$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: GASuGPEFVNuXClbYGhfBRI7aDJXJ/GsUPg6Abgr+UnM= Subject key identifier: 2A:93:85:43:F5:8A:63:B5:5C:F7:E1:CC:72:E9:2D:45:16:90:2F:96 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0D7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0D40 Signing time: Wed 22 Jul 2026 18:33:12 +0000 Manifest this update: Wed 22 Jul 2026 18:33:11 +0000 Manifest next update: Wed 29 Jul 2026 18:33:11 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: RBti9KNjUM7OPYJ5j01mUX1JmPxTRyaarK9vesPTb2k=) 2: 2DDAE1EE81D511F1AEFB89D96BA30FBC.roa (hash: aOcCIKwJEDtblzo1vvfFm3gzIMaKBHMiRAFEgVPjm1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Jul 22 18:33:11 2026 GMT Not After : Jul 29 18:33:11 2026 GMT Subject: CN=6a610ce7-83d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fc:aa:c9:e0:dc:f2:81:b5:84:ab:38:f5:da: 3b:38:3f:da:4c:5d:f1:4b:21:12:be:c0:38:a4:52: 11:94:e3:63:82:c2:0f:3a:b1:e7:ca:2a:4d:5c:46: 04:f0:65:c0:31:0a:e0:ef:02:c1:21:be:fb:bb:ae: 51:12:08:39:af:e1:e9:2b:52:27:00:89:92:f0:b2: c8:02:d6:a6:12:22:c6:f8:46:08:81:7e:4e:ec:62: 73:3e:64:0f:5f:bc:14:8b:ab:83:7a:f8:7e:ce:a9: 8f:55:c8:dc:8e:fe:74:c0:88:87:5a:b0:f3:1e:d9: 94:db:ba:09:1e:44:ed:b1:ed:e1:48:68:e6:c3:36: ca:ec:c6:bf:e2:27:b8:de:1e:a7:22:11:fd:7e:eb: 85:0b:74:15:02:58:2a:9a:91:05:cb:75:f2:43:4e: f0:36:64:cf:88:61:e4:13:82:0f:70:17:1a:22:ee: 6e:c8:17:f4:1a:67:6d:d6:04:dd:b6:9d:42:2e:1c: 7d:3a:8b:d8:72:78:ec:ca:95:07:da:74:59:6a:ad: d3:e6:95:bd:bb:d9:1e:6c:32:75:47:a9:d7:bd:9c: 39:a5:7a:49:d9:ed:8e:85:54:86:fe:30:7d:dd:10: 9b:30:e0:06:9e:9d:52:8f:d8:8f:4d:79:9b:b2:5a: 41:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:93:85:43:F5:8A:63:B5:5C:F7:E1:CC:72:E9:2D:45:16:90:2F:96 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:11:b9:4e:7d:0b:26:e9:85:a9:db:91:fd:0c:1a:49:9d:46: 3f:45:17:ca:17:97:10:81:7b:a0:d9:45:10:08:0f:14:e7:6a: 77:c4:6f:9d:46:31:f5:97:43:64:fc:21:03:b8:03:75:78:e8: 18:f9:5e:88:db:91:44:bc:84:6e:2d:d5:80:13:1f:0e:ab:92: 6f:3f:dd:f6:e3:60:47:79:c4:ae:f1:a6:56:87:5e:9e:84:8c: eb:60:c2:1b:d2:81:a4:18:0f:51:ea:67:74:20:09:4d:fa:c3: 56:23:5f:4c:4a:c3:b2:2f:a5:41:51:d3:a3:cd:45:99:ca:68: a8:25:0f:17:30:55:7a:75:32:cf:4c:e1:32:5a:6f:21:89:81: 31:7a:43:3d:49:b8:75:e6:68:17:97:8a:84:14:b9:74:8b:e4: 6e:dd:e4:62:50:10:3c:ff:cd:0f:00:10:43:de:6e:e2:c9:95: 75:1a:4f:1b:9a:36:a3:f8:3b:c8:32:aa:bf:a9:28:ad:44:26: c5:9e:62:1b:ba:9a:c0:23:81:b3:ec:ad:88:e5:91:52:94:d2: 76:f9:29:3a:0a:08:ff:fd:f3:8e:72:e6:21:05:bb:e9:f3:c0: 60:42:3f:24:04:82:1f:cd:c5:32:19:7d:f8:de:8a:0d:57:fd: f3:e7:ca:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjYwNzIyMTgzMzExWhcNMjYwNzI5MTgzMzExWjAYMRYwFAYD VQQDEw02YTYxMGNlNy04M2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vyqyeDc8oG1hKs49do7OD/aTF3xSyESvsA4pFIRlONjgsIPOrHnyipNXEYE 8GXAMQrg7wLBIb77u65REgg5r+HpK1InAImS8LLIAtamEiLG+EYIgX5O7GJzPmQP X7wUi6uDevh+zqmPVcjcjv50wIiHWrDzHtmU27oJHkTtse3hSGjmwzbK7Ma/4ie4 3h6nIhH9fuuFC3QVAlgqmpEFy3XyQ07wNmTPiGHkE4IPcBcaIu5uyBf0Gmdt1gTd tp1CLhx9OovYcnjsypUH2nRZaq3T5pW9u9kebDJ1R6nXvZw5pXpJ2e2OhVSG/jB9 3RCbMOAGnp1Sj9iPTXmbslpB7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqThUP1 imO1XPfhzHLpLUUWkC+WMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgxG5Tn0LJumFqduR/QwaSZ1GP0UXyheXEIF7oNlFEAgPFOdqd8RvnUYx9ZdD ZPwhA7gDdXjoGPleiNuRRLyEbi3VgBMfDquSbz/d9uNgR3nErvGmVodenoSM62DC G9KBpBgPUepndCAJTfrDViNfTErDsi+lQVHTo81FmcpoqCUPFzBVenUyz0zhMlpv IYmBMXpDPUm4deZoF5eKhBS5dIvkbt3kYlAQPP/NDwAQQ95u4smVdRpPG5o2o/g7 yDKqv6korUQmxZ5iG7qawCOBs+ytiOWRUpTSdvkpOgoI//3zjnLmIQW76fPAYEI/ JASCH83FMhl9+N6KDVf98+fKGw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:33:36 2026 by rpki-client