$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft File: 3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json) Hash identifier: lgLuk1TdxCN/vLZIvizuBRVt/45BeYYjtyDn+rBmVUU= Subject key identifier: DD:34:0B:5C:84:89:B3:6B:08:E3:69:1A:77:01:1A:2A:E0:A8:41:D9 Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft Manifest number: B0 Signing time: Thu 23 Jul 2026 09:07:17 +0000 Manifest this update: Thu 23 Jul 2026 09:07:16 +0000 Manifest next update: Thu 30 Jul 2026 09:07:16 +0000 Files and hashes: 1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: wuN8G4qHTxDogBIIC52aIPrPxS+OdRejcHP12pblRHA=) 2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: M/En5GKZgRPs8xA5rjGsaCEY3++9OzoqoEMQTbP1dII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Validity Not Before: Jul 23 09:07:16 2026 GMT Not After : Jul 30 09:07:16 2026 GMT Subject: CN=6a61d9c5-e1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:b3:ac:2e:b7:ac:0c:24:0b:a9:88:12:ac: eb:61:41:95:d4:86:83:a1:e4:b6:74:55:62:ac:ba: 83:31:51:a9:88:82:35:d9:dc:f7:02:79:ef:da:56: b4:db:1c:3f:68:50:e1:8f:e2:99:67:30:64:31:19: 6e:79:78:6f:9b:ba:a9:43:26:b0:55:5f:24:6b:7a: d4:84:b2:6f:71:a7:fe:7d:6f:53:13:af:df:41:fe: 1a:49:18:d2:1b:72:31:df:2c:2b:cd:bb:af:17:c2: 38:33:be:9c:d5:30:6f:00:92:94:10:a2:33:84:38: db:63:42:57:af:0c:de:bf:49:2d:cb:e9:d9:d2:29: 6a:c3:1a:27:ac:b4:27:57:07:cd:ed:b2:0c:66:c2: e9:06:3e:2a:50:d3:8f:eb:83:dc:f0:ea:2e:9c:88: 2e:d1:b7:e7:76:29:75:3a:8d:33:88:95:5a:68:15: a8:ba:cd:20:97:22:82:44:7b:e4:0c:26:31:18:90: cc:0d:94:b1:1c:34:f4:a5:c2:eb:1a:fd:fe:a5:79: 0d:b1:c8:02:16:32:2e:11:3b:f7:fb:e2:b7:b5:91: 76:30:de:cd:34:4d:ce:be:04:dd:db:f6:75:e8:2d: f5:a3:58:45:61:5b:55:11:bb:16:ce:06:56:bc:c6: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:34:0B:5C:84:89:B3:6B:08:E3:69:1A:77:01:1A:2A:E0:A8:41:D9 X509v3 Authority Key Identifier: keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:95:fd:05:dc:26:77:2b:9c:47:84:ae:1f:a8:92:7f:7e: e6:b6:07:3f:da:98:6c:af:0b:7d:0b:70:30:ee:e5:c5:21:54: 9d:30:e0:50:31:85:58:4f:13:e9:54:dd:07:fb:fd:0b:a1:8d: 19:86:69:7b:f8:55:ec:a0:a5:db:62:55:ea:63:59:0f:fb:04: 2d:5f:b6:87:db:3f:30:80:71:02:0b:9f:e9:cc:c4:90:80:7c: 2b:ae:5b:ca:35:c9:45:fa:98:df:9c:86:28:7b:be:37:d0:07: 09:a6:2e:ea:e5:46:ea:8b:59:cf:8f:54:fa:84:1e:eb:75:4d: 3d:95:ea:2d:d9:33:45:3c:8b:dd:1c:5b:be:2a:d6:c9:73:f9: d2:60:2b:e7:ae:29:30:21:ad:de:e7:68:04:cb:da:88:e5:31: e8:db:0d:1c:bd:ab:d6:41:a8:48:bf:51:07:f0:4c:c6:5e:c9: 54:36:4f:ad:29:52:3a:b5:4f:fd:25:41:68:6d:93:21:75:71: 72:8b:39:8a:72:76:16:5c:0d:ca:64:86:97:91:18:f9:74:0b: 23:bd:8c:fd:c7:2b:75:fb:db:66:87:2a:5a:03:31:f8:d3:ad: f9:45:54:fc:93:ac:c0:41:7f:ec:47:76:8a:64:8b:c6:8a:9c: 58:52:c3:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEQUMxMTAvBgNVBAUTKERERkNBOUQwMzQ5NDVBNTkyNDExNjEzN0Q2Mjg3N0Yw Q0U1MkJGMUIwHhcNMjYwNzIzMDkwNzE2WhcNMjYwNzMwMDkwNzE2WjAYMRYwFAYD VQQDEw02YTYxZDljNS1lMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhuzrC63rAwkC6mIEqzrYUGV1IaDoeS2dFVirLqDMVGpiII12dz3Annv2la0 2xw/aFDhj+KZZzBkMRlueXhvm7qpQyawVV8ka3rUhLJvcaf+fW9TE6/fQf4aSRjS G3Ix3ywrzbuvF8I4M76c1TBvAJKUEKIzhDjbY0JXrwzev0kty+nZ0ilqwxonrLQn VwfN7bIMZsLpBj4qUNOP64Pc8OounIgu0bfndil1Oo0ziJVaaBWous0glyKCRHvk DCYxGJDMDZSxHDT0pcLrGv3+pXkNscgCFjIuETv3++K3tZF2MN7NNE3OvgTd2/Z1 6C31o1hFYVtVEbsWzgZWvMY2HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN00C1yE ibNrCONpGncBGirgqEHZMB8GA1UdIwQYMBaAFN38qdA0lFpZJBFhN9Yod/DOUr8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RBQy83OEQ1OTMxODhG MzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zZnlwMERTVVdsa2tFV0UzMWloMzhNNVN2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNmeXAwRFNVV2xra0VXRTMxaWgzOE01U3Z4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RBQy83OEQ1OTMxODhGMzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zZnlwMERTVVds a2tFV0UzMWloMzhNNVN2eHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh/GV/QXcJncrnEeErh+okn9+5rYHP9qYbK8LfQtwMO7lxSFUnTDgUDGFWE8T 6VTdB/v9C6GNGYZpe/hV7KCl22JV6mNZD/sELV+2h9s/MIBxAguf6czEkIB8K65b yjXJRfqY35yGKHu+N9AHCaYu6uVG6otZz49U+oQe63VNPZXqLdkzRTyL3RxbvirW yXP50mAr564pMCGt3udoBMvaiOUx6NsNHL2r1kGoSL9RB/BMxl7JVDZPrSlSOrVP /SVBaG2TIXVxcos5inJ2FlwNymSGl5EY+XQLI72M/ccrdfvbZocqWgMx+NOt+UVU /JOswEF/7Ed2imSLxoqcWFLD1g== -----END CERTIFICATE-----Generated at Fri Jul 24 00:39:16 2026 by rpki-client