$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft File: DNZOS9b605fHRxEYooA7h90sHVM.mft (raw, json) Hash identifier: 2ibJiIQhIEdsjcqd4pfECl70SgskiqRc0yyRdZx3XXs= Subject key identifier: 91:B3:16:EF:EB:2F:49:68:65:D8:EA:FE:BF:FB:4A:63:EA:D7:74:91 Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft Manifest number: 0627 Signing time: Sun 26 Jul 2026 23:39:37 +0000 Manifest this update: Sun 26 Jul 2026 23:39:36 +0000 Manifest next update: Sun 02 Aug 2026 23:39:36 +0000 Files and hashes: 1: DNZOS9b605fHRxEYooA7h90sHVM.crl (hash: ytVzF+JJYScIlqg8Xe69qPWPX5F61W/qKVY7GPRVVWY=) 2: CBB9F6766CE211EEA9499734C4F9AE02.roa (hash: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM=) 3: 632B0D382CE911F189BCFB9BA3833773.roa (hash: u9WZKjHsBFVMQNlf3mJaNZybmCa5wwJrixJxYO6Dng0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Jul 26 23:39:36 2026 GMT Not After : Aug 2 23:39:36 2026 GMT Subject: CN=6a669ab8-5278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:9c:44:6d:48:d6:de:82:58:d1:89:5f:4a: d3:2b:47:53:c3:4d:b6:b1:d8:f5:88:6d:26:01:21: a5:25:7a:00:76:c3:17:cd:c3:6c:c3:3e:9b:d5:1c: 0a:c4:c4:47:9e:0c:cf:7b:c5:45:97:9e:d9:21:e9: af:7f:0b:87:f2:c2:27:98:9d:66:82:ac:52:b0:60: 40:1f:de:2b:b5:41:bc:1c:bd:17:56:be:27:c3:e5: 47:24:96:da:43:97:d3:d6:99:83:04:23:70:7e:5d: 99:30:ec:a4:a9:c1:d9:c6:b1:49:20:2a:7e:df:d7: 0f:07:c6:25:9f:8f:7e:8d:c6:00:05:a7:78:2c:df: f7:8d:e7:4d:c5:52:a3:40:93:62:ff:71:b5:fb:b3: 2d:33:5a:37:f7:15:fe:8f:2f:c2:57:59:05:76:ff: b9:df:b5:c9:4f:c4:73:5c:62:22:f1:a1:95:56:51: 3c:16:1d:17:b6:d0:43:63:cc:ad:da:42:db:67:40: 81:dd:3a:3b:c3:bc:81:2f:89:01:6a:51:1d:f6:d6: 1f:bb:de:9e:a0:f6:e9:34:76:4d:15:90:01:77:3a: 3a:40:6d:3b:f0:45:39:fa:67:d6:76:a0:f0:27:5a: 1d:b8:cd:d8:87:f4:cf:e1:54:4a:87:90:44:61:29: 56:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B3:16:EF:EB:2F:49:68:65:D8:EA:FE:BF:FB:4A:63:EA:D7:74:91 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:33:92:f4:19:24:98:aa:92:0d:91:c1:5c:cb:0e:ad:c5:72: 46:37:ce:19:d9:30:19:3b:9b:a0:ee:b1:20:0e:1e:1b:2b:98: 7f:ac:30:93:81:4b:1e:24:c8:60:fa:03:70:5f:ae:28:5d:3c: 48:8f:c0:a5:10:c0:9b:3e:c0:91:62:63:63:aa:f4:44:e7:03: 1a:de:12:52:42:27:ac:53:b0:da:29:79:9d:c6:85:77:4d:df: 66:0c:42:8d:fa:d8:5a:1f:d5:fc:5d:d8:12:21:19:25:5d:9b: a4:03:ec:8d:a6:08:5f:f2:cc:da:96:64:71:1a:62:b9:1e:2f: 3a:51:57:48:d6:e9:21:81:f1:ff:3f:1a:14:cc:32:f0:53:28: 72:42:4e:86:5c:8d:82:48:91:49:ea:c2:75:76:c9:37:e5:e8: fd:4c:1f:0d:09:ac:07:2a:4d:d6:07:d6:f1:a9:eb:0e:3d:c5: b4:60:82:d9:ce:f3:51:08:23:6f:be:e1:5b:72:86:b2:37:88: 0b:59:ee:c4:4c:8a:c4:4c:8d:2f:77:23:dd:ad:8c:9c:dd:13: 94:d7:9f:ed:0d:45:15:01:a4:7c:e0:63:e2:62:97:6a:26:09: 2a:e3:61:f5:76:61:3b:fa:49:72:ce:bd:61:7e:ef:e7:46:fc: b6:7a:1c:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjYwNzI2MjMzOTM2WhcNMjYwODAyMjMzOTM2WjAYMRYwFAYD VQQDEw02YTY2OWFiOC01Mjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0WcRG1I1t6CWNGJX0rTK0dTw022sdj1iG0mASGlJXoAdsMXzcNswz6b1RwK xMRHngzPe8VFl57ZIemvfwuH8sInmJ1mgqxSsGBAH94rtUG8HL0XVr4nw+VHJJba Q5fT1pmDBCNwfl2ZMOykqcHZxrFJICp+39cPB8Yln49+jcYABad4LN/3jedNxVKj QJNi/3G1+7MtM1o39xX+jy/CV1kFdv+537XJT8RzXGIi8aGVVlE8Fh0XttBDY8yt 2kLbZ0CB3To7w7yBL4kBalEd9tYfu96eoPbpNHZNFZABdzo6QG078EU5+mfWdqDw J1oduM3Yh/TP4VRKh5BEYSlWXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGzFu/r L0loZdjq/r/7SmPq13SRMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTE1MS8xMkFDRDZCQUY0REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1 ZkhSeEVZb29BN2g5MHNIVk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzzOS9BkkmKqSDZHBXMsOrcVyRjfOGdkwGTuboO6xIA4eGyuYf6wwk4FLHiTI YPoDcF+uKF08SI/ApRDAmz7AkWJjY6r0ROcDGt4SUkInrFOw2il5ncaFd03fZgxC jfrYWh/V/F3YEiEZJV2bpAPsjaYIX/LM2pZkcRpiuR4vOlFXSNbpIYHx/z8aFMwy 8FMockJOhlyNgkiRSerCdXbJN+Xo/UwfDQmsBypN1gfW8anrDj3FtGCC2c7zUQgj b77hW3KGsjeIC1nuxEyKxEyNL3cj3a2MnN0TlNef7Q1FFQGkfOBj4mKXaiYJKuNh 9XZhO/pJcs69YX7v50b8tnoccA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:31:28 2026 by rpki-client