$ rpki-client -vvf rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft File: DZhBj4TCLONROV4eXE1dka5g_h8.mft (raw, json) Hash identifier: HJQhJ76ZQRV5nt7V4RV59bYgKls/ewkuOYWIp992slE= Subject key identifier: C2:15:94:79:75:B7:96:2C:B9:A1:02:88:72:92:2A:91:A2:BF:1E:4B Authority key identifier: 0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F Certificate issuer: /CN=A91DED5A/serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft Manifest number: 03FA Signing time: Mon 27 Jul 2026 01:32:16 +0000 Manifest this update: Mon 27 Jul 2026 01:32:15 +0000 Manifest next update: Mon 03 Aug 2026 01:32:15 +0000 Files and hashes: 1: DZhBj4TCLONROV4eXE1dka5g_h8.crl (hash: 0l8BrAR2RbhiJsT8FUawWbXVRPYHG8Bc4BQqWuwc8UU=) 2: C7513D2484CC11F18B5F25E597A30FBC.roa (hash: qjU7k0c2AFRf9V00UA42zSZWvTGD4WQ9W16GHJB9dqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DED5A, serialNumber=0D98418F84C22CE351395E1E5C4D5D91AE60FE1F Validity Not Before: Jul 27 01:32:15 2026 GMT Not After : Aug 3 01:32:15 2026 GMT Subject: CN=6a66b51f-40a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:75:58:8f:fc:60:57:95:9a:91:c5:1f:35: 02:13:a5:b2:28:54:a4:91:f6:35:4c:46:24:d5:d3: 08:2e:c0:3d:23:b4:fd:98:fe:bf:a3:72:f8:da:e3: 18:e7:c0:ac:4e:d0:51:f3:90:76:59:4d:c8:55:8a: b0:4d:ed:15:d4:bd:67:80:31:d8:bc:9c:f7:0f:0b: c0:37:ac:c0:ed:8e:54:13:8b:d4:09:91:4c:df:26: 98:9d:b4:5d:7f:39:ea:ba:9c:ce:e9:8e:ff:38:14: 33:db:ec:0a:f4:c7:19:77:ee:8a:4b:b5:18:d8:c6: cf:1c:45:c7:81:fd:a6:9a:86:b8:16:a6:d6:9e:38: 7b:23:e4:a4:7b:4a:18:d0:7a:d4:24:5d:c9:a6:9e: 62:99:bb:2b:85:e8:91:eb:92:fa:4c:c9:ce:47:25: 8b:c6:7f:52:be:b3:f1:0b:40:7f:f3:bb:0b:16:96: 4a:09:de:3c:6e:22:57:4a:e6:56:fe:69:06:ec:ff: 39:b0:57:69:20:28:be:7c:2a:05:f6:16:98:80:f5: 6e:1f:a4:f1:a5:70:ca:83:15:5a:2d:8c:ef:ec:30: 77:9b:f7:59:a4:b6:f1:67:92:cb:b5:ea:e8:0c:c2: cf:91:7a:f0:ef:36:28:21:f4:09:a2:f3:a4:3d:8b: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:15:94:79:75:B7:96:2C:B9:A1:02:88:72:92:2A:91:A2:BF:1E:4B X509v3 Authority Key Identifier: keyid:0D:98:41:8F:84:C2:2C:E3:51:39:5E:1E:5C:4D:5D:91:AE:60:FE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DZhBj4TCLONROV4eXE1dka5g_h8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DED5A/5DEDA028CF7E11EC932E024AC4F9AE02/DZhBj4TCLONROV4eXE1dka5g_h8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7c:14:a9:9a:03:76:49:0c:78:05:3c:05:65:7a:24:fd:5c: 