$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: gcyKF1VleQjhIKS0tbaDjU5wU4vvkEWIBtTbegocAxk= Subject key identifier: E8:53:62:1B:2C:7E:3E:F2:4C:88:32:57:88:76:5D:B7:AF:91:C9:90 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 02A1 Signing time: Thu 23 Jul 2026 02:45:39 +0000 Manifest this update: Thu 23 Jul 2026 02:45:38 +0000 Manifest next update: Thu 30 Jul 2026 02:45:38 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: TcM3Pj4PhLpeqw9uCxFVam1CgK2+kl1UTMZgSi7/VYc=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: cHa7YclYlDuD3d6uVoFpYSql4Y83b6GnqkLI1omuRXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Jul 23 02:45:38 2026 GMT Not After : Jul 30 02:45:38 2026 GMT Subject: CN=6a618052-d794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:f5:50:b1:d0:dc:b1:d1:f2:6b:fa:c1:7b: 53:fe:9c:4b:9b:ac:ea:b3:dd:62:7c:ac:e4:e5:de: d9:51:27:be:35:8f:70:77:6a:92:fc:f6:60:49:29: 6a:07:3c:c5:2e:7f:bc:42:9b:af:e2:09:e9:14:d3: a8:b1:57:bc:a7:8d:a2:10:3b:a6:19:7b:e7:db:ee: bf:72:28:a6:f6:02:b7:f6:8d:ec:3c:62:50:fa:1f: 2b:86:b1:65:76:51:91:2c:86:09:f4:6b:f6:57:71: f9:68:2e:41:4c:47:18:a4:f7:32:2e:b7:f3:04:f8: 4c:7f:d7:dd:ff:1a:31:a5:93:ed:c4:99:2e:b4:26: db:df:d5:22:32:05:1c:b4:91:5f:5e:c5:6d:84:a9: 27:90:91:00:47:23:c2:87:63:56:ec:8a:14:56:d2: 98:c8:fe:79:51:23:e5:65:a6:06:c6:3f:ff:df:87: 66:02:19:3e:5d:28:6d:7c:17:9f:20:89:25:ba:73: ae:ee:6f:9f:d7:58:82:02:7c:38:1e:c8:d1:1b:0a: 4d:00:60:ac:f3:7e:ac:a8:09:6e:6e:7c:c1:77:2e: 15:b8:27:ee:1c:35:17:6d:05:dc:ce:20:4f:55:51: 93:86:10:f6:2b:b8:a3:af:53:b8:d8:a0:36:e2:0d: 5e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:53:62:1B:2C:7E:3E:F2:4C:88:32:57:88:76:5D:B7:AF:91:C9:90 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:bb:a1:27:d6:e3:bc:c5:4d:d0:d5:a2:af:39:85:5c:a7: cc:0b:0f:b2:68:5c:17:f3:50:6e:b7:e1:d1:8c:45:50:e8:6b: b2:76:a0:42:c8:25:c4:88:b6:c7:d0:90:80:36:5b:6f:b4:aa: c2:b3:02:e3:3e:81:84:d0:4c:f3:c8:66:ca:83:04:4d:9f:9d: d0:a5:d7:ff:d7:6b:95:3e:67:c6:06:8a:82:eb:77:12:c9:7a: 77:ab:e3:4b:81:af:d8:55:fc:b5:dd:46:e8:9c:e4:01:6c:1c: b6:75:05:7b:89:7a:50:2d:33:d1:75:e2:a5:29:6c:4b:41:b8: 86:39:ed:04:25:50:44:d1:1b:73:79:6c:22:0c:07:9c:93:40: 7f:f8:d1:54:52:6d:b5:3b:5e:bf:ce:e1:04:9f:b9:51:61:56: 03:ab:7f:5a:43:89:33:ea:f9:8d:df:b0:40:12:e9:c4:0d:43: de:17:35:45:94:2b:6c:f5:a5:e6:1e:87:ba:8b:d1:3b:05:30: 1f:20:dc:3e:76:bf:4b:f3:42:86:a4:e6:9a:14:75:79:55:18: cc:6e:56:fb:50:28:02:6d:2b:6a:71:94:bb:bc:c1:db:dd:91: 14:df:a1:f5:a1:bf:e8:a3:ec:29:6b:55:2c:0b:28:3d:19:e4: 04:b6:3d:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjYwNzIzMDI0NTM4WhcNMjYwNzMwMDI0NTM4WjAYMRYwFAYD VQQDEw02YTYxODA1Mi1kNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnD1ULHQ3LHR8mv6wXtT/pxLm6zqs91ifKzk5d7ZUSe+NY9wd2qS/PZgSSlq BzzFLn+8Qpuv4gnpFNOosVe8p42iEDumGXvn2+6/ciim9gK39o3sPGJQ+h8rhrFl dlGRLIYJ9Gv2V3H5aC5BTEcYpPcyLrfzBPhMf9fd/xoxpZPtxJkutCbb39UiMgUc tJFfXsVthKknkJEARyPCh2NW7IoUVtKYyP55USPlZaYGxj//34dmAhk+XShtfBef IIklunOu7m+f11iCAnw4HsjRGwpNAGCs836sqAlubnzBdy4VuCfuHDUXbQXcziBP VVGThhD2K7ijr1O42KA24g1eKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhTYhss fj7yTIgyV4h2XbevkcmQMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM8C7oSfW47zFTdDVoq85hVynzAsPsmhcF/NQbrfh0YxFUOhrsnagQsglxIi2 x9CQgDZbb7SqwrMC4z6BhNBM88hmyoMETZ+d0KXX/9drlT5nxgaKgut3Esl6d6vj S4Gv2FX8td1G6JzkAWwctnUFe4l6UC0z0XXipSlsS0G4hjntBCVQRNEbc3lsIgwH nJNAf/jRVFJttTtev87hBJ+5UWFWA6t/WkOJM+r5jd+wQBLpxA1D3hc1RZQrbPWl 5h6HuovROwUwHyDcPna/S/NChqTmmhR1eVUYzG5W+1AoAm0ranGUu7zB292RFN+h 9aG/6KPsKWtVLAsoPRnkBLY9Ow== -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:11 2026 by rpki-client