$ rpki-client -vvf rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft File: dd3NDNRiWKwZGsOQoskl2MA1qFc.mft (raw, json) Hash identifier: CCYk+xu61qTU6OeUWheAcfQQOGH0OQ0afxDuyNutR+Y= Subject key identifier: 1A:A7:34:AF:34:D3:D3:A4:22:DC:88:FC:B2:77:70:85:E4:EB:D1:7A Authority key identifier: 75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 Certificate issuer: /CN=A917E04F/serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Certificate serial: 0F5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft Manifest number: 0F53 Signing time: Tue 28 Jul 2026 17:39:23 +0000 Manifest this update: Tue 28 Jul 2026 17:39:23 +0000 Manifest next update: Tue 04 Aug 2026 17:39:23 +0000 Files and hashes: 1: dd3NDNRiWKwZGsOQoskl2MA1qFc.crl (hash: 0kfnklkr0pyV0s08TkArMI7B0nZYfWcsy9/cBjhHY+A=) 2: 9C9389D4970311E9B7D3DE5AC4F9AE02.roa (hash: epuRJDNpLBRjInLcr8wNqAbigHvQWwNVcLarPZoddFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3934 (0xf5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E04F, serialNumber=75DDCD0CD46258AC191AC390A2C925D8C035A857 Validity Not Before: Jul 28 17:39:23 2026 GMT Not After : Aug 4 17:39:23 2026 GMT Subject: CN=6a68e94b-1226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:41:7d:08:14:42:ef:84:b1:3b:92:a5:ea: 57:9e:2f:48:93:47:9a:37:bc:2d:ff:57:9a:d6:35: 08:80:bd:d3:d1:ec:2b:0a:bb:96:fe:f4:7c:64:07: 8e:92:a2:cc:36:10:ba:44:61:80:d0:a0:f3:ca:f4: b4:03:6d:7c:a4:16:ee:6b:92:15:fc:98:2f:21:d5: e1:92:e2:3b:d1:30:ce:d6:13:30:b6:f8:e7:13:75: d7:50:d6:05:f1:61:10:1a:c5:b8:66:82:6d:c5:53: 35:b1:f3:42:7e:44:10:cb:7a:d9:c5:fa:b0:2f:8e: bf:a6:e9:97:2f:75:25:48:04:79:af:80:fd:d3:b2: c9:56:2c:0c:68:54:70:ff:c4:a5:d4:ae:a8:9b:27: 31:c7:99:25:a2:b0:3d:37:5a:3a:a6:ec:e5:7c:01: c8:e1:5a:97:4f:7e:34:0a:79:37:fd:6a:80:92:60: a7:d1:b6:e9:9e:40:82:3c:df:ed:ed:4c:2b:e3:28: c1:e2:2b:7a:b2:59:25:76:4b:99:0f:0c:0f:68:62: c9:12:58:cc:ce:c8:a4:ac:4f:75:ad:0d:5c:79:36: 8d:78:86:b6:cd:96:20:82:ab:67:b8:d5:ac:32:f4: 0c:5e:ec:fb:29:3c:2f:7e:35:99:9a:42:e0:a0:a0: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A7:34:AF:34:D3:D3:A4:22:DC:88:FC:B2:77:70:85:E4:EB:D1:7A X509v3 Authority Key Identifier: keyid:75:DD:CD:0C:D4:62:58:AC:19:1A:C3:90:A2:C9:25:D8:C0:35:A8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dd3NDNRiWKwZGsOQoskl2MA1qFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E04F/418537F4970311E9B4B7B25AC4F9AE02/dd3NDNRiWKwZGsOQoskl2MA1qFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:29:a5:3f:99:17:67:28:35:06:d1:f7:be:6c:ad:00:86:df: 