$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json) Hash identifier: KZv35Rp1VjvbOIjWsMJm/3IBFfe2K/Z5hSkEQI7LHrE= Subject key identifier: A9:D3:1C:7F:A3:5C:5E:6F:82:7B:2D:03:FB:7D:E7:75:12:F4:AA:EC Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft Manifest number: 0125 Signing time: Thu 23 Jul 2026 07:25:55 +0000 Manifest this update: Thu 23 Jul 2026 07:25:55 +0000 Manifest next update: Thu 30 Jul 2026 07:25:55 +0000 Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: WV/Llae/imzZgbt4dcOP/Y3y0+nlA9AMkb50J48p7w4=) 2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C Validity Not Before: Jul 23 07:25:55 2026 GMT Not After : Jul 30 07:25:55 2026 GMT Subject: CN=6a61c203-b2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:e3:81:8c:d2:f6:3a:a0:3d:6c:97:02:5f: 22:4c:42:9c:f4:4a:3a:bf:48:c9:b5:b8:24:3c:91: b2:e1:bf:4a:b4:53:37:09:3c:48:63:1b:d2:09:d5: 6a:5c:06:dc:96:d2:9d:1b:c4:86:ac:eb:5b:80:81: 6a:a2:ec:02:aa:76:71:5c:5f:bb:c2:f2:66:2d:0c: f4:c0:0f:e0:62:9d:13:67:95:06:2d:21:96:7c:ec: 95:d3:e2:d3:b9:7b:66:4b:5d:69:06:f7:72:d9:0c: 91:ba:7f:30:16:ef:65:88:fc:b5:60:cf:bd:05:6b: de:40:32:2f:86:ad:91:0c:3a:b9:75:94:da:7e:1b: 09:9a:4a:d5:ea:e0:14:f3:79:2d:7b:66:3b:aa:3b: 26:dc:6d:ba:a1:93:83:20:09:10:01:c5:61:7c:ec: ce:62:b5:5a:de:4c:2a:46:1e:f0:28:be:53:21:1c: 4e:ab:ba:54:3a:b3:4e:b4:51:47:b0:c2:ee:5c:37: 67:1f:d4:11:27:ca:6d:2d:ee:ce:15:08:7e:20:5a: d7:c4:73:a2:85:e3:2d:b8:0c:ef:16:be:e5:b2:0a: 88:49:d2:4e:8c:90:ed:fe:6b:48:29:57:35:f0:a8: be:04:b1:db:28:3d:4e:b5:ae:53:5b:17:74:ec:6f: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D3:1C:7F:A3:5C:5E:6F:82:7B:2D:03:FB:7D:E7:75:12:F4:AA:EC X509v3 Authority Key Identifier: keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:e4:f0:90:5b:3b:b8:87:20:95:0d:c8:7e:f2:fb:ea:37: 55:93:6e:fe:67:e9:e0:35:4a:e6:8c:9b:ab:ad:57:3c:89:ff: 8c:4c:4d:42:7f:71:73:11:19:f9:d7:77:88:81:60:f0:7d:7e: 3c:5a:5d:02:7c:b2:77:76:e6:41:a1:33:80:a4:41:1c:90:04: e6:ad:56:95:34:e1:f1:d5:76:68:af:e9:a9:41:43:f7:82:87: 24:21:16:2c:73:a2:eb:c0:1d:e1:04:66:36:ca:53:12:57:b5: ad:57:0a:5b:a7:85:3e:82:9a:9e:64:37:9c:a5:d6:9d:e2:e6: da:d9:99:f4:be:34:97:3b:ab:db:19:b8:73:d9:59:aa:8a:24: 90:1a:8c:ac:0c:34:3b:6c:21:61:f9:9a:4f:7a:66:af:ad:eb: 0d:39:ea:cd:cf:60:c6:b7:fa:c0:64:4c:1e:b1:86:a3:62:31: ed:14:15:2a:0f:35:60:91:5e:81:da:87:8e:df:0f:d6:30:dd: 0a:68:e2:c6:08:b3:81:28:5b:75:94:15:45:3c:8b:9f:cd:54: 84:c8:18:2e:2d:de:57:62:0b:28:84:7c:31:91:a2:6c:95:26: b5:55:21:ae:e9:23:05:01:80:5f:a3:a1:98:98:31:d6:b5:0b: 9a:86:e9:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxMjUxMTAvBgNVBAUTKDZGNzdDMTlGMTFEMzJBQUFBNDJFMjY5MTZGNzQ4MkVG QjhGOTdBMUMwHhcNMjYwNzIzMDcyNTU1WhcNMjYwNzMwMDcyNTU1WjAYMRYwFAYD VQQDEw02YTYxYzIwMy1iMmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRHjgYzS9jqgPWyXAl8iTEKc9Eo6v0jJtbgkPJGy4b9KtFM3CTxIYxvSCdVq XAbcltKdG8SGrOtbgIFqouwCqnZxXF+7wvJmLQz0wA/gYp0TZ5UGLSGWfOyV0+LT uXtmS11pBvdy2QyRun8wFu9liPy1YM+9BWveQDIvhq2RDDq5dZTafhsJmkrV6uAU 83kte2Y7qjsm3G26oZODIAkQAcVhfOzOYrVa3kwqRh7wKL5TIRxOq7pUOrNOtFFH sMLuXDdnH9QRJ8ptLe7OFQh+IFrXxHOiheMtuAzvFr7lsgqISdJOjJDt/mtIKVc1 8Ki+BLHbKD1Ota5TWxd07G8LLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnTHH+j XF5vgnstA/t953US9KrsMB8GA1UdIwQYMBaAFG93wZ8R0yqqpC4mkW90gu+4+Xoc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDEyNS9GNUY3ODc4QUND MTAxMUVGODczOTZBNkVDNEY5QUUwMi9iM2ZCbnhIVEtxcWtMaWFSYjNTQzc3ajVl aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2IzZkJueEhUS3Fxa0xpYVJiM1NDNzdqNWVody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDEyNS9GNUY3ODc4QUNDMTAxMUVGODczOTZBNkVDNEY5QUUwMi9iM2ZCbnhIVEtx cWtMaWFSYjNTQzc3ajVlaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlWPk8JBbO7iHIJUNyH7y++o3VZNu/mfp4DVK5oybq61XPIn/jExNQn9xcxEZ +dd3iIFg8H1+PFpdAnyyd3bmQaEzgKRBHJAE5q1WlTTh8dV2aK/pqUFD94KHJCEW LHOi68Ad4QRmNspTEle1rVcKW6eFPoKanmQ3nKXWneLm2tmZ9L40lzur2xm4c9lZ qookkBqMrAw0O2whYfmaT3pmr63rDTnqzc9gxrf6wGRMHrGGo2Ix7RQVKg81YJFe gdqHjt8P1jDdCmjixgizgShbdZQVRTyLn81UhMgYLi3eV2ILKIR8MZGibJUmtVUh rukjBQGAX6OhmJgx1rULmobpEg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:37:22 2026 by rpki-client