$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft File: 3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json) Hash identifier: DakABsG8NbJgsbe4eEiobtio7vHYMTLW7fhdNptkXig= Subject key identifier: 2E:6A:76:5C:F5:87:0D:65:15:57:B8:C8:AF:0D:AC:0E:64:92:29:E6 Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D Certificate issuer: /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft Manifest number: 77 Signing time: Thu 23 Jul 2026 09:49:28 +0000 Manifest this update: Thu 23 Jul 2026 09:49:27 +0000 Manifest next update: Thu 30 Jul 2026 09:49:27 +0000 Files and hashes: 1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: jYMzjTdOVeGPkX2tY91xtAfiERuxW394jpGkferUKAM=) 2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: wYT2EQO9tWff1SLhMXGfdomgltEhqCKkHfWiewZBsdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D Validity Not Before: Jul 23 09:49:27 2026 GMT Not After : Jul 30 09:49:27 2026 GMT Subject: CN=6a61e3a7-6bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4a:0a:94:7b:4b:2a:6f:1b:21:de:91:ca:df: e9:df:3f:b1:7f:bf:18:b0:19:71:1b:b7:13:c5:d1: 0d:e8:9c:27:0c:4d:fe:cd:4e:fe:63:97:5c:f2:53: 3a:49:e6:7e:20:89:d0:5f:67:43:d0:d4:f8:69:d2: ef:f8:41:91:20:f5:52:60:9a:ff:e6:d5:71:c9:99: e0:0e:70:d6:25:5b:f4:27:cf:08:01:65:23:8f:1d: ac:7e:f6:95:fe:cb:96:3f:42:80:4d:fc:37:dd:6c: 9f:bc:73:50:c1:86:f7:44:db:45:53:84:65:39:df: ae:54:b1:9b:f0:33:8f:9c:ec:cd:4f:10:4d:40:c1: ce:b1:d6:b3:db:25:21:11:4f:c9:8b:5e:a3:ec:86: 47:c9:95:25:0b:ec:58:a1:e2:be:5f:2b:4c:8a:31: 3a:c3:60:bf:2f:e6:6e:c3:b3:5a:33:e8:a9:8e:20: e0:22:64:08:b3:5a:7f:e4:b0:e7:89:dd:33:8a:49: 33:63:e4:23:f4:4e:fb:a9:61:e9:ea:a9:f9:d4:ab: 50:92:fe:a7:77:ce:0f:57:da:ae:35:31:e6:dc:08: 44:c1:53:45:56:43:b6:80:8e:a3:0f:ec:af:57:54: 7b:0c:52:2e:c1:96:9f:5c:65:b2:8e:1a:cc:47:1e: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6A:76:5C:F5:87:0D:65:15:57:B8:C8:AF:0D:AC:0E:64:92:29:E6 X509v3 Authority Key Identifier: keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f1:78:bc:d6:ce:b6:db:23:1c:f6:06:7b:db:df:1a:1f:9b: 02:b2:99:44:25:ea:52:e3:f2:58:0a:a1:5e:a9:55:5f:ad:d1: 76:62:c4:f6:08:43:35:2d:37:23:26:98:3a:d6:f0:bd:97:14: 4a:6e:9e:95:ca:7c:0a:cb:6b:3e:19:71:64:75:a1:e0:9c:ad: 7a:39:2e:89:15:b2:bb:d2:ff:ce:c3:75:72:5d:db:8f:fe:36: 52:25:70:bc:5c:1b:0a:81:76:c5:f5:80:d4:ba:c7:54:98:98: 4a:b0:3c:58:a5:b5:17:83:73:90:e3:25:96:ee:87:79:68:66: a1:bf:1f:46:75:d0:1c:7b:dd:13:77:c1:e1:31:7a:0b:33:79: d1:54:f6:0c:dc:05:a0:11:e4:41:b0:fc:ec:af:74:b7:73:7d: 1c:dc:4b:e3:4e:07:22:46:08:ce:aa:f8:10:0e:93:bf:8b:10: dd:52:d4:4c:46:06:cf:ed:9f:bb:ce:bf:eb:10:0e:31:1a:4a: 49:e7:d2:58:2b:85:1a:33:f1:65:e2:99:14:7b:04:2a:9b:ed: 30:63:5c:35:b5:52:2e:0f:46:51:3f:c8:9b:0a:a0:5f:63:ec: dc:20:7f:25:9e:82:fd:a9:1e:f3:4e:24:4c:3c:ae:f4:ac:37: 3c:29:2a:ec -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUyODExMC8GA1UEBRMoREU4M0M3NkNEQjQ0RjRGNzk0NDcxOTIwMkJFM0FGQTg4 M0QzNDk0RDAeFw0yNjA3MjMwOTQ5MjdaFw0yNjA3MzAwOTQ5MjdaMBgxFjAUBgNV BAMTDTZhNjFlM2E3LTZiYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXSgqUe0sqbxsh3pHK3+nfP7F/vxiwGXEbtxPF0Q3onCcMTf7NTv5jl1zyUzpJ 5n4gidBfZ0PQ1Php0u/4QZEg9VJgmv/m1XHJmeAOcNYlW/QnzwgBZSOPHax+9pX+ y5Y/QoBN/DfdbJ+8c1DBhvdE20VThGU5365UsZvwM4+c7M1PEE1Awc6x1rPbJSER T8mLXqPshkfJlSUL7Fih4r5fK0yKMTrDYL8v5m7Ds1oz6KmOIOAiZAizWn/ksOeJ 3TOKSTNj5CP0TvupYenqqfnUq1CS/qd3zg9X2q41MebcCETBU0VWQ7aAjqMP7K9X VHsMUi7Blp9cZbKOGsxHHkWzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULmp2XPWH DWUVV7jIrw2sDmSSKeYwHwYDVR0jBBgwFoAU3oPHbNtE9PeURxkgK+OvqIPTSU0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTI4LzQ3NjA2RUI0REJC NzExRjBBMERGOTBGMDRENjQxOTUxLzNvUEhiTnRFOVBlVVJ4a2dLLU92cUlQVFNV MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM29QSGJOdEU5UGVVUnhrZ0stT3ZxSVBUU1UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTI4LzQ3NjA2RUI0REJCNzExRjBBMERGOTBGMDRENjQxOTUxLzNvUEhiTnRFOVBl VVJ4a2dLLU92cUlQVFNVMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAB8Xi81s622yMc9gZ7298aH5sCsplEJepS4/JYCqFeqVVfrdF2YsT2CEM1LTcj Jpg61vC9lxRKbp6VynwKy2s+GXFkdaHgnK16OS6JFbK70v/Ow3VyXduP/jZSJXC8 XBsKgXbF9YDUusdUmJhKsDxYpbUXg3OQ4yWW7od5aGahvx9GddAce90Td8HhMXoL M3nRVPYM3AWgEeRBsPzsr3S3c30c3EvjTgciRgjOqvgQDpO/ixDdUtRMRgbP7Z+7 zr/rEA4xGkpJ59JYK4UaM/Fl4pkUewQqm+0wY1w1tVIuD0ZRP8ibCqBfY+zcIH8l noL9qR7zTiRMPK70rDc8KSrs -----END CERTIFICATE-----Generated at Thu Jul 23 21:41:48 2026 by rpki-client