$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: 6ynt8tRv3izSLxsDuOwg/535Tz+KPulI1Lfejb/0mTY= Subject key identifier: 6B:74:FE:5F:54:26:5C:C7:1C:D9:FA:F6:02:66:66:67:B2:D4:E5:3B Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 0A10 Signing time: Wed 22 Jul 2026 20:13:12 +0000 Manifest this update: Wed 22 Jul 2026 20:13:11 +0000 Manifest next update: Wed 29 Jul 2026 20:13:11 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: fmaCWi/5JlF32dmow1NR5Dtw83OrWzCY6z+HPm6p1qA=) 2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=) 3: D3EAA0323F5A11F1AA7533B3A4833773.roa (hash: EWIgC3Wx3EH+woWoBUJtb6p5aUIWmHrjOLQsDMOov48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2604 (0xa2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Jul 22 20:13:11 2026 GMT Not After : Jul 29 20:13:11 2026 GMT Subject: CN=6a612457-eca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:62:6b:2a:59:2f:66:b5:ca:56:91:fc:17:f0: 01:01:ad:f8:96:7e:5c:04:18:96:45:e3:fe:3d:18: 31:53:2f:ff:19:10:a1:72:6f:e7:86:e0:e4:e9:13: 9d:2f:2d:4d:93:04:0a:3f:38:41:2c:58:60:39:7d: e4:48:1b:c0:a8:fa:ba:c0:77:fc:ab:93:34:f3:49: 9a:04:d1:27:9a:6c:0f:bc:09:3a:d9:c5:5a:07:f0: 84:8a:0e:82:e1:90:dc:ae:dd:ff:e1:49:50:14:09: 68:c1:f6:5a:f3:99:08:8e:5d:c3:64:8d:5a:36:56: 4b:84:d6:35:97:5d:8c:d6:d6:c3:15:fa:02:b6:8c: be:3e:a7:a1:ff:e4:60:66:9e:46:9b:9b:d2:22:d4: 64:5d:66:3a:77:2c:5f:2f:bc:48:9a:21:36:ab:56: 99:54:03:8a:f2:b5:df:e2:1a:a6:aa:cb:3b:e5:a9: 71:a5:10:2d:ce:14:e4:db:8c:a8:48:29:b7:40:72: 20:da:82:88:8e:7a:fa:20:c6:11:0b:14:e9:9c:37: 7b:f0:1e:22:fd:de:0d:b8:f6:ae:69:cf:70:9d:64: e2:aa:4f:35:aa:1d:a5:fb:ae:33:8e:ca:46:cc:8c: dc:14:eb:7b:c6:24:4d:fd:9f:b1:74:7c:56:d4:2d: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:74:FE:5F:54:26:5C:C7:1C:D9:FA:F6:02:66:66:67:B2:D4:E5:3B X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:54:0f:9f:50:6d:9d:7d:3c:74:ad:07:3b:40:f4:a1:20:82: f4:f6:0b:6c:29:08:55:29:16:ba:b0:ed:e0:bb:af:4f:9a:fe: 36:fd:2a:93:b0:3f:d1:e1:25:05:87:ad:d3:52:f6:cd:ca:4b: 1d:b3:9d:61:49:8c:80:9e:14:e3:22:da:0c:e6:01:24:53:e0: fe:d3:c5:33:4c:27:c6:e3:be:ed:ad:78:72:5a:ae:d4:1c:3b: a0:95:f6:1f:05:ff:6f:e8:5c:dc:88:f2:61:27:21:10:81:fa: dd:cd:5b:fa:f5:1f:9e:ca:9b:cd:a6:38:3c:23:d0:64:38:c3: c8:96:a3:43:8f:a2:b7:b3:33:47:86:f3:20:8d:06:ed:0e:cc: 11:59:ef:bf:49:53:4e:f1:e2:f7:3c:45:fd:76:08:e3:f7:b2: 84:32:59:26:28:a4:94:6a:62:c9:5e:fb:c7:03:65:9c:f5:9d: cb:aa:0d:37:3f:80:f2:33:1e:63:39:92:cc:ad:46:5b:17:61: 4f:45:f3:36:ba:1c:27:4e:6c:0b:34:99:b5:04:ab:95:0b:3a: 0d:d5:b8:bc:6a:59:87:01:e2:fa:62:47:5b:67:28:d2:0d:69: 41:9b:7a:94:c6:80:40:61:5f:15:57:8e:d1:18:ca:a0:5c:dc: 7c:7f:fb:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjYwNzIyMjAxMzExWhcNMjYwNzI5MjAxMzExWjAYMRYwFAYD VQQDEw02YTYxMjQ1Ny1lY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32JrKlkvZrXKVpH8F/ABAa34ln5cBBiWReP+PRgxUy//GRChcm/nhuDk6ROd Ly1NkwQKPzhBLFhgOX3kSBvAqPq6wHf8q5M080maBNEnmmwPvAk62cVaB/CEig6C 4ZDcrt3/4UlQFAlowfZa85kIjl3DZI1aNlZLhNY1l12M1tbDFfoCtoy+Pqeh/+Rg Zp5Gm5vSItRkXWY6dyxfL7xImiE2q1aZVAOK8rXf4hqmqss75alxpRAtzhTk24yo SCm3QHIg2oKIjnr6IMYRCxTpnDd78B4i/d4NuPauac9wnWTiqk81qh2l+64zjspG zIzcFOt7xiRN/Z+xdHxW1C0idwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGt0/l9U JlzHHNn69gJmZmey1OU7MB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn1QPn1BtnX08dK0HO0D0oSCC9PYLbCkIVSkWurDt4LuvT5r+Nv0qk7A/0eEl BYet01L2zcpLHbOdYUmMgJ4U4yLaDOYBJFPg/tPFM0wnxuO+7a14clqu1Bw7oJX2 HwX/b+hc3IjyYSchEIH63c1b+vUfnsqbzaY4PCPQZDjDyJajQ4+it7MzR4bzII0G 7Q7MEVnvv0lTTvHi9zxF/XYI4/eyhDJZJiiklGpiyV77xwNlnPWdy6oNNz+A8jMe YzmSzK1GWxdhT0XzNrocJ05sCzSZtQSrlQs6DdW4vGpZhwHi+mJHW2co0g1pQZt6 lMaAQGFfFVeO0RjKoFzcfH/7gw== -----END CERTIFICATE-----Generated at Fri Jul 24 21:00:28 2026 by rpki-client