$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: jgydVvIrTLzcBnB72huApiCfu7CwntKAYTAgfY5vJjc= Subject key identifier: 4C:1D:91:8E:3F:80:02:F2:7C:BD:FA:E9:C0:58:45:8B:97:EF:86:25 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1DE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1DD3 Signing time: Wed 22 Jul 2026 16:11:17 +0000 Manifest this update: Wed 22 Jul 2026 16:11:17 +0000 Manifest next update: Wed 29 Jul 2026 16:11:17 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: PjO7SqjMG8RB23M4iHsyUixY+M9j7tWE9ef+DroLlac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7648 (0x1de0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Jul 22 16:11:17 2026 GMT Not After : Jul 29 16:11:17 2026 GMT Subject: CN=6a60eba5-5427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:a6:9c:9b:4e:49:ff:60:44:ff:f8:0b:ba: c0:9a:23:a1:c2:15:6d:9a:53:eb:79:e5:d2:35:75: 0e:d7:64:cb:77:e7:43:78:93:12:61:3c:a2:88:e3: f4:97:fc:e5:71:96:5d:52:4e:96:e2:0c:78:71:3e: 5c:50:34:59:83:dd:56:bf:b7:f4:75:cf:fc:0e:c5: a7:fa:e1:37:a9:9e:af:d9:38:51:7a:aa:a5:d7:83: d1:5d:f0:71:d9:a9:46:a7:e6:d3:f9:e6:e5:7e:be: 70:af:57:c8:2d:e1:b1:94:38:3d:2b:93:f3:c3:ed: c0:2d:58:bd:37:84:b6:78:eb:01:a6:c1:41:d2:de: fc:69:c5:7f:ab:c9:2c:1f:a3:c6:62:6e:20:ca:b0: aa:a3:29:10:ee:76:1a:e9:fc:1c:60:d3:e9:b5:b3: 18:42:27:7c:d3:bf:99:dc:81:8e:c1:c1:4e:ab:48: 63:cd:22:bb:3e:01:bc:8a:4e:d2:21:da:9c:6a:34: 23:37:11:b1:7e:8c:e6:fb:44:94:93:ac:49:70:eb: 7c:18:1b:42:cd:bb:ca:0a:9c:92:52:91:33:ff:48: de:22:65:70:32:c0:94:98:7b:44:0f:32:ca:85:54: 99:ba:f4:86:68:a4:a0:6b:8c:e1:03:fb:65:3a:81: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1D:91:8E:3F:80:02:F2:7C:BD:FA:E9:C0:58:45:8B:97:EF:86:25 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:20:0e:77:f6:12:44:bb:00:80:ba:cc:cf:36:ad:54:90:3c: fa:13:89:ff:a5:ac:94:b8:88:1f:ae:be:68:32:be:c7:97:66: a5:e5:a9:c4:43:06:dd:22:56:bd:94:c2:2c:67:7c:5e:18:ce: c4:f9:7b:45:81:80:88:cd:8a:db:44:f6:b5:1b:7b:fe:65:1b: 6d:0b:eb:65:a8:b8:d6:b0:e0:3a:9b:22:db:fa:89:ac:1d:2f: 49:38:f8:44:d1:8f:47:77:65:2e:75:f8:c1:c3:58:c2:1f:b7: 88:2d:18:d9:00:d9:1e:0b:81:ce:7f:d0:0e:3a:f1:3b:79:a2: 5c:8b:79:6a:70:c0:95:33:85:18:8c:74:7f:31:7e:5e:83:90: a0:84:13:02:52:2f:c0:37:1a:d8:96:88:ea:18:22:33:81:ed: f5:f4:e2:46:98:f4:fa:b3:25:1f:ee:e5:e0:02:d0:43:51:a0: 5d:6c:18:37:44:c8:1b:78:32:84:0f:73:d7:28:8b:39:a6:3f: 19:8a:ae:81:8e:9e:de:cd:fa:23:0f:a6:71:aa:2a:93:6f:78: 45:71:a9:ed:fa:80:28:87:3e:e0:0a:8b:d7:53:51:41:36:be: 44:60:c4:5f:e2:95:fb:44:aa:15:e9:ab:30:17:e9:50:74:bd: c7:3f:cb:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjYwNzIyMTYxMTE3WhcNMjYwNzI5MTYxMTE3WjAYMRYwFAYD VQQDEw02YTYwZWJhNS01NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTGmnJtOSf9gRP/4C7rAmiOhwhVtmlPreeXSNXUO12TLd+dDeJMSYTyiiOP0 l/zlcZZdUk6W4gx4cT5cUDRZg91Wv7f0dc/8DsWn+uE3qZ6v2ThReqql14PRXfBx 2alGp+bT+eblfr5wr1fILeGxlDg9K5Pzw+3ALVi9N4S2eOsBpsFB0t78acV/q8ks H6PGYm4gyrCqoykQ7nYa6fwcYNPptbMYQid807+Z3IGOwcFOq0hjzSK7PgG8ik7S IdqcajQjNxGxfozm+0SUk6xJcOt8GBtCzbvKCpySUpEz/0jeImVwMsCUmHtEDzLK hVSZuvSGaKSga4zhA/tlOoEzzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwdkY4/ gALyfL366cBYRYuX74YlMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnyAOd/YSRLsAgLrMzzatVJA8+hOJ/6WslLiIH66+aDK+x5dmpeWpxEMG3SJW vZTCLGd8XhjOxPl7RYGAiM2K20T2tRt7/mUbbQvrZai41rDgOpsi2/qJrB0vSTj4 RNGPR3dlLnX4wcNYwh+3iC0Y2QDZHguBzn/QDjrxO3miXIt5anDAlTOFGIx0fzF+ XoOQoIQTAlIvwDca2JaI6hgiM4Ht9fTiRpj0+rMlH+7l4ALQQ1GgXWwYN0TIG3gy hA9z1yiLOaY/GYqugY6e3s36Iw+mcaoqk294RXGp7fqAKIc+4AqL11NRQTa+RGDE X+KV+0SqFemrMBfpUHS9xz/LhA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:28:24 2026 by rpki-client