$ rpki-client -vvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft File: D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft (raw, json) Hash identifier: MSgHNCkbW93xk4nu8+hJNJD3DgwosulnS8S/a0HIe2k= Subject key identifier: 74:4C:0B:56:5A:F1:24:C8:F9:21:6A:E6:EC:44:26:5C:BC:40:D5:12 Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft Manifest number: 024A Signing time: Mon 27 Jul 2026 03:53:25 +0000 Manifest this update: Mon 27 Jul 2026 03:53:24 +0000 Manifest next update: Mon 03 Aug 2026 03:53:24 +0000 Files and hashes: 1: D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl (hash: XWbvWo9GG4HrTeNinDIRjvl6/PYBNA2T4qU2WBLdzRQ=) 2: 075B4CC80AC511EEB25A152AC4F9AE02.roa (hash: +UwT5EuzqCMtcr13ivyOvHZ5BUB5y0RPoEF85OdZpKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134BB0, serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258 Validity Not Before: Jul 27 03:53:24 2026 GMT Not After : Aug 3 03:53:24 2026 GMT Subject: CN=6a66d635-0298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:4b:de:b1:49:9d:da:1b:a3:69:9c:5a:e2: 8b:47:7b:14:2a:8e:cd:95:4b:87:0a:f6:49:31:9d: cc:ef:ae:c5:64:01:9c:13:b1:5e:8b:e5:98:6c:36: 71:f8:36:b3:db:69:a9:0c:0d:c1:60:78:ff:71:ce: da:96:b0:df:c3:78:2f:e9:62:13:67:68:d0:1b:1c: b1:73:b8:99:b4:74:f4:c9:37:5c:3c:a1:4b:dc:c0: f4:fd:02:10:a0:c7:2d:d7:f8:58:45:1a:9d:14:50: 9a:8a:a1:e3:3b:42:c1:3a:99:ed:73:cc:2f:59:58: c0:4d:80:26:8c:cd:53:68:ea:59:e8:26:24:2e:e4: c7:70:70:fd:a3:71:2f:b2:48:fe:b3:4a:aa:83:55: 1a:c7:16:89:11:4f:22:b2:7d:75:26:bb:e2:88:49: 8b:60:21:61:16:65:18:3a:5e:91:58:31:1c:0f:a3: 6f:e1:d5:b6:2c:51:9c:29:c7:67:bb:eb:a3:d9:97: b1:79:d8:74:20:52:a1:76:fc:66:27:57:35:79:fe: 04:04:67:ed:14:c6:e2:91:9b:90:8a:b1:fb:05:18: 7c:f6:61:e5:5d:7e:67:94:bf:26:06:15:fc:2c:6a: 5f:51:ea:b4:30:ab:44:b1:a9:b4:9a:72:b9:91:7e: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4C:0B:56:5A:F1:24:C8:F9:21:6A:E6:EC:44:26:5C:BC:40:D5:12 X509v3 Authority Key Identifier: keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:28:72:6d:b0:80:31:b5:1d:98:ad:67:4c:1f:a7:62:54:ad: 90:04:bb:03:1d:bc:20:49:0b:9f:56:11:8f:b8:ad:16:ce:92: 48:a9:66:16:46:36:8a:10:d2:28:89:6a:bc:20:20:ec:e4:69: 6a:5a:d5:fe:18:ea:c5:a4:5d:6f:56:3a:db:4d:86:4a:80:2f: 4e:34:4b:69:a5:65:19:8d:8e:d7:2d:ff:97:ad:1b:61:a3:e2: 87:48:20:64:d7:cf:7f:3f:11:42:0e:6f:de:89:5f:e4:a1:5a: 92:d6:31:e1:ca:99:7b:84:9f:db:69:c7:ea:34:14:4a:a4:06: 53:2f:de:fd:8b:f7:24:d2:d7:b7:08:33:9c:85:d9:3c:c8:bb: c7:68:19:a9:62:f0:0b:cf:47:c1:f7:ab:2b:d0:10:9b:db:43: 4a:0a:a1:8a:5c:8f:3d:c0:1b:87:92:6f:03:f4:ae:d6:24:99: 9e:21:ce:6f:b7:06:12:01:6e:6e:89:0a:8f:53:b5:97:78:95: c5:c1:08:21:cc:5a:86:95:ab:cf:8b:70:7c:75:41:93:c9:04: 38:44:fc:2e:f8:97:db:0d:ad:bc:b0:05:62:5b:fb:55:79:d0: cb:1e:a9:e5:52:3a:c2:a4:cd:e8:91:5d:b5:10:75:29:84:d2: e2:b5:6b:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCQjAxMTAvBgNVBAUTKDBGNjE0MkFFNDE2OERGMEIxODA1RkE1ODFEMjAzOTQ3 NjdBQTIyNTgwHhcNMjYwNzI3MDM1MzI0WhcNMjYwODAzMDM1MzI0WjAYMRYwFAYD VQQDEw02YTY2ZDYzNS0wMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjZL3rFJndobo2mcWuKLR3sUKo7NlUuHCvZJMZ3M767FZAGcE7Fei+WYbDZx +Daz22mpDA3BYHj/cc7alrDfw3gv6WITZ2jQGxyxc7iZtHT0yTdcPKFL3MD0/QIQ oMct1/hYRRqdFFCaiqHjO0LBOpntc8wvWVjATYAmjM1TaOpZ6CYkLuTHcHD9o3Ev skj+s0qqg1UaxxaJEU8isn11JrviiEmLYCFhFmUYOl6RWDEcD6Nv4dW2LFGcKcdn u+uj2Zexedh0IFKhdvxmJ1c1ef4EBGftFMbikZuQirH7BRh89mHlXX5nlL8mBhX8 LGpfUeq0MKtEsam0mnK5kX6xoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRMC1Za 8STI+SFq5uxEJly8QNUSMB8GA1UdIwQYMBaAFA9hQq5BaN8LGAX6WB0gOUdnqiJY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEJCMC9ERDQ3MzhFMDBB QkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3c1lCZnBZSFNBNVIyZXFJ bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QyRkNya0ZvM3dzWUJmcFlIU0E1UjJlcUlsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEJCMC9ERDQ3MzhFMDBBQkQxMUVFOTE3REE2NTVDNEY5QUUwMi9EMkZDcmtGbzN3 c1lCZnBZSFNBNVIyZXFJbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARihybbCAMbUdmK1nTB+nYlStkAS7Ax28IEkLn1YRj7itFs6SSKlmFkY2ihDS KIlqvCAg7ORpalrV/hjqxaRdb1Y6202GSoAvTjRLaaVlGY2O1y3/l60bYaPih0gg ZNfPfz8RQg5v3olf5KFaktYx4cqZe4Sf22nH6jQUSqQGUy/e/Yv3JNLXtwgznIXZ PMi7x2gZqWLwC89HwferK9AQm9tDSgqhilyPPcAbh5JvA/Su1iSZniHOb7cGEgFu bokKj1O1l3iVxcEIIcxahpWrz4twfHVBk8kEOET8LviX2w2tvLAFYlv7VXnQyx6p 5VI6wqTN6JFdtRB1KYTS4rVrRg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:41:55 2026 by rpki-client