$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft File: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft (raw, json) Hash identifier: oIyWUPqiSF6Jg0fvx7vZVbdt3SXkhR8M5SmZEZWeqNE= Subject key identifier: E7:B7:4A:A7:9A:0A:E7:30:AA:73:32:AB:D7:92:1B:31:BC:34:CA:6F Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft Manifest number: 0238 Signing time: Mon 27 Jul 2026 04:03:35 +0000 Manifest this update: Mon 27 Jul 2026 04:03:34 +0000 Manifest next update: Mon 03 Aug 2026 04:03:34 +0000 Files and hashes: 1: 3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl (hash: HBzy+E1U8Z9G9NHJsWRdHcXzOlcXu6xxRHhVRHZMC88=) 2: 602678F8252A11EEA290E91FC4F9AE02.roa (hash: X00gSuzOOkYP4DLmpOt/0UBFhvldg0Co5j7FLcwODFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E Validity Not Before: Jul 27 04:03:34 2026 GMT Not After : Aug 3 04:03:34 2026 GMT Subject: CN=6a66d896-7d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:9e:8f:7e:63:27:9d:89:f1:d0:7c:3e:b3: 42:55:b6:d1:95:9e:7f:13:b3:5e:62:85:2c:71:8c: c3:23:07:5d:66:9d:8b:a5:c8:b3:0a:d4:24:d3:cb: 8b:7b:b0:4e:99:2d:1a:da:67:f3:7a:94:fe:b6:88: 1b:09:14:30:83:42:d6:5f:cd:6f:0e:12:b5:61:69: 82:ac:5e:41:3b:e6:71:00:16:ad:f9:b4:2d:f2:d2: 0d:62:c5:c9:8d:1d:7d:66:2a:8a:d9:12:28:98:2f: 14:1f:6b:a3:fc:4e:f7:6f:c0:7a:fa:29:ff:7e:9b: 51:b3:ae:32:4e:08:77:e3:ab:c3:97:9a:82:ef:f1: 6e:92:ad:f8:18:3f:0f:ef:1c:d1:b3:bf:8d:d1:58: 52:fc:95:4f:3a:1c:17:3a:9d:88:11:30:a9:7d:85: 49:53:94:ce:63:5d:58:32:c7:7b:fa:5d:bb:b8:ae: 5c:be:f7:e9:96:93:d3:ff:2b:1f:3b:94:94:26:07: ba:7b:e2:cb:0f:11:c3:06:ca:99:95:65:94:eb:29: b4:fa:4e:6b:07:a6:cf:9e:d2:b0:14:41:2f:70:c3: 23:b7:dd:dc:e9:bc:7e:cc:83:78:18:3f:1b:e3:50: 11:26:f6:8b:85:a9:f9:36:06:22:65:e5:bf:a8:0a: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B7:4A:A7:9A:0A:E7:30:AA:73:32:AB:D7:92:1B:31:BC:34:CA:6F X509v3 Authority Key Identifier: keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d1:d8:51:c1:02:a0:f2:d2:b8:8c:74:e4:14:9c:77:22:15: 47:df:21:94:6e:bb:e3:00:23:65:45:0b:53:b5:dd:72:3c:44: 9e:bd:1e:8d:6e:bf:ab:64:6f:e6:4d:6f:54:08:d7:15:09:93: a4:fe:25:d2:28:02:f5:69:bd:ef:03:45:20:18:8a:bb:57:9e: 75:bb:8a:45:5d:84:f2:0c:17:49:fa:e0:a7:5d:f9:4e:41:83: a8:c7:d2:16:4d:ff:fc:18:f1:20:c2:f2:2a:b1:e5:36:11:3b: 1b:59:b4:15:1b:4d:c6:62:e5:9e:18:f4:67:b1:5f:6f:c3:18: ae:8d:61:b2:d8:2b:b6:cb:42:ff:f0:54:08:2e:44:13:c7:3a: d3:ca:72:50:3c:77:09:72:d4:05:57:c3:2d:13:ab:3a:09:8f: d6:94:c3:7c:2b:67:6f:ff:eb:c4:0f:b7:71:b2:1f:4f:b5:47: 8b:13:30:37:5e:08:5a:5a:75:26:cb:16:f4:1d:02:5a:9f:ea: 34:e5:ac:55:9b:18:89:10:ea:3b:12:61:b6:8a:19:40:44:1c: 2d:ec:63:1f:c2:54:4c:af:eb:2d:62:4b:82:16:f0:08:36:62: fa:c2:92:61:87:7e:52:39:a9:95:cb:36:40:4e:45:ec:97:80: 6b:45:67:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNTExMTAvBgNVBAUTKERDMjFCOTAyOUVBQzA3OTA4NzhGQUNBN0NBODEzQjRC M0FFREM5MEUwHhcNMjYwNzI3MDQwMzM0WhcNMjYwODAzMDQwMzM0WjAYMRYwFAYD VQQDEw02YTY2ZDg5Ni03ZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZyej35jJ52J8dB8PrNCVbbRlZ5/E7NeYoUscYzDIwddZp2LpcizCtQk08uL e7BOmS0a2mfzepT+togbCRQwg0LWX81vDhK1YWmCrF5BO+ZxABat+bQt8tINYsXJ jR19ZiqK2RIomC8UH2uj/E73b8B6+in/fptRs64yTgh346vDl5qC7/Fukq34GD8P 7xzRs7+N0VhS/JVPOhwXOp2IETCpfYVJU5TOY11YMsd7+l27uK5cvvfplpPT/ysf O5SUJge6e+LLDxHDBsqZlWWU6ym0+k5rB6bPntKwFEEvcMMjt93c6bx+zIN4GD8b 41ARJvaLhan5NgYiZeW/qArtowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOe3Sqea CucwqnMyq9eSGzG8NMpvMB8GA1UdIwQYMBaAFNwhuQKerAeQh4+sp8qBO0s67ckO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM1MS9DOEE4RDk3NjI1 MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1Q0hqNnlueW9FN1N6cnR5 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDRzVBcDZzQjVDSGo2eW55b0U3U3pydHlRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM1MS9DOEE4RDk3NjI1MjkxMUVFOTM5RkMzMUVDNEY5QUUwMi8zQ0c1QXA2c0I1 Q0hqNnlueW9FN1N6cnR5UTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj9HYUcECoPLSuIx05BScdyIVR98hlG674wAjZUULU7XdcjxEnr0ejW6/q2Rv 5k1vVAjXFQmTpP4l0igC9Wm97wNFIBiKu1eedbuKRV2E8gwXSfrgp135TkGDqMfS Fk3//BjxIMLyKrHlNhE7G1m0FRtNxmLlnhj0Z7Ffb8MYro1hstgrtstC//BUCC5E E8c608pyUDx3CXLUBVfDLROrOgmP1pTDfCtnb//rxA+3cbIfT7VHixMwN14IWlp1 JssW9B0CWp/qNOWsVZsYiRDqOxJhtooZQEQcLexjH8JUTK/rLWJLghbwCDZi+sKS YYd+Ujmplcs2QE5F7JeAa0VnCg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:43 2026 by rpki-client