$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft File: d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft (raw, json) Hash identifier: rFnGXEmeLfpxqycCuEuZwfe8EOX4blKQfb0GXYcoUaA= Subject key identifier: F6:03:0F:97:A7:72:25:BA:91:8C:99:CC:19:EB:1F:C5:6A:E8:EC:57 Authority key identifier: 77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B Certificate issuer: /CN=A91F8A7D/serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft Manifest number: 21 Signing time: Thu 23 Jul 2026 10:57:29 +0000 Manifest this update: Thu 23 Jul 2026 10:57:28 +0000 Manifest next update: Thu 30 Jul 2026 10:57:28 +0000 Files and hashes: 1: d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl (hash: chKnhU4lxlvcTT76U9l36flrWzgJgFw5dKkC8EMaGgw=) 2: 91FB34E2559511F1BB2B33C094833773.roa (hash: /gb08kbBAX/TgmBzdK2NO6dLCZws+/ifOStMBIrUaVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A7D, serialNumber=777006A41E018E33F67C29FD697E6448C78E5B1B Validity Not Before: Jul 23 10:57:28 2026 GMT Not After : Jul 30 10:57:28 2026 GMT Subject: CN=6a61f399-eadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:9e:4d:f0:30:17:af:c4:39:b8:3e:57:65: 9a:35:0b:7d:6a:5b:ec:86:3a:0f:75:98:e2:2a:96: e1:86:1e:29:a0:46:8e:ba:3b:25:3c:72:f7:ce:97: fa:2a:85:b4:09:bc:a8:e6:dd:14:ba:f9:00:6c:cf: bc:7f:a9:9f:21:80:ea:dc:57:62:3a:fc:6e:fe:b4: 77:b7:ed:ec:6d:33:73:d3:11:59:d2:f8:44:b8:42: 59:d1:32:a9:48:62:a1:17:a9:e0:ca:a1:70:cb:83: e1:ac:78:bb:ac:bd:ce:72:b0:bf:ab:4b:84:99:a6: c6:91:7a:db:83:b2:f4:ab:32:6c:ad:57:9d:5d:1b: f2:b1:dc:ad:0a:08:14:64:bb:03:d6:c1:49:2f:5c: a2:d2:2f:6d:7b:6b:13:41:5b:76:f7:74:15:0e:8a: 8a:9c:ea:55:77:01:64:0d:cf:57:6c:9e:8e:f1:40: 8f:10:7b:d2:cc:62:f4:f3:74:35:b1:29:e7:e3:5b: eb:7a:55:13:98:96:72:dc:39:81:34:79:79:dd:f6: 5a:6e:cf:52:6f:0f:20:af:00:cd:0d:d8:b6:99:8c: 26:dc:91:67:cd:b8:b7:62:e9:ea:51:9c:2f:33:3f: c8:2d:a4:c5:ea:c3:02:26:7b:d6:b2:6e:1e:a2:2b: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:03:0F:97:A7:72:25:BA:91:8C:99:CC:19:EB:1F:C5:6A:E8:EC:57 X509v3 Authority Key Identifier: keyid:77:70:06:A4:1E:01:8E:33:F6:7C:29:FD:69:7E:64:48:C7:8E:5B:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d3AGpB4BjjP2fCn9aX5kSMeOWxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A7D/6965DFCA559311F1952968B992833773/d3AGpB4BjjP2fCn9aX5kSMeOWxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ba:cb:05:52:35:92:d4:2d:85:e9:53:01:34:6e:28:1e:e1: 