$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft File: DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft (raw, json) Hash identifier: K4JlkF+T++MlnYUmpI4rIFwB9+AF9mrViALdP9j9uMs= Subject key identifier: 7F:8B:27:8C:B2:5C:03:80:D0:9B:6A:5F:AA:30:8E:4A:81:E3:1D:87 Authority key identifier: 0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 Certificate issuer: /CN=A917D3A1/serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Certificate serial: 35FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft Manifest number: 35BA Signing time: Tue 28 Jul 2026 14:27:53 +0000 Manifest this update: Tue 28 Jul 2026 14:27:53 +0000 Manifest next update: Tue 04 Aug 2026 14:27:53 +0000 Files and hashes: 1: DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl (hash: HNNtmoqyPROQ+WL31GGq/OeY51A8UboLhWxjFbJPreo=) 2: B16ED608D4A311F09760561DC4F9AE02.roa (hash: KTE/5UmLg1Jx7p3qXHkj9a3Zu722Q28ccyfvFDypscA=) 3: B3B5B50E117711EEA0E5E040C4F9AE02.roa (hash: ZbvAqdZRdRlZ0nK19Soo+W7fZP+M1TyK82wvNdqV5u4=) 4: ACACA8C6D5A611F0A08DD435C4F9AE02.roa (hash: 8+OhuWCy2Q/+5EOFBaBhHTBOjwb6o2MiQFSjk3LYjzg=) 5: 665D242CD57411F0AA8EA47EC4F9AE02.roa (hash: Ix+QmO0rSCT4pyJs1dGC/MTdKFeZNsFKd69IpQPvvRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13823 (0x35ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D3A1, serialNumber=0DE1679D21D39B61F02650A414EC9D0462C5E418 Validity Not Before: Jul 28 14:27:53 2026 GMT Not After : Aug 4 14:27:53 2026 GMT Subject: CN=6a68bc69-7554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:14:89:09:e7:0f:8d:18:58:80:0b:c1:84: 92:7d:9a:03:a7:a7:2d:d8:90:7d:59:0b:18:b0:c9: 46:b3:ba:ad:fa:5b:c2:38:05:fa:b2:9d:16:f4:7f: 4f:bf:bb:8a:ba:b0:d1:9d:52:2e:46:6b:71:a5:35: 7e:46:4e:a9:a6:b6:a2:ed:1e:1a:24:10:5a:78:52: 83:9c:c6:85:78:23:ca:f6:c6:11:bc:17:c2:ef:83: cd:09:c1:f4:dc:23:37:5c:2f:5c:2e:86:1b:e7:6e: e2:d2:44:06:42:35:82:6c:f4:f6:30:27:17:51:fa: 85:38:29:50:47:af:af:3b:a1:25:ab:02:b7:da:a1: 6f:b0:04:91:0f:95:59:47:72:f5:c1:af:78:bb:58: 9a:38:6b:6d:54:86:6c:af:02:60:a0:76:b1:73:74: b9:43:49:1f:5f:86:9f:a8:09:a1:b0:e7:21:23:48: b5:95:d7:ba:46:c7:bf:00:fd:dd:f5:30:1b:f8:04: 25:a4:28:43:a9:eb:35:26:9d:6d:29:78:08:44:8b: 33:b8:c0:8f:4d:e3:66:a1:fd:2b:58:99:d6:8a:c3: 17:76:01:45:6b:56:0b:f3:1a:2c:00:39:34:cf:1c: 69:7b:45:41:0b:0a:cc:43:39:b5:bc:de:2e:cc:2d: fb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8B:27:8C:B2:5C:03:80:D0:9B:6A:5F:AA:30:8E:4A:81:E3:1D:87 X509v3 Authority Key Identifier: