$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: ScQ9zKOomYQX/h7kM2ze9ZKJYNqF81diNH/N/XuwQjY= Subject key identifier: D9:BB:43:21:00:4D:FA:47:2A:CB:F2:C8:38:63:F2:F6:36:5A:BF:5D Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: 010F Signing time: Thu 23 Jul 2026 07:42:53 +0000 Manifest this update: Thu 23 Jul 2026 07:42:52 +0000 Manifest next update: Thu 30 Jul 2026 07:42:52 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: PPbegk+OzSseVq7roQrgNMGW/6avJ9cAreoiowSwaXk=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Jul 23 07:42:52 2026 GMT Not After : Jul 30 07:42:52 2026 GMT Subject: CN=6a61c5fd-3423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:3d:ba:89:6f:a6:ad:2a:16:7a:da:dc:52: 23:32:bf:00:6c:69:53:96:15:b5:20:2a:22:43:07: f1:52:88:ba:d3:18:ba:a0:dd:f1:55:6d:1c:f9:65: 73:bf:5e:e3:67:2a:c2:10:77:e0:b5:c9:1f:c0:77: 36:b6:df:c8:e5:52:ed:09:df:dc:47:0f:eb:f3:2a: 22:17:07:66:46:0c:ec:ac:f7:93:f1:67:4d:d1:7d: 82:16:31:3f:12:6e:90:6f:3b:d8:09:fa:1c:0d:b8: db:26:5f:1e:bb:79:99:ca:1c:38:5f:55:86:65:dd: e5:30:ea:4b:56:04:38:7c:e0:e6:aa:08:38:67:cd: 0b:c6:00:47:98:82:71:32:44:b5:4d:83:1a:03:78: 9a:54:4b:9b:27:e6:e7:ed:c0:ee:2a:63:a7:17:74: 6d:28:c8:36:27:2d:0d:76:d4:17:45:96:00:91:1e: ae:04:87:51:17:69:0d:ed:15:2f:2e:6a:da:d4:20: 95:2c:7d:a1:14:5a:ff:50:a7:78:e8:79:38:ce:42: f5:61:58:f3:f1:71:16:3f:b5:6e:04:05:5d:f8:66: 39:86:d2:8b:a9:03:c5:3d:4d:35:07:c4:70:01:c0: d4:a3:c1:c1:63:e6:ab:11:09:35:78:24:d7:f7:9c: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:43:21:00:4D:FA:47:2A:CB:F2:C8:38:63:F2:F6:36:5A:BF:5D X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4f:61:8a:f0:40:c5:b8:8d:a3:83:f5:03:f1:d3:75:23:73: 96:47:a6:cb:06:01:b0:d5:1b:91:88:18:e4:bc:b3:89:f6:d8: bd:94:77:22:19:2d:83:a1:3c:a2:46:b0:b5:64:7b:1f:14:8e: 15:1b:a8:b7:1f:b1:5e:14:c6:18:c2:f1:e7:cd:71:a9:4c:e5: 12:e3:f8:7d:d8:87:c7:a9:04:12:4a:23:a8:ba:b0:20:33:ba: ee:f1:c0:7a:43:13:35:4e:79:59:30:b0:b2:8e:50:aa:6a:20: 17:e8:c0:a3:a6:be:c6:c1:eb:77:77:bd:c1:66:97:2a:3b:3f: 91:d0:28:47:b4:9a:79:87:01:49:2a:93:08:48:a4:02:3f:67: 60:25:36:e4:45:b8:7e:33:3d:cf:31:dc:6c:d7:36:66:8b:04: 59:11:db:47:42:c6:4e:d2:f8:0b:df:59:41:f3:c1:1e:22:47: 14:87:84:90:d4:30:13:b4:9a:73:f6:88:f6:89:24:a9:f9:dd: 50:c5:b7:77:7a:f0:4d:83:8e:ca:c0:b7:f5:be:b0:2d:e0:93: fe:36:d6:3b:68:12:58:81:22:12:86:cd:e0:ef:58:0d:bd:b4: 9f:ea:4f:53:41:5f:67:7a:38:9f:1e:0c:2c:b8:e1:7a:00:9a: 79:0f:1a:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB ODYyREZCNjIwHhcNMjYwNzIzMDc0MjUyWhcNMjYwNzMwMDc0MjUyWjAYMRYwFAYD VQQDEw02YTYxYzVmZC0zNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUI9uolvpq0qFnra3FIjMr8AbGlTlhW1ICoiQwfxUoi60xi6oN3xVW0c+WVz v17jZyrCEHfgtckfwHc2tt/I5VLtCd/cRw/r8yoiFwdmRgzsrPeT8WdN0X2CFjE/ Em6QbzvYCfocDbjbJl8eu3mZyhw4X1WGZd3lMOpLVgQ4fODmqgg4Z80LxgBHmIJx MkS1TYMaA3iaVEubJ+bn7cDuKmOnF3RtKMg2Jy0NdtQXRZYAkR6uBIdRF2kN7RUv Lmra1CCVLH2hFFr/UKd46Hk4zkL1YVjz8XEWP7VuBAVd+GY5htKLqQPFPU01B8Rw AcDUo8HBY+arEQk1eCTX95z5hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNm7QyEA TfpHKsvyyDhj8vY2Wr9dMB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5 RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h WHpQbkhHUVo0bWVvWXQtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEE9hivBAxbiNo4P1A/HTdSNzlkemywYBsNUbkYgY5LyzifbYvZR3Ihktg6E8 okawtWR7HxSOFRuotx+xXhTGGMLx581xqUzlEuP4fdiHx6kEEkojqLqwIDO67vHA ekMTNU55WTCwso5QqmogF+jAo6a+xsHrd3e9wWaXKjs/kdAoR7SaeYcBSSqTCEik Aj9nYCU25EW4fjM9zzHcbNc2ZosEWRHbR0LGTtL4C99ZQfPBHiJHFIeEkNQwE7Sa c/aI9okkqfndUMW3d3rwTYOOysC39b6wLeCT/jbWO2gSWIEiEobN4O9YDb20n+pP U0FfZ3o4nx4MLLjhegCaeQ8a/g== -----END CERTIFICATE-----Generated at Fri Jul 24 11:57:39 2026 by rpki-client