$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft File: 3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json) Hash identifier: GOMYKX2aAXBjbOpIKv+9ZJlRiy2E1qL2B9Uz1UBDHwE= Subject key identifier: E8:E6:96:2A:20:B3:FC:F9:11:60:47:A6:68:53:F3:EC:3D:DA:2E:7E Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 Certificate issuer: /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft Manifest number: 59 Signing time: Thu 23 Jul 2026 10:10:17 +0000 Manifest this update: Thu 23 Jul 2026 10:10:17 +0000 Manifest next update: Thu 30 Jul 2026 10:10:17 +0000 Files and hashes: 1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: LOJ0Pi3xkIZKr9M6MSk1i6O20U9tTt09GnQJ1Yna2xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Validity Not Before: Jul 23 10:10:17 2026 GMT Not After : Jul 30 10:10:17 2026 GMT Subject: CN=6a61e889-fb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:21:20:74:2d:d7:7a:b9:24:f6:ab:05:6f: d2:20:99:0f:45:64:ea:12:94:ca:fc:cf:8e:6a:ea: 9f:ef:ed:8d:b5:34:0b:a5:e4:b1:24:27:61:cf:62: 0e:d3:a1:b1:fd:45:80:57:60:8f:cf:e3:ea:2e:cb: 65:3c:0a:5e:56:f4:1a:50:89:cf:53:80:21:b4:c2: 28:65:8b:13:c1:73:dd:ec:53:bf:6e:69:c7:f0:14: 86:6d:01:d3:4f:8a:0a:60:17:49:85:c3:02:fb:d3: dd:37:b4:f9:a3:b2:31:eb:a1:bc:c1:c5:fd:75:cb: 36:9b:d3:64:65:c6:fd:24:11:9f:81:9f:95:b0:e1: 62:7e:36:ef:bd:ea:f8:90:59:45:cf:93:12:1d:d1: 2d:9d:b3:53:98:47:cf:f6:fe:de:04:0c:d6:33:92: 29:aa:26:35:88:30:2b:15:0c:7e:8d:60:d8:da:d4: 10:a9:79:d9:2d:1a:d5:93:97:85:40:cd:a6:ba:99: 58:2f:39:29:f5:03:61:e1:98:10:4a:40:f5:0a:2c: c9:58:94:f4:2b:7d:d2:3b:2f:0d:ee:fc:d6:3d:a7: 13:64:fb:07:91:26:67:b1:20:3d:fd:20:31:1e:7e: ca:0e:3d:ef:dd:0d:80:8f:af:cc:99:ad:e2:af:ed: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E6:96:2A:20:B3:FC:F9:11:60:47:A6:68:53:F3:EC:3D:DA:2E:7E X509v3 Authority Key Identifier: keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:16:5c:07:3a:1b:62:70:ae:dd:3c:97:d8:d8:ed:e6:89:76: 62:a5:ff:16:0e:2d:3c:53:77:30:ca:db:d5:7d:e5:6f:aa:5d: 01:57:f4:04:4f:a4:9c:eb:10:c1:46:51:ce:81:2c:04:62:a9: 14:b9:14:26:e3:f3:4c:6b:1d:99:db:66:2f:16:6a:e6:6c:f1: c6:5c:1f:89:46:e8:36:21:71:8a:43:be:59:dc:24:1d:e3:65: ef:6a:96:77:56:72:d1:e4:37:6b:ab:17:a7:ee:1a:69:d9:c8: fe:b7:38:f6:e1:42:cb:4c:ac:2b:93:31:a0:8e:bc:90:ec:a6: bc:a1:4c:37:97:f7:35:d0:88:66:74:ef:25:46:6f:dc:61:46: c0:54:13:ce:ac:dc:c1:a7:ea:4e:c5:15:c3:b0:1d:a5:9b:42: 4b:4b:f5:b4:23:d0:5d:ac:eb:6e:f5:5f:49:0a:85:7a:7a:a7: be:27:4d:0a:3c:e5:44:fd:59:ac:71:b6:f9:6b:90:73:f6:ef: ea:d8:8a:0a:72:77:26:5e:c7:43:89:e8:4a:b3:18:b3:35:f9: f2:15:c0:3f:f7:d6:94:99:f8:ee:f6:69:36:61:56:0e:6d:8f: e4:ed:80:90:ae:1f:b4:da:54:44:92:ea:77:29:a3:86:9c:59: af:9c:a0:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoREQwQUQyREU0QTc0NEQxQTMzQjExQkI2QUJEN0U2RUFD RUZEQzA4NTAeFw0yNjA3MjMxMDEwMTdaFw0yNjA3MzAxMDEwMTdaMBgxFjAUBgNV BAMTDTZhNjFlODg5LWZiMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/VCEgdC3Xerkk9qsFb9IgmQ9FZOoSlMr8z45q6p/v7Y21NAul5LEkJ2HPYg7T obH9RYBXYI/P4+ouy2U8Cl5W9BpQic9TgCG0wihlixPBc93sU79uacfwFIZtAdNP igpgF0mFwwL70903tPmjsjHrobzBxf11yzab02Rlxv0kEZ+Bn5Ww4WJ+Nu+96viQ WUXPkxId0S2ds1OYR8/2/t4EDNYzkimqJjWIMCsVDH6NYNja1BCpedktGtWTl4VA zaa6mVgvOSn1A2HhmBBKQPUKLMlYlPQrfdI7Lw3u/NY9pxNk+weRJmexID39IDEe fsoOPe/dDYCPr8yZreKv7SF7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6OaWKiCz /PkRYEemaFPz7D3aLn4wHwYDVR0jBBgwFoAU3QrS3kp0TRozsRu2q9fm6s79wIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzY1MEQwMEY2MDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJvenNSdTJxOWZtNnM3OXdJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1FyUzNrcDBUUm96c1J1MnE5Zm02czc5d0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzY1MEQwMEY2MDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJv enNSdTJxOWZtNnM3OXdJVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAiFlwHOhticK7dPJfY2O3miXZipf8WDi08U3cwytvVfeVvql0BV/QET6Sc6xDB RlHOgSwEYqkUuRQm4/NMax2Z22YvFmrmbPHGXB+JRug2IXGKQ75Z3CQd42XvapZ3 VnLR5Ddrqxen7hpp2cj+tzj24ULLTKwrkzGgjryQ7Ka8oUw3l/c10IhmdO8lRm/c YUbAVBPOrNzBp+pOxRXDsB2lm0JLS/W0I9BdrOtu9V9JCoV6eqe+J00KPOVE/Vms cbb5a5Bz9u/q2IoKcncmXsdDiehKsxizNfnyFcA/99aUmfju9mk2YVYObY/k7YCQ rh+02lREkup3KaOGnFmvnKBy -----END CERTIFICATE-----Generated at Fri Jul 24 06:37:49 2026 by rpki-client