keyid:0D:E1:67:9D:21:D3:9B:61:F0:26:50:A4:14:EC:9D:04:62:C5:E4:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A1/607AE9541D8611E299BA94DD08B02CD2/DeFnnSHTm2HwJlCkFOydBGLF5Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b8:c0:50:f5:3c:19:b4:79:37:30:dd:da:d0:2e:7e:12:59: 69:b6:25:6e:b7:89:6f:07:dc:31:d3:f8:0c:cc:f8:71:a9:3a: e7:d7:71:78:7a:1c:46:2d:48:78:96:d1:c1:f4:d1:b9:59:fc: d6:c2:a9:2e:4d:85:94:1e:fc:1e:82:b0:22:c6:68:d8:fc:55: 94:84:63:90:bf:a4:c1:75:21:ad:9b:40:7a:0a:b2:a1:79:0f: 6f:96:14:10:2a:1d:21:2b:ff:25:23:f3:ef:5e:4f:c3:79:61: ca:3a:7f:40:03:6f:df:3b:65:3b:47:22:98:9f:90:ab:fb:7f: f2:f2:bc:3e:91:8d:36:fd:25:5e:07:31:4d:c8:47:42:cc:2c: 6b:53:49:e5:a4:27:1c:20:e4:27:78:5a:cd:21:56:23:15:b8: b8:14:a8:7d:60:38:43:60:78:8e:a1:70:b8:82:d0:8d:ba:6a: 2b:a5:89:cc:d8:52:05:a0:5d:ea:ab:a2:b0:e9:12:bb:1f:ae: a2:3b:09:a3:82:39:be:da:96:8a:7f:73:bb:bc:66:26:1d:52: 4e:40:e2:04:9b:7c:05:fa:13:94:3f:b8:a7:0f:84:14:69:83: 1b:5d:46:d9:c5:bf:e7:7d:68:49:bd:76:07:28:f2:03:2f:dd: da:43:64:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QzQTExMTAvBgNVBAUTKDBERTE2NzlEMjFEMzlCNjFGMDI2NTBBNDE0RUM5RDA0 NjJDNUU0MTgwHhcNMjYwNzI4MTQyNzUzWhcNMjYwODA0MTQyNzUzWjAYMRYwFAYD VQQDEw02YTY4YmM2OS03NTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmEUiQnnD40YWIALwYSSfZoDp6ct2JB9WQsYsMlGs7qt+lvCOAX6sp0W9H9P v7uKurDRnVIuRmtxpTV+Rk6pprai7R4aJBBaeFKDnMaFeCPK9sYRvBfC74PNCcH0 3CM3XC9cLoYb527i0kQGQjWCbPT2MCcXUfqFOClQR6+vO6ElqwK32qFvsASRD5VZ R3L1wa94u1iaOGttVIZsrwJgoHaxc3S5Q0kfX4afqAmhsOchI0i1lde6Rse/AP3d 9TAb+AQlpChDqes1Jp1tKXgIRIszuMCPTeNmof0rWJnWisMXdgFFa1YL8xosADk0 zxxpe0VBCwrMQzm1vN4uzC37gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+LJ4yy XAOA0JtqX6owjkqB4x2HMB8GA1UdIwQYMBaAFA3hZ50h05th8CZQpBTsnQRixeQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDNBMS82MDdBRTk1NDFE ODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0ySHdKbENrRk95ZEJHTEY1 QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RlRm5uU0hUbTJId0psQ2tGT3lkQkdMRjVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDNBMS82MDdBRTk1NDFEODYxMUUyOTlCQTk0REQwOEIwMkNEMi9EZUZublNIVG0y SHdKbENrRk95ZEJHTEY1QmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLjAUPU8GbR5NzDd2tAufhJZabYlbreJbwfcMdP4DMz4cak659dxeHocRi1I eJbRwfTRuVn81sKpLk2FlB78HoKwIsZo2PxVlIRjkL+kwXUhrZtAegqyoXkPb5YU ECodISv/JSPz715Pw3lhyjp/QANv3ztlO0cimJ+Qq/t/8vK8PpGNNv0lXgcxTchH Qswsa1NJ5aQnHCDkJ3hazSFWIxW4uBSofWA4Q2B4jqFwuILQjbpqK6WJzNhSBaBd 6quisOkSux+uojsJo4I5vtqWin9zu7xmJh1STkDiBJt8BfoTlD+4pw+EFGmDG11G 2cW/531oSb12ByjyAy/d2kNkSg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:25:53 2026 by rpki-client