$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: oXtuJsHNXo6PZfEA9BT7YhzC21knird45Z/o9aFfuz4= Subject key identifier: 59:87:DD:00:41:25:D3:A8:C6:78:59:A5:09:60:80:B0:14:04:9C:28 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 15F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 15EA Signing time: Wed 22 Jul 2026 16:49:22 +0000 Manifest this update: Wed 22 Jul 2026 16:49:22 +0000 Manifest next update: Wed 29 Jul 2026 16:49:22 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: sdeRQYmnj5MVcBBYdcbDKbDIYgo+UAt0mWHojEXPDho=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5620 (0x15f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Jul 22 16:49:22 2026 GMT Not After : Jul 29 16:49:22 2026 GMT Subject: CN=6a60f492-262f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:26:a2:21:7d:b6:55:2b:87:19:cb:fc:c0:8e: ee:45:33:98:49:f3:ad:e6:80:73:78:c7:b2:ba:ca: be:f7:59:56:6a:1d:1c:b9:95:54:1d:47:6d:3f:96: b2:5f:81:84:6c:8e:36:a8:1f:c7:12:9a:98:23:ad: 00:c6:9e:93:b8:c2:86:e0:d8:35:07:eb:31:90:eb: 9a:b3:4c:d5:7f:da:3c:c0:29:11:50:66:bb:d0:f8: 89:ea:79:22:d0:f1:a0:a7:69:cc:7f:08:6b:75:7e: ed:25:a9:c8:7a:cf:6b:99:0a:1e:67:6e:15:76:f5: 52:49:81:a1:df:e5:2c:9a:8f:d3:f1:33:0a:81:86: da:47:99:6c:ee:e8:b3:ea:d0:f9:85:8d:7e:bc:73: 99:60:da:5e:c3:70:d7:f0:fa:19:c4:a2:c5:e6:b5: 7f:77:cc:3a:1e:9f:f0:11:99:2b:31:2c:dd:e8:1e: 45:e8:8c:a4:8e:d5:1a:c6:42:3b:dd:a2:48:50:e9: c4:a8:16:85:12:49:7f:12:91:19:a9:b0:83:b1:8d: af:8b:ff:55:d1:49:7d:47:d3:3b:f1:f3:1b:09:b3: 00:0e:ee:28:05:0a:2a:57:6b:85:45:3e:18:bf:42: c3:e5:bb:5e:95:eb:81:59:5f:dc:ff:05:d2:50:f1: 86:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:87:DD:00:41:25:D3:A8:C6:78:59:A5:09:60:80:B0:14:04:9C:28 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:01:3b:6a:60:1a:f0:41:5a:1b:ac:75:20:b2:3d:9b:31:04: 6a:d2:a7:22:62:18:a9:fb:16:f8:08:69:56:43:1e:a0:7e:55: 57:d8:31:92:bf:de:30:8f:09:f5:67:c0:08:93:0b:cb:94:66: 2a:8a:d1:1c:65:c5:87:83:d2:4d:12:df:cd:b6:3f:3f:e7:01: bb:01:f9:c1:d1:88:6c:39:06:84:03:65:d4:db:77:30:b9:52: 9b:45:ed:49:23:65:c2:14:c5:29:d7:f4:6c:6e:c0:3f:99:4d: 83:90:4b:18:51:5c:7e:0f:c0:d1:0b:bc:ad:37:d8:67:f1:8a: 2a:4f:44:a9:33:21:46:f2:b0:62:76:34:88:a0:64:fc:85:05: 2f:1b:3e:64:e0:54:3b:ab:2c:2a:38:a4:a7:76:ce:d7:6f:c3: c4:b3:49:99:bd:fd:a5:65:29:2a:5f:32:93:c4:4f:f6:88:17: 45:3d:44:dd:1f:38:1a:ff:1e:90:7a:b2:8f:11:5b:6e:55:b9: 01:52:e8:88:a6:63:3a:0c:92:8e:f2:94:24:c7:13:20:87:97: 61:5b:bf:d5:1f:19:66:39:1f:02:b5:4d:d3:ce:9c:95:62:29: b3:f6:fc:fd:98:7d:09:0a:51:2b:c3:65:c9:fb:7e:83:94:af: d5:0d:1d:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjYwNzIyMTY0OTIyWhcNMjYwNzI5MTY0OTIyWjAYMRYwFAYD VQQDEw02YTYwZjQ5Mi0yNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSaiIX22VSuHGcv8wI7uRTOYSfOt5oBzeMeyusq+91lWah0cuZVUHUdtP5ay X4GEbI42qB/HEpqYI60Axp6TuMKG4Ng1B+sxkOuas0zVf9o8wCkRUGa70PiJ6nki 0PGgp2nMfwhrdX7tJanIes9rmQoeZ24VdvVSSYGh3+Usmo/T8TMKgYbaR5ls7uiz 6tD5hY1+vHOZYNpew3DX8PoZxKLF5rV/d8w6Hp/wEZkrMSzd6B5F6IykjtUaxkI7 3aJIUOnEqBaFEkl/EpEZqbCDsY2vi/9V0Ul9R9M78fMbCbMADu4oBQoqV2uFRT4Y v0LD5bteleuBWV/c/wXSUPGGRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmH3QBB JdOoxnhZpQlggLAUBJwoMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZQE7amAa8EFaG6x1ILI9mzEEatKnImIYqfsW+AhpVkMeoH5VV9gxkr/eMI8J 9WfACJMLy5RmKorRHGXFh4PSTRLfzbY/P+cBuwH5wdGIbDkGhANl1Nt3MLlSm0Xt SSNlwhTFKdf0bG7AP5lNg5BLGFFcfg/A0Qu8rTfYZ/GKKk9EqTMhRvKwYnY0iKBk /IUFLxs+ZOBUO6ssKjikp3bO12/DxLNJmb39pWUpKl8yk8RP9ogXRT1E3R84Gv8e kHqyjxFbblW5AVLoiKZjOgySjvKUJMcTIIeXYVu/1R8ZZjkfArVN086clWIps/b8 /Zh9CQpRK8Nlyft+g5Sv1Q0dsw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:12:45 2026 by rpki-client