$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft File: DfmeMksOOlPo5W1wIP9vvFvxywI.mft (raw, json) Hash identifier: Wabz0ZTB586wmu18hmWE+4DVcjkNU4c/Mab7zkYAmgw= Subject key identifier: A5:2B:E8:9C:07:2D:2C:D6:E3:2D:AF:99:C8:04:E7:13:FC:C0:5E:25 Authority key identifier: 0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 Certificate issuer: /CN=A91D72CC/serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Certificate serial: 0ED0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft Manifest number: 0FF0 Signing time: Tue 28 Jul 2026 17:48:58 +0000 Manifest this update: Tue 28 Jul 2026 17:48:58 +0000 Manifest next update: Tue 04 Aug 2026 17:48:58 +0000 Files and hashes: 1: DfmeMksOOlPo5W1wIP9vvFvxywI.crl (hash: JfLqf6oBikybmHSKk8xTxmu2rKON9nW+QyFZWHfwJJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3792 (0xed0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=0DF99E324B0E3A53E8E56D7020FF6FBC5BF1CB02 Validity Not Before: Jul 28 17:48:58 2026 GMT Not After : Aug 4 17:48:58 2026 GMT Subject: CN=6a68eb8a-01e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:5b:88:50:63:05:44:e9:17:bb:94:1e:e0: 4f:fa:a2:b4:19:b2:c9:ca:e6:11:59:c2:b1:9b:ef: 4b:fa:cf:7f:d3:bd:bf:42:62:cc:48:22:d3:fa:c5: 47:fb:ab:f3:bd:a3:70:f1:d0:72:32:fc:24:e5:4e: 45:f2:d9:07:81:3d:ae:1d:c3:f6:1a:70:52:67:af: 53:9b:4c:ef:62:e6:2b:57:b7:6d:4c:18:53:66:53: 05:fc:1f:50:e9:87:3c:c2:fc:83:56:30:ef:d1:60: 8c:84:55:52:29:6c:ed:62:b0:85:a9:8e:f7:bf:49: 96:54:ab:43:7c:7c:14:58:89:ab:2e:d8:68:a6:5e: 67:3c:61:21:0d:f1:3f:ad:b9:a7:74:2a:be:43:48: c1:71:1d:ac:62:42:94:d2:5c:7a:66:97:7e:60:ec: f3:9b:a7:13:09:29:70:f9:36:e0:2d:13:5d:28:74: 44:1f:fd:f5:b3:2f:bd:e8:6f:99:e7:f2:48:c4:c3: 7c:ac:b2:04:63:3c:ce:b8:b4:33:7c:6f:0a:30:c1: 62:c1:18:c8:61:7d:96:69:52:31:20:a6:3d:7d:5b: 42:af:5d:64:63:a4:05:b8:7d:a9:8c:60:47:27:a3: 4d:f4:9a:0e:48:f2:92:6b:34:7d:1c:e5:3f:22:35: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2B:E8:9C:07:2D:2C:D6:E3:2D:AF:99:C8:04:E7:13:FC:C0:5E:25 X509v3 Authority Key Identifier: keyid:0D:F9:9E:32:4B:0E:3A:53:E8:E5:6D:70:20:FF:6F:BC:5B:F1:CB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfmeMksOOlPo5W1wIP9vvFvxywI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DfmeMksOOlPo5W1wIP9vvFvxywI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:a9:14:8b:ea:4b:6e:09:f9:b9:aa:32:ae:05:40:10:de:bf: 23:48:4f:cf:7b:ed:9d:31:d9:6b:26:a2:4e:58:9a:41:dd:53: 65:e0:d8:8b:6f:f4:8e:09:e2:9b:0f:bd:66:c9:e4:91:af:3f: f1:0b:03:41:14:0d:18:e9:ec:a2:34:3b:01:73:cf:bd:ae:62: 8d:33:f2:76:65:39:65:c5:62:ea:2d:86:32:3b:3d:b9:1c:fd: 1b:f5:2b:6c:2a:18:c8:c2:7c:9a:2c:aa:06:5a:11:30:62:b1: 4f:da:af:a3:78:d9:00:d1:28:9e:fa:06:18:44:e8:97:42:66: 11:d9:aa:fb:1a:47:60:7e:76:93:6e:0c:8e:21:ac:98:9c:f3: 23:45:30:15:d0:56:8e:2f:9c:fc:6b:9b:67:b9:f7:73:a2:79: 5b:a4:4a:82:0e:cf:a1:50:96:58:35:b9:eb:55:a1:2e:9c:ea: 6e:ce:3c:29:ee:0e:22:5b:bc:e8:8d:f9:1d:be:05:ac:4a:96: 57:a6:fb:f5:87:b8:2f:d9:28:7b:64:a0:6e:1d:49:23:3a:6c: 4c:74:b8:d1:83:84:a6:bb:34:c2:38:0f:be:88:ec:1f:2f:59: e1:92:b0:66:01:db:42:38:46:a7:17:7a:f6:7b:0e:2d:61:31: cf:b5:e4:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKDBERjk5RTMyNEIwRTNBNTNFOEU1NkQ3MDIwRkY2RkJD NUJGMUNCMDIwHhcNMjYwNzI4MTc0ODU4WhcNMjYwODA0MTc0ODU4WjAYMRYwFAYD VQQDEw02YTY4ZWI4YS0wMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2hbiFBjBUTpF7uUHuBP+qK0GbLJyuYRWcKxm+9L+s9/072/QmLMSCLT+sVH +6vzvaNw8dByMvwk5U5F8tkHgT2uHcP2GnBSZ69Tm0zvYuYrV7dtTBhTZlMF/B9Q 6Yc8wvyDVjDv0WCMhFVSKWztYrCFqY73v0mWVKtDfHwUWImrLthopl5nPGEhDfE/ rbmndCq+Q0jBcR2sYkKU0lx6Zpd+YOzzm6cTCSlw+TbgLRNdKHREH/31sy+96G+Z 5/JIxMN8rLIEYzzOuLQzfG8KMMFiwRjIYX2WaVIxIKY9fVtCr11kY6QFuH2pjGBH J6NN9JoOSPKSazR9HOU/IjWGLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUr6JwH LSzW4y2vmcgE5xP8wF4lMB8GA1UdIwQYMBaAFA35njJLDjpT6OVtcCD/b7xb8csC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09sUG81VzF3SVA5dnZGdnh5 d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RmbWVNa3NPT2xQbzVXMXdJUDl2dkZ2eHl3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi9EZm1lTWtzT09s UG81VzF3SVA5dnZGdnh5d0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy6kUi+pLbgn5uaoyrgVAEN6/I0hPz3vtnTHZayaiTliaQd1TZeDYi2/0jgni mw+9Zsnkka8/8QsDQRQNGOnsojQ7AXPPva5ijTPydmU5ZcVi6i2GMjs9uRz9G/Ur bCoYyMJ8miyqBloRMGKxT9qvo3jZANEonvoGGETol0JmEdmq+xpHYH52k24MjiGs mJzzI0UwFdBWji+c/GubZ7n3c6J5W6RKgg7PoVCWWDW561WhLpzqbs48Ke4OIlu8 6I35Hb4FrEqWV6b79Ye4L9koe2Sgbh1JIzpsTHS40YOEprs0wjgPvojsHy9Z4ZKw ZgHbQjhGpxd69nsOLWExz7XkjA== -----END CERTIFICATE-----Generated at Wed Jul 29 02:23:01 2026 by rpki-client