$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: BMNWjGIPZumhUUp9Mc5UXsIQSwIlevWRhhG9ddeKatY= Subject key identifier: AC:85:B6:FA:AF:96:C7:99:CC:78:FC:40:ED:1A:C9:75:65:DB:62:ED Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D79 Signing time: Fri 24 Jul 2026 15:36:22 +0000 Manifest this update: Fri 24 Jul 2026 15:36:21 +0000 Manifest next update: Fri 31 Jul 2026 15:36:21 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: L3qrjPlQw1ptAdAfCOiZhs5xcEx2QFX1ymTleCaJEnI=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: vVuI5scmnpoPSrcTwhxxR+hl6leJwJVgbaLFPIHUZ9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11670 (0x2d96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jul 24 15:36:21 2026 GMT Not After : Jul 31 15:36:21 2026 GMT Subject: CN=6a638676-92b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:00:06:65:bd:fc:05:ec:54:4a:dc:49:5f: 6c:9a:07:1a:ed:3e:06:bd:df:2b:a9:cf:74:75:25: 7d:ac:cf:59:ba:80:6c:dd:3e:43:7b:fe:c6:17:ce: fd:87:b1:77:be:6e:06:26:ba:a2:8b:c5:47:43:24: 9a:e8:e9:25:9d:0a:2f:e3:b9:df:cb:c2:cb:9c:63: 5b:f0:21:74:b2:4d:c0:fb:bb:fa:99:54:e7:09:95: 37:7e:bc:46:d9:b8:8a:69:cd:57:ea:13:b4:4f:25: 96:35:a0:ad:dd:d3:64:50:c3:5f:32:94:43:5b:18: eb:cf:5e:f2:58:9b:0a:35:ae:1b:0d:41:37:e5:c1: 34:90:02:bb:1c:b8:f6:4c:b4:a9:fd:66:19:1b:89: 83:1e:2d:a6:bb:92:c1:82:32:83:0a:d4:fe:41:70: a1:03:0e:6c:e2:24:0a:12:62:7e:a2:58:d6:e9:29: c0:b7:0b:45:87:07:da:f0:1a:91:59:e8:80:67:47: d2:84:36:f2:23:ae:7f:12:ec:3b:6f:9c:99:bb:7e: c8:0b:13:90:98:74:e8:5b:74:90:3c:13:04:e3:4d: 16:7c:53:b7:a0:69:d0:15:c8:44:e0:34:aa:85:c4: ae:fc:0a:53:cb:22:2d:68:06:59:7b:66:06:75:76: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:B6:FA:AF:96:C7:99:CC:78:FC:40:ED:1A:C9:75:65:DB:62:ED X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:ba:d9:38:f7:e9:7c:f7:fa:ec:8f:ca:8d:f2:4c:36:e5: c8:c1:ac:08:5e:cb:1f:75:bc:22:fa:fe:5e:5e:14:b8:ca:08: 6d:45:ea:66:38:c1:bc:08:fd:fc:73:8a:d7:6a:21:ea:53:a3: e3:86:1a:21:5c:d9:57:da:36:9a:53:a2:37:25:df:dd:b9:ba: 0c:b3:5d:b0:d5:5d:1d:1e:e0:e9:6f:93:8f:0e:74:ed:2a:cd: 97:0e:2d:1d:29:43:23:0f:32:90:a3:a5:6d:f7:f0:67:e1:2c: 31:15:65:ce:fc:63:ff:30:b4:62:54:dd:ba:82:04:46:ad:30: 13:9b:65:c7:87:f5:16:be:6f:f4:83:51:08:79:30:27:d5:03: 0b:66:81:f2:71:c0:15:3d:07:12:53:00:7e:15:45:ff:1c:b1: 15:14:46:36:ef:e2:66:c4:9a:85:97:38:61:de:34:64:04:3b: d0:df:93:39:ba:b0:87:e9:c3:22:87:d7:61:98:cd:d1:ab:0f: 66:85:fc:66:7a:92:8c:e0:a3:26:7a:a5:e2:e0:d5:31:f0:ac: bb:bf:82:b8:f4:7f:c5:15:af:47:ff:9c:14:0f:af:bd:37:23: a6:9e:1b:51:57:48:53:af:16:ab:4b:9f:8a:19:97:c1:d0:a1: b9:de:36:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNzI0MTUzNjIxWhcNMjYwNzMxMTUzNjIxWjAYMRYwFAYD VQQDEw02YTYzODY3Ni05MmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoo4ABmW9/AXsVErcSV9smgca7T4Gvd8rqc90dSV9rM9ZuoBs3T5De/7GF879 h7F3vm4GJrqii8VHQySa6OklnQov47nfy8LLnGNb8CF0sk3A+7v6mVTnCZU3frxG 2biKac1X6hO0TyWWNaCt3dNkUMNfMpRDWxjrz17yWJsKNa4bDUE35cE0kAK7HLj2 TLSp/WYZG4mDHi2mu5LBgjKDCtT+QXChAw5s4iQKEmJ+oljW6SnAtwtFhwfa8BqR WeiAZ0fShDbyI65/Euw7b5yZu37ICxOQmHToW3SQPBME400WfFO3oGnQFchE4DSq hcSu/ApTyyItaAZZe2YGdXa4gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyFtvqv lseZzHj8QO0ayXVl22LtMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgBq62Tj36Xz3+uyPyo3yTDblyMGsCF7LH3W8Ivr+Xl4UuMoIbUXqZjjBvAj9 /HOK12oh6lOj44YaIVzZV9o2mlOiNyXf3bm6DLNdsNVdHR7g6W+Tjw507SrNlw4t HSlDIw8ykKOlbffwZ+EsMRVlzvxj/zC0YlTduoIERq0wE5tlx4f1Fr5v9INRCHkw J9UDC2aB8nHAFT0HElMAfhVF/xyxFRRGNu/iZsSahZc4Yd40ZAQ70N+TObqwh+nD IofXYZjN0asPZoX8ZnqSjOCjJnql4uDVMfCsu7+CuPR/xRWvR/+cFA+vvTcjpp4b UVdIU68Wq0ufihmXwdChud42tw== -----END CERTIFICATE-----Generated at Fri Jul 24 22:40:31 2026 by rpki-client