$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft File: 3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json) Hash identifier: 7QzgN3p3ibcccbk+MkIfihTDOFZBioQyfDelzyoVFGw= Subject key identifier: 59:B5:29:A0:85:20:28:B9:28:0C:03:65:A5:46:37:A7:5F:C9:7B:C7 Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft Manifest number: 012C Signing time: Thu 23 Jul 2026 07:29:55 +0000 Manifest this update: Thu 23 Jul 2026 07:29:55 +0000 Manifest next update: Thu 30 Jul 2026 07:29:55 +0000 Files and hashes: 1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: XJSNWsar3rBgvhsHf1DvF9RkNtr3BDs0aT8HIJJVNGY=) 2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Validity Not Before: Jul 23 07:29:55 2026 GMT Not After : Jul 30 07:29:55 2026 GMT Subject: CN=6a61c2f3-506c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:cf:c6:e6:cf:be:48:0c:d0:33:b3:c3:76: c0:a1:c3:a2:4e:18:d1:f0:f0:0f:06:42:d2:05:45: 12:aa:89:5a:4c:15:a8:b6:a0:c5:5f:5a:52:a2:5f: 96:c8:ab:0f:ab:d1:80:de:58:71:69:61:ed:70:fe: f4:c3:9c:66:be:9d:0c:74:61:cd:6e:0d:e6:4e:11: d2:2e:e0:c8:f6:f5:4b:80:46:1d:25:7f:2e:90:6d: a2:c5:49:f6:8c:72:33:51:2b:b9:30:ae:39:1c:d6: 8e:21:f7:ab:0e:09:30:cc:3a:51:71:ff:a7:24:d2: a6:31:02:f3:eb:e2:50:a8:68:3a:c8:e0:03:ce:d8: e4:5f:44:7f:da:f5:9c:d5:25:53:eb:96:73:8e:19: 24:3f:01:93:7e:76:87:f1:3b:d7:7d:81:5b:a2:4c: 51:5d:f6:32:52:e0:84:b7:37:b8:4c:9b:2a:82:01: 98:0c:02:db:04:1e:5a:cf:cf:1d:f3:af:14:f3:b9: f6:43:a5:65:ba:35:d8:bd:b8:a0:ac:8d:78:9f:ae: b7:50:48:2d:8b:6a:17:c2:9c:51:fb:df:6a:7d:fc: 19:52:26:67:6c:c2:a1:35:11:1e:6f:3c:09:ef:e5: ae:83:cc:a6:9c:e4:3a:aa:b0:cc:a8:7f:cf:ff:3d: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:29:A0:85:20:28:B9:28:0C:03:65:A5:46:37:A7:5F:C9:7B:C7 X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0e:15:92:8c:6b:95:f6:e0:6a:0a:79:dd:9b:73:72:d4:5b: 27:d7:cc:c7:d4:91:7d:d1:fa:9d:c6:95:8e:77:0e:8c:f7:81: 36:1b:8d:9a:86:80:50:f2:30:57:fe:6e:94:17:1f:a0:0a:67: 8f:c4:2b:54:e4:6c:6f:5c:e0:0a:55:4c:f1:a8:84:33:32:f9: 43:18:99:73:dd:93:34:a4:7d:f2:18:e4:38:b3:09:37:2b:3e: 98:0f:93:aa:eb:23:63:a1:46:8a:c8:c1:7b:2c:c7:6e:ff:3a: a6:cf:d5:f5:e7:42:98:ab:bb:67:57:5a:48:83:0e:d9:c5:f5: c5:7e:0d:dc:15:41:b5:88:b5:0c:62:a0:6f:c8:4f:f6:e0:14: 97:7c:87:5b:11:82:1d:7e:65:8d:13:c2:cd:97:7f:2b:e4:81: 9d:58:ec:a2:da:40:92:3c:d2:1f:b1:09:b4:60:84:66:1c:81: f2:23:65:83:4a:e9:ad:a1:b8:01:38:3e:53:9c:0e:9f:98:84: 04:38:3f:a7:2f:a1:8a:e8:63:62:b2:be:07:d6:cf:5a:8d:bf: d4:ef:bc:bb:6e:c1:7f:2b:d0:77:ec:39:c8:39:f8:aa:19:9d: ae:b1:7a:6d:01:1b:4c:c1:6e:66:45:7e:db:a1:e1:12:7e:79: 0b:a3:4d:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0QTYxMTAvBgNVBAUTKERDODBDODVFNTEwMTA4OUFCMjQyNUQzRkM5MTc3OTg1 QTAxMjVDNkUwHhcNMjYwNzIzMDcyOTU1WhcNMjYwNzMwMDcyOTU1WjAYMRYwFAYD VQQDEw02YTYxYzJmMy01MDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5rPxubPvkgM0DOzw3bAocOiThjR8PAPBkLSBUUSqolaTBWotqDFX1pSol+W yKsPq9GA3lhxaWHtcP70w5xmvp0MdGHNbg3mThHSLuDI9vVLgEYdJX8ukG2ixUn2 jHIzUSu5MK45HNaOIferDgkwzDpRcf+nJNKmMQLz6+JQqGg6yOADztjkX0R/2vWc 1SVT65ZzjhkkPwGTfnaH8TvXfYFbokxRXfYyUuCEtze4TJsqggGYDALbBB5az88d 868U87n2Q6VlujXYvbigrI14n663UEgti2oXwpxR+99qffwZUiZnbMKhNREebzwJ 7+Wug8ymnOQ6qrDMqH/P/z3GdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFm1KaCF ICi5KAwDZaVGN6dfyXvHMB8GA1UdIwQYMBaAFNyAyF5RAQiaskJdP8kXeYWgElxu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzRBNi83MTcxQkJGMkQx OUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNKcXlRbDBfeVJkNWhhQVNY RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzRBNi83MTcxQkJGMkQxOUMxMUVGODNDRUFEM0NDNEY5QUUwMi8zSURJWGxFQkNK cXlRbDBfeVJkNWhhQVNYRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASw4Vkoxrlfbgagp53ZtzctRbJ9fMx9SRfdH6ncaVjncOjPeBNhuNmoaAUPIw V/5ulBcfoApnj8QrVORsb1zgClVM8aiEMzL5QxiZc92TNKR98hjkOLMJNys+mA+T qusjY6FGisjBeyzHbv86ps/V9edCmKu7Z1daSIMO2cX1xX4N3BVBtYi1DGKgb8hP 9uAUl3yHWxGCHX5ljRPCzZd/K+SBnVjsotpAkjzSH7EJtGCEZhyB8iNlg0rpraG4 ATg+U5wOn5iEBDg/py+hiuhjYrK+B9bPWo2/1O+8u27BfyvQd+w5yDn4qhmdrrF6 bQEbTMFuZkV+26HhEn55C6NN0g== -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:04 2026 by rpki-client