$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft File: drnTOfrNYrR-k-iITehQOW2877Q.mft (raw, json) Hash identifier: ECyVC5M5cqc+newnv7bOYdxjL+NnIXgWFyolAAEdn0E= Subject key identifier: 32:92:A2:A2:E5:F3:17:55:BC:7A:BA:AC:9C:EE:A0:E3:D6:DD:B2:81 Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Certificate serial: 0BCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft Manifest number: 0BAF Signing time: Tue 28 Jul 2026 19:20:42 +0000 Manifest this update: Tue 28 Jul 2026 19:20:41 +0000 Manifest next update: Tue 04 Aug 2026 19:20:41 +0000 Files and hashes: 1: drnTOfrNYrR-k-iITehQOW2877Q.crl (hash: VY2FqirWjcLy3UALdqN2aSnMC+b1cDx3dRXvNceFir0=) 2: 83882F7AF83B11ECB4154E31C4F9AE02.roa (hash: NYJZvZPzyDgeHzpdsKVjfnf0vb6jVGfn+iXWogNI5w0=) 3: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (hash: bw6V3e8uxgz/w4mVGTTnR4lCFXMSeabuBZrROz8xFwc=) 4: 4FFC83964CA311EE815AF017C4F9AE02.roa (hash: nvrbL4K8UTuSHUzb0sameKGMaeUHHtqeYardPlMzhKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Validity Not Before: Jul 28 19:20:41 2026 GMT Not After : Aug 4 19:20:41 2026 GMT Subject: CN=6a69010a-704b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:36:a3:a8:e4:30:33:f0:85:36:2c:06:b5: af:58:76:4c:15:4e:d2:b6:7f:4a:dd:66:52:4d:a6: 2d:6a:fb:3a:27:5c:a7:43:11:69:9e:a0:8c:3a:a0: 67:56:af:f5:64:bf:86:27:3f:ae:4b:37:d0:bb:9c: 24:6c:af:4e:be:96:d6:fe:17:a6:e9:98:b6:31:d8: eb:c2:5c:5c:8b:0a:a8:ae:37:9c:4c:5e:66:0c:06: 84:6d:40:76:2d:53:d3:b7:70:29:c8:de:7d:f2:2b: 49:43:c1:a7:51:6b:c2:01:e9:ac:5f:81:9c:68:bf: 82:b7:e4:d0:32:3e:b6:52:5d:ca:34:a1:c9:d2:12: f9:6c:3d:47:13:df:15:b1:ba:a0:ac:2f:cd:29:50: 7f:9b:5a:c5:e6:3a:8d:0b:0c:95:85:f7:54:68:5c: 17:46:0d:18:47:34:c2:8c:ea:56:eb:02:2f:a2:1b: 85:ed:41:82:fb:46:c0:00:7f:85:e8:99:cf:6f:32: 13:46:bb:60:57:75:7c:24:4a:8b:64:12:7d:43:90: 31:30:2d:f4:7d:3d:f7:9e:66:af:3d:52:35:f9:bc: 5a:64:a0:9d:09:24:61:e1:aa:f5:ef:0f:0e:cc:75: 76:be:55:ab:1b:e2:97:2d:f1:9b:7e:70:16:bc:35: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:92:A2:A2:E5:F3:17:55:BC:7A:BA:AC:9C:EE:A0:E3:D6:DD:B2:81 X509v3 Authority Key Identifier: keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b4:72:a6:0a:00:ac:b1:4a:64:e6:69:e6:2a:b7:6d:76:1a: 7d:b4:1f:79:dd:0e:dd:83:ac:46:b1:46:a9:67:a9:c2:44:d7: 32:f3:d8:1a:db:ed:40:35:30:e1:e6:72:10:a0:f4:66:46:ee: 63:ee:62:f3:bf:07:c8:95:a4:df:8d:cc:55:f0:15:38:62:c4: fe:0a:39:bf:ae:f7:87:f8:a9:9f:e4:1b:2a:b9:58:46:fa:8e: 95:1b:14:6d:2d:91:e8:ec:5e:f0:4f:f1:ec:ad:09:7b:53:9c: 9e:b3:46:d3:51:5f:90:e4:ec:60:c4:c4:70:f8:e2:9d:d4:3a: ca:42:78:3b:33:1e:5e:3c:8a:1c:be:ed:9c:e9:60:58:a5:27: 44:50:4f:fa:7e:2a:54:3f:ef:24:31:d8:2c:05:9d:f8:41:c6: 89:b6:97:03:9d:e0:d1:c9:fa:bd:8f:11:80:02:33:b9:f7:df: e3:03:fd:91:b6:be:ea:bc:cc:e5:d7:89:f6:1f:94:39:48:b0: 19:41:24:45:c4:0c:6b:b2:8e:9f:6f:0a:ba:ee:67:2b:87:9e: e2:ea:e8:ad:17:23:f4:89:c7:47:ee:7b:47:14:45:47:57:29: b3:91:4b:72:b9:31:a0:f4:60:81:91:05:85:be:77:35:9c:fa: a3:4c:67:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5 NkRCQ0VGQjQwHhcNMjYwNzI4MTkyMDQxWhcNMjYwODA0MTkyMDQxWjAYMRYwFAYD VQQDEw02YTY5MDEwYS03MDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoaE2o6jkMDPwhTYsBrWvWHZMFU7Stn9K3WZSTaYtavs6J1ynQxFpnqCMOqBn Vq/1ZL+GJz+uSzfQu5wkbK9OvpbW/hem6Zi2MdjrwlxciwqorjecTF5mDAaEbUB2 LVPTt3ApyN598itJQ8GnUWvCAemsX4GcaL+Ct+TQMj62Ul3KNKHJ0hL5bD1HE98V sbqgrC/NKVB/m1rF5jqNCwyVhfdUaFwXRg0YRzTCjOpW6wIvohuF7UGC+0bAAH+F 6JnPbzITRrtgV3V8JEqLZBJ9Q5AxMC30fT33nmavPVI1+bxaZKCdCSRh4ar17w8O zHV2vlWrG+KXLfGbfnAWvDXQKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKSoqLl 8xdVvHq6rJzuoOPW3bKBMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTZDQS83NDA5QjQ3QTRGQzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTlly Ui1rLWlJVGVoUU9XMjg3N1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOrRypgoArLFKZOZp5iq3bXYafbQfed0O3YOsRrFGqWepwkTXMvPYGtvtQDUw 4eZyEKD0ZkbuY+5i878HyJWk343MVfAVOGLE/go5v673h/ipn+QbKrlYRvqOlRsU bS2R6Oxe8E/x7K0Je1OcnrNG01FfkOTsYMTEcPjindQ6ykJ4OzMeXjyKHL7tnOlg WKUnRFBP+n4qVD/vJDHYLAWd+EHGibaXA53g0cn6vY8RgAIzufff4wP9kba+6rzM 5deJ9h+UOUiwGUEkRcQMa7KOn28Kuu5nK4ee4urorRcj9InHR+57RxRFR1cps5FL crkxoPRggZEFhb53NZz6o0xnJQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:43:39 2026 by rpki-client