$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json) Hash identifier: rXv8JUmrZ9yUOQhUx4VYHtbgZDNUC0ufJAT0coQakcY= Subject key identifier: EA:61:9C:2F:14:11:8A:41:E4:78:9F:4B:C0:33:AD:4E:22:07:B8:A9 Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 Certificate issuer: /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft Manifest number: 41 Signing time: Thu 23 Jul 2026 10:28:11 +0000 Manifest this update: Thu 23 Jul 2026 10:28:11 +0000 Manifest next update: Thu 30 Jul 2026 10:28:11 +0000 Files and hashes: 1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: 85C8d9FIYDOp8PX8E3H7q3/KnvN5hcZfHnKy/chRMIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Validity Not Before: Jul 23 10:28:11 2026 GMT Not After : Jul 30 10:28:11 2026 GMT Subject: CN=6a61ecbb-ffca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:8d:1a:00:6a:fb:91:69:36:02:92:78:79: be:f3:4a:1a:41:23:d5:28:a8:dd:4c:51:a9:4e:55: 73:58:19:93:85:79:aa:90:68:08:6c:99:44:72:ab: 56:45:f6:90:c3:21:32:c0:46:69:ae:5c:cf:5e:52: 27:83:30:7a:1c:df:4f:4b:f3:bf:b9:11:d1:2c:a9: c9:f8:5a:51:1d:1e:11:71:de:a6:34:db:18:3e:e7: 90:19:73:a5:56:5f:2d:f0:60:d7:71:de:54:76:92: f3:f5:d5:a3:87:03:af:2d:d8:0d:2b:82:68:0c:2d: 5a:0b:95:56:a9:23:32:77:a0:b1:8c:a9:5e:6a:d3: 54:24:dc:e9:1b:b6:36:51:c7:59:c6:95:be:5f:46: 9c:04:c4:b6:ff:91:c5:33:f0:89:12:6a:d5:d9:9f: 41:bd:10:40:de:ed:fb:67:95:87:1c:af:77:be:58: a4:60:74:8f:c4:01:70:73:a4:52:3f:49:5f:a2:b1: 02:f6:ad:f4:62:13:93:8d:c7:1d:11:59:83:af:6c: bc:99:64:25:ee:e9:6a:24:a2:12:a0:25:1f:2c:f4: ab:97:e3:8f:58:85:90:1e:2b:a0:52:d1:75:85:a3: d8:70:96:ba:2d:43:f7:9b:7d:3c:ee:25:70:f6:f1: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:9C:2F:14:11:8A:41:E4:78:9F:4B:C0:33:AD:4E:22:07:B8:A9 X509v3 Authority Key Identifier: keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:21:25:99:8e:68:b2:21:f9:56:41:8f:d2:47:6e:fa:2d:d0: 82:1f:9a:f7:d4:23:36:fb:73:e7:06:0c:93:83:39:26:90:a5: e3:05:53:96:16:15:3c:69:d6:d9:1b:94:49:01:fc:14:82:4d: 48:8a:6d:98:3a:52:a6:c4:8b:b0:d2:06:92:2a:25:d7:97:29: 25:e7:20:2f:c2:e7:2c:f1:a3:e4:87:c0:f0:ce:21:0e:51:3d: 26:96:1d:53:b4:2e:ae:f5:08:a8:6b:97:a1:d9:c8:76:56:9d: a9:8d:cb:c9:8d:87:2f:51:f0:97:0d:24:24:76:a5:a7:94:8e: 13:5e:85:28:cc:17:4c:91:99:eb:e3:97:6a:b5:64:3f:ed:bb: b0:c3:f6:14:38:2e:a8:a7:ce:fd:44:e4:5b:b3:ff:87:21:ba: a9:81:d3:a8:dd:b0:03:83:d7:f1:25:e2:7a:5e:80:92:03:b9: 84:01:35:80:ca:63:d0:9d:43:a6:d0:62:ef:df:b2:8d:61:b4: 4a:24:e4:da:97:8d:19:87:77:3b:df:83:30:62:89:4f:18:1b: 39:70:89:6c:3b:cf:17:48:3c:1b:65:72:07:d4:0a:1f:31:bc: 45:e2:cf:29:71:d2:ed:db:53:ff:ae:db:c1:55:92:2c:91:04: db:e7:cf:d0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkExMDExMC8GA1UEBRMoRERBRUFBNTM0MDJCNzBBOTRGNzM3QzFCMEQ1RDk1MDFG ODI5RjAzOTAeFw0yNjA3MjMxMDI4MTFaFw0yNjA3MzAxMDI4MTFaMBgxFjAUBgNV BAMTDTZhNjFlY2JiLWZmY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIv40aAGr7kWk2ApJ4eb7zShpBI9UoqN1MUalOVXNYGZOFeaqQaAhsmURyq1ZF 9pDDITLARmmuXM9eUieDMHoc309L87+5EdEsqcn4WlEdHhFx3qY02xg+55AZc6VW Xy3wYNdx3lR2kvP11aOHA68t2A0rgmgMLVoLlVapIzJ3oLGMqV5q01Qk3OkbtjZR x1nGlb5fRpwExLb/kcUz8IkSatXZn0G9EEDe7ftnlYccr3e+WKRgdI/EAXBzpFI/ SV+isQL2rfRiE5ONxx0RWYOvbLyZZCXu6WokohKgJR8s9KuX449YhZAeK6BS0XWF o9hwlrotQ/ebfTzuJXD28fiJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6mGcLxQR ikHkeJ9LwDOtTiIHuKkwHwYDVR0jBBgwFoAU3a6qU0ArcKlPc3wbDV2VAfgp8Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0U4MzMyNUVBMjMy QzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0tsUGMzd2JEVjJWQWZncDhE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2E2cVUwQXJjS2xQYzN3YkRWMlZBZmdwOERrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QTEwL0U4MzMyNUVBMjMyQzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0ts UGMzd2JEVjJWQWZncDhEay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDISWZjmiyIflWQY/SR276LdCCH5r31CM2+3PnBgyTgzkmkKXjBVOWFhU8adbZ G5RJAfwUgk1Iim2YOlKmxIuw0gaSKiXXlykl5yAvwucs8aPkh8DwziEOUT0mlh1T tC6u9Qioa5eh2ch2Vp2pjcvJjYcvUfCXDSQkdqWnlI4TXoUozBdMkZnr45dqtWQ/ 7buww/YUOC6op879RORbs/+HIbqpgdOo3bADg9fxJeJ6XoCSA7mEATWAymPQnUOm 0GLv37KNYbRKJOTal40Zh3c734MwYolPGBs5cIlsO88XSDwbZXIH1AofMbxF4s8p cdLt21P/rtvBVZIskQTb58/Q -----END CERTIFICATE-----Generated at Fri Jul 24 09:01:37 2026 by rpki-client