$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft File: dNRNlor0Y--xfAgNX60BDErAl6o.mft (raw, json) Hash identifier: bEzcT7jvbblQP6e2dWkuH32IRrHKLeMMK7ZwLv/9Nnc= Subject key identifier: 37:4A:9E:5B:66:33:34:5F:E1:99:99:8F:ED:82:41:93:26:42:3F:BE Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft Manifest number: 071F Signing time: Tue 28 Jul 2026 19:31:25 +0000 Manifest this update: Tue 28 Jul 2026 19:31:24 +0000 Manifest next update: Tue 04 Aug 2026 19:31:24 +0000 Files and hashes: 1: dNRNlor0Y--xfAgNX60BDErAl6o.crl (hash: xyArKQK0WChcidE/9UvlucnAuF0RnVQAuGm8d/I5Htc=) 2: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (hash: YIMgtn+dQ8yJTeLxcT1UUhFPvR85/hE3R6ckZdnpSnk=) 3: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (hash: Dc/AP1q1880Z3HHIDD3oFPRelHNNWO5cCeIAhTTwAeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Jul 28 19:31:24 2026 GMT Not After : Aug 4 19:31:24 2026 GMT Subject: CN=6a69038c-c2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:aa:e5:d2:f2:36:bb:c8:bf:59:c9:cb:02: 79:27:e3:25:59:6c:48:ed:56:e0:3d:7d:79:94:2a: 9b:de:57:97:1a:59:57:8d:65:cf:71:ce:44:ea:c0: d0:da:21:06:0b:f2:b5:65:01:b1:55:35:a9:7f:02: 7a:ce:46:4c:3b:0c:ce:a7:e3:71:a4:d9:4f:fe:37: 06:5b:32:ba:a9:58:a8:21:d4:68:1e:d3:32:2a:24: 2e:7c:a1:63:4c:1a:0b:c9:88:4d:2c:60:ca:b4:5a: 26:a0:c6:7f:65:a5:9b:58:3a:b7:c4:65:81:65:4a: 76:1e:71:83:34:03:8b:82:07:74:89:db:48:7c:5f: 94:be:d6:b1:ee:a5:88:e5:e9:ab:08:0e:ea:e2:8b: 7e:12:75:24:83:b5:62:cc:48:61:11:2b:ac:1a:97: 32:f1:d7:2d:3a:2d:80:77:c9:cb:6e:f5:6f:24:d6: a6:d3:59:43:93:65:4a:d9:f3:ac:fa:b0:3a:0d:3e: be:2f:72:c0:a2:09:07:3b:88:12:69:b8:c4:fb:0f: 33:7c:0a:bc:95:8c:02:be:76:c3:5f:bb:c2:3b:ed: 76:0e:35:62:55:4a:37:9c:fe:a1:b4:7f:5b:af:16: 9a:d9:52:25:39:d4:63:61:72:49:7a:58:df:ba:e3: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4A:9E:5B:66:33:34:5F:E1:99:99:8F:ED:82:41:93:26:42:3F:BE X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:97:82:fe:8a:41:a8:88:fe:8d:05:ee:31:a7:2c:72:cd:53: 16:59:bd:5b:66:f5:dd:30:ff:62:a9:1b:09:c0:7e:ff:67:6a: 25:98:ae:bf:01:bb:0d:ef:c2:7c:24:59:68:04:51:b6:08:bb: 61:5a:a3:b0:c2:15:13:84:cf:81:52:26:e0:fa:68:f3:b6:81: 9e:10:87:40:3a:6e:eb:12:d2:09:31:c5:10:61:1c:be:af:64: 24:7a:c7:ea:68:0f:09:68:0b:89:e5:ec:5c:20:4b:bf:eb:66: 1c:03:27:6e:87:a1:0d:66:5c:3b:38:a9:e1:b1:ec:82:9e:3a: e2:6d:c9:3a:40:36:2d:61:63:c2:3f:91:c8:32:bb:1c:58:56: de:e2:49:d2:73:5f:f5:eb:9f:fb:91:9a:6a:bc:56:85:24:09: 1f:61:d7:5d:c3:1d:0e:60:52:3d:b3:cd:14:92:a8:8e:a4:f7: cf:9e:20:ee:bb:a7:09:ef:47:72:56:2d:11:c8:4a:1a:03:a1: 4d:44:d2:d7:f3:ff:66:42:ba:75:a7:5f:cf:e1:31:45:23:13: 44:43:69:50:28:56:89:d8:4a:93:69:af:33:84:32:e3:80:fe: be:81:b0:f7:11:8d:2b:62:1d:33:ce:60:24:0f:db:e6:a0:82: 46:71:43:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjYwNzI4MTkzMTI0WhcNMjYwODA0MTkzMTI0WjAYMRYwFAYD VQQDEw02YTY5MDM4Yy1jMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyaq5dLyNrvIv1nJywJ5J+MlWWxI7VbgPX15lCqb3leXGllXjWXPcc5E6sDQ 2iEGC/K1ZQGxVTWpfwJ6zkZMOwzOp+NxpNlP/jcGWzK6qVioIdRoHtMyKiQufKFj TBoLyYhNLGDKtFomoMZ/ZaWbWDq3xGWBZUp2HnGDNAOLggd0idtIfF+Uvtax7qWI 5emrCA7q4ot+EnUkg7VizEhhESusGpcy8dctOi2Ad8nLbvVvJNam01lDk2VK2fOs +rA6DT6+L3LAogkHO4gSabjE+w8zfAq8lYwCvnbDX7vCO+12DjViVUo3nP6htH9b rxaa2VIlOdRjYXJJeljfuuNTdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdKnltm MzRf4ZmZj+2CQZMmQj++MB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC82RUZDMEJFRTk4NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFkt LXhmQWdOWDYwQkRFckFsNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATpeC/opBqIj+jQXuMacscs1TFlm9W2b13TD/YqkbCcB+/2dqJZiuvwG7De/C fCRZaARRtgi7YVqjsMIVE4TPgVIm4Ppo87aBnhCHQDpu6xLSCTHFEGEcvq9kJHrH 6mgPCWgLieXsXCBLv+tmHAMnboehDWZcOzip4bHsgp464m3JOkA2LWFjwj+RyDK7 HFhW3uJJ0nNf9euf+5GaarxWhSQJH2HXXcMdDmBSPbPNFJKojqT3z54g7runCe9H clYtEchKGgOhTUTS1/P/ZkK6dadfz+ExRSMTRENpUChWidhKk2mvM4Qy44D+voGw 9xGNK2IdM85gJA/b5qCCRnFD3Q== -----END CERTIFICATE-----Generated at Wed Jul 29 02:14:53 2026 by rpki-client