$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: s4n0U5nc5oS2qtFF5V7dL2DMIsFR8q2vtuZFJhAi6wU= Subject key identifier: E4:39:F4:21:14:2B:0B:22:4A:3A:5C:FB:1E:89:98:E0:90:AE:2F:BB Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0CF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0CEB Signing time: Wed 22 Jul 2026 18:40:19 +0000 Manifest this update: Wed 22 Jul 2026 18:40:18 +0000 Manifest next update: Wed 29 Jul 2026 18:40:18 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: el6M73B4Vb/38IiuJ93F+lTET/ZZceQ02XkxgScN9L0=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: STCKrvlRsuBwgCCitF/41y1bZsQULp/xbRwSRQTsp2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Jul 22 18:40:18 2026 GMT Not After : Jul 29 18:40:18 2026 GMT Subject: CN=6a610e93-5694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ea:8d:61:54:92:83:78:a1:2d:75:42:bf:c3: 43:f3:55:df:59:84:32:56:0a:ed:9e:47:fb:c9:99: bd:74:fc:09:cb:07:2b:7e:4e:e2:d6:19:2a:49:bf: 6d:74:b9:b4:88:4e:9e:d3:4e:cc:b0:f1:5b:64:d0: 3d:80:36:cf:4f:a9:87:ec:fb:51:12:da:09:a0:85: 3c:af:51:01:fd:18:a5:3f:98:ce:22:08:24:0a:7b: 86:07:25:5b:6a:2e:e7:79:10:87:bd:df:e1:2e:31: 6a:8f:33:78:2c:c9:d5:49:09:03:f5:ce:b3:45:93: e4:b6:73:61:f0:bf:0d:29:48:cf:9a:dd:c6:f3:32: 03:cc:34:6e:c8:de:8f:93:0d:88:40:06:d9:75:c9: 28:d7:95:0d:67:2d:85:0a:89:1b:63:ac:f5:5b:0f: 67:d8:ed:a7:97:74:50:3a:cb:ae:64:30:4a:f1:2d: 05:29:a1:6d:30:4d:b6:a8:e4:e1:be:08:3e:c2:ca: eb:58:ac:03:59:ba:c3:87:f3:ab:f0:eb:52:ab:7e: c6:5f:c6:43:ac:c6:59:d9:a1:09:64:59:b7:de:ca: f8:16:00:19:47:17:1d:44:eb:2f:03:c1:32:c6:ed: 09:3d:c0:24:4b:fe:26:f4:6a:64:0d:22:be:d7:98: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:39:F4:21:14:2B:0B:22:4A:3A:5C:FB:1E:89:98:E0:90:AE:2F:BB X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:df:d7:01:22:7d:56:0d:9c:f7:bc:bf:5a:34:e5:1f:08:57: 8e:f3:75:38:21:8c:39:b4:ac:0c:52:d9:e5:6c:7c:f6:ab:cc: a3:5f:2b:ae:cf:5a:97:52:dc:c1:c3:4c:cc:be:bb:d7:06:ab: 8a:65:f5:86:99:43:80:7a:92:56:5b:75:3c:ec:59:90:21:36: d6:23:26:41:de:f8:63:bf:d3:43:5f:02:26:6f:87:5d:00:98: ef:9c:6f:d0:a5:27:20:8c:b7:ce:f5:b1:64:11:c3:d3:f6:9d: 92:5c:ae:14:30:95:3b:ef:ae:c7:e6:30:98:1b:1a:1f:59:64: 53:9e:ae:9f:23:05:8d:8c:16:77:ec:b1:63:e6:e6:7b:a5:eb: 03:0a:54:01:4d:d4:db:2b:3f:12:e8:c2:e0:e8:9e:46:5c:99: bc:93:38:a3:bc:13:97:b0:49:91:5b:ec:e6:65:85:b9:d8:b5: 24:11:a2:96:f5:b7:ba:67:78:21:47:79:50:84:b1:7a:9b:24: 25:63:25:cf:d6:4d:29:26:c7:51:05:75:b9:20:c4:0b:9e:76: 3c:ed:eb:b6:cf:74:96:4a:d1:31:4d:91:72:d0:d1:21:d0:bf: 26:3f:9f:3e:7f:26:84:01:df:82:2f:68:ec:58:e7:33:df:75: f4:bb:a0:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjYwNzIyMTg0MDE4WhcNMjYwNzI5MTg0MDE4WjAYMRYwFAYD VQQDEw02YTYxMGU5My01Njk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OqNYVSSg3ihLXVCv8ND81XfWYQyVgrtnkf7yZm9dPwJywcrfk7i1hkqSb9t dLm0iE6e007MsPFbZNA9gDbPT6mH7PtREtoJoIU8r1EB/RilP5jOIggkCnuGByVb ai7neRCHvd/hLjFqjzN4LMnVSQkD9c6zRZPktnNh8L8NKUjPmt3G8zIDzDRuyN6P kw2IQAbZdcko15UNZy2FCokbY6z1Ww9n2O2nl3RQOsuuZDBK8S0FKaFtME22qOTh vgg+wsrrWKwDWbrDh/Or8OtSq37GX8ZDrMZZ2aEJZFm33sr4FgAZRxcdROsvA8Ey xu0JPcAkS/4m9GpkDSK+15i2TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQ59CEU KwsiSjpc+x6JmOCQri+7MB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABN/XASJ9Vg2c97y/WjTlHwhXjvN1OCGMObSsDFLZ5Wx89qvMo18rrs9al1Lc wcNMzL671warimX1hplDgHqSVlt1POxZkCE21iMmQd74Y7/TQ18CJm+HXQCY75xv 0KUnIIy3zvWxZBHD0/adklyuFDCVO++ux+YwmBsaH1lkU56unyMFjYwWd+yxY+bm e6XrAwpUAU3U2ys/EujC4OieRlyZvJM4o7wTl7BJkVvs5mWFudi1JBGilvW3umd4 IUd5UISxepskJWMlz9ZNKSbHUQV1uSDEC552PO3rts90lkrRMU2RctDRIdC/Jj+f Pn8mhAHfgi9o7FjnM9919LugFw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:19:26 2026 by rpki-client