53:5b:a1:0b:0a:1c:f5:3c:94:c9:13:4a:e7:90:7d:e0:08:60: 59:48:c3:01:79:9f:ba:ea:28:10:21:62:36:15:da:95:0f:15: 06:9a:84:e3:dd:18:cd:0d:be:5c:42:07:09:dc:41:ae:60:fa: 15:af:67:96:33:d7:c2:8c:e3:c2:44:e7:31:c2:4e:f0:ff:ca: 96:ff:f1:bf:8a:78:d7:44:bb:bf:76:e3:79:42:c8:83:6d:7a: 6b:de:f9:20:52:78:00:09:14:06:d5:40:2e:64:ba:83:2b:c8: 24:ea:e6:8e:9a:d9:c8:12:5c:eb:ba:10:d6:94:d4:6d:27:be: 08:e0:fe:57:ed:a1:14:d5:4b:77:eb:1f:aa:31:b1:7a:34:b9: c2:06:dd:18:4c:32:28:52:5d:c1:39:ba:ed:27:8d:04:9e:0d: 10:83:ac:f8:d2:4f:b9:fb:fd:2c:5a:51:11:d3:da:7b:ac:1a: 3f:1d:af:90:2d:ea:dd:d4:2d:12:9d:6d:e1:74:13:ae:6a:65: a5:45:b7:36:1c:16:50:7b:2e:2a:70:c3:60:cd:b2:21:6f:0b: 67:ec:01:3f:c6:37:3a:93:2d:6f:80:11:0d:71:74:ab:f0:b2: 7f:e3:13:a2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OEE3RDExMC8GA1UEBRMoNzc3MDA2QTQxRTAxOEUzM0Y2N0MyOUZENjk3RTY0NDhD NzhFNUIxQjAeFw0yNjA3MjMxMDU3MjhaFw0yNjA3MzAxMDU3MjhaMBgxFjAUBgNV BAMTDTZhNjFmMzk5LWVhZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCA55N8DAXr8Q5uD5XZZo1C31qW+yGOg91mOIqluGGHimgRo66OyU8cvfOl/oq hbQJvKjm3RS6+QBsz7x/qZ8hgOrcV2I6/G7+tHe37extM3PTEVnS+ES4QlnRMqlI YqEXqeDKoXDLg+GseLusvc5ysL+rS4SZpsaRetuDsvSrMmytV51dG/Kx3K0KCBRk uwPWwUkvXKLSL217axNBW3b3dBUOioqc6lV3AWQNz1dsno7xQI8Qe9LMYvTzdDWx KefjW+t6VROYlnLcOYE0eXnd9lpuz1JvDyCvAM0N2LaZjCbckWfNuLdi6epRnC8z P8gtpMXqwwIme9aybh6iK4DlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9gMPl6dy JbqRjJnMGesfxWro7FcwHwYDVR0jBBgwFoAUd3AGpB4BjjP2fCn9aX5kSMeOWxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4QTdELzY5NjVERkNBNTU5 MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQMmZDbjlhWDVrU01lT1d4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZDNBR3BCNEJqalAyZkNuOWFYNWtTTWVPV3hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 QTdELzY5NjVERkNBNTU5MzExRjE5NTI5NjhCOTkyODMzNzczL2QzQUdwQjRCampQ MmZDbjlhWDVrU01lT1d4cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQANussFUjWS1C2F6VMBNG4oHuFTW6ELChz1PJTJE0rnkH3gCGBZSMMBeZ+66igQ IWI2FdqVDxUGmoTj3RjNDb5cQgcJ3EGuYPoVr2eWM9fCjOPCROcxwk7w/8qW//G/ injXRLu/duN5QsiDbXpr3vkgUngACRQG1UAuZLqDK8gk6uaOmtnIElzruhDWlNRt J74I4P5X7aEU1Ut36x+qMbF6NLnCBt0YTDIoUl3BObrtJ40Eng0Qg6z40k+5+/0s WlER09p7rBo/Ha+QLerd1C0SnW3hdBOuamWlRbc2HBZQey4qcMNgzbIhbwtn7AE/ xjc6ky1vgBENcXSr8LJ/4xOi -----END CERTIFICATE-----Generated at Thu Jul 23 21:34:09 2026 by rpki-client