$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: XxHpwL7MbL1q0FPtC3NGtjdwz0kduCsDRv3Z3YOVKrs= Subject key identifier: AB:69:C1:67:C9:19:71:B5:DF:69:8E:F5:BA:FE:65:62:ED:5D:3A:35 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 01E3 Signing time: Thu 23 Jul 2026 04:47:20 +0000 Manifest this update: Thu 23 Jul 2026 04:47:19 +0000 Manifest next update: Thu 30 Jul 2026 04:47:19 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: Wgy1BnCBFZvnH08UFhiOoDnY61eAnpN1pHnzSLlrx4Q=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Jul 23 04:47:19 2026 GMT Not After : Jul 30 04:47:19 2026 GMT Subject: CN=6a619cd8-8e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:da:70:8f:58:19:3b:bc:25:a0:20:23:1b: 31:5a:ca:52:7d:4a:35:f3:3f:ab:ab:05:e2:97:01: 8c:02:05:d4:72:af:22:bf:11:90:7a:9d:34:67:d2: d2:f1:95:e1:90:6c:53:47:0a:f5:04:33:8d:60:b9: e3:a6:44:f6:4f:15:52:06:35:69:bc:8c:bd:26:f8: 02:22:70:43:03:03:b2:b7:38:53:b1:db:e5:f9:aa: 73:ff:5a:19:38:8a:8e:5d:37:e4:44:3f:20:89:ed: 54:27:ae:04:14:58:ed:59:8c:52:12:1f:e0:43:4c: 0e:29:f5:53:2e:a8:c1:3e:32:1c:d0:d2:7f:d4:6f: fd:f2:2d:49:22:d7:88:19:d4:d3:3c:80:0d:35:57: ce:7c:aa:82:b9:2f:f3:8b:0f:d2:3c:5d:8d:43:80: 0b:45:81:d2:24:38:d8:80:fe:57:c0:a5:bf:0f:32: 7a:8d:66:08:6d:1e:40:79:3c:88:20:8a:45:28:8a: ad:b2:00:56:d9:d1:65:ff:be:6f:21:ec:90:d7:95: 25:71:ae:3c:9a:43:01:d8:23:e3:d9:17:b8:c7:a8: 26:69:cd:2d:b2:9b:e8:80:d0:3d:8e:02:49:c2:4d: 8e:34:1a:f9:15:e1:a9:60:ab:92:5d:58:51:a9:57: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:C1:67:C9:19:71:B5:DF:69:8E:F5:BA:FE:65:62:ED:5D:3A:35 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c7:3d:ac:b7:8e:25:22:90:4a:40:84:d9:24:ce:83:9a:35: 4c:ac:d8:c7:cb:78:26:f9:b3:9a:2f:e7:f1:a0:6e:a1:f5:cd: 21:8f:a5:f0:9a:d1:54:4a:03:cb:e5:fb:de:76:eb:c7:a4:35: 26:d7:16:a0:f7:e4:67:9b:0d:55:f5:9b:dd:06:10:d8:00:08: c8:52:a5:24:e4:f6:9f:f6:36:14:11:25:e6:40:1c:34:f9:9d: 43:cf:1f:69:9d:8d:69:ab:8c:75:d0:55:83:b4:c7:3e:ef:3b: 88:b1:06:80:8d:15:09:4a:71:9c:ab:73:b8:a1:ab:0d:3e:01: bd:2a:9a:1a:23:55:5a:0f:84:96:d9:45:63:d4:69:11:72:2a: ee:ed:15:7e:a1:b9:74:6d:3e:61:f8:dc:ae:fd:e9:5c:5b:6a: bc:db:ca:96:1b:59:66:ec:7d:e5:74:52:cf:64:99:69:99:c5: 08:da:2d:c0:59:66:bf:3d:eb:83:c2:b4:82:f0:b0:7b:b3:25: 11:2e:4d:82:81:92:02:9d:67:56:43:9b:7e:c6:9d:98:19:e8: 68:c9:44:1f:4f:67:ed:80:56:65:e6:08:b4:e4:8a:e3:f1:d8: 77:39:4a:db:66:15:6c:3e:ee:52:a6:35:17:0e:30:6d:62:5d: 5e:77:11:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjYwNzIzMDQ0NzE5WhcNMjYwNzMwMDQ0NzE5WjAYMRYwFAYD VQQDEw02YTYxOWNkOC04ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUracI9YGTu8JaAgIxsxWspSfUo18z+rqwXilwGMAgXUcq8ivxGQep00Z9LS 8ZXhkGxTRwr1BDONYLnjpkT2TxVSBjVpvIy9JvgCInBDAwOytzhTsdvl+apz/1oZ OIqOXTfkRD8gie1UJ64EFFjtWYxSEh/gQ0wOKfVTLqjBPjIc0NJ/1G/98i1JIteI GdTTPIANNVfOfKqCuS/ziw/SPF2NQ4ALRYHSJDjYgP5XwKW/DzJ6jWYIbR5AeTyI IIpFKIqtsgBW2dFl/75vIeyQ15Ulca48mkMB2CPj2Re4x6gmac0tspvogNA9jgJJ wk2ONBr5FeGpYKuSXVhRqVdhVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtpwWfJ GXG132mO9br+ZWLtXTo1MB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo8c9rLeOJSKQSkCE2STOg5o1TKzYx8t4Jvmzmi/n8aBuofXNIY+l8JrRVEoD y+X73nbrx6Q1JtcWoPfkZ5sNVfWb3QYQ2AAIyFKlJOT2n/Y2FBEl5kAcNPmdQ88f aZ2NaauMddBVg7THPu87iLEGgI0VCUpxnKtzuKGrDT4BvSqaGiNVWg+EltlFY9Rp EXIq7u0VfqG5dG0+Yfjcrv3pXFtqvNvKlhtZZux95XRSz2SZaZnFCNotwFlmvz3r g8K0gvCwe7MlES5NgoGSAp1nVkObfsadmBnoaMlEH09n7YBWZeYItOSK4/HYdzlK 22YVbD7uUqY1Fw4wbWJdXncRjw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:13:25 2026 by rpki-client