$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft File: DjGKapQeYMmQhh2GmyA5SMi0iEE.mft (raw, json) Hash identifier: y+AP46x9eyA5TwEhzStqLz3D7fJQaEA8cvcSuIsVqD4= Subject key identifier: F6:F0:20:EB:AA:A8:51:99:53:44:CC:80:AB:3A:F8:EE:50:C1:03:3D Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Certificate serial: 0CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft Manifest number: 0CDA Signing time: Tue 28 Jul 2026 18:37:02 +0000 Manifest this update: Tue 28 Jul 2026 18:37:01 +0000 Manifest next update: Tue 04 Aug 2026 18:37:01 +0000 Files and hashes: 1: DjGKapQeYMmQhh2GmyA5SMi0iEE.crl (hash: xv/a2QIcj7CcVLrzEJNl4aHGYpBjZAiG5Y9iUeCHVNM=) 2: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (hash: M9hrVMTzZX+RhBo3mKRURH0NS+fV+W9LRBlbRm5uCWM=) 3: 6CE24548425E11EAB623F258C4F9AE02.roa (hash: LCPMT0hgRgxkY6g8i6rd3I6r5PrzQRSGvYCOXRlNG28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3311 (0xcef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841 Validity Not Before: Jul 28 18:37:01 2026 GMT Not After : Aug 4 18:37:01 2026 GMT Subject: CN=6a68f6cd-0b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:53:46:e4:a7:87:a4:95:78:b5:d1:2f:e7:61: a9:9f:4c:05:4c:84:a9:35:b6:17:dc:42:25:aa:2f: 62:85:4e:b3:66:15:0b:e3:37:cc:17:70:fa:00:7f: d6:94:a1:63:6e:79:ca:4d:d9:e7:59:5b:33:95:40: 43:7f:56:c9:17:c7:da:c8:3c:c2:df:5d:8b:48:6a: 80:13:3a:e3:45:d7:fd:ee:18:a4:01:3c:b2:44:9c: 97:08:b7:63:fa:19:8e:a2:a9:a4:37:a2:82:48:3a: a2:14:7d:dd:7c:e2:e3:71:e6:88:d9:96:0b:c4:a4: 40:a9:e0:9c:f2:8c:31:1b:ad:ea:32:ef:6e:29:aa: 56:d1:f3:2a:77:e0:47:e2:75:f7:10:cb:f2:1f:65: 1e:41:e3:81:7e:a8:81:59:19:f6:85:8d:61:98:1d: fb:cd:26:58:4a:93:7c:e6:48:21:53:0f:5d:7d:1a: e6:c3:9c:4b:14:d5:63:2b:96:c1:80:c4:e5:1a:76: ab:85:0c:0e:47:f3:1d:0e:bc:75:a1:0a:b7:43:1b: 14:b5:05:3a:cc:d6:2a:68:2d:9b:ac:2d:7e:85:84: 17:6d:b4:ba:d9:3a:0e:c0:02:5b:5d:4f:d7:99:03: 75:fe:aa:b9:a6:68:1d:05:7e:aa:1e:fd:4c:8d:d0: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F0:20:EB:AA:A8:51:99:53:44:CC:80:AB:3A:F8:EE:50:C1:03:3D X509v3 Authority Key Identifier: keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cb:25:d6:a6:af:44:7d:16:eb:5d:9d:ce:e8:79:b3:2d:71: 1a:24:c6:7c:6c:b5:6f:e8:68:eb:b5:56:78:83:ec:e2:1f:e6: a2:fc:2a:4c:36:7c:4b:38:c9:64:6c:c6:04:9c:1c:61:76:c0: 1c:50:f8:67:9e:f1:4f:6e:8d:ee:4c:4c:3e:a6:18:30:c5:e2: dc:19:cc:fe:34:1d:6d:7a:a1:7c:33:c6:67:fa:ad:61:98:ca: f7:d7:97:eb:c2:11:c5:b5:1a:e6:30:ff:8b:4d:0b:92:e4:fe: eb:b6:70:29:dc:43:b0:f8:47:22:ec:46:6d:d3:8c:76:e1:bb: e0:a9:15:cc:38:e8:b9:59:ac:0e:59:0d:7d:d3:da:d1:cc:de: 69:89:21:1f:a9:55:45:b6:07:f2:2e:fd:4b:54:e1:15:e3:b0: bb:99:0e:c4:70:3d:79:23:e0:ad:b0:89:f5:98:47:2c:6c:3d: 69:92:4e:b6:71:ca:1d:8f:89:d0:61:2e:c4:27:60:40:67:46: 46:49:19:5b:b1:04:17:ef:dc:86:62:d7:4b:e2:a7:1e:03:08: c3:ff:af:88:4f:90:d3:20:68:74:8f:07:b9:19:1c:56:19:ab: 3f:55:cc:72:e1:c3:e2:1a:a4:e0:48:37:6d:83:73:5a:9d:e0: 3f:32:72:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc3MzAxMTAvBgNVBAUTKDBFMzE4QTZBOTQxRTYwQzk5MDg2MUQ4NjlCMjAzOTQ4 QzhCNDg4NDEwHhcNMjYwNzI4MTgzNzAxWhcNMjYwODA0MTgzNzAxWjAYMRYwFAYD VQQDEw02YTY4ZjZjZC0wYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1NG5KeHpJV4tdEv52Gpn0wFTISpNbYX3EIlqi9ihU6zZhUL4zfMF3D6AH/W lKFjbnnKTdnnWVszlUBDf1bJF8fayDzC312LSGqAEzrjRdf97hikATyyRJyXCLdj +hmOoqmkN6KCSDqiFH3dfOLjceaI2ZYLxKRAqeCc8owxG63qMu9uKapW0fMqd+BH 4nX3EMvyH2UeQeOBfqiBWRn2hY1hmB37zSZYSpN85kghUw9dfRrmw5xLFNVjK5bB gMTlGnarhQwOR/MdDrx1oQq3QxsUtQU6zNYqaC2brC1+hYQXbbS62ToOwAJbXU/X mQN1/qq5pmgdBX6qHv1MjdBA2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbwIOuq qFGZU0TMgKs6+O5QwQM9MB8GA1UdIwQYMBaAFA4ximqUHmDJkIYdhpsgOUjItIhB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzczMC8zQTQ5RTcwRTEy REQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlNbVFoaDJHbXlBNVNNaTBp RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RqR0thcFFlWU1tUWhoMkdteUE1U01pMGlFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzczMC8zQTQ5RTcwRTEyREQxMUVBQkQ5NTU5NkRDNEY5QUUwMi9EakdLYXBRZVlN bVFoaDJHbXlBNVNNaTBpRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArcsl1qavRH0W612dzuh5sy1xGiTGfGy1b+ho67VWeIPs4h/movwqTDZ8SzjJ ZGzGBJwcYXbAHFD4Z57xT26N7kxMPqYYMMXi3BnM/jQdbXqhfDPGZ/qtYZjK99eX 68IRxbUa5jD/i00LkuT+67ZwKdxDsPhHIuxGbdOMduG74KkVzDjouVmsDlkNfdPa 0czeaYkhH6lVRbYH8i79S1ThFeOwu5kOxHA9eSPgrbCJ9ZhHLGw9aZJOtnHKHY+J 0GEuxCdgQGdGRkkZW7EEF+/chmLXS+KnHgMIw/+viE+Q0yBodI8HuRkcVhmrP1XM cuHD4hqk4Eg3bYNzWp3gPzJy2g== -----END CERTIFICATE-----Generated at Wed Jul 29 07:35:17 2026 by rpki-client