$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: 1v3zSOZ2HPTR/i5Ofx6mPk0ZSxaalF8cvxyxZToRu+0= Subject key identifier: 9F:8C:29:96:B7:E9:50:2B:E0:3B:0D:2D:CF:21:E3:C3:21:84:A2:18 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 063A Signing time: Fri 28 Aug 2026 22:38:54 +0000 Manifest this update: Fri 28 Aug 2026 22:38:54 +0000 Manifest next update: Fri 04 Sep 2026 22:38:54 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: R2Ykaum21lYFghGNd7PlMiNqL4aUKuEAw4KxppfRQiw=) 2: 632B0D382CE911F189BCFB9BA3833773.roa (hash: szdIivrmaNOf2If91WlOqRLDy+pXayJTHQKBGeGvRTQ=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: sGiM6GvJxV9yJqw6hLJjsRcyN9Otue9M3LO38P82h9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 22:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Aug 28 22:38:54 2026 GMT Not After : Sep 4 22:38:54 2026 GMT Subject: CN=6a920dfe-abab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:72:2b:3c:ac:d6:a7:67:6b:07:ab:b8:20:4e: 52:0b:66:1c:28:e2:9e:17:3d:b8:02:b8:69:95:b0: 0c:b1:07:3d:12:f6:12:54:40:ac:a6:10:60:f7:e8: c3:49:33:44:5c:22:2e:36:ac:85:4b:00:e2:28:d6: b4:a0:9e:5a:0c:ab:56:ee:48:7d:54:56:fe:ff:b8: 90:e0:1b:ff:3c:f6:7e:df:78:ca:42:bb:07:db:f3: eb:31:89:c8:0a:b8:7c:8a:b1:9d:14:94:eb:b7:71: 4a:6c:c0:72:05:15:3e:41:7c:da:32:69:1d:46:d9: a8:1a:d8:6c:19:50:c0:fe:85:d3:85:9d:ac:f5:a4: e4:eb:77:bd:d9:d8:38:ba:11:e4:16:df:cb:4c:5f: ac:92:1f:8f:7f:e3:84:16:bc:18:c9:0f:a7:d1:db: 8a:7a:ed:f2:5f:4c:a2:76:ab:9b:67:04:f2:3c:47: 32:6d:46:21:7e:01:97:3f:b9:f4:f1:bb:2f:61:51: bb:63:62:e7:a3:17:61:74:a4:0b:fc:a0:a4:9a:38: 30:69:cd:7d:0c:1a:7a:1c:08:df:2d:3f:84:7e:c4: fc:e7:da:13:88:69:6a:09:34:94:c3:48:23:22:ad: 0f:88:3a:93:7c:9d:8b:bb:d9:ab:fa:fa:e1:8f:c7: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8C:29:96:B7:E9:50:2B:E0:3B:0D:2D:CF:21:E3:C3:21:84:A2:18 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f8:7a:86:07:c2:f4:3b:64:8b:0f:c5:5b:e2:9e:2c:d0:0a: 62:84:d9:1c:a7:10:9b:20:6b:83:e7:b8:69:2b:d8:16:67:42: 12:05:d8:80:45:39:1e:49:48:21:4e:f2:16:c8:40:b1:51:d7: c0:b7:6e:81:bc:c2:f9:a1:95:b9:78:3c:7b:43:83:7b:0d:db: b7:ca:29:e3:e0:26:9d:31:ab:8a:6f:49:2a:4f:53:d3:fd:b5: cb:c5:5c:be:1b:b2:99:b6:2b:8c:60:6d:6f:3a:f0:19:19:bc: a6:fc:c1:44:85:70:09:52:82:64:df:53:22:29:40:5e:ba:33: 3e:0f:70:07:48:b6:7a:2d:40:80:75:cb:3f:7c:af:e7:18:b1: f1:f7:e4:8c:ab:39:bd:4a:19:8e:85:a0:36:bb:e5:88:f1:ac: 92:41:c5:51:09:30:13:df:8f:b0:de:07:18:b5:03:e0:cc:0e: 3c:a5:5b:a1:d3:ae:43:e7:4b:fb:30:eb:3f:3f:a0:5c:3e:1b: 66:35:47:26:a4:f6:86:20:41:7c:03:de:21:d6:8c:e3:43:a1: ac:c8:25:bc:36:a4:d4:93:83:ed:c8:4c:5b:8d:5a:92:0f:bd: 28:bc:e8:90:2b:c7:76:6d:4e:4e:e0:71:f7:48:33:89:df:ca: c3:6e:33:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYwODI4MjIzODU0WhcNMjYwOTA0MjIzODU0WjAYMRYwFAYD VQQDEw02YTkyMGRmZS1hYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3IrPKzWp2drB6u4IE5SC2YcKOKeFz24ArhplbAMsQc9EvYSVECsphBg9+jD STNEXCIuNqyFSwDiKNa0oJ5aDKtW7kh9VFb+/7iQ4Bv/PPZ+33jKQrsH2/PrMYnI Crh8irGdFJTrt3FKbMByBRU+QXzaMmkdRtmoGthsGVDA/oXThZ2s9aTk63e92dg4 uhHkFt/LTF+skh+Pf+OEFrwYyQ+n0duKeu3yX0yidqubZwTyPEcybUYhfgGXP7n0 8bsvYVG7Y2LnoxdhdKQL/KCkmjgwac19DBp6HAjfLT+EfsT859oTiGlqCTSUw0gj Iq0PiDqTfJ2Lu9mr+vrhj8e5DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+MKZa3 6VAr4DsNLc8h48MhhKIYMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/h6hgfC9Dtkiw/FW+KeLNAKYoTZHKcQmyBrg+e4aSvYFmdCEgXYgEU5HklI IU7yFshAsVHXwLdugbzC+aGVuXg8e0ODew3bt8op4+AmnTGrim9JKk9T0/21y8Vc vhuymbYrjGBtbzrwGRm8pvzBRIVwCVKCZN9TIilAXrozPg9wB0i2ei1AgHXLP3yv 5xix8ffkjKs5vUoZjoWgNrvliPGskkHFUQkwE9+PsN4HGLUD4MwOPKVbodOuQ+dL +zDrPz+gXD4bZjVHJqT2hiBBfAPeIdaM40OhrMglvDak1JOD7chMW41akg+9KLzo kCvHdm1OTuBx90gzid/Kw24zQw== -----END CERTIFICATE-----Generated at Sat Aug 29 09:00:18 2026 by rpki-client