$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft (raw, json) Hash identifier: lyGaN+PF1RMz+YYp8Sc52SADzG0vV7I2f0ZU+Xh5Mns= Subject key identifier: D3:B8:5F:00:6B:82:6A:46:26:C2:CB:CE:44:CC:E0:93:70:7A:CB:FD Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD Certificate issuer: /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft Manifest number: BC Signing time: Thu 23 Jul 2026 08:54:22 +0000 Manifest this update: Thu 23 Jul 2026 08:54:22 +0000 Manifest next update: Thu 30 Jul 2026 08:54:22 +0000 Files and hashes: 1: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl (hash: jWz3Me1Dm57EwImqnJXfxLqqmCkKR4v8VX+m3rTIJ00=) 2: 18DC6A2602A311F188F4114D3A3D8C67.roa (hash: t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Validity Not Before: Jul 23 08:54:22 2026 GMT Not After : Jul 30 08:54:22 2026 GMT Subject: CN=6a61d6be-aec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:89:82:32:7e:6c:b0:84:b3:0f:54:45:8b: 67:e3:d1:69:65:7d:94:33:20:b8:92:8e:5d:ce:34: 61:8c:c3:0b:2f:d4:7c:51:b9:29:6e:2c:9e:76:bc: c5:3b:56:38:d6:d2:38:68:81:ca:0a:70:e8:ac:f4: 5b:32:67:0e:63:eb:b4:56:05:ea:0b:54:54:57:67: e3:3a:cf:b5:ae:1e:de:b0:6c:45:6b:36:67:fd:fa: 80:45:95:68:3d:0a:03:cc:be:76:ee:f5:80:fc:d8: a6:37:3c:85:79:91:d1:de:d5:fa:ae:0c:86:b4:1f: 85:7e:0c:fe:29:01:2f:ff:25:25:df:25:30:c3:d3: cb:51:1d:78:34:48:73:39:1c:ab:71:d4:c5:79:5c: 61:ef:af:a2:13:29:3d:ae:88:37:a4:42:f1:27:26: e2:04:f9:cb:59:bd:c7:cf:18:a3:51:5f:e6:8b:76: c4:8f:b3:6a:c0:7e:1d:5d:94:fa:be:eb:35:e9:14: c0:70:a8:f3:f9:bb:1b:59:be:25:2a:93:db:3f:80: 42:ba:2a:83:c0:01:cf:67:4b:33:6f:46:73:86:0d: de:93:f8:16:f8:9f:42:77:7e:36:c6:4f:f2:54:1c: bc:c0:0c:ad:57:d0:48:64:25:30:fa:a1:7e:75:04: 86:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B8:5F:00:6B:82:6A:46:26:C2:CB:CE:44:CC:E0:93:70:7A:CB:FD X509v3 Authority Key Identifier: keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:bd:5d:80:4b:76:50:a0:2b:37:6a:39:20:14:8f:64:f2:1b: ec:6e:b5:2f:50:1c:68:7b:bf:6f:35:91:cf:6a:9a:ab:91:e2: 47:4f:81:21:79:40:8c:11:bb:b0:38:67:09:aa:51:98:73:ba: c2:7c:c3:8b:da:55:b4:7d:f9:7a:b0:bd:b0:53:55:a2:e3:e3: 7f:67:f6:87:50:75:6e:3a:e7:0b:3d:60:02:da:bd:ba:c7:8e: ed:32:c2:c1:af:95:81:50:2a:14:5a:53:82:08:25:9b:d8:4e: 29:86:b6:3b:83:fb:ef:43:9e:41:d8:b3:6c:a6:5a:a2:26:e6: aa:64:a0:bd:1f:98:ad:b3:6f:5e:98:6a:3a:11:be:1e:27:27: 70:ff:c9:78:e4:dc:cf:91:dd:28:ea:09:a5:4e:b6:07:c2:a6: 93:90:89:16:49:be:f8:86:21:7b:72:f7:c7:47:f6:68:5c:46: 5d:3b:a0:03:94:10:2e:26:21:25:37:2c:57:3f:36:25:f0:6e: 30:84:ca:7a:f0:ce:ad:27:ca:8a:e7:99:8d:e7:ff:8c:53:f2: 96:fc:34:27:e8:7d:a4:f3:fe:49:f9:51:60:b0:43:0a:22:21: a9:d6:0f:8a:53:05:3c:4f:20:72:f1:1b:66:a8:51:ff:b4:39: 5c:b1:cf:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDQTgxMTAvBgNVBAUTKEREMjgwODI4RkYwOTk2QThDQkVGMjlCRjBEOTE0REYy NTJERjFDQkQwHhcNMjYwNzIzMDg1NDIyWhcNMjYwNzMwMDg1NDIyWjAYMRYwFAYD VQQDEw02YTYxZDZiZS1hZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJuJgjJ+bLCEsw9URYtn49FpZX2UMyC4ko5dzjRhjMMLL9R8UbkpbiyedrzF O1Y41tI4aIHKCnDorPRbMmcOY+u0VgXqC1RUV2fjOs+1rh7esGxFazZn/fqARZVo PQoDzL527vWA/NimNzyFeZHR3tX6rgyGtB+Ffgz+KQEv/yUl3yUww9PLUR14NEhz ORyrcdTFeVxh76+iEyk9rog3pELxJybiBPnLWb3HzxijUV/mi3bEj7NqwH4dXZT6 vus16RTAcKjz+bsbWb4lKpPbP4BCuiqDwAHPZ0szb0Zzhg3ek/gW+J9Cd342xk/y VBy8wAytV9BIZCUw+qF+dQSGjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNO4XwBr gmpGJsLLzkTM4JNwesv9MB8GA1UdIwQYMBaAFN0oCCj/CZaoy+8pvw2RTfJS3xy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC82QTlFOTE1QzZF RTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxxakw3eW1fRFpGTjhsTGZI TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTZ0lLUDhKbHFqTDd5bV9EWkZOOGxMZkhMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxx akw3eW1fRFpGTjhsTGZITDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkL1dgEt2UKArN2o5IBSPZPIb7G61L1AcaHu/bzWRz2qaq5HiR0+BIXlAjBG7 sDhnCapRmHO6wnzDi9pVtH35erC9sFNVouPjf2f2h1B1bjrnCz1gAtq9useO7TLC wa+VgVAqFFpTggglm9hOKYa2O4P770OeQdizbKZaoibmqmSgvR+YrbNvXphqOhG+ HicncP/JeOTcz5HdKOoJpU62B8Kmk5CJFkm++IYhe3L3x0f2aFxGXTugA5QQLiYh JTcsVz82JfBuMITKevDOrSfKiueZjef/jFPylvw0J+h9pPP+SflRYLBDCiIhqdYP ilMFPE8gcvEbZqhR/7Q5XLHPBQ== -----END CERTIFICATE-----Generated at Fri Jul 24 08:03:03 2026 by rpki-client