$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: nlPX7Lkyybz7tHGzMlUhazp46kXmeGhfuj7uypP+C1w= Subject key identifier: 6F:35:96:AD:98:4D:FE:09:F9:3E:3C:62:76:65:07:4F:AD:E5:3F:66 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: EC Signing time: Thu 23 Jul 2026 08:25:20 +0000 Manifest this update: Thu 23 Jul 2026 08:25:19 +0000 Manifest next update: Thu 30 Jul 2026 08:25:19 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: TuzdOX6WgouQGbW8QYzAPBSZREdvFfEJ8x6PsepFvrw=) 2: 0148654664AE11F1AC9CD4CD9247A888.roa (hash: ATbAStUN8zthpYScUZVPvySD7fOyN5UEOevK5CPEhGo=) 3: 375E8232C13411F0A297231CC4F9AE02.roa (hash: Vk4rtcyT+sEg6r9C5XD5asADCupwzxSQL05nWxyvlEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Jul 23 08:25:19 2026 GMT Not After : Jul 30 08:25:19 2026 GMT Subject: CN=6a61cff0-c6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:f1:ed:dd:31:94:45:cb:f7:44:a9:78:c3: 5a:4d:7e:ae:5a:a3:e3:5c:73:d4:8e:3a:20:49:97: e9:c2:b1:6e:7e:b3:e6:8a:bd:ff:64:76:66:20:48: 71:b6:7f:87:52:b2:c2:7f:f9:79:68:c9:b6:12:c7: 5c:d5:18:34:3c:65:a3:b4:5e:73:23:86:d2:cc:33: fd:6e:a7:6d:e5:b5:7c:29:58:08:37:3e:74:ea:39: 64:a0:74:f9:49:72:6b:65:0b:e2:fd:10:4e:ca:dd: 95:88:f7:e0:57:7c:63:bf:b2:32:91:b1:84:b3:69: 7d:ef:06:10:0e:ce:f8:d5:b9:e4:48:ca:49:00:9d: d6:ac:71:1f:dd:3b:8c:1a:53:4a:70:90:e5:37:c7: 24:86:44:f8:96:a7:a5:4b:d2:4e:c4:f7:9d:0c:2f: 8d:13:6c:b8:e1:92:91:5e:64:5c:65:e2:52:88:8d: 24:4e:be:ee:6f:c1:b7:16:d8:a7:7f:9b:2e:12:aa: ca:76:78:c9:5f:f7:cb:48:90:24:80:cb:6e:7e:8f: 3b:e5:21:06:3d:d9:f8:3a:eb:2d:f1:cb:49:d7:5a: df:d0:16:b4:3d:d0:ee:07:17:83:75:27:21:6a:fb: 6d:fd:37:27:4d:58:72:c6:ad:f2:44:d5:bb:61:c3: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:35:96:AD:98:4D:FE:09:F9:3E:3C:62:76:65:07:4F:AD:E5:3F:66 X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:01:40:f7:a1:16:5c:51:93:ba:34:f3:6f:4f:4d:c5:4f:22: 28:32:e7:57:0a:6a:54:91:9a:d1:da:3f:89:1d:dc:2c:04:64: 69:fa:f3:81:35:a9:d8:11:ac:ca:37:4a:1e:e2:d7:70:33:af: 1e:2d:25:35:f2:ec:f3:50:88:9b:fe:70:48:05:af:ef:54:ae: b8:7f:86:b0:d5:93:4f:f5:e7:5a:a0:19:78:3d:21:48:9e:ea: 8b:cb:d6:f5:d9:16:a4:5d:98:6a:16:25:0d:c5:f0:c9:b6:ea: 58:28:b9:45:86:44:90:ed:da:13:64:74:09:fe:63:7b:26:b2: 67:7e:1b:19:0f:d3:a9:ad:3a:73:96:34:18:d9:dd:e9:dc:30: b8:72:61:3f:97:9f:ac:29:85:96:eb:cd:4a:d1:07:ed:1e:38: 94:75:03:25:d6:42:5c:9b:5f:3c:10:30:5f:23:37:21:d2:7f: d9:3c:20:d9:36:23:dc:b8:cb:08:f4:ee:f1:f1:c3:ca:59:76: 77:98:94:06:54:b1:39:88:47:1f:0d:6c:15:da:5a:ce:18:14: 0b:2e:b4:7a:2d:6c:d4:f3:b7:3f:05:fe:dc:4c:c4:29:5b:fd: c5:73:45:a7:bc:3a:61:24:17:e5:28:c2:b1:67:ae:f7:69:d0: 20:7c:36:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwNzIzMDgyNTE5WhcNMjYwNzMwMDgyNTE5WjAYMRYwFAYD VQQDEw02YTYxY2ZmMC1jNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzPx7d0xlEXL90SpeMNaTX6uWqPjXHPUjjogSZfpwrFufrPmir3/ZHZmIEhx tn+HUrLCf/l5aMm2Esdc1Rg0PGWjtF5zI4bSzDP9bqdt5bV8KVgINz506jlkoHT5 SXJrZQvi/RBOyt2ViPfgV3xjv7IykbGEs2l97wYQDs741bnkSMpJAJ3WrHEf3TuM GlNKcJDlN8ckhkT4lqelS9JOxPedDC+NE2y44ZKRXmRcZeJSiI0kTr7ub8G3Ftin f5suEqrKdnjJX/fLSJAkgMtufo875SEGPdn4Oust8ctJ11rf0Ba0PdDuBxeDdSch avtt/TcnTVhyxq3yRNW7YcNIAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG81lq2Y Tf4J+T48YnZlB0+t5T9mMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DQjE0QkYyNjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Za a0NDa0NELWh3OWxrc2hNTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANQFA96EWXFGTujTzb09NxU8iKDLnVwpqVJGa0do/iR3cLARkafrzgTWp2BGs yjdKHuLXcDOvHi0lNfLs81CIm/5wSAWv71SuuH+GsNWTT/XnWqAZeD0hSJ7qi8vW 9dkWpF2YahYlDcXwybbqWCi5RYZEkO3aE2R0Cf5jeyayZ34bGQ/Tqa06c5Y0GNnd 6dwwuHJhP5efrCmFluvNStEH7R44lHUDJdZCXJtfPBAwXyM3IdJ/2Twg2TYj3LjL CPTu8fHDyll2d5iUBlSxOYhHHw1sFdpazhgUCy60ei1s1PO3PwX+3EzEKVv9xXNF p7w6YSQX5SjCsWeu92nQIHw2+Q== -----END CERTIFICATE-----Generated at Fri Jul 24 01:32:36 2026 by rpki-client