$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: BlGXAqsO0337CcwzJ7uiL3n5mhFLKGyL3unHF97nDlE= Subject key identifier: E8:86:B3:C6:A2:A4:0A:3A:42:64:2A:64:A8:26:FD:62:ED:6F:71:82 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0D97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0D56 Signing time: Wed 22 Jul 2026 18:22:57 +0000 Manifest this update: Wed 22 Jul 2026 18:22:55 +0000 Manifest next update: Wed 29 Jul 2026 18:22:55 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: utV5vDXHfhNPiENJbzEuWYHzvchZ9iJ7JXQ6qJRtTlI=) 2: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: 4IRrcima1swbv66pFPjLf2ozuN5JrXfc27o1SCSzjAA=) 3: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /T4LYRFjurWo+sXlwXITQRtGPqnCSql2DU5VkiOEfeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3479 (0xd97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Jul 22 18:22:55 2026 GMT Not After : Jul 29 18:22:55 2026 GMT Subject: CN=6a610a81-418e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:bc:4f:e0:0d:b2:12:a3:1c:34:36:f5:85:b1: ed:9d:f9:79:8a:0d:19:32:a2:82:7c:a2:a6:d1:a8: e4:ef:cb:96:e7:71:9a:a2:31:e5:af:3d:9d:b5:5a: 6b:c6:d3:b6:f8:1a:80:07:ba:a2:50:d1:e4:e1:e2: a3:97:ae:94:31:21:d2:8f:e7:9e:09:5a:5a:90:7a: 4a:04:b3:5a:c1:55:49:42:f2:b3:08:7d:ec:d1:64: d1:b6:d7:44:3c:ae:08:dd:7a:e3:6c:00:59:f5:d8: 03:a5:c4:91:b7:3a:ad:12:d5:b4:b0:08:96:3e:96: d3:94:d1:e8:ab:f7:47:18:dc:f2:49:e4:ea:94:66: e6:67:da:3d:4e:b9:ed:8d:f3:c8:7f:41:95:1b:d7: ad:1c:7a:84:09:22:fc:b4:ae:90:aa:bb:3b:e9:ed: ac:d3:f1:a3:f1:fe:fe:fd:19:f3:4b:ea:e0:34:4d: fb:81:cf:86:f3:13:50:60:8c:2a:e6:fc:6b:a2:ba: 64:9f:0b:b5:d6:73:61:cc:6c:37:26:ac:8e:aa:99: f4:a8:1e:f2:6a:28:e5:a8:66:a1:3f:8f:dc:a5:21: 3a:d0:83:9e:03:5e:59:68:43:02:d1:42:22:33:53: 09:f2:e3:81:ef:52:9d:4d:b8:13:c5:9c:55:83:b4: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:86:B3:C6:A2:A4:0A:3A:42:64:2A:64:A8:26:FD:62:ED:6F:71:82 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:01:00:75:e9:d9:3b:fe:3f:52:15:2c:bd:0a:0b:1f:80:30: e5:6b:a3:74:2b:ca:49:b5:a4:79:99:1a:6e:8e:07:db:e2:fa: 23:c9:70:dc:7d:a6:c3:f1:14:bd:d3:7b:90:d6:9c:9b:6b:1f: 66:34:df:83:7b:36:42:fb:e7:26:98:20:7f:f3:61:66:42:54: 1a:e6:9f:9f:18:6d:83:03:d2:cc:03:b8:4a:84:60:10:84:8f: 59:28:1d:3c:bd:ab:4c:c2:e6:b2:2b:f1:1d:d1:7a:a4:54:a5: 52:17:b0:cd:d9:b7:13:0a:67:88:35:ae:25:91:3f:e6:68:ae: 8d:21:42:a2:3c:00:de:a0:f2:5f:b7:88:fd:43:e4:4e:cc:91: 29:9a:89:8d:0d:1b:e2:be:1b:49:3a:97:4e:53:a4:c7:6a:f0: 1f:6e:f9:ff:45:da:8f:7d:04:35:1a:f6:07:43:bb:10:bb:47: 2b:4c:01:49:65:b5:74:6b:b5:d0:25:64:96:ce:99:d2:d8:9f: 19:a7:06:c6:7f:b7:10:da:5c:cc:64:fe:c8:86:96:b3:9e:85: 0d:d0:d5:f2:3e:25:cf:c4:be:ba:c3:ea:10:68:3d:69:07:99: 52:b4:e2:7b:8c:5b:ba:55:5f:74:aa:aa:e8:9f:da:cd:09:7c: d4:39:6a:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjYwNzIyMTgyMjU1WhcNMjYwNzI5MTgyMjU1WjAYMRYwFAYD VQQDEw02YTYxMGE4MS00MThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LxP4A2yEqMcNDb1hbHtnfl5ig0ZMqKCfKKm0ajk78uW53GaojHlrz2dtVpr xtO2+BqAB7qiUNHk4eKjl66UMSHSj+eeCVpakHpKBLNawVVJQvKzCH3s0WTRttdE PK4I3XrjbABZ9dgDpcSRtzqtEtW0sAiWPpbTlNHoq/dHGNzySeTqlGbmZ9o9Trnt jfPIf0GVG9etHHqECSL8tK6Qqrs76e2s0/Gj8f7+/RnzS+rgNE37gc+G8xNQYIwq 5vxrorpknwu11nNhzGw3JqyOqpn0qB7yaijlqGahP4/cpSE60IOeA15ZaEMC0UIi M1MJ8uOB71KdTbgTxZxVg7REFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiGs8ai pAo6QmQqZKgm/WLtb3GCMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWAEAdenZO/4/UhUsvQoLH4Aw5WujdCvKSbWkeZkabo4H2+L6I8lw3H2mw/EU vdN7kNacm2sfZjTfg3s2QvvnJpggf/NhZkJUGuafnxhtgwPSzAO4SoRgEISPWSgd PL2rTMLmsivxHdF6pFSlUhewzdm3EwpniDWuJZE/5miujSFCojwA3qDyX7eI/UPk TsyRKZqJjQ0b4r4bSTqXTlOkx2rwH275/0Xaj30ENRr2B0O7ELtHK0wBSWW1dGu1 0CVkls6Z0tifGacGxn+3ENpczGT+yIaWs56FDdDV8j4lz8S+usPqEGg9aQeZUrTi e4xbulVfdKqq6J/azQl81Dlq0w== -----END CERTIFICATE-----Generated at Thu Jul 23 21:53:52 2026 by rpki-client