$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json) Hash identifier: 0gCRxH8b+p/JidWZZ8AIvvp5f+8uxN9mFjWRsiYUSVo= Subject key identifier: C7:D2:78:7E:C3:D9:C1:88:9D:08:F2:84:7E:57:31:45:54:DE:E7:94 Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft Manifest number: FB Signing time: Thu 23 Jul 2026 08:05:09 +0000 Manifest this update: Thu 23 Jul 2026 08:05:08 +0000 Manifest next update: Thu 30 Jul 2026 08:05:08 +0000 Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: AfORgCPVIkdS20mb+jf8s8z0lBcWMqVJy2y9B1/qreE=) 2: 938098BE5CFE11F18D5CD5949D833773.roa (hash: YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Validity Not Before: Jul 23 08:05:08 2026 GMT Not After : Jul 30 08:05:08 2026 GMT Subject: CN=6a61cb35-a5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:0c:37:75:2a:10:88:b9:95:52:26:20:f7: 77:58:9d:31:9b:b4:17:cb:ac:0d:ed:3c:95:c7:2f: 86:20:42:a9:83:62:44:88:6a:f4:33:aa:90:a0:e6: 54:aa:c6:dd:a9:f0:7c:d2:8f:fd:94:34:75:98:bf: 4f:6e:58:a6:4a:87:c7:a5:70:4d:38:68:d5:e4:51: 56:9e:4e:a2:a1:4c:a9:ce:16:bb:cc:f1:7c:b1:6b: 96:d4:ed:b2:db:70:a9:af:11:6d:6e:5f:b5:8d:d8: 18:8d:e8:4f:cd:39:60:e5:b4:01:de:e0:78:63:fa: 1e:7e:7c:77:64:55:ef:5a:4c:aa:29:99:40:7e:b6: db:72:a0:ac:e5:a6:c2:54:66:69:0a:9d:6d:0d:29: 34:73:7b:e2:5b:7d:03:7b:aa:3b:7c:01:d2:23:e4: 9f:14:39:da:f9:37:98:db:f7:41:ab:ce:22:52:91: fb:8a:61:f8:89:4d:58:e5:06:00:82:04:ed:51:e5: b6:a1:55:d8:0b:77:4e:e3:db:49:90:42:dd:1f:a5: f0:be:6d:36:ce:23:31:02:54:54:ff:6f:85:d0:8b: b4:f0:19:88:e6:02:b2:f9:ee:16:6d:17:ab:04:1c: ec:fd:62:7b:75:25:a1:b0:24:ce:e5:64:9d:45:63: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:78:7E:C3:D9:C1:88:9D:08:F2:84:7E:57:31:45:54:DE:E7:94 X509v3 Authority Key Identifier: keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:58:14:e0:2a:b4:65:8e:c1:2b:ce:f1:53:a4:6d:d0:3a:f0: c7:5d:f6:b6:9a:39:a1:13:a2:d2:ec:14:5b:26:0b:92:df:fc: 39:f1:a4:6d:32:62:b2:3d:f6:e2:db:2e:6b:48:ca:da:d4:ec: 25:98:17:12:76:9a:24:0c:80:66:8e:ac:e7:69:c8:2f:0e:46: 3b:50:72:2f:95:68:6b:a3:50:c0:98:79:ce:00:bc:3f:15:02: 96:d3:49:5e:a9:dc:ea:71:e7:6f:ec:72:32:ce:35:73:45:dc: 49:d3:3b:59:c1:4a:ea:4b:1a:e3:1e:1b:24:a0:5a:43:01:fb: d5:68:df:79:93:0a:9e:2b:94:2c:d1:66:ec:e6:d6:c6:d7:4f: 2f:5f:55:a7:d7:bf:52:79:68:26:b2:09:42:59:ab:b4:b4:da: be:f9:ec:d7:40:56:38:9d:3f:30:52:a9:72:ae:74:c9:67:0a: bd:48:52:31:73:d0:63:6f:76:27:60:93:7e:5d:4e:1c:ce:1b: 40:32:d3:73:f9:54:b5:85:c7:ee:08:c0:3b:f9:d9:b2:e6:ff: 72:15:b8:78:cd:f8:c6:bb:20:45:44:e8:06:83:85:69:ad:48: 35:15:2c:30:b7:39:cf:2e:90:f9:f9:b3:29:42:3d:51:d6:ea: 81:80:1c:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKERFQjRDMEI5MDdGQUNBMUM1RDM3NzZCRDQ5NDZGNEJB QThDQTZCMzAwHhcNMjYwNzIzMDgwNTA4WhcNMjYwNzMwMDgwNTA4WjAYMRYwFAYD VQQDEw02YTYxY2IzNS1hNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA418MN3UqEIi5lVImIPd3WJ0xm7QXy6wN7TyVxy+GIEKpg2JEiGr0M6qQoOZU qsbdqfB80o/9lDR1mL9PblimSofHpXBNOGjV5FFWnk6ioUypzha7zPF8sWuW1O2y 23CprxFtbl+1jdgYjehPzTlg5bQB3uB4Y/oefnx3ZFXvWkyqKZlAfrbbcqCs5abC VGZpCp1tDSk0c3viW30De6o7fAHSI+SfFDna+TeY2/dBq84iUpH7imH4iU1Y5QYA ggTtUeW2oVXYC3dO49tJkELdH6Xwvm02ziMxAlRU/2+F0Iu08BmI5gKy+e4WbRer BBzs/WJ7dSWhsCTO5WSdRWPDewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfSeH7D 2cGInQjyhH5XMUVU3ueUMB8GA1UdIwQYMBaAFN60wLkH+socXTd2vUlG9Lqoymsw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CMTcwQzkxMjEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnloeGROM2E5U1ViMHVxakth ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNyVEF1UWY2eWh4ZE4zYTlTVWIwdXFqS2F6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CMTcwQzkxMjEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnlo eGROM2E5U1ViMHVxakthekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABlgU4Cq0ZY7BK87xU6Rt0Drwx132tpo5oROi0uwUWyYLkt/8OfGkbTJisj32 4tsua0jK2tTsJZgXEnaaJAyAZo6s52nILw5GO1ByL5Voa6NQwJh5zgC8PxUCltNJ Xqnc6nHnb+xyMs41c0XcSdM7WcFK6ksa4x4bJKBaQwH71WjfeZMKniuULNFm7ObW xtdPL19Vp9e/UnloJrIJQlmrtLTavvns10BWOJ0/MFKpcq50yWcKvUhSMXPQY292 J2CTfl1OHM4bQDLTc/lUtYXH7gjAO/nZsub/chW4eM34xrsgRUToBoOFaa1INRUs MLc5zy6Q+fmzKUI9UdbqgYAcSg== -----END CERTIFICATE-----Generated at Fri Jul 24 15:48:39 2026 by rpki-client