$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: hKp/K/qqACmTcgBm1XSCDZyewH1aj6YJ1uX/KROj+C8= Subject key identifier: CA:BE:AF:18:14:DE:1E:94:BF:2A:66:C0:F0:6C:21:88:30:6C:10:59 Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 01D7 Signing time: Thu 23 Jul 2026 05:01:04 +0000 Manifest this update: Thu 23 Jul 2026 05:01:03 +0000 Manifest next update: Thu 30 Jul 2026 05:01:03 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: xzrjtt9l+jAvLO1Rl48kgdN6PS2V72bKfKgXCFQd7wk=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: f0Nq6bNqAFhlnNadTuboxrgMX1sJQBWxkk0foam6u60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Jul 23 05:01:03 2026 GMT Not After : Jul 30 05:01:03 2026 GMT Subject: CN=6a61a00f-3826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:77:47:5b:ce:72:38:20:66:16:0a:37:95: dd:49:de:f4:62:9b:42:8c:45:c5:f9:33:b4:42:1e: 07:b3:a2:91:2c:1d:7f:94:d8:5b:38:e6:c3:f7:df: b5:36:9e:e0:f7:f9:0a:d4:2b:7c:06:43:6c:97:d5: 95:03:4f:88:08:2d:81:ff:f0:29:54:9c:06:a9:24: 02:1c:9a:7f:a8:76:71:61:c6:69:a2:ef:30:57:25: 50:f3:7b:57:a2:b0:5f:49:d1:b6:44:48:58:aa:31: 7d:66:0b:d0:b3:ca:d0:88:d2:96:6c:26:ea:2d:32: e3:ba:3a:ad:fd:66:ed:f6:d7:9b:bf:3a:d4:2b:1c: 01:83:da:f6:f3:82:c5:82:b8:7a:41:b7:e5:c8:cf: 2e:48:f1:2d:3e:7d:cf:8f:6a:e7:20:88:75:80:00: 0c:c8:eb:b9:97:a2:ec:c1:0d:9b:5f:a0:0f:35:f2: 36:95:8a:a9:04:81:07:50:3a:44:25:2e:0f:95:c5: 8e:c9:bc:38:e8:0e:28:bc:05:e8:96:36:73:02:95: 36:85:6f:2f:c0:5b:b1:2f:f6:7f:96:bd:24:70:a7: ad:68:a1:8c:0b:8e:31:9a:3f:97:c3:15:91:7a:62: f9:82:fe:44:9d:96:bb:13:e1:41:78:96:a9:4d:6c: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BE:AF:18:14:DE:1E:94:BF:2A:66:C0:F0:6C:21:88:30:6C:10:59 X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:76:28:da:da:ce:f4:3a:2a:be:3b:ec:49:2d:b7:85:a6:d2: bf:51:63:bb:cc:f9:29:ec:60:2c:1e:6c:32:fa:93:75:51:c3: 33:1f:a3:69:08:d6:21:2a:42:d5:c9:58:1b:d2:3a:f5:77:7e: f6:4a:ff:a3:b8:76:20:17:36:e8:5a:e8:c4:68:f4:05:d8:85: c7:05:65:66:17:db:4d:3d:ce:99:05:3f:d8:8b:97:21:a3:e8: 16:e8:63:45:79:10:e9:3a:83:1f:6b:5c:82:df:3d:4c:b0:f7: cd:b3:e9:51:6a:77:58:eb:9f:76:12:5b:7b:19:9e:a4:bb:9e: b5:4a:01:5b:cb:ef:a7:d9:b4:7a:4f:b0:79:e5:1c:78:02:c9: e8:4c:1e:69:bb:30:46:ba:63:2c:8a:f5:c2:e9:02:d1:41:68: a7:73:fd:88:6f:eb:84:a9:8d:df:18:9f:58:1d:55:39:b6:13: f0:59:22:3d:1f:51:54:bb:f0:07:e6:91:f1:b5:ac:ab:07:ef: 2f:ec:09:41:d7:ec:d4:a6:75:ec:33:c9:71:fd:a5:50:24:9d: b7:c6:7e:e6:41:19:b2:e2:b2:61:58:ec:de:ba:29:54:42:9b: 43:a5:5e:1c:8d:ea:b2:b8:3b:5f:c6:98:7d:b8:b7:fa:5a:44: b2:53:0d:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjYwNzIzMDUwMTAzWhcNMjYwNzMwMDUwMTAzWjAYMRYwFAYD VQQDEw02YTYxYTAwZi0zODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/53R1vOcjggZhYKN5XdSd70YptCjEXF+TO0Qh4Hs6KRLB1/lNhbOObD99+1 Np7g9/kK1Ct8BkNsl9WVA0+ICC2B//ApVJwGqSQCHJp/qHZxYcZpou8wVyVQ83tX orBfSdG2REhYqjF9ZgvQs8rQiNKWbCbqLTLjujqt/Wbt9tebvzrUKxwBg9r284LF grh6QbflyM8uSPEtPn3Pj2rnIIh1gAAMyOu5l6LswQ2bX6APNfI2lYqpBIEHUDpE JS4PlcWOybw46A4ovAXoljZzApU2hW8vwFuxL/Z/lr0kcKetaKGMC44xmj+XwxWR emL5gv5EnZa7E+FBeJapTWxQFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMq+rxgU 3h6UvypmwPBsIYgwbBBZMB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAXYo2trO9DoqvjvsSS23habSv1Fju8z5KexgLB5sMvqTdVHDMx+jaQjWISpC 1clYG9I69Xd+9kr/o7h2IBc26FroxGj0BdiFxwVlZhfbTT3OmQU/2IuXIaPoFuhj RXkQ6TqDH2tcgt89TLD3zbPpUWp3WOufdhJbexmepLuetUoBW8vvp9m0ek+weeUc eALJ6EweabswRrpjLIr1wukC0UFop3P9iG/rhKmN3xifWB1VObYT8FkiPR9RVLvw B+aR8bWsqwfvL+wJQdfs1KZ17DPJcf2lUCSdt8Z+5kEZsuKyYVjs3ropVEKbQ6Ve HI3qsrg7X8aYfbi3+lpEslMN3A== -----END CERTIFICATE-----Generated at Fri Jul 24 04:25:35 2026 by rpki-client