$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: FUAm9ZJf0EEDcuJIQZOF8MdU6TbSdUTm1iz23uww5PQ= Subject key identifier: CE:11:BA:8F:5D:7C:83:11:F7:46:6F:97:F9:AD:71:4D:C4:69:64:62 Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 3569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 3563 Signing time: Wed 22 Jul 2026 14:53:08 +0000 Manifest this update: Wed 22 Jul 2026 14:53:07 +0000 Manifest next update: Wed 29 Jul 2026 14:53:07 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: QpIy2I9LshvFzEusgIzNyFqSSNaZuQeXFA/vWebLD0A=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: nLdLNd1FqbqzPBvmomvzxR8c2GOexrERlWPqFeDBvG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13673 (0x3569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Jul 22 14:53:07 2026 GMT Not After : Jul 29 14:53:07 2026 GMT Subject: CN=6a60d953-c8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:d2:e0:70:8b:ae:a6:2a:92:ea:72:1e:49: 8a:10:8d:ad:18:31:f1:53:b9:42:c5:d4:87:07:63: 3b:dc:a0:c2:1e:65:db:38:e3:3a:e8:19:4c:8c:2e: c5:40:a9:2f:6b:9f:7b:c7:0e:2a:8d:8b:14:9e:fe: 94:31:70:7b:51:a0:ab:91:db:0d:05:ac:11:87:00: 48:1e:6e:e5:20:46:1b:9f:a3:06:bf:f0:e2:40:71: 95:c8:b9:b4:11:c3:b6:ca:fc:4a:08:2c:23:55:1d: 9a:a0:01:51:ae:4e:10:1b:4d:8f:85:d9:03:ea:bb: 4f:2d:89:5b:ed:d1:e9:57:d1:60:b5:44:43:7d:f0: af:18:11:b7:40:ce:4d:eb:c9:7d:c4:0c:37:f3:43: 81:86:6b:1b:e7:15:a4:b7:95:a8:21:49:18:ac:e1: ad:8a:19:f3:7a:f0:8c:4b:00:76:cc:35:6c:68:0e: 0b:69:7e:95:27:6d:93:df:ff:8f:79:1d:ed:4e:5f: 78:05:85:8f:b8:f8:75:77:96:e3:bf:69:9a:95:8e: d5:75:b8:9b:76:00:63:29:00:60:e4:b6:c7:6c:0e: c4:39:9a:0a:98:68:84:36:c6:dc:36:4f:f0:8d:24: 9d:db:af:88:f4:4f:26:af:08:5f:5a:e6:31:6d:f9: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:BA:8F:5D:7C:83:11:F7:46:6F:97:F9:AD:71:4D:C4:69:64:62 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9b:f7:de:0f:0c:11:bf:78:71:9c:5e:f8:93:d9:96:84:fd: d8:29:11:13:27:dd:5b:15:50:38:8d:1d:ad:6e:35:1a:96:d0: 60:bf:7a:1a:c2:f2:44:f8:35:6e:4a:f7:01:e4:81:2e:55:a2: d8:f4:e0:dd:c5:37:1d:a0:a4:54:59:5d:73:22:eb:2f:25:c9: f5:0e:4c:a0:63:a0:bf:d9:e2:f8:b8:c7:70:16:72:0b:4f:e9: 7c:b9:14:c4:d9:8f:73:33:85:17:2a:aa:03:4b:ed:a4:07:83: 4f:da:04:d4:f2:9f:bc:14:4e:1e:c0:20:a5:d8:ff:79:db:d4: 1a:61:bb:6b:7c:10:ad:f2:d5:03:ad:46:d1:eb:0a:b1:7b:18: 7d:b8:c1:8e:12:68:cf:6d:9e:e1:37:93:c5:8d:c0:2b:2f:48: e0:58:41:b4:9d:68:75:7c:79:3b:3c:71:b3:3d:e5:87:a4:ab: ed:4a:63:2f:c8:1f:49:6a:fe:84:79:73:68:ea:83:70:0d:72: 90:a8:b5:86:81:c5:31:f1:fd:a9:87:a9:d7:4a:58:bb:db:64: 51:28:49:02:59:16:83:35:8f:90:7e:6f:ab:ea:37:1d:19:64: 1f:0c:d1:09:8b:00:6f:d7:59:0e:9c:8d:9b:21:74:83:3b:b4: a2:2d:ae:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjYwNzIyMTQ1MzA3WhcNMjYwNzI5MTQ1MzA3WjAYMRYwFAYD VQQDEw02YTYwZDk1My1jOGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGHS4HCLrqYqkupyHkmKEI2tGDHxU7lCxdSHB2M73KDCHmXbOOM66BlMjC7F QKkva597xw4qjYsUnv6UMXB7UaCrkdsNBawRhwBIHm7lIEYbn6MGv/DiQHGVyLm0 EcO2yvxKCCwjVR2aoAFRrk4QG02PhdkD6rtPLYlb7dHpV9FgtURDffCvGBG3QM5N 68l9xAw380OBhmsb5xWkt5WoIUkYrOGtihnzevCMSwB2zDVsaA4LaX6VJ22T3/+P eR3tTl94BYWPuPh1d5bjv2malY7VdbibdgBjKQBg5LbHbA7EOZoKmGiENsbcNk/w jSSd26+I9E8mrwhfWuYxbfmjJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4Ruo9d fIMR90Zvl/mtcU3EaWRiMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKZv33g8MEb94cZxe+JPZloT92CkREyfdWxVQOI0drW41GpbQYL96GsLyRPg1 bkr3AeSBLlWi2PTg3cU3HaCkVFldcyLrLyXJ9Q5MoGOgv9ni+LjHcBZyC0/pfLkU xNmPczOFFyqqA0vtpAeDT9oE1PKfvBROHsAgpdj/edvUGmG7a3wQrfLVA61G0esK sXsYfbjBjhJoz22e4TeTxY3AKy9I4FhBtJ1odXx5Ozxxsz3lh6Sr7UpjL8gfSWr+ hHlzaOqDcA1ykKi1hoHFMfH9qYep10pYu9tkUShJAlkWgzWPkH5vq+o3HRlkHwzR CYsAb9dZDpyNmyF0gzu0oi2uiw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:49:06 2026 by rpki-client