89:ba:f4: d8:2b:e6:61:7f:bc:a3:1b:3c:60:f1:ba:d3:0b:62: 6f:23:e9:24:d4:96:aa:d1:a0:ca:e1:45:5f:62:e1: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1C:1C:1C:DE:CD:47:81:ED:C4:67:B2:23:10:53:28:F0:83:03:F6 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:9d:4b:b3:e1:65:72:2e:0a:a2:72:99:dc:b4:84:bb:6f:9f: 3e:00:94:4b:d1:1a:3a:82:6f:fd:c3:b8:c1:5b:31:e4:13:06: 40:88:f3:89:9e:86:eb:13:7b:71:7c:f5:7a:6e:75:f6:b9:b1: a0:cf:20:cd:ce:87:11:68:2e:99:9b:55:e9:a6:77:66:7c:43: de:aa:6c:fd:1a:fd:3d:23:41:a1:d2:60:b1:dc:4e:d0:89:4f: ed:4e:24:27:2d:66:0a:7e:4f:9c:df:9e:56:fd:ff:4e:3a:e4: a1:d8:b4:4c:63:3b:00:21:76:1e:c6:b3:f0:1c:98:c7:a0:62: 41:68:82:04:5b:7d:7e:76:7c:eb:f3:c7:f5:67:46:01:89:ea: 2d:c5:52:11:f3:3e:8a:e9:7b:c6:1b:ea:3f:f9:ed:07:3e:80: 42:dc:03:2d:1f:1b:d2:6b:e1:99:68:b4:2e:a5:1b:2c:9e:a8: 63:ae:db:fe:d5:dd:b2:c7:f0:8b:0a:f1:46:b0:43:80:5a:1d: ca:a2:cb:f5:ad:78:1d:89:ad:2f:69:04:ff:fc:5d:33:a8:38: 14:b9:c2:d2:ab:29:7b:58:2a:94:bf:ad:5e:e6:b6:4d:e9:46: 5e:80:3e:24:2a:20:79:96:af:3f:60:13:c4:d3:8c:55:ff:47: fd:b0:40:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjYwNzIwMTkzNzE3WhcNMjYwNzI3MTkzNzE3WjAYMRYwFAYD VQQDEw02YTVlNzhlZC0wYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/AJVn1CKP7Mrdi1fRVkjvxUZWnlvetEbPOfwfis+0BIjUqdc1PpBn0zH+ZQ eV50m1+i3fd7OtorcScE0d20wrz7Ol3am8WUHztpm/ahBeXHdSi7goB7o3yFR9Sq YBtrNY35hqS8tvHffpeO4WCXqmA0DIuep4Nt94kuQHlBF8n/CCLAV7DBOHjpxbhN kXZfTwiDDkes+hicJ+mYjDdRfhzM6W/PfACDZMOIlZk+ZRfG0SLPOkV282xLq1j9 53mK1o2mrQ+85CUCgjEMAA7EgmCdxX928HHIQbEcmE+JuvTYK+Zhf7yjGzxg8brT C2JvI+kk1Jaq0aDK4UVfYuFLBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEocHBze zUeB7cRnsiMQUyjwgwP2MB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC82RUZDMEJFRTk4NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFkt LXhmQWdOWDYwQkRFckFsNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALJ1Ls+Flci4KonKZ3LSEu2+fPgCUS9EaOoJv/cO4wVsx5BMGQIjziZ6G6xN7 cXz1em519rmxoM8gzc6HEWgumZtV6aZ3ZnxD3qps/Rr9PSNBodJgsdxO0IlP7U4k Jy1mCn5PnN+eVv3/Tjrkodi0TGM7ACF2Hsaz8ByYx6BiQWiCBFt9fnZ86/PH9WdG AYnqLcVSEfM+iul7xhvqP/ntBz6AQtwDLR8b0mvhmWi0LqUbLJ6oY67b/tXdssfw iwrxRrBDgFodyqLL9a14HYmtL2kE//xdM6g4FLnC0qspe1gqlL+tXua2TelGXoA+ JCogeZavP2ATxNOMVf9H/bBADQ== -----END CERTIFICATE-----Generated at Tue Jul 21 22:06:44 2026 by rpki-client