$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: feggw0q95nZenzxTm7F0kdK4sLhgCJl7AWZCynYiBBo= Subject key identifier: FC:5E:EB:E5:E4:8E:B8:85:52:AE:F6:32:CD:17:8A:CC:7C:37:CD:D3 Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0DC5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0DB7 Signing time: Tue 28 Jul 2026 15:38:37 +0000 Manifest this update: Tue 28 Jul 2026 15:38:36 +0000 Manifest next update: Tue 04 Aug 2026 15:38:36 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: WgoHFdzJk1QXiJmd3sPGdHLjO79UxqA32m9hZrpvGYE=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: KN/qO3b9F5dp3gvVSi/2Av1F8gy5I+kWuZVNLBkzY6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3525 (0xdc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Jul 28 15:38:36 2026 GMT Not After : Aug 4 15:38:36 2026 GMT Subject: CN=6a68ccfd-a6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:55:01:36:36:52:ce:c3:f2:93:ab:87:11: 25:51:aa:b4:30:e0:62:1b:c2:bd:f3:ff:73:d2:b0: a2:a8:a4:c4:67:4b:f4:22:f7:30:31:8e:53:67:7d: a7:db:68:d7:80:c5:21:47:ce:9a:8e:56:7f:d9:24: e6:d1:86:a9:9d:8c:93:42:59:d6:34:d2:9a:b9:7c: 02:15:40:d9:2b:e0:ba:6d:80:5c:c3:ec:f6:f4:71: aa:de:51:cc:71:14:b3:94:45:5a:83:d4:0c:c6:7b: 08:92:c8:09:d8:f3:1c:e7:ec:ba:0f:e6:0c:4e:2e: 63:ee:51:ea:90:9c:a9:cf:49:ea:8a:a2:45:57:c5: 4a:73:80:a9:00:ab:e9:f2:8f:46:3e:b8:ce:9c:0f: 88:31:eb:c0:fe:b0:3f:bc:b9:bb:01:2c:99:91:a0: 9a:ba:5a:48:43:76:89:d6:70:a4:6e:da:ff:97:2a: 90:96:93:a0:46:a8:f7:5e:9b:c9:cd:30:b8:27:44: 3d:ae:62:e0:31:37:ce:d2:8b:64:75:a7:dd:a8:72: a9:ba:92:60:67:e4:ba:9e:e4:b9:78:0f:8f:44:41: 06:8e:7a:af:6e:09:f9:09:d4:1d:de:d1:2a:6f:4d: ba:7c:33:1a:77:05:04:ea:6d:d2:6f:0f:c8:a7:62: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5E:EB:E5:E4:8E:B8:85:52:AE:F6:32:CD:17:8A:CC:7C:37:CD:D3 X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:95:03:bb:ce:6c:e2:70:bb:d2:80:43:5e:d4:95:82:e8:cb: 6d:f1:4a:c7:af:d2:e2:28:6a:40:5a:9a:fc:41:c7:e2:23:dc: 07:4d:9b:8d:32:b5:59:4c:7f:01:f5:36:e9:7b:95:7f:a3:9f: 04:63:e2:cb:7a:d4:4f:55:4a:ef:6a:ca:0f:b0:d7:89:bf:97: 9f:79:c1:ec:a5:03:8f:5d:64:f4:8e:2c:25:8e:90:c6:0c:42: 20:5e:13:78:86:30:c5:e1:50:66:96:2f:df:cc:36:c3:39:9b: e6:35:e9:ed:55:e6:01:9e:ff:71:00:52:57:df:47:ae:7e:8c: a1:e9:8d:ed:3b:fc:0d:14:69:00:4a:6c:a8:51:7e:e3:82:1f: 88:12:75:da:5d:e2:ae:1a:b5:4b:cb:f9:7b:b8:82:8c:56:62: d9:1d:03:5a:1e:2d:97:14:6f:d4:58:82:05:f8:0d:c3:ae:3b: b2:be:38:7f:10:21:c2:a8:36:70:52:9b:08:a0:cb:ab:17:61: 04:40:a8:fc:a8:f1:34:0e:8d:a4:fd:d2:0a:89:25:f9:13:70: c6:4c:10:e3:32:c8:f8:f2:b4:c6:c1:e8:e6:04:57:16:a8:0e: 91:5c:c9:a8:64:3c:3d:3e:c5:31:5b:e3:b3:98:78:d3:69:d3: dc:d5:d9:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjYwNzI4MTUzODM2WhcNMjYwODA0MTUzODM2WjAYMRYwFAYD VQQDEw02YTY4Y2NmZC1hNmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW9VATY2Us7D8pOrhxElUaq0MOBiG8K98/9z0rCiqKTEZ0v0IvcwMY5TZ32n 22jXgMUhR86ajlZ/2STm0YapnYyTQlnWNNKauXwCFUDZK+C6bYBcw+z29HGq3lHM cRSzlEVag9QMxnsIksgJ2PMc5+y6D+YMTi5j7lHqkJypz0nqiqJFV8VKc4CpAKvp 8o9GPrjOnA+IMevA/rA/vLm7ASyZkaCaulpIQ3aJ1nCkbtr/lyqQlpOgRqj3XpvJ zTC4J0Q9rmLgMTfO0otkdafdqHKpupJgZ+S6nuS5eA+PREEGjnqvbgn5CdQd3tEq b026fDMadwUE6m3Sbw/Ip2LR+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxe6+Xk jriFUq72Ms0Xisx8N83TMB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAupUDu85s4nC70oBDXtSVgujLbfFKx6/S4ihqQFqa/EHH4iPcB02bjTK1WUx/ AfU26XuVf6OfBGPiy3rUT1VK72rKD7DXib+Xn3nB7KUDj11k9I4sJY6QxgxCIF4T eIYwxeFQZpYv38w2wzmb5jXp7VXmAZ7/cQBSV99Hrn6MoemN7Tv8DRRpAEpsqFF+ 44IfiBJ12l3irhq1S8v5e7iCjFZi2R0DWh4tlxRv1FiCBfgNw647sr44fxAhwqg2 cFKbCKDLqxdhBECo/KjxNA6NpP3SCokl+RNwxkwQ4zLI+PK0xsHo5gRXFqgOkVzJ qGQ8PT7FMVvjs5h402nT3NXZmQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:08:50 2026 by rpki-client