$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft File: dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json) Hash identifier: CM6JOX4JKmnhwG0kHe4RH+AkUBRtkPGX12mMcc0j43U= Subject key identifier: 20:C7:8A:83:E0:54:34:16:95:7C:36:2E:E8:C8:43:B7:19:CA:7E:C5 Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 Certificate issuer: /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Certificate serial: 0F40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft Manifest number: 0F2C Signing time: Tue 28 Jul 2026 17:43:01 +0000 Manifest this update: Tue 28 Jul 2026 17:43:00 +0000 Manifest next update: Tue 04 Aug 2026 17:43:00 +0000 Files and hashes: 1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: QD4b2kOxE5+du2XmiIVPqvIe2XL2hC/IWUedMZIx4yk=) 2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: EgdNpKJv5qTrYsCD4ruXe4GnFpA9Meqmqv0UvPzJUpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3904 (0xf40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4 Validity Not Before: Jul 28 17:43:00 2026 GMT Not After : Aug 4 17:43:00 2026 GMT Subject: CN=6a68ea25-8458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:41:8c:f5:f1:bf:13:60:b5:36:8d:92:6c:ed: 0e:1a:43:c2:57:b2:db:12:2a:c9:5e:a3:4d:14:c2: 77:14:81:84:26:71:1f:c3:73:d1:21:f6:b9:0e:b6: 7c:3b:c9:e5:ce:8c:54:cc:f3:f2:56:fa:dd:78:d7: e3:56:48:38:ad:38:4b:3f:38:f7:02:90:21:64:e3: 8d:ea:a6:bc:a7:c8:62:d8:ac:b2:27:ab:89:b2:2f: 02:1d:56:6e:db:53:e3:b9:e0:45:15:8d:9e:99:00: b0:18:c8:34:f1:3a:5f:88:4d:36:ca:13:67:91:a8: 6f:f4:26:66:5f:6f:68:29:73:9d:3e:0d:43:a9:04: 22:ab:c5:b2:0d:c0:3e:6a:fc:6e:2e:28:e7:94:4f: 69:c3:3f:2a:07:07:2c:43:00:9c:f2:25:3e:e4:95: 18:ff:9d:b8:61:f8:00:5b:9f:98:17:74:dc:9e:85: 85:02:a9:89:ff:cd:75:2d:e5:62:43:1e:8f:dd:4d: d3:20:04:4d:72:26:7e:36:16:57:96:ef:3e:84:8f: fb:7f:a7:94:12:82:45:93:c0:ba:ff:6b:79:c6:88: e5:11:e3:15:f7:12:cf:4b:ca:2e:82:4e:55:9a:2a: 31:8b:56:0c:eb:99:f0:d8:62:ad:95:ad:3f:34:a5: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C7:8A:83:E0:54:34:16:95:7C:36:2E:E8:C8:43:B7:19:CA:7E:C5 X509v3 Authority Key Identifier: keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:cc:7f:d4:0f:21:1f:d1:a2:99:13:91:b9:c9:74:68:49:6c: c4:99:d3:70:46:12:4d:54:64:37:d9:b8:ec:4d:03:53:c9:2a: a3:0b:82:1b:f1:8f:84:97:73:aa:9b:e9:65:83:66:ba:0e:46: da:1c:21:dd:0f:af:ad:aa:19:0f:fc:16:a1:70:46:e4:8b:0b: ce:e5:7b:6a:89:81:c3:04:b2:77:9c:f5:db:10:6b:a9:53:17: 89:4f:b6:88:3b:73:5c:00:98:26:39:f5:c9:d0:46:45:92:a9: a2:e0:7b:d2:6a:00:08:25:db:c4:17:b8:c9:56:02:a9:ea:4b: e7:4f:33:83:91:4c:53:44:92:41:5f:0d:54:5a:1f:e7:de:d6: df:39:0a:82:77:9c:18:86:bc:4e:ff:66:e2:aa:63:02:5c:87: eb:a9:6e:aa:a1:f6:86:ec:a2:66:e0:a8:3d:a1:ef:1a:4d:51: 03:95:78:0e:60:c6:70:d3:b2:30:2c:7d:14:b3:ef:71:c2:2c: 7c:22:f6:03:4e:14:41:8f:c1:93:ef:7b:ee:d1:9e:31:dc:d4: b7:7b:ba:40:66:7c:7b:5c:1a:f4:a9:d3:3f:40:81:58:29:52: 49:ae:a2:b0:eb:07:d0:f8:10:7f:53:a5:a5:f9:fb:b3:56:46: 05:91:1f:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG NTE0NkE5QzQwHhcNMjYwNzI4MTc0MzAwWhcNMjYwODA0MTc0MzAwWjAYMRYwFAYD VQQDEw02YTY4ZWEyNS04NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EGM9fG/E2C1No2SbO0OGkPCV7LbEirJXqNNFMJ3FIGEJnEfw3PRIfa5DrZ8 O8nlzoxUzPPyVvrdeNfjVkg4rThLPzj3ApAhZOON6qa8p8hi2KyyJ6uJsi8CHVZu 21PjueBFFY2emQCwGMg08TpfiE02yhNnkahv9CZmX29oKXOdPg1DqQQiq8WyDcA+ avxuLijnlE9pwz8qBwcsQwCc8iU+5JUY/524YfgAW5+YF3TcnoWFAqmJ/811LeVi Qx6P3U3TIARNciZ+NhZXlu8+hI/7f6eUEoJFk8C6/2t5xojlEeMV9xLPS8ougk5V mioxi1YM65nw2GKtla0/NKUqQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDHioPg VDQWlXw2LujIQ7cZyn7FMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5 RGdWUlc3UU1GNDMxRkdxY1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzsx/1A8hH9GimRORucl0aElsxJnTcEYSTVRkN9m47E0DU8kqowuCG/GPhJdz qpvpZYNmug5G2hwh3Q+vraoZD/wWoXBG5IsLzuV7aomBwwSyd5z12xBrqVMXiU+2 iDtzXACYJjn1ydBGRZKpouB70moACCXbxBe4yVYCqepL508zg5FMU0SSQV8NVFof 597W3zkKgnecGIa8Tv9m4qpjAlyH66luqqH2huyiZuCoPaHvGk1RA5V4DmDGcNOy MCx9FLPvccIsfCL2A04UQY/Bk+977tGeMdzUt3u6QGZ8e1wa9KnTP0CBWClSSa6i sOsH0PgQf1Olpfn7s1ZGBZEf7w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:49 2026 by rpki-client