$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: 4sINN/32+hRRgIps8xK7QSmv3C6xdkZgtxgaT6+3Yh0= Subject key identifier: 28:55:2B:6C:D7:ED:78:A0:81:41:79:E0:34:AC:A4:BA:E7:7F:75:73 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 0A2E Signing time: Wed 22 Jul 2026 20:09:10 +0000 Manifest this update: Wed 22 Jul 2026 20:09:10 +0000 Manifest next update: Wed 29 Jul 2026 20:09:10 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: jXiQsMUJIhJF/prDPWCYQaw0on6vsAN//tzMOqYFkVs=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: OYi6iPOzlWh6eoXqX49fJiVTJCcfXyryKflqKEAnvYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2615 (0xa37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Jul 22 20:09:10 2026 GMT Not After : Jul 29 20:09:10 2026 GMT Subject: CN=6a612366-bb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:60:0e:bb:ed:09:b3:f9:99:05:11:18:c8: 6e:a6:9f:89:f8:7a:b2:d1:ae:94:b5:94:67:fb:b0: 27:b4:2e:78:2e:e5:cf:86:1a:52:8b:c5:75:b4:41: a7:ca:08:09:d6:be:07:20:8e:5f:5b:3c:7f:74:1d: e2:51:6d:49:7c:1f:5c:06:f0:fb:a7:0a:95:f3:db: 4a:9d:42:eb:76:ae:0c:11:e2:8d:9c:69:5a:97:14: 10:02:5c:ca:f6:ac:8c:63:bb:e7:87:a8:b1:31:84: 48:a1:4c:d8:64:c1:64:6c:72:b3:b7:13:e6:ba:89: c9:5b:75:cc:05:91:e0:67:78:00:a1:7d:26:59:9a: df:13:e9:ef:16:4e:db:3d:b9:50:45:51:fe:1c:a2: 5d:6e:6e:76:bb:b1:a2:41:de:75:20:0b:41:03:3f: 0f:c8:40:b5:b0:0e:c3:57:76:24:7d:77:d5:0e:f1: 0e:2a:cc:92:7c:b9:0a:ce:7d:3d:ef:f6:b9:8b:1c: f5:1e:e4:79:7d:87:bc:ab:04:ef:81:7c:ab:ca:73: f5:fc:fc:d4:86:43:96:3d:c8:9d:d8:46:46:f2:c8: 7c:dd:6f:3f:5c:98:3e:d7:89:99:62:ac:32:4e:b6: b0:71:bc:d7:6d:bd:3c:53:d1:8e:af:09:f9:e8:9f: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:55:2B:6C:D7:ED:78:A0:81:41:79:E0:34:AC:A4:BA:E7:7F:75:73 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:c3:66:2e:71:b1:f7:db:38:47:58:23:fd:17:6b:24:f6:e0: 56:ff:c9:76:b1:f5:ed:d3:73:be:f1:aa:93:d6:bb:75:ff:e9: 0a:1c:f0:5e:93:63:a7:84:9e:17:fc:28:58:d2:53:13:6e:4b: 4f:91:b3:01:41:90:d7:5e:45:d5:1c:e0:bc:01:a9:d5:59:2d: 1e:83:fb:66:63:3f:53:30:0d:e0:47:e3:2e:7d:88:75:67:fc: 7c:f1:1e:f6:74:b9:5b:c6:17:90:20:be:36:e6:0c:b2:b2:58: d1:44:5f:24:2a:1d:79:dc:6e:f9:a4:a5:09:3c:c6:02:28:b2: d2:6c:0e:7e:f7:71:eb:ef:75:04:70:7e:97:c4:2a:bb:7b:1e: ce:a8:57:7c:84:b9:82:a4:e4:b8:01:dd:f1:da:7a:46:7e:eb: 46:5d:59:b3:62:4f:ee:17:9d:f3:09:b0:bf:46:9e:4b:97:ba: dd:fb:10:e2:5b:35:fb:7b:75:e3:de:bc:02:f7:0a:30:1d:88: d0:fe:5d:ec:cc:c1:e1:70:0e:65:ba:46:ab:d9:47:14:ee:78: 52:98:3e:79:73:40:c0:a5:e4:35:88:78:3e:4a:27:35:2d:40: a6:bb:b5:79:5a:c4:83:ab:a5:c3:c4:99:bf:a5:8a:37:f7:88: 86:8b:ed:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjYwNzIyMjAwOTEwWhcNMjYwNzI5MjAwOTEwWjAYMRYwFAYD VQQDEw02YTYxMjM2Ni1iYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxElgDrvtCbP5mQURGMhupp+J+Hqy0a6UtZRn+7AntC54LuXPhhpSi8V1tEGn yggJ1r4HII5fWzx/dB3iUW1JfB9cBvD7pwqV89tKnULrdq4MEeKNnGlalxQQAlzK 9qyMY7vnh6ixMYRIoUzYZMFkbHKztxPmuonJW3XMBZHgZ3gAoX0mWZrfE+nvFk7b PblQRVH+HKJdbm52u7GiQd51IAtBAz8PyEC1sA7DV3YkfXfVDvEOKsySfLkKzn09 7/a5ixz1HuR5fYe8qwTvgXyrynP1/PzUhkOWPcid2EZG8sh83W8/XJg+14mZYqwy TrawcbzXbb08U9GOrwn56J/UpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChVK2zX 7XiggUF54DSspLrnf3VzMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgsNmLnGx99s4R1gj/RdrJPbgVv/JdrH17dNzvvGqk9a7df/pChzwXpNjp4Se F/woWNJTE25LT5GzAUGQ115F1RzgvAGp1VktHoP7ZmM/UzAN4EfjLn2IdWf8fPEe 9nS5W8YXkCC+NuYMsrJY0URfJCodedxu+aSlCTzGAiiy0mwOfvdx6+91BHB+l8Qq u3sezqhXfIS5gqTkuAHd8dp6Rn7rRl1Zs2JP7hed8wmwv0aeS5e63fsQ4ls1+3t1 4968AvcKMB2I0P5d7MzB4XAOZbpGq9lHFO54Upg+eXNAwKXkNYh4PkonNS1Apru1 eVrEg6ulw8SZv6WKN/eIhovtWA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:38:48 2026 by rpki-client