$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: AmVHbJEY3dLjsbH5ClWgdYXeGjQ8/AchC9drfLYGhHA= Subject key identifier: AF:89:CB:92:8D:0C:15:9B:71:25:AE:06:C4:33:A2:3E:9C:CC:74:71 Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 58 Signing time: Thu 23 Jul 2026 10:15:13 +0000 Manifest this update: Thu 23 Jul 2026 10:15:12 +0000 Manifest next update: Thu 30 Jul 2026 10:15:12 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: TR/8obpupYRLTbCd8j1O/1AsvynNCtKCZdnyNiP7qEk=) 2: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) 3: F6C2C81E834311F1B9E2C7285DA30FBC.roa (hash: kCrXSc0aKtEtfFEBk7WKaV+XU9QoVwY1fk0Vu7k5ZJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: Jul 23 10:15:12 2026 GMT Not After : Jul 30 10:15:12 2026 GMT Subject: CN=6a61e9b1-f2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:ad:5b:38:4b:ff:f3:41:2e:de:8a:b7:00: 9d:e1:d0:7f:d9:2a:3d:2d:a0:b2:28:ec:7c:31:02: ae:5c:86:34:1b:2b:15:af:7c:3d:94:79:6a:33:b3: fe:b1:05:45:a6:99:c6:da:f4:ac:06:00:fc:8c:77: b5:b4:6b:74:95:9e:ea:88:e7:bb:df:1e:2d:e3:a7: d4:dc:03:4f:50:ef:cc:75:a3:4e:e2:60:47:0b:2d: c0:9c:14:58:15:69:b4:02:fb:6d:81:c5:d5:be:ad: ba:bb:f3:e5:74:01:b2:c7:c9:17:bb:69:8c:98:db: 9f:d4:a1:62:b5:71:53:85:f1:79:33:2f:8c:b8:6f: 18:e4:35:1b:c9:52:73:0f:39:89:26:bc:45:c3:d7: eb:aa:bf:e1:97:4c:48:b6:e6:51:2a:0b:6d:40:71: 32:43:0d:37:54:53:32:76:86:15:7d:99:09:68:97: 36:7f:5f:77:9e:d7:16:a0:00:e4:15:db:0c:06:7c: 64:da:97:ba:8b:d5:8b:4c:e5:4a:45:18:7d:fc:f6: 23:29:89:c2:5a:db:66:43:28:63:a7:f0:6a:ba:4d: fd:50:de:1a:f8:42:e1:4e:8c:fc:ae:ae:91:91:1a: 9b:e8:9f:b5:d8:b1:7d:6d:1f:f6:3a:34:dc:e4:58: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:89:CB:92:8D:0C:15:9B:71:25:AE:06:C4:33:A2:3E:9C:CC:74:71 X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4a:51:02:40:6e:2b:64:6f:14:62:70:26:84:be:05:a3:0b: d4:7a:f5:12:b5:9d:cc:b8:d3:cd:96:a2:3a:2e:f9:48:29:01: b4:3b:bb:7f:98:f9:da:56:b2:29:e5:de:ab:43:1b:32:42:42: 78:cf:4e:3f:02:7e:6c:7e:b3:47:43:2f:65:04:f9:86:c2:ff: 42:63:fb:8f:be:39:ba:9d:b3:2a:75:3d:b8:77:73:cd:2f:4d: d1:b6:c1:82:f3:86:6a:07:01:d3:c2:f3:58:94:35:c7:2c:ef: ca:4c:d5:a5:24:1c:b4:7c:66:c4:36:de:0d:e0:54:43:e0:31: 91:08:a4:8b:21:56:98:9f:26:83:e1:70:a5:96:37:75:a3:3e: 33:a6:cf:f4:25:d0:7a:74:de:48:76:db:1e:39:cd:34:9e:27: d2:d9:80:8d:4f:d7:9a:92:55:34:ee:11:9f:6f:3c:96:cd:df: 43:05:2b:4b:28:65:25:b8:3c:5e:25:4f:f2:26:b4:3d:ba:f6: 28:d4:5c:8d:f7:09:e6:9b:2e:de:20:f0:68:b7:d6:bf:1d:3a: 7a:f8:91:c6:59:0f:2a:40:89:74:a3:e1:7e:6f:d7:e1:d2:cd: 30:9f:6e:5b:72:97:6b:6d:51:c2:b2:7c:db:ea:d9:d9:01:3c: 70:bc:8d:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD OUNGOUNDMjAeFw0yNjA3MjMxMDE1MTJaFw0yNjA3MzAxMDE1MTJaMBgxFjAUBgNV BAMTDTZhNjFlOWIxLWYyYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6J61bOEv/80Eu3oq3AJ3h0H/ZKj0toLIo7HwxAq5chjQbKxWvfD2UeWozs/6x BUWmmcba9KwGAPyMd7W0a3SVnuqI57vfHi3jp9TcA09Q78x1o07iYEcLLcCcFFgV abQC+22BxdW+rbq78+V0AbLHyRe7aYyY25/UoWK1cVOF8XkzL4y4bxjkNRvJUnMP OYkmvEXD1+uqv+GXTEi25lEqC21AcTJDDTdUUzJ2hhV9mQlolzZ/X3ee1xagAOQV 2wwGfGTal7qL1YtM5UpFGH389iMpicJa22ZDKGOn8Gq6Tf1Q3hr4QuFOjPyurpGR Gpvon7XYsX1tH/Y6NNzkWAZRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUr4nLko0M FZtxJa4GxDOiPpzMdHEwHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3 QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MzE0LzM2NTk3NEM2MDk3QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVu SWFTY3lDaTZkdThuUG5NSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhSlECQG4rZG8UYnAmhL4FowvUevUStZ3MuNPNlqI6LvlIKQG0O7t/mPnaVrIp 5d6rQxsyQkJ4z04/An5sfrNHQy9lBPmGwv9CY/uPvjm6nbMqdT24d3PNL03RtsGC 84ZqBwHTwvNYlDXHLO/KTNWlJBy0fGbENt4N4FRD4DGRCKSLIVaYnyaD4XClljd1 oz4zps/0JdB6dN5IdtseOc00nifS2YCNT9eaklU07hGfbzyWzd9DBStLKGUluDxe JU/yJrQ9uvYo1FyN9wnmmy7eIPBot9a/HTp6+JHGWQ8qQIl0o+F+b9fh0s0wn25b cpdrbVHCsnzb6tnZATxwvI2a -----END CERTIFICATE-----Generated at Thu Jul 23 23:08:35 2026 by rpki-client