$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft File: dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft (raw, json) Hash identifier: fKXAzmogmISgiT//FUpKQc+NI1zGTW7oyRvFNQBAslc= Subject key identifier: A3:29:BE:5A:E4:BA:91:8F:2E:73:A3:ED:29:4E:63:E0:37:DC:1D:82 Authority key identifier: 75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF Certificate issuer: /CN=A91972B6/serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Certificate serial: 20DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft Manifest number: 1955 Signing time: Mon 06 Jul 2026 17:24:09 +0000 Manifest this update: Mon 06 Jul 2026 17:24:08 +0000 Manifest next update: Mon 13 Jul 2026 17:24:08 +0000 Files and hashes: 1: dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl (hash: J5xuEjJlVe3tLsdNySpRST2Y+1ec04ruCz+ptRSD0HY=) 2: C3F52172A3E611EAA751A46EC4F9AE02.roa (hash: HjkUEQsav5pUE/WVtKbSKskctR1MphO2V35javK4YnI=) 3: BB676D067C9B11EBB1A0BD0FC4F9AE02.roa (hash: bLApvChK2zUe4CWUx9RU9qgAGAkxX8oSnJKH1tdA0/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 17:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8412 (0x20dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6, serialNumber=757CDD98844203E9CB413D7E5C5808D15E54B1CF Validity Not Before: Jul 6 17:24:08 2026 GMT Not After : Jul 13 17:24:08 2026 GMT Subject: CN=6a4be4b9-0832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ab:f0:ec:33:ed:b3:bf:ab:fb:7c:cd:b2:3a: 91:6c:e8:c9:da:c8:a2:0c:f4:65:de:e8:a4:40:ef: 18:61:21:f3:bb:7b:04:fd:ba:09:81:a5:59:12:d2: b6:05:85:c9:38:ba:0d:bc:1f:88:47:ae:90:20:75: 33:a2:27:5f:87:d5:ac:ba:09:57:e1:e3:0a:75:6b: 62:0a:33:49:2b:01:8f:b4:ce:78:35:4c:89:1d:39: 94:19:27:46:9b:2b:9f:fa:7e:5b:c4:29:ba:a2:3a: f4:1b:42:f8:5f:79:de:4e:3b:44:ac:42:3c:45:48: 9b:30:c5:dc:0b:83:24:72:93:15:01:0c:93:3b:5e: 5f:b4:95:81:cc:5a:ec:c7:dc:84:b7:49:ad:1c:9a: 45:b3:16:fd:0c:fa:1a:f9:45:f4:c9:d7:e3:14:e3: e7:1f:54:a1:86:0b:2a:2e:05:f8:75:c7:b4:e5:b5: 63:cf:6d:84:77:d9:9b:12:96:61:57:7d:22:4d:3b: 0b:4d:3b:6d:fd:7f:21:24:3f:8d:ce:9a:d8:78:eb: d3:1d:89:6b:05:8e:3e:4a:78:21:87:6d:cd:ad:b2: 04:61:61:e1:24:55:3a:5a:fd:ad:99:e6:ec:7a:34: 9a:e1:12:a2:ac:41:e4:bb:5c:07:c1:01:38:17:c4: ad:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:29:BE:5A:E4:BA:91:8F:2E:73:A3:ED:29:4E:63:E0:37:DC:1D:82 X509v3 Authority Key Identifier: keyid:75:7C:DD:98:84:42:03:E9:CB:41:3D:7E:5C:58:08:D1:5E:54:B1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXzdmIRCA-nLQT1-XFgI0V5Usc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/F2B9E0A4132A11E9AE77AD7BC4F9AE02/dXzdmIRCA-nLQT1-XFgI0V5Usc8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a0:e5:ec:a5:7a:2a:62:35:f4:a0:f5:26:a8:dc:59:af:1a: