$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: qwbOBKYOUt/hiy+2NPq0IpF83g+X6RZpSg8r+k9zas8= Subject key identifier: 0A:B4:EB:FF:09:80:34:97:21:C8:87:5A:BB:50:D2:D3:3E:C8:C7:0E Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 0157 Signing time: Thu 23 Jul 2026 06:38:19 +0000 Manifest this update: Thu 23 Jul 2026 06:38:19 +0000 Manifest next update: Thu 30 Jul 2026 06:38:19 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: Na4KaTQQ/0CE5SDMBDA0XwD8pgtpB+luVvVDk5Oy1zU=) 2: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: cb0xCHL1dV5N7XyIruiC/PJxxp8M1xlcJSMtvdRnQog=) 3: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 3r7oWvZZSCAzRuaEEZfRdRU+m7LuuIxoldkPQaUgKhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Jul 23 06:38:19 2026 GMT Not After : Jul 30 06:38:19 2026 GMT Subject: CN=6a61b6db-93ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:8b:36:6d:6f:2d:43:27:7a:c5:2d:24:ff: 0b:6a:b9:d0:57:1b:40:6a:99:98:ea:67:5b:bd:cc: 3a:71:0d:51:84:14:8c:d6:a9:de:dc:15:fb:fc:14: ac:ef:d0:db:3d:41:c5:8c:c4:ba:1c:ba:87:28:8e: 36:c7:13:b4:8e:93:a3:45:20:ee:44:51:99:12:59: e7:b5:a9:a5:79:0a:f4:2f:c4:79:fd:ff:cd:c7:9f: b2:fc:5e:8b:ef:49:93:56:f9:00:72:e8:21:77:83: 24:2f:72:e3:25:79:86:9a:37:8f:68:08:b8:b6:4a: 5e:e9:87:38:db:eb:51:78:ff:7e:ff:2a:6a:d7:9c: 95:93:e2:4d:a9:81:e8:18:a6:dc:25:92:20:b7:d3: 99:f7:df:ae:47:44:58:fe:ac:fb:a1:48:76:6e:43: 59:ba:38:1e:71:1b:9b:82:5d:2a:68:62:0a:f1:b5: d3:e1:5f:5a:04:c1:4e:58:5c:6e:5d:39:37:cf:6f: 01:fe:3d:38:e8:92:a1:d4:00:eb:9c:d7:d6:d0:9b: 42:5d:7b:be:0b:88:a8:d4:e9:c9:58:b1:18:c5:db: 3b:01:ad:ab:2c:0a:15:1a:2e:64:81:c3:ba:cd:3b: a5:86:32:8e:b6:37:56:84:e6:7b:58:25:2f:1f:69: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B4:EB:FF:09:80:34:97:21:C8:87:5A:BB:50:D2:D3:3E:C8:C7:0E X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:11:38:4a:31:57:75:ef:99:7c:eb:b7:0f:14:4e:4e:53:a8: d4:1a:8d:2c:18:3b:b6:5a:56:35:ed:1a:9a:46:84:f3:3e:38: 64:fe:d6:a1:cb:40:90:29:01:19:74:4e:d4:0c:6f:0c:8e:ba: c5:0a:2a:85:cd:76:4b:4d:be:52:f3:15:57:c3:42:4d:33:7b: ba:3c:5b:b2:9d:82:44:18:21:c4:13:1d:73:cf:0c:5a:40:05: 99:30:2e:0e:68:f9:8e:fe:2b:1d:e7:08:8b:e0:86:74:96:d6: 28:42:23:06:cc:8a:c1:3e:71:76:2c:24:df:f9:f4:f5:53:1e: c8:05:2d:48:ae:12:e1:9f:ca:db:2d:0a:3b:5f:0c:6e:c0:94: b4:67:0f:27:3c:2d:e1:db:eb:b5:f5:81:2f:43:a4:49:2a:99: 4e:cc:9f:1d:11:93:20:bf:a4:3d:7e:26:91:79:6f:68:db:b2: 11:50:1f:31:81:b7:eb:68:1a:0e:de:02:db:2b:5c:bc:eb:37: ef:7c:09:78:9c:ab:e5:ec:3d:03:5c:74:36:b1:36:9c:a9:04: f2:53:49:4a:16:83:61:74:4e:a5:46:b1:fd:35:f2:f3:f8:f4: 40:1d:98:f2:3e:c9:2a:e9:23:72:60:9b:a7:39:32:2b:fb:4b: 9e:fe:24:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYwNzIzMDYzODE5WhcNMjYwNzMwMDYzODE5WjAYMRYwFAYD VQQDEw02YTYxYjZkYi05M2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvSLNm1vLUMnesUtJP8LarnQVxtAapmY6mdbvcw6cQ1RhBSM1qne3BX7/BSs 79DbPUHFjMS6HLqHKI42xxO0jpOjRSDuRFGZElnntamleQr0L8R5/f/Nx5+y/F6L 70mTVvkAcughd4MkL3LjJXmGmjePaAi4tkpe6Yc42+tReP9+/ypq15yVk+JNqYHo GKbcJZIgt9OZ99+uR0RY/qz7oUh2bkNZujgecRubgl0qaGIK8bXT4V9aBMFOWFxu XTk3z28B/j046JKh1ADrnNfW0JtCXXu+C4io1OnJWLEYxds7Aa2rLAoVGi5kgcO6 zTulhjKOtjdWhOZ7WCUvH2k4SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAq06/8J gDSXIciHWrtQ0tM+yMcOMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaRE4SjFXde+ZfOu3DxROTlOo1BqNLBg7tlpWNe0amkaE8z44ZP7WoctAkCkB GXRO1AxvDI66xQoqhc12S02+UvMVV8NCTTN7ujxbsp2CRBghxBMdc88MWkAFmTAu Dmj5jv4rHecIi+CGdJbWKEIjBsyKwT5xdiwk3/n09VMeyAUtSK4S4Z/K2y0KO18M bsCUtGcPJzwt4dvrtfWBL0OkSSqZTsyfHRGTIL+kPX4mkXlvaNuyEVAfMYG362ga Dt4C2ytcvOs373wJeJyr5ew9A1x0NrE2nKkE8lNJShaDYXROpUax/TXy8/j0QB2Y 8j7JKukjcmCbpzkyK/tLnv4kbQ== -----END CERTIFICATE-----Generated at Fri Jul 24 07:53:57 2026 by rpki-client