$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: 7V0wGfAv6rxTi+G2UV9zakQqPDlI8aFoM/dqIk6Acuk= Subject key identifier: 83:66:25:4E:31:DB:D8:9D:52:97:20:BD:10:39:F2:42:FC:8C:3A:56 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 123E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 1234 Signing time: Wed 22 Jul 2026 17:14:41 +0000 Manifest this update: Wed 22 Jul 2026 17:14:41 +0000 Manifest next update: Wed 29 Jul 2026 17:14:41 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: 2J0LlgeOvRzRvgInY1shakbh6sT31loIzFpAJu+yfLw=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4670 (0x123e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Jul 22 17:14:41 2026 GMT Not After : Jul 29 17:14:41 2026 GMT Subject: CN=6a60fa81-a2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0b:3b:81:5a:d5:fc:76:fc:ba:c1:b0:cb:44: ec:90:bd:2a:a7:63:db:0a:39:59:78:68:26:a0:2b: 7d:80:5f:c5:b0:f5:06:91:06:6e:ec:bf:81:e0:89: 23:1c:fb:e4:a5:db:d9:97:90:78:5d:3c:37:bd:54: 4b:e8:df:74:4d:44:57:cb:9a:10:1a:95:ad:ed:ab: 57:ae:74:95:14:12:21:0d:0a:24:e8:f2:1f:31:a1: 86:13:db:f2:6b:7d:47:c4:81:99:41:b4:de:67:47: 9a:4d:16:ef:64:1d:50:04:12:32:86:03:ec:19:87: d0:62:dd:62:5c:96:fd:46:84:6a:92:4d:e8:81:48: 0e:c1:1e:87:bd:fa:3f:5e:ff:1d:4c:d5:da:31:20: 20:21:01:c6:5d:99:37:14:7a:eb:af:9b:a7:46:c4: c0:06:66:cf:17:f4:4c:dd:71:1c:92:d5:c9:4c:7e: d1:11:27:81:33:f5:71:73:c0:cb:7b:fa:5b:79:65: d5:57:62:c0:4f:0f:cd:77:1a:4c:43:3f:3c:32:d9: ab:94:f2:0d:d7:8c:ba:82:4f:65:b6:8f:70:4d:12: 61:c7:b5:fd:1c:04:c3:3b:e2:c6:fc:83:a7:fb:23: 91:be:5a:28:40:e8:dd:12:26:77:40:cf:cf:a9:61: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:25:4E:31:DB:D8:9D:52:97:20:BD:10:39:F2:42:FC:8C:3A:56 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:66:4a:47:65:ce:47:7f:77:d5:fe:f6:c4:10:71:70:60:7e: 8b:e0:49:be:b7:db:60:31:14:23:d6:2d:91:66:3c:f5:95:fe: 58:f3:e2:f3:07:8a:98:86:f1:69:0b:ce:b7:b7:02:ce:ac:37: f6:fe:c7:c8:e4:7f:56:d8:63:33:bd:13:74:35:33:ad:34:64: 07:2c:b2:4e:e6:d2:e5:8b:3e:13:45:d9:1c:c6:f4:2a:a5:6d: 7b:e7:53:67:23:5f:e3:31:38:cb:e8:41:85:e0:ae:9e:4b:11: e2:d9:ae:f1:49:a0:de:e2:af:3e:84:e7:ba:76:d9:41:15:65: 82:c2:67:2f:3d:41:9a:f7:dd:dc:ff:be:83:27:0a:8a:13:b9: ef:e7:97:a2:3e:83:c9:11:d8:1f:23:9e:ad:f4:e1:9e:6d:ac: 77:4a:6e:9d:b9:98:00:be:ee:7a:e9:35:fb:3f:88:5e:4f:fd: f7:19:d4:64:93:a8:04:6d:d7:ef:3f:a3:e4:4f:72:65:41:1d: 1c:8b:11:0b:5f:58:f7:b7:78:f3:c7:0d:02:b1:8c:a4:61:e4: cd:01:40:33:4d:90:b9:e5:3e:5e:03:e2:e1:a4:c7:08:97:c9: bf:5d:39:1a:3b:26:e9:8e:b0:73:a5:a8:e1:58:79:aa:9a:50: 0c:cc:11:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjYwNzIyMTcxNDQxWhcNMjYwNzI5MTcxNDQxWjAYMRYwFAYD VQQDEw02YTYwZmE4MS1hMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAs7gVrV/Hb8usGwy0TskL0qp2PbCjlZeGgmoCt9gF/FsPUGkQZu7L+B4Ikj HPvkpdvZl5B4XTw3vVRL6N90TURXy5oQGpWt7atXrnSVFBIhDQok6PIfMaGGE9vy a31HxIGZQbTeZ0eaTRbvZB1QBBIyhgPsGYfQYt1iXJb9RoRqkk3ogUgOwR6Hvfo/ Xv8dTNXaMSAgIQHGXZk3FHrrr5unRsTABmbPF/RM3XEcktXJTH7RESeBM/Vxc8DL e/pbeWXVV2LATw/NdxpMQz88MtmrlPIN14y6gk9lto9wTRJhx7X9HATDO+LG/IOn +yORvlooQOjdEiZ3QM/PqWFfOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINmJU4x 29idUpcgvRA58kL8jDpWMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvGZKR2XOR3931f72xBBxcGB+i+BJvrfbYDEUI9YtkWY89ZX+WPPi8weKmIbx aQvOt7cCzqw39v7HyOR/VthjM70TdDUzrTRkByyyTubS5Ys+E0XZHMb0KqVte+dT ZyNf4zE4y+hBheCunksR4tmu8Umg3uKvPoTnunbZQRVlgsJnLz1Bmvfd3P++gycK ihO57+eXoj6DyRHYHyOerfThnm2sd0punbmYAL7ueuk1+z+IXk/99xnUZJOoBG3X 7z+j5E9yZUEdHIsRC19Y97d488cNArGMpGHkzQFAM02QueU+XgPi4aTHCJfJv105 Gjsm6Y6wc6Wo4Vh5qppQDMwRLA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:33:01 2026 by rpki-client