$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: Q2SoSvBQCfK7G0JXTzOmFe8vBAK9xwR905NQSl5O4Kc= Subject key identifier: 9D:66:90:11:BE:E7:9C:EF:FD:18:0E:96:6C:38:12:22:12:00:FC:51 Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 0236 Signing time: Thu 23 Jul 2026 03:47:43 +0000 Manifest this update: Thu 23 Jul 2026 03:47:43 +0000 Manifest next update: Thu 30 Jul 2026 03:47:43 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: w95scxUertzSL5znEBToojHScAAPk0yB8/mYqk3v4ls=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: X00gSuzOOkYP4DLmpOt/0UBFhvldg0Co5j7FLcwODFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Jul 23 03:47:43 2026 GMT Not After : Jul 30 03:47:43 2026 GMT Subject: CN=6a618edf-689b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:d7:5d:b1:2f:c3:e2:fe:32:9f:fb:b4:ab: 28:de:57:30:34:70:e1:08:f0:99:f3:cf:8e:b5:6d: 8d:e1:9a:70:3f:ca:a5:81:f2:ee:60:ed:8b:53:8e: 09:4e:16:25:c1:7f:7b:4b:c9:f3:3a:d4:9a:96:91: 89:89:c5:65:64:f3:27:8f:6a:e9:84:32:44:a2:d7: dc:5e:b3:8e:72:b2:28:2f:3f:f0:51:34:95:da:55: a6:94:d5:2c:ab:69:2b:7d:f5:15:a4:39:ba:e5:27: 12:f8:c2:46:ad:66:5f:56:de:4e:04:f6:db:30:8f: 97:42:c3:53:4a:4e:16:ae:54:82:65:ef:de:be:4b: c3:2d:51:3b:90:13:56:bf:34:6e:2f:81:c4:47:d1: ef:7e:f3:d4:c9:af:07:e5:24:61:d8:0d:64:dd:87: a3:dd:b0:ae:7a:c5:af:ef:e8:b6:b4:1a:ce:f1:60: eb:fa:3f:fe:4d:34:a9:75:5a:0c:b7:0d:0d:85:eb: ab:f6:9b:35:27:36:33:23:de:e3:72:a9:cd:c0:22: 70:5b:96:e0:e0:81:be:1f:51:c4:b2:59:7d:4d:5b: 4f:97:49:7e:71:bc:aa:39:29:4f:80:7c:e3:cd:88: 2d:a4:54:0b:1f:36:9f:bd:1c:b4:20:79:e3:a5:26: ba:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:66:90:11:BE:E7:9C:EF:FD:18:0E:96:6C:38:12:22:12:00:FC:51 X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:7b:e9:c1:fc:ef:39:44:ac:10:62:0b:b6:bc:05:4b:df:71: 34:d4:6e:ab:6d:d9:be:d5:79:d3:3e:49:58:a7:6b:0c:4b:50: 84:bb:15:06:4f:9f:52:f0:62:f2:63:97:5e:6a:90:f2:d0:92: 84:53:b8:5d:dd:b9:43:59:fa:4b:8a:75:d5:0e:8f:02:e4:8e: b6:2e:11:a2:be:af:e7:f0:ef:37:cd:e8:06:7e:13:ff:57:55: f6:f6:81:58:08:78:fe:5c:29:89:51:6f:c9:95:00:cc:8f:78: b8:6f:71:d7:29:c3:b0:a5:43:42:3e:e3:1f:8c:3e:81:6c:2e: 7a:c6:38:8a:b2:19:91:d0:1d:03:99:2a:d5:2e:4e:48:10:f7: 72:c9:9b:32:8f:1c:41:8b:66:fd:e3:9d:ee:84:61:5a:e9:97: 63:30:39:75:ca:2a:1e:52:a8:c5:12:b5:42:85:3e:fa:30:32: 6d:f7:ff:14:ad:b3:3c:8e:7b:9f:95:a1:d3:df:bf:29:89:0a: 2b:1e:b4:e4:60:03:49:f6:18:c6:b3:b2:52:8f:35:f8:a8:45: 6e:17:35:d2:e7:8f:90:90:26:08:75:8b:bb:6e:95:57:f6:18: 42:ea:48:b9:1d:f2:9e:bd:65:e9:1d:28:f7:5f:67:24:3c:a4: a3:06:5e:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjYwNzIzMDM0NzQzWhcNMjYwNzMwMDM0NzQzWjAYMRYwFAYD VQQDEw02YTYxOGVkZi02ODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9rXXbEvw+L+Mp/7tKso3lcwNHDhCPCZ88+OtW2N4ZpwP8qlgfLuYO2LU44J ThYlwX97S8nzOtSalpGJicVlZPMnj2rphDJEotfcXrOOcrIoLz/wUTSV2lWmlNUs q2krffUVpDm65ScS+MJGrWZfVt5OBPbbMI+XQsNTSk4WrlSCZe/evkvDLVE7kBNW vzRuL4HER9HvfvPUya8H5SRh2A1k3Yej3bCuesWv7+i2tBrO8WDr+j/+TTSpdVoM tw0Nheur9ps1JzYzI97jcqnNwCJwW5bg4IG+H1HEsll9TVtPl0l+cbyqOSlPgHzj zYgtpFQLHzafvRy0IHnjpSa6CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1mkBG+ 55zv/RgOlmw4EiISAPxRMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARXvpwfzvOUSsEGILtrwFS99xNNRuq23ZvtV50z5JWKdrDEtQhLsVBk+fUvBi 8mOXXmqQ8tCShFO4Xd25Q1n6S4p11Q6PAuSOti4Ror6v5/DvN83oBn4T/1dV9vaB WAh4/lwpiVFvyZUAzI94uG9x1ynDsKVDQj7jH4w+gWwuesY4irIZkdAdA5kq1S5O SBD3csmbMo8cQYtm/eOd7oRhWumXYzA5dcoqHlKoxRK1QoU++jAybff/FK2zPI57 n5Wh09+/KYkKKx605GADSfYYxrOyUo81+KhFbhc10uePkJAmCHWLu26VV/YYQupI uR3ynr1l6R0o919nJDykowZecw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:13:01 2026 by rpki-client