$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: c3YaATPCFL3B23cwZm3NScITXGSjGHlNphtEZa35f2M= Subject key identifier: D3:35:A4:6E:8F:B6:55:43:A7:5C:37:80:0E:96:63:E4:95:E6:95:72 Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: 014E Signing time: Thu 23 Jul 2026 06:47:48 +0000 Manifest this update: Thu 23 Jul 2026 06:47:47 +0000 Manifest next update: Thu 30 Jul 2026 06:47:47 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: fylhL5iWyUwSSFWxHB/2/xW9JzpmqygU8N3Un+PiJ4M=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: d7xVs3t7CcfMe/ajdsTZTFxRrOglm1vaW7xirB1AT90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Jul 23 06:47:47 2026 GMT Not After : Jul 30 06:47:47 2026 GMT Subject: CN=6a61b913-b4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:70:45:cf:5d:12:21:4a:50:dd:8c:5c:23: 9e:cb:2e:71:73:a2:b9:53:2d:4f:2d:d8:8c:c4:33: ae:7e:bb:c8:9b:e5:06:58:a0:f9:f1:a2:d9:73:0e: ad:d1:6c:6d:41:57:f3:71:91:eb:10:6e:13:14:7c: 8f:65:10:f5:2c:51:fc:86:f6:a1:63:8f:2b:39:39: b8:af:c4:ca:6c:29:0b:0b:03:0f:61:8b:50:f0:19: 73:35:32:d5:de:1b:d1:a6:16:f8:ba:f0:8c:89:74: 43:3e:0c:6a:e3:0f:e3:f9:75:70:ec:d2:ce:45:3c: 07:24:04:60:01:98:75:ad:e5:ae:bc:1b:e9:81:2e: 17:95:84:34:8d:a6:00:9d:16:f7:33:5b:13:89:d3: 7d:54:72:26:da:b1:45:61:03:8c:84:79:9a:c3:d8: e9:8c:52:23:bb:57:3a:81:73:3e:6c:3c:79:c5:66: 2e:ac:3d:ed:79:fc:9d:57:73:92:8e:73:cb:25:cc: 30:38:63:74:6c:cd:e1:ab:83:8d:62:0d:6d:8a:08: 70:ec:b5:7c:ec:a7:d8:96:72:81:0e:57:57:84:2a: 04:9b:61:15:44:08:62:d8:c6:13:c4:92:7e:94:17: 83:37:e5:92:83:88:bb:28:63:87:ca:2d:60:bc:71: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:A4:6E:8F:B6:55:43:A7:5C:37:80:0E:96:63:E4:95:E6:95:72 X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:60:36:5d:81:2b:46:86:0a:2b:87:c0:2a:3f:4a:c3:70:62: 5d:30:04:af:2c:98:cc:22:16:00:4d:b7:c8:99:ca:2d:b6:de: 8c:81:03:b9:8a:43:b3:32:82:83:9b:2f:e6:43:f4:e8:69:b4: aa:24:12:a4:2a:b2:fc:c6:a3:a2:6c:bd:d0:c3:19:bc:eb:5a: d3:74:bf:05:9a:9f:fb:72:0b:5a:dc:2d:b4:0d:c0:7b:fc:7c: e6:4c:87:72:63:28:5b:80:37:96:77:29:6f:36:b9:86:0d:f5: 88:43:24:10:61:c0:34:66:15:16:cd:57:56:de:74:88:1a:60: 59:f3:a4:69:22:d1:a9:07:12:ef:9d:c8:98:c2:6e:cf:49:53: 49:0f:e1:a2:34:ad:c4:c3:42:3d:69:a9:d5:5f:d4:78:4c:07: 1a:1e:a7:1b:1d:df:db:56:e2:03:d5:d1:80:7c:0d:d8:97:73: 21:81:6c:ed:e1:15:d9:c5:a8:59:d0:8c:f6:2b:a6:0f:ba:8b: f4:98:ce:27:ad:eb:f9:dc:d0:54:f8:a8:cf:45:75:f9:f5:af: b1:4f:c4:c4:2b:fc:5a:61:84:9a:3e:f0:03:f0:9c:20:d2:50: 25:e6:52:7c:06:76:70:78:54:50:11:75:e9:78:80:9d:ec:22: fa:a5:f0:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjYwNzIzMDY0NzQ3WhcNMjYwNzMwMDY0NzQ3WjAYMRYwFAYD VQQDEw02YTYxYjkxMy1iNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeZwRc9dEiFKUN2MXCOeyy5xc6K5Uy1PLdiMxDOufrvIm+UGWKD58aLZcw6t 0WxtQVfzcZHrEG4TFHyPZRD1LFH8hvahY48rOTm4r8TKbCkLCwMPYYtQ8BlzNTLV 3hvRphb4uvCMiXRDPgxq4w/j+XVw7NLORTwHJARgAZh1reWuvBvpgS4XlYQ0jaYA nRb3M1sTidN9VHIm2rFFYQOMhHmaw9jpjFIju1c6gXM+bDx5xWYurD3tefydV3OS jnPLJcwwOGN0bM3hq4ONYg1tighw7LV87KfYlnKBDldXhCoEm2EVRAhi2MYTxJJ+ lBeDN+WSg4i7KGOHyi1gvHFlywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM1pG6P tlVDp1w3gA6WY+SV5pVyMB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy2A2XYErRoYKK4fAKj9Kw3BiXTAEryyYzCIWAE23yJnKLbbejIEDuYpDszKC g5sv5kP06Gm0qiQSpCqy/Majomy90MMZvOta03S/BZqf+3ILWtwttA3Ae/x85kyH cmMoW4A3lncpbza5hg31iEMkEGHANGYVFs1XVt50iBpgWfOkaSLRqQcS753ImMJu z0lTSQ/hojStxMNCPWmp1V/UeEwHGh6nGx3f21biA9XRgHwN2JdzIYFs7eEV2cWo WdCM9iumD7qL9JjOJ63r+dzQVPioz0V1+fWvsU/ExCv8WmGEmj7wA/CcINJQJeZS fAZ2cHhUUBF16XiAnewi+qXwjQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:52:26 2026 by rpki-client