$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft File: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json) Hash identifier: A3Z3qqCpTcJYU6Xg/lmcZuHSIASqFkhx71WRZbIaOPM= Subject key identifier: 72:67:F8:FF:C0:69:3E:BE:47:B9:84:1F:2A:50:2A:86:A4:A8:5E:FA Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft Manifest number: 0BD8 Signing time: Wed 22 Jul 2026 19:53:02 +0000 Manifest this update: Wed 22 Jul 2026 19:53:02 +0000 Manifest next update: Wed 29 Jul 2026 19:53:02 +0000 Files and hashes: 1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: l49OukH4Wn+rAqF9grjiw5yCPac+hYRZbVV/znLJgEw=) 2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Validity Not Before: Jul 22 19:53:02 2026 GMT Not After : Jul 29 19:53:02 2026 GMT Subject: CN=6a611f9e-a5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:2c:ba:75:18:7c:62:bc:97:9d:23:eb:20: 00:e2:49:a6:99:1a:9a:90:23:83:53:70:b8:d4:4b: 1a:bb:a6:6b:c0:4a:89:3d:8d:d2:ec:e4:74:a7:c2: ae:d9:af:d6:d7:e4:79:c8:9d:52:57:4e:0d:b5:14: d0:96:47:4e:fe:28:38:2c:b0:e2:21:72:3a:c9:41: d2:08:02:f3:45:ae:6d:15:8c:ba:7f:a9:6c:70:e5: a9:16:0b:dc:45:9c:d3:e0:91:ec:4e:e4:af:3a:97: 4e:dd:04:14:95:89:49:ee:e1:1d:dd:5a:27:01:1c: 53:c5:f1:36:bf:44:ac:c0:bf:98:18:ca:bf:c6:ef: 66:24:eb:4e:f3:98:f7:81:c9:49:72:09:20:07:3b: 6a:5c:67:69:52:11:d6:53:23:13:2a:a1:a6:fd:80: d6:f7:7b:2d:ee:18:ec:6d:ec:be:23:0a:74:b9:e6: 99:e4:be:07:83:0a:b4:3d:e3:9f:23:08:57:2a:39: 4d:6d:b6:cb:22:4c:fe:46:83:39:20:6a:f5:a1:bb: bf:1d:bd:c0:f3:78:b9:ea:cb:79:9c:bf:8e:80:78: a0:f3:0a:13:10:f9:3d:63:2f:25:ca:c7:08:d1:e1: 43:b8:21:3a:e2:5e:31:4f:78:67:e7:8e:d3:d1:aa: 46:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:67:F8:FF:C0:69:3E:BE:47:B9:84:1F:2A:50:2A:86:A4:A8:5E:FA X509v3 Authority Key Identifier: keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:28:4c:1c:da:83:24:7e:ca:05:a5:6b:cb:a4:d5:9b:1f: 98:a6:f7:f2:df:be:d1:d4:c7:26:8a:aa:21:20:3b:30:9f:ed: 68:28:5e:0a:1a:96:d3:95:2b:5c:c6:4f:55:16:b4:53:41:f4: fa:ab:ef:ba:7e:a1:0f:59:62:1d:c8:db:44:10:8b:ce:66:b1: 28:fd:81:ec:0b:35:c2:32:b0:6d:3b:20:0d:bd:76:65:57:4e: a2:f5:59:36:fb:39:d8:6e:2e:6c:60:97:c3:fa:27:72:bd:0f: e2:89:50:aa:8e:2d:04:f6:46:fa:20:76:5b:c8:cf:e2:31:d5: aa:f3:22:b0:ef:38:db:8d:7a:26:29:10:26:ed:2d:2e:70:27: 95:f6:45:42:a4:d0:cf:8b:78:14:70:6e:ff:3a:1e:4b:de:4d: 2c:25:c1:6b:33:b1:06:0e:03:43:cb:36:b1:f0:26:9f:57:55: 3b:41:41:0f:2c:d2:16:05:f3:77:be:6c:32:99:86:c4:9d:f3: e6:06:e7:8a:95:89:cd:8f:84:8f:cf:20:c1:a9:f5:2d:f8:c9: 8e:29:b5:7e:c4:ac:12:7d:8a:f6:9d:9d:b4:6f:59:d2:34:84: e2:aa:01:54:fc:26:63:83:cf:f9:ae:c3:62:1b:e4:26:8c:31: e0:2a:9e:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKERFNENFOTYwQTM5MzBBQjRDMjI3RkNFOEY4NTdDMDg0 MTk3RjA4RDAwHhcNMjYwNzIyMTk1MzAyWhcNMjYwNzI5MTk1MzAyWjAYMRYwFAYD VQQDEw02YTYxMWY5ZS1hNWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2ssunUYfGK8l50j6yAA4kmmmRqakCODU3C41Esau6ZrwEqJPY3S7OR0p8Ku 2a/W1+R5yJ1SV04NtRTQlkdO/ig4LLDiIXI6yUHSCALzRa5tFYy6f6lscOWpFgvc RZzT4JHsTuSvOpdO3QQUlYlJ7uEd3VonARxTxfE2v0SswL+YGMq/xu9mJOtO85j3 gclJcgkgBztqXGdpUhHWUyMTKqGm/YDW93st7hjsbey+Iwp0ueaZ5L4Hgwq0PeOf IwhXKjlNbbbLIkz+RoM5IGr1obu/Hb3A83i56st5nL+OgHig8woTEPk9Yy8lyscI 0eFDuCE64l4xT3hn547T0apG8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJn+P/A aT6+R7mEHypQKoakqF76MB8GA1UdIwQYMBaAFN5M6WCjkwq0wif86PhXwIQZfwjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENyVENKX3pvLUZmQWhCbF9D TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNrenBZS09UQ3JUQ0pfem8tRmZBaEJsX0NOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENy VENKX3pvLUZmQWhCbF9DTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ/8oTBzagyR+ygWla8uk1ZsfmKb38t++0dTHJoqqISA7MJ/taCheChqW05Ur XMZPVRa0U0H0+qvvun6hD1liHcjbRBCLzmaxKP2B7As1wjKwbTsgDb12ZVdOovVZ Nvs52G4ubGCXw/oncr0P4olQqo4tBPZG+iB2W8jP4jHVqvMisO842416JikQJu0t LnAnlfZFQqTQz4t4FHBu/zoeS95NLCXBazOxBg4DQ8s2sfAmn1dVO0FBDyzSFgXz d75sMpmGxJ3z5gbnipWJzY+Ej88gwan1LfjJjim1fsSsEn2K9p2dtG9Z0jSE4qoB VPwmY4PP+a7DYhvkJowx4Cqepw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:31:48 2026 by rpki-client