$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json) Hash identifier: GlI63bWyte7jipXgLLUiw3dgFqFyGOA4mUM4H3TYC7c= Subject key identifier: 95:C7:1D:49:38:59:E2:40:03:1B:9D:FC:B7:F4:CA:16:BA:97:97:8B Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft Manifest number: 08A0 Signing time: Wed 22 Jul 2026 21:04:19 +0000 Manifest this update: Wed 22 Jul 2026 21:04:18 +0000 Manifest next update: Wed 29 Jul 2026 21:04:18 +0000 Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: 9cFF9OWkLcEr1RoYZMRfY64FlUp3cTO2l2TYWzpmT7w=) 2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: gjXk5FJ28SiJiqatM16BZg/99HgL3HEPLn3XZb4vIWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Validity Not Before: Jul 22 21:04:18 2026 GMT Not After : Jul 29 21:04:18 2026 GMT Subject: CN=6a613052-0043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:01:8e:2d:b1:a2:8e:00:3c:00:9a:69:7a: 00:20:de:0f:74:b1:b7:91:7c:73:54:97:58:18:16: d8:c8:41:de:d3:5e:0f:4b:d5:35:e2:80:0b:ab:19: 2e:20:53:9c:77:8e:a2:7c:f3:00:fe:28:03:a6:56: f5:25:d4:de:98:96:f8:e0:c1:a4:4c:a3:1a:94:24: b3:e6:19:c8:54:5f:3d:87:e6:38:15:2e:73:c3:eb: 1e:c7:81:60:07:91:a9:e2:a0:a0:e7:5b:ec:4a:0c: 21:a3:8d:2d:75:64:2b:41:ad:c8:da:75:e7:9a:3c: ad:8f:cc:ca:71:a7:f8:8f:65:06:07:6e:29:e7:aa: 34:05:24:2b:ac:e3:23:14:1d:b8:0d:70:9b:e2:96: 83:82:5f:ca:2d:c6:bd:2f:e3:4a:4d:9d:e3:38:e3: 0c:25:a7:31:06:97:78:72:88:d9:e8:c2:d1:7e:8c: 7d:b5:6b:4e:c7:b8:c7:eb:66:f8:3f:02:90:7c:68: b6:2c:61:32:16:9c:b0:3e:0e:ef:e6:6c:f1:23:f8: 28:c3:82:bf:2d:4e:45:13:f1:e0:5b:bc:37:a5:64: 45:be:a2:7f:76:cd:9a:15:12:c8:40:40:dd:02:81: 73:87:41:d4:7f:2a:c2:a1:bd:e5:f3:6f:36:46:1c: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C7:1D:49:38:59:E2:40:03:1B:9D:FC:B7:F4:CA:16:BA:97:97:8B X509v3 Authority Key Identifier: keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:fa:48:bd:30:5f:4f:73:5e:79:2a:7d:18:44:47:dc:be:99: b1:60:42:88:eb:f4:91:a4:df:86:f3:60:1c:0c:f1:e0:01:b3: 72:0f:d9:51:59:d1:42:af:3a:3f:bc:23:51:ba:74:46:94:b9: ea:15:5f:0b:fa:8f:7e:11:ca:40:83:5a:7e:ed:d5:7d:82:eb: c3:c1:40:44:83:96:e1:48:68:20:a7:3b:bd:1a:82:f5:29:38: 2a:e4:b5:1f:4b:ea:56:80:6a:95:e6:c0:fe:53:39:b1:0a:5a: 68:af:14:03:9e:0a:d1:38:99:57:ef:39:6f:f9:48:2f:dd:32: 12:14:07:39:09:b9:7c:aa:e4:9a:47:de:df:27:1b:9d:84:c0: e9:59:91:e8:13:5b:8e:da:35:e1:18:4c:03:5a:f4:86:cd:4f: da:0d:29:e9:91:ee:72:9a:e1:0d:8d:28:78:ed:ca:1c:f9:cd: 54:79:6c:1b:b1:c6:a7:84:d9:3d:f4:bf:f1:4f:24:37:05:70: 8b:1a:86:48:ad:23:d4:73:2b:a3:8f:1f:06:5a:43:3d:fa:06: 3f:6e:76:16:f5:d5:9e:eb:22:03:bb:d7:8b:77:60:3a:30:38: b4:fc:12:30:35:10:f8:21:ff:84:87:87:d5:0c:5a:7e:77:bc: 97:8a:08:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0NTgxMTAvBgNVBAUTKERENkYwMTRGOEFENDVEQTg1RDBFMTZGMkIzNzY4NzY3 OTQ0NDg1QjMwHhcNMjYwNzIyMjEwNDE4WhcNMjYwNzI5MjEwNDE4WjAYMRYwFAYD VQQDEw02YTYxMzA1Mi0wMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHkBji2xoo4APACaaXoAIN4PdLG3kXxzVJdYGBbYyEHe014PS9U14oALqxku IFOcd46ifPMA/igDplb1JdTemJb44MGkTKMalCSz5hnIVF89h+Y4FS5zw+sex4Fg B5Gp4qCg51vsSgwho40tdWQrQa3I2nXnmjytj8zKcaf4j2UGB24p56o0BSQrrOMj FB24DXCb4paDgl/KLca9L+NKTZ3jOOMMJacxBpd4cojZ6MLRfox9tWtOx7jH62b4 PwKQfGi2LGEyFpywPg7v5mzxI/gow4K/LU5FE/HgW7w3pWRFvqJ/ds2aFRLIQEDd AoFzh0HUfyrCob3l8282RhyVQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJXHHUk4 WeJAAxud/Lf0yha6l5eLMB8GA1UdIwQYMBaAFN1vAU+K1F2oXQ4W8rN2h2eURIWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQ1OC9GOEFGMTIwMkY2 MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhhaGREaGJ5czNhSFo1UkVo Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXOEJUNHJVWGFoZERoYnlzM2FIWjVSRWhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQ1OC9GOEFGMTIwMkY2MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhh aGREaGJ5czNhSFo1UkVoYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtvpIvTBfT3NeeSp9GERH3L6ZsWBCiOv0kaTfhvNgHAzx4AGzcg/ZUVnRQq86 P7wjUbp0RpS56hVfC/qPfhHKQINafu3VfYLrw8FARIOW4UhoIKc7vRqC9Sk4KuS1 H0vqVoBqlebA/lM5sQpaaK8UA54K0TiZV+85b/lIL90yEhQHOQm5fKrkmkfe3ycb nYTA6VmR6BNbjto14RhMA1r0hs1P2g0p6ZHucprhDY0oeO3KHPnNVHlsG7HGp4TZ PfS/8U8kNwVwixqGSK0j1HMro48fBlpDPfoGP252FvXVnusiA7vXi3dgOjA4tPwS MDUQ+CH/hIeH1Qxafne8l4oIgQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:07:28 2026 by rpki-client