$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: 3qUaWrrXr8Y2574ygQgXvyHJ/i//Hv9YBxbqREgaCVc= Subject key identifier: 6E:55:82:48:BF:E2:5C:37:61:0B:1D:23:DC:B8:E7:F0:9E:C6:7A:50 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0243 Signing time: Thu 23 Jul 2026 03:41:00 +0000 Manifest this update: Thu 23 Jul 2026 03:40:59 +0000 Manifest next update: Thu 30 Jul 2026 03:40:59 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: eXRmyhPSm3n3L2m0gZ7o5SVCA5InOKpc0XcvUu1y0vs=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Jul 23 03:40:59 2026 GMT Not After : Jul 30 03:40:59 2026 GMT Subject: CN=6a618d4c-13dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:a1:0b:8e:4a:64:d0:64:33:dd:77:c0:6d: d2:30:ac:22:40:8b:f5:df:fd:e3:24:d9:05:a4:c0: b6:fe:f1:7c:9a:f8:e4:0c:52:11:36:3b:06:55:bd: 22:4d:b0:16:2c:66:57:80:51:d9:44:b4:4f:87:81: a4:8a:8c:7a:1f:0a:b1:77:5a:0f:69:e2:02:02:a5: 72:ad:d4:35:34:c2:b0:25:9b:eb:6d:08:bf:a7:6b: 86:66:7d:35:79:d9:43:08:90:5d:dd:6d:16:b3:f6: 58:98:f6:ff:73:9b:bf:aa:dc:6b:35:ae:b1:f9:4a: 25:db:7d:90:98:c5:69:05:b5:3b:e9:3d:76:9b:2a: c2:43:df:57:f5:24:ea:1a:c9:cc:d8:7b:cf:2c:60: 95:e9:ba:32:3e:76:1c:b7:2c:11:b5:49:3c:c7:fb: 9d:e2:d6:17:98:7f:a3:d1:e6:df:41:19:c0:a5:b5: 15:00:b3:d5:5f:88:c2:06:e7:33:38:4f:f1:b3:1f: 65:7a:a8:4f:f7:ac:73:39:52:ea:dc:f3:10:5b:7d: 65:dd:10:2c:8a:58:ce:3b:a0:f4:57:c1:4e:03:48: f2:b2:fa:60:7d:d8:6c:09:39:91:43:a3:fb:57:24: fe:aa:cf:45:31:78:45:c4:8e:69:b9:08:34:c4:77: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:55:82:48:BF:E2:5C:37:61:0B:1D:23:DC:B8:E7:F0:9E:C6:7A:50 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a7:1c:76:6f:81:e1:2e:01:28:82:1d:8b:5c:ce:1c:a4:6d: 54:4b:44:77:3b:2a:d5:38:70:f1:70:79:a6:70:41:d1:11:52: 31:c1:61:4b:f2:bb:95:ab:00:fe:cf:5f:6e:b3:5e:b1:7e:0e: 1e:a8:ea:c7:15:c8:63:60:19:e0:de:af:00:0f:46:86:28:5c: dc:c8:9b:d0:81:85:f4:07:92:09:28:5b:c8:77:bb:59:81:ae: 4d:65:90:11:17:1d:4c:ec:3f:30:49:b3:57:af:4e:c8:87:ae: 6b:c0:cf:68:07:0b:8d:0c:18:2f:a8:f7:86:78:b9:1d:2b:2b: 05:d5:c4:7b:64:6d:e5:19:67:e2:72:06:b7:c2:68:8b:76:04: 46:84:cc:cb:b7:45:93:d1:e9:7d:94:85:a5:3a:0a:45:46:e8: 48:0f:bd:63:e6:3f:ef:ae:14:e8:c2:e1:47:c0:fa:a6:1d:4c: 7e:07:8f:e1:ef:be:da:ad:7d:70:3e:a2:51:80:91:44:1a:04: c5:0d:72:31:81:1a:a6:ab:f5:46:51:d1:dd:67:c0:91:3c:ba: c1:2d:fc:61:d6:ae:0b:de:a1:99:d9:7c:14:1d:97:a6:c1:52: ea:8e:30:78:10:bd:1e:48:a4:f1:9e:8d:d4:02:06:5a:a9:b5: 9c:61:ef:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwNzIzMDM0MDU5WhcNMjYwNzMwMDM0MDU5WjAYMRYwFAYD VQQDEw02YTYxOGQ0Yy0xM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJihC45KZNBkM913wG3SMKwiQIv13/3jJNkFpMC2/vF8mvjkDFIRNjsGVb0i TbAWLGZXgFHZRLRPh4Gkiox6Hwqxd1oPaeICAqVyrdQ1NMKwJZvrbQi/p2uGZn01 edlDCJBd3W0Ws/ZYmPb/c5u/qtxrNa6x+Uol232QmMVpBbU76T12myrCQ99X9STq GsnM2HvPLGCV6boyPnYctywRtUk8x/ud4tYXmH+j0ebfQRnApbUVALPVX4jCBucz OE/xsx9leqhP96xzOVLq3PMQW31l3RAsiljOO6D0V8FOA0jysvpgfdhsCTmRQ6P7 VyT+qs9FMXhFxI5puQg0xHcfFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5Vgki/ 4lw3YQsdI9y45/CexnpQMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjqccdm+B4S4BKIIdi1zOHKRtVEtEdzsq1Thw8XB5pnBB0RFSMcFhS/K7lasA /s9fbrNesX4OHqjqxxXIY2AZ4N6vAA9Ghihc3Mib0IGF9AeSCShbyHe7WYGuTWWQ ERcdTOw/MEmzV69OyIeua8DPaAcLjQwYL6j3hni5HSsrBdXEe2Rt5Rln4nIGt8Jo i3YERoTMy7dFk9HpfZSFpToKRUboSA+9Y+Y/764U6MLhR8D6ph1MfgeP4e++2q19 cD6iUYCRRBoExQ1yMYEapqv1RlHR3WfAkTy6wS38YdauC96hmdl8FB2XpsFS6o4w eBC9Hkik8Z6N1AIGWqm1nGHvtg== -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:18 2026 by rpki-client