$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft File: S3IqOmeTvzLJvPUuTncuCm86Yxk.mft (raw, json) Hash identifier: P9VlXmviyCSkqVz3DcJm2p5To93UL/L1oOj/nZIuizE= Subject key identifier: 7A:1A:ED:4A:75:D8:E9:33:21:92:84:34:EA:C9:EA:19:AD:70:05:5A Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft Manifest number: 0242 Signing time: Thu 23 Jul 2026 03:43:41 +0000 Manifest this update: Thu 23 Jul 2026 03:43:41 +0000 Manifest next update: Thu 30 Jul 2026 03:43:41 +0000 Files and hashes: 1: S3IqOmeTvzLJvPUuTncuCm86Yxk.crl (hash: 7czu5Ehvv4ZPjFSvH2siso4Nzqg4vT4B5oYwWKLfilY=) 2: E3901F981BD711EEB9597921C4F9AE02.roa (hash: 59D9zQ+RBL5Fvi3gvp0OtvuM1QHSjOAbItynN8Kr7yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Jul 23 03:43:41 2026 GMT Not After : Jul 30 03:43:41 2026 GMT Subject: CN=6a618ded-2d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:ef:ee:6a:9d:78:92:65:d5:75:24:6b:ba: ed:57:10:cb:65:ad:71:9a:42:fe:7f:a0:0f:37:bd: fa:d0:31:8a:c9:f1:e9:12:9e:2b:4b:59:65:1e:48: 43:7d:38:b2:f5:ef:51:2b:1e:0b:74:7c:a5:3c:e6: 34:e2:73:6e:99:db:20:03:c0:86:8d:c0:c3:14:4d: 88:3b:d7:8b:28:51:34:d3:ff:1c:de:10:d7:5c:d9: 7e:b5:73:58:09:f8:e6:8c:a3:86:28:c4:7c:0c:32: 1a:82:f7:d7:d6:7f:53:aa:a1:fd:d8:a7:bb:4f:8c: da:2f:62:92:2a:32:8d:d1:f7:f0:b0:fc:4e:77:de: b4:3a:59:68:ee:13:da:57:d2:fb:d3:52:8a:d2:f8: aa:22:b0:77:13:e4:da:c7:55:9a:b1:78:ab:21:42: dc:e0:11:c2:5b:6d:08:d3:4c:cf:b0:ff:16:b8:5e: d9:d2:8a:4e:af:83:b4:d6:7f:dd:44:0f:30:7d:71: 8c:e9:fe:04:48:e3:07:86:27:c3:27:62:a9:c1:09: cb:7e:3e:dd:46:c8:b7:a1:e3:b7:9a:d9:58:0a:f2: ee:26:f5:3b:3a:9a:ea:5c:6d:37:da:21:d4:a1:fd: 23:51:94:44:79:8a:f5:22:2b:28:aa:ec:ae:7e:93: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1A:ED:4A:75:D8:E9:33:21:92:84:34:EA:C9:EA:19:AD:70:05:5A X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8a:80:c1:fd:73:e4:9a:e5:c5:ca:a9:af:52:ad:a1:df:9b: 07:aa:4f:d5:63:9b:c8:d4:07:84:7c:91:ef:49:c4:4a:67:2b: 7d:6f:fb:97:3f:0b:23:53:be:79:1e:4d:d3:65:79:da:e6:31: ec:7b:e2:d6:a7:66:1b:a0:ec:c1:56:7f:95:3d:bd:02:d0:39: 9c:7d:ee:10:5c:31:c1:1f:c0:35:f6:51:02:4d:30:5f:7c:96: d6:d7:52:79:3c:6a:e6:46:13:57:15:94:5c:3e:0f:74:97:0c: 60:47:f4:ec:7c:98:5a:e1:5f:4e:05:25:6c:fe:84:01:6d:13: 70:56:0a:8d:e9:87:c4:9e:5b:57:02:61:dc:b8:6e:52:e3:a8: d5:70:ff:66:5f:2d:2f:b4:a3:7d:6a:f1:d0:4a:e6:6f:89:d1: 6b:d4:46:c5:8e:32:4f:c4:c5:64:fd:44:c6:6d:b5:8b:fe:f4: 41:f9:d4:e5:24:f9:b2:ba:8a:8a:b4:2a:8f:cc:e9:fe:f1:d1: 7c:74:5e:c7:28:a1:aa:43:d8:03:37:95:88:94:b9:30:ca:d1: 34:e7:42:a6:29:cc:04:09:ae:be:3d:24:e7:a4:62:1e:2c:bb: 8d:88:55:1d:47:2c:3f:24:2d:fe:a0:0d:52:64:b7:eb:5f:90: 94:fc:23:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjYwNzIzMDM0MzQxWhcNMjYwNzMwMDM0MzQxWjAYMRYwFAYD VQQDEw02YTYxOGRlZC0yZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj/zv7mqdeJJl1XUka7rtVxDLZa1xmkL+f6APN7360DGKyfHpEp4rS1llHkhD fTiy9e9RKx4LdHylPOY04nNumdsgA8CGjcDDFE2IO9eLKFE00/8c3hDXXNl+tXNY CfjmjKOGKMR8DDIagvfX1n9TqqH92Ke7T4zaL2KSKjKN0ffwsPxOd960Ollo7hPa V9L701KK0viqIrB3E+Tax1WasXirIULc4BHCW20I00zPsP8WuF7Z0opOr4O01n/d RA8wfXGM6f4ESOMHhifDJ2KpwQnLfj7dRsi3oeO3mtlYCvLuJvU7OprqXG032iHU of0jUZREeYr1IisoquyufpPZ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoa7Up1 2OkzIZKENOrJ6hmtcAVaMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY3RS82N0I0Q0I4NDFCRDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6 TEp2UFV1VG5jdUNtODZZeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOoqAwf1z5Jrlxcqpr1Ktod+bB6pP1WObyNQHhHyR70nESmcrfW/7lz8LI1O+ eR5N02V52uYx7Hvi1qdmG6DswVZ/lT29AtA5nH3uEFwxwR/ANfZRAk0wX3yW1tdS eTxq5kYTVxWUXD4PdJcMYEf07HyYWuFfTgUlbP6EAW0TcFYKjemHxJ5bVwJh3Lhu UuOo1XD/Zl8tL7SjfWrx0Ermb4nRa9RGxY4yT8TFZP1Exm21i/70QfnU5ST5srqK irQqj8zp/vHRfHRexyihqkPYAzeViJS5MMrRNOdCpinMBAmuvj0k56RiHiy7jYhV HUcsPyQt/qANUmS361+QlPwjsQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:05:46 2026 by rpki-client