51:7f:8f:3e:11:ff:b3:6e:f9:48:32:ba:d5:79:9b:87:48:24: 53:5f:11:d1:2e:42:7b:cf:ce:4a:40:fb:1d:22:b0:f2:6f:18: e3:40:2f:02:13:41:84:91:a4:f9:3d:4b:fb:b3:09:b4:b7:9d: ac:b6:e7:a4:c7:33:ff:96:ce:2d:87:59:20:55:7c:45:3f:15: 8e:53:da:1f:51:fb:eb:af:1c:06:90:4c:2b:22:b2:5f:fb:1b: 32:df:86:b7:c0:c6:51:39:e6:d6:f3:83:e4:88:b5:f6:ca:5d: c5:4c:4e:ce:3b:fc:62:7b:45:bb:3a:19:24:b0:0d:5d:f4:e8: a4:e7:38:00:9f:60:76:8d:70:1b:56:6c:09:05:d2:6c:9b:ca: 8b:82:e9:47:62:a7:ad:bf:f4:f6:f7:23:9c:19:0a:09:1c:11: 18:e3:c1:90:43:30:c7:85:cf:f1:4f:b1:32:2b:33:4f:f8:80: 43:46:19:4c:c1:94:15:2a:80:d7:ed:8d:c7:5f:75:e9:a9:e1: 8f:15:c4:7e:05:0d:99:7e:99:ba:63:79:b1:e5:6d:80:90:5a: de:40:48:b5:5e:16:b8:3c:3a:52:43:61:e0:38:19:38:5c:db: ee:80:81:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwNEYxMTAvBgNVBAUTKDc1RERDRDBDRDQ2MjU4QUMxOTFBQzM5MEEyQzkyNUQ4 QzAzNUE4NTcwHhcNMjYwNzI4MTczOTIzWhcNMjYwODA0MTczOTIzWjAYMRYwFAYD VQQDEw02YTY4ZTk0Yi0xMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAub1BfQgUQu+EsTuSpepXni9Ik0eaN7wt/1ea1jUIgL3T0ewrCruW/vR8ZAeO kqLMNhC6RGGA0KDzyvS0A218pBbua5IV/JgvIdXhkuI70TDO1hMwtvjnE3XXUNYF 8WEQGsW4ZoJtxVM1sfNCfkQQy3rZxfqwL46/pumXL3UlSAR5r4D907LJViwMaFRw /8Sl1K6omycxx5klorA9N1o6puzlfAHI4VqXT340Cnk3/WqAkmCn0bbpnkCCPN/t 7Uwr4yjB4it6slkldkuZDwwPaGLJEljMzsikrE91rQ1ceTaNeIa2zZYggqtnuNWs MvQMXuz7KTwvfjWZmkLgoKCeXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqnNK80 09OkItyI/LJ3cIXk69F6MB8GA1UdIwQYMBaAFHXdzQzUYlisGRrDkKLJJdjANahX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTA0Ri80MTg1MzdGNDk3 MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdLd1pHc09Rb3NrbDJNQTFx RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkM05ETlJpV0t3WkdzT1Fvc2tsMk1BMXFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTA0Ri80MTg1MzdGNDk3MDMxMUU5QjRCN0IyNUFDNEY5QUUwMi9kZDNORE5SaVdL d1pHc09Rb3NrbDJNQTFxRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaCmlP5kXZyg1BtH3vmytAIbfUX+PPhH/s275SDK61Xmbh0gkU18R0S5Ce8/O SkD7HSKw8m8Y40AvAhNBhJGk+T1L+7MJtLedrLbnpMcz/5bOLYdZIFV8RT8VjlPa H1H7668cBpBMKyKyX/sbMt+Gt8DGUTnm1vOD5Ii19spdxUxOzjv8YntFuzoZJLAN XfTopOc4AJ9gdo1wG1ZsCQXSbJvKi4LpR2Knrb/09vcjnBkKCRwRGOPBkEMwx4XP 8U+xMiszT/iAQ0YZTMGUFSqA1+2Nx1916anhjxXEfgUNmX6ZumN5seVtgJBa3kBI tV4WuDw6UkNh4DgZOFzb7oCBww== -----END CERTIFICATE-----Generated at Tue Jul 28 22:30:09 2026 by rpki-client