$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: XeRPmUwEqpdJ7yVkhgjKkpIcQpUeH8QxjpiwHuO8gT4= Subject key identifier: 61:BF:EE:EA:BE:D5:F2:C3:2C:E9:DE:81:8D:22:3D:C3:C4:42:40:29 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 020D Signing time: Thu 23 Jul 2026 04:15:36 +0000 Manifest this update: Thu 23 Jul 2026 04:15:36 +0000 Manifest next update: Thu 30 Jul 2026 04:15:36 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: BmFWWHM7fthnxBKF3KWqjQVXkeveELF6fJX9iz2EX68=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: uTyjoAh95BFvYOGGP6YDD2msOcpdKZlwbOX4CL5Jc1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Jul 23 04:15:36 2026 GMT Not After : Jul 30 04:15:36 2026 GMT Subject: CN=6a619568-cbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:87:a7:5a:fa:1d:13:17:b9:45:08:0f:45: 36:02:66:b2:d5:01:1a:79:e1:78:6f:e2:ef:99:6c: 0a:3f:18:fb:37:c6:c0:3b:f5:53:0d:6e:e2:1e:c5: d8:71:fd:82:50:4d:0d:d4:a5:7c:a3:8a:7c:73:df: ce:4e:23:92:45:fe:4a:36:01:fc:48:7b:fc:15:b1: 16:bf:74:f8:64:43:4d:17:f1:54:90:6f:a4:a5:6d: ed:52:7a:f9:43:f3:d2:15:9a:75:a9:fc:19:f8:e4: 7c:bc:42:69:03:73:aa:2c:0a:b7:b4:2e:19:cd:42: 98:29:51:2d:2f:b8:fb:5d:56:9d:bc:b1:9c:0e:9d: 34:5c:e2:bf:57:53:92:03:c7:ae:41:68:7c:5a:a0: d6:a9:3d:c7:d8:02:bf:52:e9:fa:38:b8:b1:f6:60: b9:33:78:d2:3c:cd:b1:e6:4f:79:c6:80:d9:5f:df: 5f:7f:f1:d8:11:35:31:7e:06:b0:db:63:a6:0c:cf: 9a:61:49:7a:77:98:b1:bb:e6:d9:a3:34:46:82:3b: 19:fa:fe:2a:e2:02:0e:c5:1c:4f:5e:1b:c5:6a:e8: 15:88:84:c3:41:8e:bf:08:ac:16:03:52:2c:23:d6: 47:95:1a:12:14:9c:fb:d2:94:5f:0d:6c:7e:8a:7d: 68:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BF:EE:EA:BE:D5:F2:C3:2C:E9:DE:81:8D:22:3D:C3:C4:42:40:29 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a0:ce:17:31:a1:34:5e:72:ce:b9:de:ad:e1:f1:66:92:f0: dc:b8:7f:fb:2d:18:07:4d:71:d5:71:e9:14:71:99:a4:67:30: ea:27:6b:0a:f8:43:eb:c8:bf:c5:ed:7b:25:e5:97:9e:d0:1c: e3:b8:88:4c:9c:b8:76:21:27:ac:e3:b4:bb:ef:8c:dc:86:b5: f5:70:bd:f2:50:92:9a:d9:4d:dc:df:cf:d6:a8:a8:20:0d:95: b1:45:36:8b:0b:a6:de:36:4c:0c:07:09:38:7e:0b:21:7b:1b: 6e:99:17:43:4b:74:fb:22:2b:0d:d4:9e:23:7a:a9:57:ab:88: 66:ae:86:4e:59:c3:f6:0d:4b:60:a6:8b:6c:fd:27:49:bd:ed: f2:c9:93:30:9d:89:48:99:6a:65:1a:37:88:a9:d3:50:71:d2: 38:a5:c2:d6:62:c8:db:fe:71:a5:0e:49:6c:94:cf:91:69:73: ba:59:13:c5:b5:bf:66:b4:88:fc:a9:d1:54:3f:ae:59:18:45: ec:d0:7e:b4:1f:3d:32:7d:1b:ee:42:d1:34:cb:00:46:16:6e: 03:de:26:ee:4e:c4:56:d3:c8:64:be:da:1f:b2:48:c3:c6:92: 33:cb:93:36:0b:90:53:ea:ee:52:0e:91:87:f5:7e:e6:d2:2b: 77:d7:0a:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjYwNzIzMDQxNTM2WhcNMjYwNzMwMDQxNTM2WjAYMRYwFAYD VQQDEw02YTYxOTU2OC1jYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYGHp1r6HRMXuUUID0U2Amay1QEaeeF4b+LvmWwKPxj7N8bAO/VTDW7iHsXY cf2CUE0N1KV8o4p8c9/OTiOSRf5KNgH8SHv8FbEWv3T4ZENNF/FUkG+kpW3tUnr5 Q/PSFZp1qfwZ+OR8vEJpA3OqLAq3tC4ZzUKYKVEtL7j7XVadvLGcDp00XOK/V1OS A8euQWh8WqDWqT3H2AK/Uun6OLix9mC5M3jSPM2x5k95xoDZX99ff/HYETUxfgaw 22OmDM+aYUl6d5ixu+bZozRGgjsZ+v4q4gIOxRxPXhvFaugViITDQY6/CKwWA1Is I9ZHlRoSFJz70pRfDWx+in1omQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGG/7uq+ 1fLDLOnegY0iPcPEQkApMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsaDOFzGhNF5yzrnereHxZpLw3Lh/+y0YB01x1XHpFHGZpGcw6idrCvhD68i/ xe17JeWXntAc47iITJy4diEnrOO0u++M3Ia19XC98lCSmtlN3N/P1qioIA2VsUU2 iwum3jZMDAcJOH4LIXsbbpkXQ0t0+yIrDdSeI3qpV6uIZq6GTlnD9g1LYKaLbP0n Sb3t8smTMJ2JSJlqZRo3iKnTUHHSOKXC1mLI2/5xpQ5JbJTPkWlzulkTxbW/ZrSI /KnRVD+uWRhF7NB+tB89Mn0b7kLRNMsARhZuA94m7k7EVtPIZL7aH7JIw8aSM8uT NguQU+ruUg6Rh/V+5tIrd9cK8Q== -----END CERTIFICATE-----Generated at Fri Jul 24 20:16:07 2026 by rpki-client