$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: IMq8y9OsDVi7bXiHWyAIBlEnLTFFs/cPeFvW7/CyPLQ= Subject key identifier: 0B:A7:19:28:4C:B3:CC:86:DB:CF:82:83:35:6E:9B:03:87:F8:8F:BE Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 086A Signing time: Sun 26 Jul 2026 21:30:24 +0000 Manifest this update: Sun 26 Jul 2026 21:30:24 +0000 Manifest next update: Sun 02 Aug 2026 21:30:24 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: CUbHVYcxZZCELAKvvdpooKJ8bgqF8JIzFURy9zFVufY=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) 3: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Jul 26 21:30:24 2026 GMT Not After : Aug 2 21:30:24 2026 GMT Subject: CN=6a667c70-d1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:1d:f6:e0:ff:73:db:5b:95:2f:a9:4e:cc: ac:e7:df:a8:1c:55:01:ab:23:4b:4e:79:3e:06:a6: ce:8c:7d:0c:15:9a:ce:9f:8b:f2:42:6d:a8:57:e7: f1:59:db:4c:1f:fc:19:59:30:12:46:c8:3c:e7:82: d8:12:dd:fe:77:60:e3:96:e7:3d:6e:19:40:bb:11: 51:5c:98:f5:80:1e:25:9f:9e:e1:1f:fd:29:62:8b: b9:26:24:fa:ba:29:0f:c0:c8:54:2d:5c:2e:4b:b3: fa:27:26:8c:af:0e:89:34:5d:64:0e:5e:d5:fc:37: ab:fb:cc:97:af:b1:ce:28:3e:0d:e6:85:ce:d1:8b: 60:0a:21:cb:4b:1f:d8:c4:4a:16:36:e5:cc:c5:03: 97:63:d8:72:f4:e7:49:64:15:c9:41:2b:b5:18:91: ad:ef:0d:65:44:6c:99:2d:5b:b8:5c:51:10:85:54: a2:04:77:2b:89:52:17:7b:4b:5e:82:e6:fe:e2:fe: 29:32:74:10:b1:23:7c:f5:a6:05:c7:23:34:af:16: 2a:ee:5f:c7:23:76:7c:87:f8:e7:d0:1f:80:bd:88: 57:4c:bb:d7:7a:9b:6f:af:80:89:c7:43:f5:8a:4d: 72:9c:e1:21:be:44:4c:6e:1d:ff:2a:a2:ba:f0:10: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A7:19:28:4C:B3:CC:86:DB:CF:82:83:35:6E:9B:03:87:F8:8F:BE X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:fe:76:b9:f8:19:43:fd:11:ed:ec:81:ff:de:59:a2:ce:eb: a4:41:0c:47:40:17:9e:3f:44:42:58:90:79:2c:fb:08:7c:9d: 16:b0:0e:fd:85:3b:aa:6a:98:97:19:66:07:e0:80:06:b3:a9: c8:6e:26:89:7f:d2:60:c3:bd:99:dd:4d:5f:ad:ff:4e:c7:3a: 0f:1b:cc:bb:87:e9:72:54:63:e6:60:e7:91:8c:b1:d5:d3:f2: 9b:db:f8:3b:57:79:dd:b2:d9:24:1c:14:cb:a9:49:d1:22:f1: fd:78:d6:d5:87:f0:a4:43:e3:14:ba:7b:4b:a1:b3:95:0c:7d: ff:75:6d:18:16:f3:48:b0:91:f8:f3:f1:c4:a6:05:59:87:ee: 3d:ea:ca:78:8a:d3:d0:c9:09:43:36:3c:84:76:06:47:64:90: d0:55:a1:ed:73:24:44:7f:6f:d6:14:d5:25:ab:84:f8:4d:ef: ff:02:ea:af:1b:be:67:d7:d9:1b:77:78:4f:f0:97:ac:e9:e6: 76:3d:ca:2b:69:04:9d:b4:be:b1:f6:00:1b:74:bb:c5:2e:c9: c9:bd:9f:c7:4b:33:b2:50:29:c7:a4:e0:34:95:35:37:b4:ab: 22:c6:88:37:3b:54:28:24:ea:be:d4:5a:39:35:f2:6b:66:71: ca:6a:93:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYwNzI2MjEzMDI0WhcNMjYwODAyMjEzMDI0WjAYMRYwFAYD VQQDEw02YTY2N2M3MC1kMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPcd9uD/c9tblS+pTsys59+oHFUBqyNLTnk+BqbOjH0MFZrOn4vyQm2oV+fx WdtMH/wZWTASRsg854LYEt3+d2Djluc9bhlAuxFRXJj1gB4ln57hH/0pYou5JiT6 uikPwMhULVwuS7P6JyaMrw6JNF1kDl7V/Der+8yXr7HOKD4N5oXO0YtgCiHLSx/Y xEoWNuXMxQOXY9hy9OdJZBXJQSu1GJGt7w1lRGyZLVu4XFEQhVSiBHcriVIXe0te gub+4v4pMnQQsSN89aYFxyM0rxYq7l/HI3Z8h/jn0B+AvYhXTLvXeptvr4CJx0P1 ik1ynOEhvkRMbh3/KqK68BD2PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAunGShM s8yG28+CgzVumwOH+I++MB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlv52ufgZQ/0R7eyB/95Zos7rpEEMR0AXnj9EQliQeSz7CHydFrAO/YU7qmqY lxlmB+CABrOpyG4miX/SYMO9md1NX63/Tsc6DxvMu4fpclRj5mDnkYyx1dPym9v4 O1d53bLZJBwUy6lJ0SLx/XjW1YfwpEPjFLp7S6GzlQx9/3VtGBbzSLCR+PPxxKYF WYfuPerKeIrT0MkJQzY8hHYGR2SQ0FWh7XMkRH9v1hTVJauE+E3v/wLqrxu+Z9fZ G3d4T/CXrOnmdj3KK2kEnbS+sfYAG3S7xS7Jyb2fx0szslApx6TgNJU1N7SrIsaI NztUKCTqvtRaOTXya2ZxymqTOg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:50:33 2026 by rpki-client