$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: j4pyYuWzIJN6d6JieSfq1R71HACHzSh3EZVUKsugtuA= Subject key identifier: D1:A5:96:A6:F7:53:B0:B3:B4:9B:02:7F:A1:E7:22:60:61:35:4F:BC Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 0280 Signing time: Thu 23 Jul 2026 03:32:37 +0000 Manifest this update: Thu 23 Jul 2026 03:32:36 +0000 Manifest next update: Thu 30 Jul 2026 03:32:36 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: 1GzsitaZm6xzVndhBcVyLOueV4Iuay3U0AfaqMkxsF8=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: j7L99bx7Ey41ZLd+2+aMZ4wqjEnPklq5VL7HIrKdyHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Jul 23 03:32:36 2026 GMT Not After : Jul 30 03:32:36 2026 GMT Subject: CN=6a618b55-4498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:cd:fb:44:89:a2:99:e5:d1:c7:de:f0:e9: fd:c6:7f:b8:cd:5f:a1:53:8f:e4:e9:58:b8:e9:47: 14:98:1d:9f:0e:d5:0a:7f:14:f6:6f:cd:78:fe:e7: 73:d4:c3:4d:9e:cb:de:36:18:43:e6:4f:b6:04:05: 04:b1:27:26:20:21:84:01:ff:6d:78:32:6c:03:b4: 29:5b:17:fd:a2:dc:5a:94:ec:95:49:70:25:93:5c: fa:74:91:3f:d6:f1:f9:f4:e7:1d:01:2c:19:00:57: 88:03:68:1e:09:60:d0:d2:67:a6:ae:a6:ab:66:46: 95:09:b0:c9:ab:42:de:ae:d0:82:03:4d:8b:fa:e6: 87:28:65:df:16:8e:50:2e:30:39:99:40:a8:0a:10: fc:40:27:aa:c0:e6:9c:79:e9:db:7d:ca:6d:aa:4f: cc:39:1d:4e:bc:4c:32:5f:8e:95:56:e9:60:54:a9: ef:ea:e9:f9:e5:b0:f2:f3:03:97:83:dc:99:ea:0d: 6a:94:5b:21:7e:de:4f:9a:3b:a6:b2:f9:c6:b8:e8: 66:56:f2:dc:e1:fc:43:a0:4e:7b:c0:f9:69:15:d4: 19:f7:b9:a5:44:64:f1:7e:19:9d:ff:7b:c7:eb:dc: ab:97:aa:14:2d:2b:c5:e2:57:9a:75:0d:9b:95:0c: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A5:96:A6:F7:53:B0:B3:B4:9B:02:7F:A1:E7:22:60:61:35:4F:BC X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e3:22:6c:cf:95:77:ae:2b:d1:6b:12:c9:e8:09:f3:b9:fe: 98:13:e2:54:e0:65:5d:22:b3:8a:90:85:5d:ba:3f:cb:bf:c1: 5a:22:52:59:0f:38:6a:08:69:8c:4e:e0:b6:f9:ab:80:b5:c4: 67:75:f6:a8:88:39:4f:a3:05:e1:a9:e1:20:1d:61:fc:44:82: 8f:13:33:25:c6:93:84:54:f1:6a:18:d8:02:c0:aa:82:21:6a: ce:e0:ed:2c:65:5e:c2:eb:46:a8:13:c2:0e:d1:c6:0c:42:f9: d0:d6:90:99:53:c6:cd:39:b8:ae:51:fb:b6:2f:07:fd:1b:d3: a1:3c:4b:b6:6d:9c:53:9d:28:bc:f8:6a:05:f2:24:27:1f:6e: 39:80:72:f1:50:ba:25:6a:51:24:0b:c9:4d:e1:29:ea:70:8d: 6d:ed:87:5c:09:20:b3:57:56:89:a2:55:8b:46:21:9c:be:53: 8f:a8:50:4c:a4:d1:bb:f0:33:34:2e:d4:31:41:a2:6e:9e:2d: 8f:90:3e:7a:6e:97:81:b6:35:d2:f3:4d:f1:27:e2:57:bc:e0: 76:77:43:0a:f2:92:fb:c8:05:59:48:4d:37:45:d9:17:a0:1b: 2a:9e:9b:8c:63:9d:fd:cd:40:d8:fa:d7:6e:db:7e:08:39:83: 7c:e7:3f:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjYwNzIzMDMzMjM2WhcNMjYwNzMwMDMzMjM2WjAYMRYwFAYD VQQDEw02YTYxOGI1NS00NDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWbN+0SJopnl0cfe8On9xn+4zV+hU4/k6Vi46UcUmB2fDtUKfxT2b814/udz 1MNNnsveNhhD5k+2BAUEsScmICGEAf9teDJsA7QpWxf9otxalOyVSXAlk1z6dJE/ 1vH59OcdASwZAFeIA2geCWDQ0memrqarZkaVCbDJq0LertCCA02L+uaHKGXfFo5Q LjA5mUCoChD8QCeqwOaceenbfcptqk/MOR1OvEwyX46VVulgVKnv6un55bDy8wOX g9yZ6g1qlFshft5PmjumsvnGuOhmVvLc4fxDoE57wPlpFdQZ97mlRGTxfhmd/3vH 69yrl6oULSvF4leadQ2blQxGzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGllqb3 U7CztJsCf6HnImBhNU+8MB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEOMibM+Vd64r0WsSyegJ87n+mBPiVOBlXSKzipCFXbo/y7/BWiJSWQ84aghp jE7gtvmrgLXEZ3X2qIg5T6MF4anhIB1h/ESCjxMzJcaThFTxahjYAsCqgiFqzuDt LGVewutGqBPCDtHGDEL50NaQmVPGzTm4rlH7ti8H/RvToTxLtm2cU50ovPhqBfIk Jx9uOYBy8VC6JWpRJAvJTeEp6nCNbe2HXAkgs1dWiaJVi0YhnL5Tj6hQTKTRu/Az NC7UMUGibp4tj5A+em6XgbY10vNN8SfiV7zgdndDCvKS+8gFWUhNN0XZF6AbKp6b jGOd/c1A2PrXbtt+CDmDfOc/3g== -----END CERTIFICATE-----Generated at Fri Jul 24 15:22:18 2026 by rpki-client