$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: W37ZIo11LEfvd8ek1rIA8Pl98UOYgbEKd9zzzvBwSEU= Subject key identifier: 93:EF:45:1F:47:B8:5A:7E:F4:47:B6:BA:F1:BF:B0:A1:29:C6:73:93 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0935 Signing time: Wed 22 Jul 2026 14:47:42 +0000 Manifest this update: Wed 22 Jul 2026 14:47:42 +0000 Manifest next update: Wed 29 Jul 2026 14:47:42 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: CZ7xB/uULPPkpaKa7LNAxtqHsSGvLHcpMlZj4KSxhnA=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: TJX/2z4AnWBNVG5vc+6iQbCnon+csxAc9hGSLvA14T4=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jul 22 14:47:42 2026 GMT Not After : Jul 29 14:47:42 2026 GMT Subject: CN=6a60d80e-d3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:84:d6:f3:7b:a2:c4:c8:13:a0:45:21:86:bd: 9d:e7:8e:46:26:54:74:35:a4:f5:a8:5a:f6:c3:98: fb:69:cb:1e:9d:48:7c:b4:eb:82:7e:fb:ea:70:de: 3f:03:32:17:88:ff:ad:af:e7:7f:dc:78:ac:22:2d: 8e:4b:f7:40:3e:46:5f:11:c6:29:8b:b8:92:79:a1: de:c6:d3:a1:5d:04:9f:6f:94:da:be:e4:e9:c5:64: 2c:97:0f:71:8e:e2:d2:4d:60:d7:37:5e:f4:13:f6: d4:04:b4:13:fa:bf:24:c4:9f:d0:e3:03:d6:db:b3: d1:2e:77:86:e4:e3:cf:7d:f7:21:6c:82:fd:d2:26: 80:56:85:00:ae:5f:e5:79:f0:9c:1c:92:93:26:ee: 00:d5:55:80:53:79:a9:49:cf:4d:57:14:3f:52:ea: 3a:ca:8a:ac:d4:da:20:81:3a:ea:70:61:78:2a:5e: 76:d9:28:dd:75:a8:36:a0:32:4e:97:67:61:62:bb: 0a:46:39:25:86:d0:58:c6:0c:09:3e:01:d2:0d:33: fb:17:e3:d6:fa:5b:85:99:43:7e:40:8f:51:14:18: d8:28:8f:27:b6:f4:f9:e7:91:92:0e:42:c2:54:df: 6f:10:fc:70:a4:a8:a5:7a:93:0d:9d:8f:c9:a0:39: 7c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EF:45:1F:47:B8:5A:7E:F4:47:B6:BA:F1:BF:B0:A1:29:C6:73:93 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:15:c2:34:c6:93:c4:a2:30:2b:e5:7d:2d:99:6a:d7:ed:ed: 5c:2c:2a:bc:8c:a2:43:77:76:99:17:d0:58:73:ba:e9:78:53: 2e:c9:97:27:91:48:3e:55:d1:aa:25:64:bd:39:5f:2d:40:20: ab:9e:25:af:91:4d:ca:5d:1e:25:b5:6d:fd:8c:e2:e4:a3:15: 09:e3:12:af:d9:25:e4:60:9c:c9:26:20:fc:91:69:26:76:77: f6:49:2f:b2:b8:61:0b:1c:cb:70:cc:12:cf:a0:5f:b4:fc:59: 34:72:ae:9a:cd:ba:bd:fa:8a:cc:5d:11:0c:26:45:61:fb:70: c3:e7:70:18:83:07:7d:4d:8f:7e:f2:65:71:66:ca:b8:ef:ec: a9:b7:17:37:45:de:db:0a:62:3a:b7:bb:83:ab:f6:88:7d:14: be:bd:26:57:91:9b:5b:0b:0c:88:b7:4a:f0:36:9d:87:c9:0b: d7:80:a6:f1:ee:29:4b:ff:3f:d5:f0:bf:af:dd:72:ec:dd:2f: 4e:4d:de:c9:af:e5:4f:a9:c9:1d:ed:ca:b4:d5:18:85:7e:25: 17:d2:68:0a:47:e1:3d:cf:2c:e7:2d:6e:c8:92:73:33:52:7c: 3f:2f:b5:ee:72:75:79:07:85:b0:f4:ba:06:09:e5:c9:33:9c: 44:78:37:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwNzIyMTQ0NzQyWhcNMjYwNzI5MTQ0NzQyWjAYMRYwFAYD VQQDEw02YTYwZDgwZS1kM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoTW83uixMgToEUhhr2d545GJlR0NaT1qFr2w5j7acsenUh8tOuCfvvqcN4/ AzIXiP+tr+d/3HisIi2OS/dAPkZfEcYpi7iSeaHextOhXQSfb5TavuTpxWQslw9x juLSTWDXN170E/bUBLQT+r8kxJ/Q4wPW27PRLneG5OPPffchbIL90iaAVoUArl/l efCcHJKTJu4A1VWAU3mpSc9NVxQ/Uuo6yoqs1NoggTrqcGF4Kl522Sjddag2oDJO l2dhYrsKRjklhtBYxgwJPgHSDTP7F+PW+luFmUN+QI9RFBjYKI8ntvT555GSDkLC VN9vEPxwpKilepMNnY/JoDl8aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPvRR9H uFp+9Ee2uvG/sKEpxnOTMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApBXCNMaTxKIwK+V9LZlq1+3tXCwqvIyiQ3d2mRfQWHO66XhTLsmXJ5FIPlXR qiVkvTlfLUAgq54lr5FNyl0eJbVt/Yzi5KMVCeMSr9kl5GCcySYg/JFpJnZ39kkv srhhCxzLcMwSz6BftPxZNHKums26vfqKzF0RDCZFYftww+dwGIMHfU2PfvJlcWbK uO/sqbcXN0Xe2wpiOre7g6v2iH0Uvr0mV5GbWwsMiLdK8Dadh8kL14Cm8e4pS/8/ 1fC/r91y7N0vTk3eya/lT6nJHe3KtNUYhX4lF9JoCkfhPc8s5y1uyJJzM1J8Py+1 7nJ1eQeFsPS6BgnlyTOcRHg3Wg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:18:38 2026 by rpki-client