$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft File: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json) Hash identifier: GN1ZB6t/72DGyDN4/VK3AxHbHzhPpoSA3uJjGd4HqIs= Subject key identifier: 57:76:B5:D9:E5:F9:F8:1C:E8:DB:AC:99:93:23:95:1D:A8:CC:8C:C1 Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 Certificate issuer: /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft Manifest number: 021B Signing time: Thu 23 Jul 2026 04:13:47 +0000 Manifest this update: Thu 23 Jul 2026 04:13:47 +0000 Manifest next update: Thu 30 Jul 2026 04:13:47 +0000 Files and hashes: 1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: cKCwM8Ln7mcP3gk7mqcSnHo9qItfCoF/Wu4C1Uo6x6c=) 2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: ENKRczYYvLUIozCAd5X4sketAA/sYkbVgxD+0/V4DAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3399, serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3 Validity Not Before: Jul 23 04:13:47 2026 GMT Not After : Jul 30 04:13:47 2026 GMT Subject: CN=6a6194fb-0d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:cc:9e:35:06:9a:27:21:c3:96:09:60:4b:cd: cb:36:89:57:f6:1f:5d:ad:5f:3d:fd:e3:34:72:02: cd:08:50:c9:be:00:29:53:cb:fa:10:1a:29:ac:6b: f3:94:91:1f:5c:9e:60:60:96:9c:8e:b3:2e:3e:45: 19:89:8e:4a:78:8f:74:2d:65:5e:e5:1f:17:d0:51: 3c:7b:b3:fc:83:a5:c9:95:2f:fb:91:ef:70:02:90: 73:62:50:e6:47:51:4a:c1:c3:c7:c4:07:ac:95:72: ea:ed:bb:5d:5d:33:99:2f:4d:a8:82:53:da:bb:05: 9e:6e:1b:e7:cf:e9:46:43:2a:ba:ac:8a:a6:3f:32: 88:3f:a5:6f:1a:8a:bf:46:f5:6e:aa:ee:80:ff:d6: 0e:69:90:36:8b:3f:14:fc:ca:9d:5a:83:f7:95:d8: 3b:29:cb:9a:d8:90:6d:8d:89:50:bb:1d:f1:4e:86: 93:2b:65:c0:e3:28:e1:e8:b8:5e:e0:20:41:07:06: 08:47:34:97:4a:f0:09:4a:2a:76:19:2f:b5:8e:d4: b8:15:2b:84:af:31:c5:9d:03:6c:ae:af:62:e5:42: 77:68:c4:2c:32:67:fd:6f:88:8d:e0:5e:3d:45:41: f6:b4:b6:e0:b0:9f:3b:1a:21:63:d1:15:3a:82:22: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:B5:D9:E5:F9:F8:1C:E8:DB:AC:99:93:23:95:1D:A8:CC:8C:C1 X509v3 Authority Key Identifier: keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:95:eb:e5:d1:3b:20:f3:b8:59:04:d5:95:7f:34:a1:13:e3: f2:39:e1:f9:f4:35:9b:32:c9:45:0c:be:50:a1:11:0c:6b:3b: 6f:48:8b:60:cf:0c:89:75:a4:c2:19:e0:7d:f7:6d:62:cc:18: 86:11:e4:7c:f6:a3:c1:c9:2a:4b:4e:78:40:87:82:ee:7a:29: 3e:f9:f6:e8:45:5f:e8:ab:8f:10:0e:ba:da:e2:d6:30:c7:b0: 2d:ba:7d:b0:3e:05:e0:33:1c:58:d5:0a:f2:ad:bf:1e:2b:b0: 0d:da:34:77:de:a0:2e:04:bd:53:6a:a5:79:35:b4:20:14:4f: ae:7e:a2:33:e7:1a:99:2f:48:2f:af:39:10:7a:38:19:b7:65: c9:a8:60:8b:60:1b:c8:e2:7a:d0:fd:d0:54:ac:1a:fa:23:b4: cf:7f:a6:e6:f1:c0:cc:bc:eb:e7:36:67:83:35:4f:f0:a9:b4: 30:9a:53:ec:ad:cb:e1:e6:61:44:e5:c3:48:39:ea:ff:b6:37: 77:62:dc:ee:72:c2:42:e2:76:96:31:c6:69:e5:f0:84:2f:ad: 89:bc:ed:09:8c:3e:e0:fb:00:7a:d1:4b:bb:84:bd:02:89:54: c2:ea:34:d3:6b:68:b3:51:d8:44:ff:96:7d:30:3d:81:f7:d1: 29:8b:ee:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMzOTkxMTAvBgNVBAUTKDNEQkREN0VENDEyNDgwRTkzNTVDMjdGM0MxMTNCNTY0 MEQzMTg2QjMwHhcNMjYwNzIzMDQxMzQ3WhcNMjYwNzMwMDQxMzQ3WjAYMRYwFAYD VQQDEw02YTYxOTRmYi0wZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA98yeNQaaJyHDlglgS83LNolX9h9drV89/eM0cgLNCFDJvgApU8v6EBoprGvz lJEfXJ5gYJacjrMuPkUZiY5KeI90LWVe5R8X0FE8e7P8g6XJlS/7ke9wApBzYlDm R1FKwcPHxAeslXLq7btdXTOZL02oglPauwWebhvnz+lGQyq6rIqmPzKIP6VvGoq/ RvVuqu6A/9YOaZA2iz8U/MqdWoP3ldg7Kcua2JBtjYlQux3xToaTK2XA4yjh6Lhe 4CBBBwYIRzSXSvAJSip2GS+1jtS4FSuErzHFnQNsrq9i5UJ3aMQsMmf9b4iN4F49 RUH2tLbgsJ87GiFj0RU6giLgIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFd2tdnl +fgc6NusmZMjlR2ozIzBMB8GA1UdIwQYMBaAFD291+1BJIDpNVwn88ETtWQNMYaz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzM5OS9CQTY4QzMyODVD QjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dPazFYQ2Z6d1JPMVpBMHho ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BiM1g3VUVrZ09rMVhDZnp3Uk8xWkEweGhyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzM5OS9CQTY4QzMyODVDQjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dP azFYQ2Z6d1JPMVpBMHhock0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACJXr5dE7IPO4WQTVlX80oRPj8jnh+fQ1mzLJRQy+UKERDGs7b0iLYM8MiXWk whngffdtYswYhhHkfPajwckqS054QIeC7nopPvn26EVf6KuPEA662uLWMMewLbp9 sD4F4DMcWNUK8q2/HiuwDdo0d96gLgS9U2qleTW0IBRPrn6iM+camS9IL685EHo4 Gbdlyahgi2AbyOJ60P3QVKwa+iO0z3+m5vHAzLzr5zZngzVP8Km0MJpT7K3L4eZh ROXDSDnq/7Y3d2Lc7nLCQuJ2ljHGaeXwhC+tibztCYw+4PsAetFLu4S9AolUwuo0 02tos1HYRP+WfTA9gffRKYvuuw== -----END CERTIFICATE-----Generated at Fri Jul 24 09:29:28 2026 by rpki-client