$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: L0RoGzBKJbexJ7itzyq/OLTcgvYcQuKP9ncA3Utu+qY= Subject key identifier: 70:36:5F:93:AB:99:73:0D:3D:FC:26:19:78:D8:D3:7A:37:C5:01:A4 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D78 Signing time: Wed 22 Jul 2026 15:34:52 +0000 Manifest this update: Wed 22 Jul 2026 15:34:51 +0000 Manifest next update: Wed 29 Jul 2026 15:34:51 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: 761kyy9K5UyKVM4hs3iCcUDKmTjAFtCRyZ259esz2Sw=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: vVuI5scmnpoPSrcTwhxxR+hl6leJwJVgbaLFPIHUZ9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11669 (0x2d95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jul 22 15:34:51 2026 GMT Not After : Jul 29 15:34:51 2026 GMT Subject: CN=6a60e31c-3375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f7:b0:9d:b3:98:64:af:50:47:45:71:1e:1d: 52:74:84:bc:07:5f:9b:80:22:32:af:4a:9d:cf:db: 23:6e:b3:d2:03:a5:a8:45:7d:e8:4a:cd:a1:5f:c6: a9:6e:be:d1:8f:55:10:79:f6:12:cf:34:e1:ee:70: 23:ac:d1:a8:d0:20:06:d9:d5:9c:e9:33:3b:70:31: 41:05:8d:d3:5d:18:02:5e:ca:b1:e6:8a:7a:9f:54: 7d:18:04:7e:bf:8a:99:19:58:d1:ec:8f:59:dc:ea: b7:44:35:ab:b5:83:c8:90:28:a2:81:ba:93:e1:36: 84:cd:3f:8a:d9:0f:90:fc:df:d1:77:3a:75:dd:7c: bf:4b:7e:21:6b:69:a9:ec:cc:b4:95:a9:f2:6c:e7: bd:4a:6a:30:6e:8a:16:2d:56:8b:67:47:9c:bc:e9: 77:78:7b:60:1d:c4:a4:52:1d:5b:96:5f:e5:9b:f3: e8:13:c0:85:28:67:cc:5c:38:b8:9a:4a:97:a5:e3: 67:e0:1a:e2:0b:68:4e:47:3b:26:69:f8:1b:0b:ea: 96:a7:e1:2a:32:bd:11:2f:77:11:73:ab:1f:cb:12: 49:b0:e8:8c:73:68:23:db:95:c8:51:81:46:a0:b2: c8:11:5e:e6:06:a8:57:8b:ca:ef:65:4d:d7:ea:db: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:36:5F:93:AB:99:73:0D:3D:FC:26:19:78:D8:D3:7A:37:C5:01:A4 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:4c:af:30:41:74:c4:9e:45:a4:7d:d7:28:10:25:77:af:72: c7:51:57:07:83:f8:58:48:0e:42:9f:e4:de:93:c9:9a:b5:d4: a2:c8:24:93:f3:60:41:c7:ce:1f:9d:a7:d6:63:8b:eb:5a:c1: 2d:25:04:83:71:b6:04:66:f4:3d:ec:63:c0:73:ef:97:8d:56: f8:79:e1:a2:a0:69:b8:39:eb:7f:d8:82:bd:66:d3:91:ed:f0: 71:8f:e0:67:75:04:22:11:c1:85:c2:49:46:a0:e9:d1:93:2a: f0:38:e3:27:39:ff:72:7a:b8:4d:00:62:2b:9a:64:7f:e5:12: 47:7b:ab:1b:f0:b2:9e:8f:7f:4c:a5:8b:9f:0b:c4:c2:38:23: 74:74:a9:f4:70:74:1a:66:c6:2b:66:f4:93:29:34:3f:f0:25: 86:25:88:99:67:14:22:70:f3:56:25:55:2c:c8:85:59:a3:7f: 1c:70:2d:37:36:6a:8a:b7:d8:09:bc:b1:45:d2:9d:ef:3f:dc: ec:fb:ea:20:00:d9:a6:b3:78:f9:14:85:6f:f3:fb:a8:83:00: f0:eb:f8:70:19:1c:9b:82:06:95:df:d4:b4:02:dd:23:af:0e: 14:23:e7:93:0a:8d:27:a3:e3:3e:36:b7:01:e3:34:f6:be:d2: 88:27:aa:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNzIyMTUzNDUxWhcNMjYwNzI5MTUzNDUxWjAYMRYwFAYD VQQDEw02YTYwZTMxYy0zMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkfewnbOYZK9QR0VxHh1SdIS8B1+bgCIyr0qdz9sjbrPSA6WoRX3oSs2hX8ap br7Rj1UQefYSzzTh7nAjrNGo0CAG2dWc6TM7cDFBBY3TXRgCXsqx5op6n1R9GAR+ v4qZGVjR7I9Z3Oq3RDWrtYPIkCiigbqT4TaEzT+K2Q+Q/N/Rdzp13Xy/S34ha2mp 7My0lanybOe9SmowbooWLVaLZ0ecvOl3eHtgHcSkUh1bll/lm/PoE8CFKGfMXDi4 mkqXpeNn4BriC2hORzsmafgbC+qWp+EqMr0RL3cRc6sfyxJJsOiMc2gj25XIUYFG oLLIEV7mBqhXi8rvZU3X6tu39QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHA2X5Or mXMNPfwmGXjY03o3xQGkMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABEyvMEF0xJ5FpH3XKBAld69yx1FXB4P4WEgOQp/k3pPJmrXUosgkk/NgQcfO H52n1mOL61rBLSUEg3G2BGb0PexjwHPvl41W+HnhoqBpuDnrf9iCvWbTke3wcY/g Z3UEIhHBhcJJRqDp0ZMq8DjjJzn/cnq4TQBiK5pkf+USR3urG/Cyno9/TKWLnwvE wjgjdHSp9HB0GmbGK2b0kyk0P/AlhiWImWcUInDzViVVLMiFWaN/HHAtNzZqirfY CbyxRdKd7z/c7PvqIADZprN4+RSFb/P7qIMA8Ov4cBkcm4IGld/UtALdI68OFCPn kwqNJ6PjPja3AeM09r7SiCeqhQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:33:12 2026 by rpki-client