ea:7f:31:c1:42:16:d0:31:bf:48:e2:09:3b:ab:41:49:ce:56: 2d:28:d0:c8:87:01:4a:41:38:78:18:9b:85:b1:91:ce:43:0b: 22:84:32:a2:10:e6:53:b9:bc:0a:62:fc:ab:83:85:18:ea:a2: 31:9e:87:1c:f9:0b:66:d8:25:72:72:9f:d1:4b:a9:70:a9:5a: 93:5a:3a:76:9c:41:e3:04:69:ed:48:70:80:80:cd:2f:26:83: 4b:06:29:ff:5c:7a:b3:bb:8b:84:5e:73:ec:85:f2:43:5d:36: e5:ee:26:82:97:08:54:c9:43:f3:d1:ac:39:42:c4:79:80:55: 12:e4:15:38:e4:ab:d3:34:11:29:76:6f:e1:02:30:f4:e1:29: 31:8d:25:9d:01:46:41:66:6f:ba:22:bf:ce:1d:d2:af:c4:e1: a8:c4:ee:e6:bf:52:99:67:95:fc:19:ee:b8:1b:d3:25:ea:72: 14:b4:04:b6:c9:c9:47:b1:77:d1:b3:e0:3c:68:de:29:cd:3e: a6:1c:30:14:2b:2d:d2:78:0e:4b:b3:77:5e:b6:3d:72:a9:b1: 7c:05:10:79:b9:15:ce:11:a7:02:c8:41:4b:31:9b:fc:33:25: 94:2d:ee:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICINwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDc1N0NERDk4ODQ0MjAzRTlDQjQxM0Q3RTVDNTgwOEQx NUU1NEIxQ0YwHhcNMjYwNzA2MTcyNDA4WhcNMjYwNzEzMTcyNDA4WjAYMRYwFAYD VQQDEw02YTRiZTRiOS0wODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6vw7DPts7+r+3zNsjqRbOjJ2siiDPRl3uikQO8YYSHzu3sE/boJgaVZEtK2 BYXJOLoNvB+IR66QIHUzoidfh9WsuglX4eMKdWtiCjNJKwGPtM54NUyJHTmUGSdG myuf+n5bxCm6ojr0G0L4X3neTjtErEI8RUibMMXcC4MkcpMVAQyTO15ftJWBzFrs x9yEt0mtHJpFsxb9DPoa+UX0ydfjFOPnH1ShhgsqLgX4dce05bVjz22Ed9mbEpZh V30iTTsLTTtt/X8hJD+NzprYeOvTHYlrBY4+Snghh23NrbIEYWHhJFU6Wv2tmebs ejSa4RKirEHku1wHwQE4F8StWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMpvlrk upGPLnOj7SlOY+A33B2CMB8GA1UdIwQYMBaAFHV83ZiEQgPpy0E9flxYCNFeVLHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi9GMkI5RTBBNDEz MkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0EtbkxRVDEtWEZnSTBWNVVz YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RYemRtSVJDQS1uTFFUMS1YRmdJMFY1VXNjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi9GMkI5RTBBNDEzMkExMUU5QUU3N0FEN0JDNEY5QUUwMi9kWHpkbUlSQ0Et bkxRVDEtWEZnSTBWNVVzYzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKDl7KV6KmI19KD1JqjcWa8a6n8xwUIW0DG/SOIJO6tBSc5WLSjQyIcBSkE4 eBibhbGRzkMLIoQyohDmU7m8CmL8q4OFGOqiMZ6HHPkLZtglcnKf0UupcKlak1o6 dpxB4wRp7UhwgIDNLyaDSwYp/1x6s7uLhF5z7IXyQ1025e4mgpcIVMlD89GsOULE eYBVEuQVOOSr0zQRKXZv4QIw9OEpMY0lnQFGQWZvuiK/zh3Sr8ThqMTu5r9SmWeV /BnuuBvTJepyFLQEtsnJR7F30bPgPGjeKc0+phwwFCst0ngOS7N3XrY9cqmxfAUQ ebkVzhGnAshBSzGb/DMllC3u2Q== -----END CERTIFICATE-----Generated at Tue Jul 7 10:46:55 2026 by rpki-client