43:ee:68:5c:cb:ca:d0:af:19:38:1c:e1:17:2d:81:02:ac:88: 9e:fe:cb:0e:83:99:e4:6f:ab:57:5b:61:dc:70:9a:32:27:95: 5b:a5:be:4c:cd:68:28:7e:6e:38:a6:ec:94:eb:54:41:69:80: fb:09:58:b9:0d:59:4c:57:12:e9:e9:75:a5:02:b4:a5:f8:46: 05:b9:e2:8f:a6:9e:f7:d8:60:e9:a7:fe:89:d4:97:9d:84:8e: 33:49:03:7f:04:70:da:da:52:74:19:2f:72:67:5a:15:c2:1d: 6a:7c:b8:86:8f:75:15:d4:75:35:62:d8:94:e8:8a:51:ed:ac: 0c:8d:e9:46:bd:d4:d9:02:72:0d:00:89:70:5d:9d:8d:fa:3c: 3f:7d:c7:b8:ee:8f:a7:dd:08:24:c5:1a:fa:e0:c4:96:ab:d0: 02:83:c3:65:b2:4b:21:a5:c1:d2:02:36:e2:62:36:0b:4f:97: e2:4f:fc:25:bc:2c:db:88:62:fb:2a:b7:19:02:2c:f0:67:0f: 0a:25:06:30:6a:f3:52:8f:14:e6:3c:9c:1d:70:d8:48:4d:7a: 98:eb:00:ad:42:ad:ba:2b:e2:15:9d:9c:64:96:3d:d0:5b:89: 17:1b:79:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVENUExMTAvBgNVBAUTKDBEOTg0MThGODRDMjJDRTM1MTM5NUUxRTVDNEQ1RDkx QUU2MEZFMUYwHhcNMjYwNzI3MDEzMjE1WhcNMjYwODAzMDEzMjE1WjAYMRYwFAYD VQQDEw02YTY2YjUxZi00MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtst1WI/8YFeVmpHFHzUCE6WyKFSkkfY1TEYk1dMILsA9I7T9mP6/o3L42uMY 58CsTtBR85B2WU3IVYqwTe0V1L1ngDHYvJz3DwvAN6zA7Y5UE4vUCZFM3yaYnbRd fznqupzO6Y7/OBQz2+wK9McZd+6KS7UY2MbPHEXHgf2mmoa4FqbWnjh7I+Ske0oY 0HrUJF3Jpp5imbsrheiR65L6TMnORyWLxn9SvrPxC0B/87sLFpZKCd48biJXSuZW /mkG7P85sFdpICi+fCoF9haYgPVuH6TxpXDKgxVaLYzv7DB3m/dZpLbxZ5LLtero DMLPkXrw7zYoIfQJovOkPYteNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIVlHl1 t5YsuaECiHKSKpGivx5LMB8GA1UdIwQYMBaAFA2YQY+EwizjUTleHlxNXZGuYP4f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUQ1QS81REVEQTAyOENG N0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xPTlJPVjRlWEUxZGthNWdf aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RaaEJqNFRDTE9OUk9WNGVYRTFka2E1Z19oOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUQ1QS81REVEQTAyOENGN0UxMUVDOTMyRTAyNEFDNEY5QUUwMi9EWmhCajRUQ0xP TlJPVjRlWEUxZGthNWdfaDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASnwUqZoDdkkMeAU8BWV6JP1cQ+5oXMvK0K8ZOBzhFy2BAqyInv7LDoOZ5G+r V1th3HCaMieVW6W+TM1oKH5uOKbslOtUQWmA+wlYuQ1ZTFcS6el1pQK0pfhGBbni j6ae99hg6af+idSXnYSOM0kDfwRw2tpSdBkvcmdaFcIdany4ho91FdR1NWLYlOiK Ue2sDI3pRr3U2QJyDQCJcF2djfo8P33HuO6Pp90IJMUa+uDElqvQAoPDZbJLIaXB 0gI24mI2C0+X4k/8Jbws24hi+yq3GQIs8GcPCiUGMGrzUo8U5jycHXDYSE16mOsA rUKtuiviFZ2cZJY90FuJFxt5og== -----END CERTIFICATE-----Generated at Tue Jul 28 21:50:07 2026 by rpki-client