$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft File: 3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json) Hash identifier: nG8jrW843Gem2xiEn5OkD+yMiKQMEwWkS7bIC8orMGk= Subject key identifier: 7F:58:8E:01:45:D2:51:1D:31:3A:46:97:61:67:3F:E3:0D:8B:32:16 Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE Certificate issuer: /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft Manifest number: 024E Signing time: Wed 22 Jul 2026 15:20:22 +0000 Manifest this update: Wed 22 Jul 2026 15:20:21 +0000 Manifest next update: Wed 29 Jul 2026 15:20:21 +0000 Files and hashes: 1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: zv4H3i3lXEKMaCPFjOAon09NUin+x9IcpR7HQ+6LthM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Validity Not Before: Jul 22 15:20:21 2026 GMT Not After : Jul 29 15:20:21 2026 GMT Subject: CN=6a60dfb5-8032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:92:99:4a:f5:67:f8:c4:97:25:dd:b3:8b:2d: 9f:46:3b:f9:51:1b:6e:09:bc:24:43:5d:e3:c6:4b: 8f:29:75:be:c5:fb:fa:33:a4:79:12:64:e8:0e:f5: a7:a9:8f:69:3a:ce:18:60:41:8e:7d:f6:4c:e9:5f: 13:59:70:f1:d2:52:2c:d8:2c:39:02:69:2b:b1:1d: e9:9b:4e:97:78:d3:69:4a:42:3e:0f:25:96:ce:42: 50:1e:1a:cb:41:95:f5:fb:ca:81:56:aa:af:7b:24: ec:30:82:81:36:59:36:45:e9:79:10:3b:5a:7a:49: 38:d7:9a:6c:e0:9d:75:10:4b:75:ae:54:a1:65:5a: ed:d9:de:15:a3:9b:3e:d7:88:7e:7a:4b:53:d9:19: f8:5a:f3:43:38:02:5b:d6:55:52:9c:84:82:31:7c: a5:b8:57:68:d6:fa:ce:fa:50:1b:6f:c1:27:33:b1: 9d:f7:9e:b4:2d:3a:cd:a7:1b:71:f2:52:a1:bb:95: e8:92:91:d1:26:f9:c4:59:9b:62:24:4e:34:9b:b5: cb:e7:96:3b:aa:91:61:1c:5d:6a:04:c2:bf:aa:ca: c9:e0:6e:a8:ad:a3:1e:a0:06:fa:35:82:ca:f3:06: 23:ff:87:86:63:44:98:c8:81:84:15:45:52:37:34: 83:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:58:8E:01:45:D2:51:1D:31:3A:46:97:61:67:3F:E3:0D:8B:32:16 X509v3 Authority Key Identifier: keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fe:35:b7:ef:22:ee:a1:70:59:16:62:2e:e6:b3:e3:24:7d: a0:83:a5:95:2a:8b:0c:2c:39:19:11:2b:f8:48:98:67:71:e5: 05:7d:5f:60:33:9d:f5:0d:5c:12:fc:49:6c:7e:80:4c:ee:bc: 17:58:a1:60:a7:af:fb:b1:43:4c:7f:1c:4f:d8:3a:b0:d9:06: 24:1f:4b:aa:88:91:6f:db:4e:80:4b:76:b3:eb:7d:92:80:61: cf:f1:3e:65:7a:f0:bd:e0:01:b8:59:42:51:aa:b6:a0:0e:c5: 4c:b0:70:47:a4:43:2a:9d:2f:a1:91:5e:66:3b:78:c1:6c:cb: 8b:2f:2f:ac:25:83:ae:00:3a:da:a8:45:9d:bc:b9:f8:47:55: 3f:80:72:a3:26:1a:a7:bf:fa:ac:09:14:d8:8f:99:95:45:a4: 36:f3:28:ff:e0:47:26:f9:29:d7:db:dc:0e:8c:1e:bd:ff:fb: f9:1c:67:96:2d:35:35:3d:7c:3f:1a:58:65:3b:fd:1b:26:8b: d3:63:01:61:5a:a0:4e:03:2c:37:73:a8:b2:3e:13:d5:3c:79: 2f:de:75:56:ee:e9:0b:cc:44:36:30:c9:04:ca:67:e8:25:8e: 76:79:64:25:16:39:f4:73:2f:15:cd:f8:e7:14:6c:4c:23:b1: 63:63:a6:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEREMjM1RDM3MDg5MDlCMzNENTg5NEI0Q0NEQzkxMDVD NjFGRDE2QUUwHhcNMjYwNzIyMTUyMDIxWhcNMjYwNzI5MTUyMDIxWjAYMRYwFAYD VQQDEw02YTYwZGZiNS04MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JKZSvVn+MSXJd2ziy2fRjv5URtuCbwkQ13jxkuPKXW+xfv6M6R5EmToDvWn qY9pOs4YYEGOffZM6V8TWXDx0lIs2Cw5AmkrsR3pm06XeNNpSkI+DyWWzkJQHhrL QZX1+8qBVqqveyTsMIKBNlk2Rel5EDtaekk415ps4J11EEt1rlShZVrt2d4Vo5s+ 14h+ektT2Rn4WvNDOAJb1lVSnISCMXyluFdo1vrO+lAbb8EnM7Gd9560LTrNpxtx 8lKhu5XokpHRJvnEWZtiJE40m7XL55Y7qpFhHF1qBMK/qsrJ4G6oraMeoAb6NYLK 8wYj/4eGY0SYyIGEFUVSNzSDmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH9YjgFF 0lEdMTpGl2FnP+MNizIWMB8GA1UdIwQYMBaAFN0jXTcIkJsz1YlLTM3JEFxh/Rau MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9EMDYxMTcxNjBC MkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16UFZpVXRNemNrUVhHSDlG cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNTTmROd2lRbXpQVmlVdE16Y2tRWEdIOUZxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9EMDYxMTcxNjBCMkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16 UFZpVXRNemNrUVhHSDlGcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgf41t+8i7qFwWRZiLuaz4yR9oIOllSqLDCw5GREr+EiYZ3HlBX1fYDOd9Q1c EvxJbH6ATO68F1ihYKev+7FDTH8cT9g6sNkGJB9LqoiRb9tOgEt2s+t9koBhz/E+ ZXrwveABuFlCUaq2oA7FTLBwR6RDKp0voZFeZjt4wWzLiy8vrCWDrgA62qhFnby5 +EdVP4ByoyYap7/6rAkU2I+ZlUWkNvMo/+BHJvkp19vcDowevf/7+Rxnli01NT18 PxpYZTv9GyaL02MBYVqgTgMsN3Oosj4T1Tx5L951Vu7pC8xENjDJBMpn6CWOdnlk JRY59HMvFc345xRsTCOxY2Om5w== -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:51 2026 by rpki-client