$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft File: k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json) Hash identifier: Ld0beR9WH0Frrugrq7ipHGnM6Bs0hngW3IY5D9v507w= Subject key identifier: B1:EA:0B:48:7D:03:FD:77:EC:EF:8C:BC:BD:BF:D6:3F:09:4B:DA:B8 Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft Manifest number: 01CB Signing time: Thu 23 Jul 2026 05:17:41 +0000 Manifest this update: Thu 23 Jul 2026 05:17:40 +0000 Manifest next update: Thu 30 Jul 2026 05:17:40 +0000 Files and hashes: 1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: d81cj3xcILcOQA+130LSBQJ11T8QVLjUwpPy+oZwD7M=) 2: 69299E5E451A11F1923B844B97833773.roa (hash: ysWt6Cp+OKC3wWhi/72Sc1dGh/s11z7W1OMwrGJbdPY=) 3: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: z9EDVnBrrvYkKd0g5cZsXbHmSVTdTt1qtDE8mfboD8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Jul 23 05:17:40 2026 GMT Not After : Jul 30 05:17:40 2026 GMT Subject: CN=6a61a3f5-b710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:63:dc:1f:eb:4e:0a:8e:af:7c:de:74:30: 7f:62:d6:95:4c:eb:2f:6b:9f:9f:da:96:91:ff:c7: a2:8e:15:6e:43:16:ee:ab:f2:b4:6f:d1:da:f9:6d: 4b:da:83:44:02:35:34:3d:43:2c:f4:8c:d7:e9:fd: 8f:e3:78:d3:b9:86:4a:26:8c:0f:78:c1:5b:b1:01: 79:f2:ce:b0:7c:09:fc:0c:08:73:5c:61:28:51:a1: f8:7a:9e:6e:12:6a:7c:6e:6f:da:36:30:13:52:68: 26:57:58:f5:fa:28:e2:e7:54:8e:cb:2e:70:d6:99: f3:f5:b5:3e:b7:de:a7:c8:fe:3a:4d:39:1e:89:6c: 14:ed:13:42:4b:e2:bc:0c:d4:ad:cd:19:4a:a8:7e: 8e:b3:88:ff:fc:da:bf:e7:7d:6d:a8:c0:e0:15:d4: 2e:de:10:a3:28:ab:7e:69:0c:a8:dd:2e:36:ac:81: ea:2b:e7:dd:94:f8:fd:1b:26:20:27:9b:3a:14:dd: 95:59:89:fc:96:d9:cb:3e:30:86:bb:e8:d8:5f:46: 8a:7f:db:19:36:03:ef:7d:c4:56:74:25:c8:44:ed: 5d:a9:32:b4:c6:d6:b2:c8:2b:60:9d:64:d6:fe:d1: eb:54:48:2e:12:17:5f:53:66:3c:a7:ac:d5:9e:1e: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EA:0B:48:7D:03:FD:77:EC:EF:8C:BC:BD:BF:D6:3F:09:4B:DA:B8 X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:6a:1e:31:33:c5:56:7c:c3:d1:e4:24:d1:66:e8:38:84:e2: 9e:5d:88:e2:32:cd:c7:6d:e6:c5:83:05:ed:0c:b3:ff:04:e0: f7:c6:30:23:7d:32:c4:8f:2c:13:8e:a6:d5:9e:cd:c6:93:05: 07:0f:90:8b:2f:6f:e3:58:29:b9:e8:77:6c:af:a2:08:47:92: c9:30:39:a0:6c:6e:c0:7c:29:b5:74:f4:47:79:4d:b3:4c:8c: e9:0b:0d:1f:91:69:0f:98:d8:e0:94:da:7d:ad:1c:a5:dd:88: 09:1f:f3:a0:9f:58:d0:5f:a4:bc:2c:44:e2:cf:d9:2d:60:dd: 2b:20:89:9c:9d:82:d3:c3:86:ce:2d:36:72:d2:e6:47:b3:60: 19:98:03:b3:1f:13:2d:7a:08:84:65:47:ac:60:71:a3:08:c4: 1d:10:e7:b0:a6:ca:12:d8:06:3e:06:92:b2:22:92:95:19:ad: d1:e8:77:8c:2a:c2:0c:ad:31:dc:49:0b:2a:ee:e8:3b:ed:fe: c3:a8:b1:c4:91:2e:50:9b:c1:24:0f:66:6d:29:17:5b:1d:29: 9b:5a:aa:8d:ab:d5:d3:09:a8:32:eb:33:97:1e:8a:e2:ae:75: dd:37:d8:46:de:d7:0f:50:da:dd:65:82:c9:6f:5c:df:70:4f: 73:ac:1a:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczQkIxMTAvBgNVBAUTKDkzN0ExQjVGRUIwQTI5MzM2MEVBNEU4ODQ3MzUyRTdG RDM2Q0M3QTUwHhcNMjYwNzIzMDUxNzQwWhcNMjYwNzMwMDUxNzQwWjAYMRYwFAYD VQQDEw02YTYxYTNmNS1iNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoxj3B/rTgqOr3zedDB/YtaVTOsva5+f2paR/8eijhVuQxbuq/K0b9Ha+W1L 2oNEAjU0PUMs9IzX6f2P43jTuYZKJowPeMFbsQF58s6wfAn8DAhzXGEoUaH4ep5u Emp8bm/aNjATUmgmV1j1+iji51SOyy5w1pnz9bU+t96nyP46TTkeiWwU7RNCS+K8 DNStzRlKqH6Os4j//Nq/531tqMDgFdQu3hCjKKt+aQyo3S42rIHqK+fdlPj9GyYg J5s6FN2VWYn8ltnLPjCGu+jYX0aKf9sZNgPvfcRWdCXIRO1dqTK0xtayyCtgnWTW /tHrVEguEhdfU2Y8p6zVnh7bBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHqC0h9 A/137O+MvL2/1j8JS9q4MB8GA1UdIwQYMBaAFJN6G1/rCikzYOpOiEc1Ln/TbMel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNCQi83RUQ1NzU4NkUx OEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tUTmc2azZJUnpVdWY5TnN4 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9rM29iWC1zS0tU Tmc2azZJUnpVdWY5TnN4NlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtGoeMTPFVnzD0eQk0WboOITinl2I4jLNx23mxYMF7Qyz/wTg98YwI30yxI8s E46m1Z7NxpMFBw+Qiy9v41gpueh3bK+iCEeSyTA5oGxuwHwptXT0R3lNs0yM6QsN H5FpD5jY4JTafa0cpd2ICR/zoJ9Y0F+kvCxE4s/ZLWDdKyCJnJ2C08OGzi02ctLm R7NgGZgDsx8TLXoIhGVHrGBxowjEHRDnsKbKEtgGPgaSsiKSlRmt0eh3jCrCDK0x 3EkLKu7oO+3+w6ixxJEuUJvBJA9mbSkXWx0pm1qqjavV0wmoMuszlx6K4q513TfY Rt7XD1Da3WWCyW9c33BPc6wa1w== -----END CERTIFICATE-----Generated at Fri Jul 24 10:57:37 2026 by rpki-client