$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: VSbtoG+sPwnNrPRGSYHcvK7nRmRGFPpepsSYooAAsP0= Subject key identifier: B5:5B:15:32:F4:54:E0:02:A3:BA:1F:D9:8E:62:3E:63:B6:0E:5E:D1 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 0651 Signing time: Mon 12 Oct 2026 22:50:18 +0000 Manifest this update: Mon 12 Oct 2026 22:50:18 +0000 Manifest next update: Mon 19 Oct 2026 22:50:18 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: Q3KsfkTnTNdjAvN8l1PIYPPwV6P2gJeR5wAECDmkDow=) 2: 632B0D382CE911F189BCFB9BA3833773.roa (hash: szdIivrmaNOf2If91WlOqRLDy+pXayJTHQKBGeGvRTQ=) 3: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: sGiM6GvJxV9yJqw6hLJjsRcyN9Otue9M3LO38P82h9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Oct 12 22:50:18 2026 GMT Not After : Oct 19 22:50:18 2026 GMT Subject: CN=6acd642a-290e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:61:36:8a:26:61:f6:51:9e:e6:61:b6:b1:f7: a5:33:6c:fb:98:30:0e:11:4e:0e:b3:72:f6:d0:30: 0c:86:2b:88:b0:7c:70:93:71:82:f3:54:b8:b0:c4: 08:e1:7c:6c:0f:6d:b3:dd:64:85:c9:a1:52:97:62: b4:6b:a1:7a:34:3a:97:2e:e3:ee:a3:d5:15:df:1e: 41:87:1f:60:a7:c6:56:dc:a9:46:b4:b0:27:8e:b5: 5a:d7:d1:bc:2b:f8:57:0a:55:bb:a7:1e:fe:08:86: 4e:f8:e7:48:6a:77:b5:25:bc:39:9a:31:8c:d3:4e: 73:ed:e4:d8:12:71:9e:c0:13:b8:1f:6c:1d:e2:1f: e5:76:eb:b6:1c:b8:c5:3a:b1:9a:9f:c0:0c:2e:f1: 2f:a8:f3:ea:a8:7b:2b:07:fd:5d:ed:21:c2:7e:e2: db:b9:54:3c:2f:88:d9:49:4f:1c:dc:c0:13:95:94: ef:e2:32:c1:ac:5b:f3:f9:8a:87:47:66:93:6b:67: c5:4b:75:ac:82:63:7a:95:c1:23:df:20:9d:a9:32: a1:45:68:03:84:32:03:32:44:39:10:28:40:3f:b2: 94:64:9c:42:c5:d2:bf:84:3f:35:12:ca:d1:c1:54: 19:6f:d1:24:8b:b2:f8:b4:50:36:ed:24:5c:46:da: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5B:15:32:F4:54:E0:02:A3:BA:1F:D9:8E:62:3E:63:B6:0E:5E:D1 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:cb:35:1d:4d:34:04:0d:c0:67:04:4a:f0:55:10:68:cc:24: 61:7e:8d:a7:9b:6a:be:ce:50:5a:80:f0:a2:66:5c:4a:ba:1a: bb:34:11:35:6a:e6:5d:a8:f8:d9:c7:8c:d8:9a:53:57:4f:de: 79:5f:13:1a:9d:c0:90:17:67:89:db:a7:7c:9d:9e:5e:2d:f1: 3c:ed:a6:ae:6c:a3:67:aa:11:7f:8f:32:5a:80:0f:dc:4e:20: 6a:59:a6:94:31:fb:dc:10:63:af:7f:0d:72:2a:7a:9c:02:7c: 26:f9:14:af:87:bb:32:bd:07:74:dc:62:20:0f:65:5c:b4:6b: 11:68:ec:97:2b:15:28:85:76:7c:8f:83:cf:0b:03:70:05:a9: 1e:96:41:d4:44:b7:68:75:08:92:2b:a9:36:af:b9:8a:38:fc: f7:29:18:cf:c9:c8:15:91:58:d3:5e:66:1c:f7:53:41:c7:18: 9f:a7:3e:4c:e7:38:01:de:73:53:ef:15:8d:23:4f:93:fe:57: ec:31:d7:b6:ef:c5:b3:7c:86:55:a8:12:b2:1f:64:5c:1d:26: 08:14:e8:b2:77:a6:30:53:36:cf:8c:3a:a8:ce:db:be:f5:e4: 9b:d3:da:15:48:90:63:0d:04:38:49:44:c2:fc:dc:98:ec:bf: 85:21:96:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYxMDEyMjI1MDE4WhcNMjYxMDE5MjI1MDE4WjAYMRYwFAYD VQQDEw02YWNkNjQyYS0yOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmE2iiZh9lGe5mG2sfelM2z7mDAOEU4Os3L20DAMhiuIsHxwk3GC81S4sMQI 4XxsD22z3WSFyaFSl2K0a6F6NDqXLuPuo9UV3x5Bhx9gp8ZW3KlGtLAnjrVa19G8 K/hXClW7px7+CIZO+OdIane1Jbw5mjGM005z7eTYEnGewBO4H2wd4h/lduu2HLjF OrGan8AMLvEvqPPqqHsrB/1d7SHCfuLbuVQ8L4jZSU8c3MATlZTv4jLBrFvz+YqH R2aTa2fFS3WsgmN6lcEj3yCdqTKhRWgDhDIDMkQ5EChAP7KUZJxCxdK/hD81EsrR wVQZb9Eki7L4tFA27SRcRtoD2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVbFTL0 VOACo7of2Y5iPmO2Dl7RMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy8s1HU00BA3AZwRK8FUQaMwkYX6Np5tqvs5QWoDwomZcSroauzQRNWrmXaj4 2ceM2JpTV0/eeV8TGp3AkBdnidunfJ2eXi3xPO2mrmyjZ6oRf48yWoAP3E4galmm lDH73BBjr38Ncip6nAJ8JvkUr4e7Mr0HdNxiIA9lXLRrEWjslysVKIV2fI+DzwsD cAWpHpZB1ES3aHUIkiupNq+5ijj89ykYz8nIFZFY015mHPdTQccYn6c+TOc4Ad5z U+8VjSNPk/5X7DHXtu/Fs3yGVagSsh9kXB0mCBTosnemMFM2z4w6qM7bvvXkm9Pa FUiQYw0EOElEwvzcmOy/hSGW9Q== -----END CERTIFICATE-----Generated at Wed Oct 14 06:48:17 2026 by rpki-client