$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: jBnNsgyISSyjjhpBPhBtHmwP76B3i4nKb06USQu5DT0= Subject key identifier: 9C:78:11:3C:8B:C7:56:A1:8B:5A:79:5F:9A:D2:39:A8:61:D8:9F:08 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 358A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3574 Signing time: Wed 22 Jul 2026 14:36:21 +0000 Manifest this update: Wed 22 Jul 2026 14:36:20 +0000 Manifest next update: Wed 29 Jul 2026 14:36:20 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: FNIYjYJS1yxkxorWgU9p59Kx63oIUV2pHyDycOZ+t7c=) 2: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) 3: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13706 (0x358a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jul 22 14:36:20 2026 GMT Not After : Jul 29 14:36:20 2026 GMT Subject: CN=6a60d565-65d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:7a:31:8f:5f:71:1b:63:35:f7:ab:1d:28: ff:08:39:d0:8d:9c:d6:ec:6d:17:4f:48:76:ed:98: ed:e5:9a:a0:92:08:91:4c:3f:9e:88:5e:d9:dc:bb: ab:b1:d7:ff:14:99:90:92:aa:b1:f1:81:43:81:7f: 9c:f2:14:24:67:fa:40:85:92:16:76:9d:54:46:4d: 64:25:a7:80:89:33:91:dc:0d:a2:64:13:43:65:ec: 5c:af:b5:94:3b:d2:53:e4:59:a6:f0:68:2c:86:74: 07:72:5d:b0:19:11:1e:f2:50:55:39:aa:dd:a3:5a: 75:bf:0b:c2:df:dc:d6:3d:4a:bc:51:0a:d6:81:8b: f0:7c:22:47:0f:0c:7f:08:5e:0f:4e:59:1b:60:ba: 30:f5:87:07:a6:b5:5e:eb:cf:10:24:d4:fd:86:2d: bf:74:4e:61:48:4e:40:51:25:eb:4f:e5:08:b4:c6: 74:8d:ba:06:78:90:8f:a8:83:e0:3e:2e:1d:dd:78: ac:a8:2a:f4:15:ab:37:97:2d:c3:c3:3a:d2:d3:24: 17:36:f9:68:b8:ab:20:29:fc:a7:0f:55:73:de:e5: 7d:68:00:4a:b2:36:b0:6b:68:ae:c1:eb:2d:6c:18: 01:6d:d8:f8:b8:d3:db:54:11:cc:9c:77:d9:9e:4b: e3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:78:11:3C:8B:C7:56:A1:8B:5A:79:5F:9A:D2:39:A8:61:D8:9F:08 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:2a:fe:56:ae:06:07:f7:f4:d5:92:9c:fe:df:7a:b4:5e:c7: b0:1d:47:28:4e:ca:fc:e3:f2:d5:c5:b9:9d:79:b5:70:01:0a: ad:bd:1b:3e:ae:60:40:b5:15:c9:af:13:07:56:19:74:e7:c5: f3:b1:88:77:99:57:da:96:77:57:a8:33:dc:03:e8:2a:22:09: aa:e5:03:1f:ca:73:ed:2d:19:f4:92:98:f0:31:92:07:37:5c: 17:46:41:88:39:6c:1a:cf:cc:4a:61:00:f9:3d:1c:81:65:5f: a1:25:65:de:d7:e2:b3:85:b8:d0:9f:4f:87:11:64:a9:2b:46: db:9d:9e:75:82:0a:80:2d:31:84:32:3b:fe:f1:9d:fa:eb:a8: cf:e6:fc:8e:45:6b:91:d4:80:87:39:7b:11:d4:e7:28:8c:5a: 18:a4:e5:33:75:69:a0:81:57:20:14:32:d5:f2:6f:9b:85:05: 19:20:00:fd:ef:24:d2:da:60:64:56:11:92:cc:4e:85:b9:d8: 3f:6a:4c:af:77:46:30:23:79:0e:31:ee:2f:2c:4d:d8:c6:06: cf:fe:57:43:ac:31:31:04:b9:f9:25:3d:fc:5a:1d:a7:c5:65: 5d:08:e2:3e:27:c5:02:ec:57:cf:38:70:54:ff:09:73:d7:db: b9:b2:a7:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwNzIyMTQzNjIwWhcNMjYwNzI5MTQzNjIwWjAYMRYwFAYD VQQDEw02YTYwZDU2NS02NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmU96MY9fcRtjNferHSj/CDnQjZzW7G0XT0h27Zjt5ZqgkgiRTD+eiF7Z3Lur sdf/FJmQkqqx8YFDgX+c8hQkZ/pAhZIWdp1URk1kJaeAiTOR3A2iZBNDZexcr7WU O9JT5Fmm8GgshnQHcl2wGREe8lBVOardo1p1vwvC39zWPUq8UQrWgYvwfCJHDwx/ CF4PTlkbYLow9YcHprVe688QJNT9hi2/dE5hSE5AUSXrT+UItMZ0jboGeJCPqIPg Pi4d3XisqCr0Fas3ly3DwzrS0yQXNvlouKsgKfynD1Vz3uV9aABKsjawa2iuwest bBgBbdj4uNPbVBHMnHfZnkvjPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJx4ETyL x1ahi1p5X5rSOahh2J8IMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFir+Vq4GB/f01ZKc/t96tF7HsB1HKE7K/OPy1cW5nXm1cAEKrb0bPq5gQLUV ya8TB1YZdOfF87GId5lX2pZ3V6gz3APoKiIJquUDH8pz7S0Z9JKY8DGSBzdcF0ZB iDlsGs/MSmEA+T0cgWVfoSVl3tfis4W40J9PhxFkqStG252edYIKgC0xhDI7/vGd +uuoz+b8jkVrkdSAhzl7EdTnKIxaGKTlM3VpoIFXIBQy1fJvm4UFGSAA/e8k0tpg ZFYRksxOhbnYP2pMr3dGMCN5DjHuLyxN2MYGz/5XQ6wxMQS5+SU9/Fodp8VlXQji PifFAuxXzzhwVP8Jc9fbubKnSg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:05:01 2026 by rpki-client