$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: ed//8m1VxykfEAyEhCqEIJwUIy3L64uVLcIRL+37FXk= Subject key identifier: E0:DD:8F:13:1F:D9:97:33:0F:F4:71:E9:04:75:5F:A0:EF:FD:BC:44 Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 7A Signing time: Mon 27 Jul 2026 10:05:52 +0000 Manifest this update: Mon 27 Jul 2026 10:05:51 +0000 Manifest next update: Mon 03 Aug 2026 10:05:51 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: UZlAyrzfxz/JaK5kHxyRwi7RkiG8k6ukW9ddc04Uzig=) 2: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=) 3: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=) 4: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Jul 27 10:05:51 2026 GMT Not After : Aug 3 10:05:51 2026 GMT Subject: CN=6a672d80-02d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:b7:72:d5:6c:9d:44:05:e8:c6:c8:25:05: 3e:b4:aa:9e:a0:31:5c:50:5f:c6:57:d5:76:58:4f: 00:da:b2:cd:ae:ad:03:98:8a:a9:ad:ce:ba:19:98: 0f:68:36:dc:08:2c:94:9f:d4:8a:58:fc:73:c7:a0: 14:0c:43:e7:0c:5c:87:e0:35:ec:ad:b1:06:e3:f3: 9e:1b:4b:57:de:64:be:45:fd:9c:4b:9b:f2:6a:be: ce:3d:3b:f0:9e:3c:6f:8b:7a:5b:35:17:1a:c6:27: d6:cd:0f:a6:19:1d:09:e5:90:e2:8a:83:16:08:47: fe:f6:22:e3:b4:26:28:9c:c3:be:bc:8b:09:51:f6: b8:85:0c:5c:c3:31:a7:35:df:50:e9:24:1b:91:af: e8:84:01:59:db:7f:5c:42:c3:c3:2e:0d:11:af:ba: cf:53:06:dc:82:50:9d:4d:ce:b7:1d:53:19:88:eb: 9b:49:5e:9a:0e:b7:c3:3b:6b:a3:b4:c6:7b:9c:fd: cf:13:0d:e7:c9:c0:5d:86:d4:5d:df:94:dc:00:63: 11:3a:a9:87:6e:53:c8:e4:91:8c:af:b6:01:e2:d9: ef:35:ad:c2:61:01:74:63:01:a8:48:ae:f3:8c:61: ee:06:d0:7f:76:56:4b:7f:05:0d:20:a3:1e:df:4f: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:8F:13:1F:D9:97:33:0F:F4:71:E9:04:75:5F:A0:EF:FD:BC:44 X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:eb:f3:ac:2b:ab:52:c5:2b:7e:21:4e:8c:63:09:44:db:e1: a2:bf:7c:e3:2e:e5:77:fc:d3:af:08:ab:ef:f6:c5:18:fe:8b: f5:36:22:72:0a:18:b8:9d:12:5c:6e:c2:86:2c:a4:58:70:e2: 5d:5f:69:f0:36:89:3f:a2:a3:8b:8f:77:92:80:c3:6e:7b:f4: 96:55:46:72:34:af:80:65:45:20:e4:33:f9:95:b4:fb:8f:43: 47:3b:1f:0f:82:eb:f8:14:9b:c8:6e:d8:bf:22:a7:a2:cd:82: 60:75:72:4f:e7:84:7e:a9:12:7a:26:23:d3:64:04:19:89:df: e5:2b:50:80:f1:a9:f3:3f:33:4b:bc:a1:3c:1d:42:97:e5:ad: 18:85:92:3d:51:3b:08:eb:d5:02:8e:a9:f2:ba:9a:89:df:da: 62:ab:30:bd:86:2e:97:93:5a:8e:b7:9f:d9:47:2a:c2:2c:b3: cf:fc:89:1b:23:c6:e9:39:4e:d8:5c:23:bc:85:93:d4:87:e4: 48:da:79:fd:9d:52:b4:8a:72:a3:5a:df:92:4f:50:74:6a:27: 3a:f9:34:d5:c0:d5:1b:40:d4:d9:2c:f0:7e:ca:e6:28:5d:3a: ac:aa:c0:c1:e2:be:1f:5b:12:58:37:59:ea:11:a4:76:78:82: 91:5c:6d:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcxQTAxMTAvBgNVBAUTKERFOEMxMTY1NTEwNDJCRThFNzI2NEJFREI1ODJGMEEz NzdCQjI0QkQwHhcNMjYwNzI3MTAwNTUxWhcNMjYwODAzMTAwNTUxWjAYMRYwFAYD VQQDEw02YTY3MmQ4MC0wMmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooC3ctVsnUQF6MbIJQU+tKqeoDFcUF/GV9V2WE8A2rLNrq0DmIqprc66GZgP aDbcCCyUn9SKWPxzx6AUDEPnDFyH4DXsrbEG4/OeG0tX3mS+Rf2cS5vyar7OPTvw njxvi3pbNRcaxifWzQ+mGR0J5ZDiioMWCEf+9iLjtCYonMO+vIsJUfa4hQxcwzGn Nd9Q6SQbka/ohAFZ239cQsPDLg0Rr7rPUwbcglCdTc63HVMZiOubSV6aDrfDO2uj tMZ7nP3PEw3nycBdhtRd35TcAGMROqmHblPI5JGMr7YB4tnvNa3CYQF0YwGoSK7z jGHuBtB/dlZLfwUNIKMe30+KGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODdjxMf 2ZczD/Rx6QR1X6Dv/bxEMB8GA1UdIwQYMBaAFN6MEWVRBCvo5yZL7bWC8KN3uyS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzFBMC9ENjk5NERFNkRB M0UxMUYwODFGNUE0NTc4RUQzNjQxRC8zb3dSWlZFRUstam5Ka3Z0dFlMd28zZTdK TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzFBMC9ENjk5NERFNkRBM0UxMUYwODFGNUE0NTc4RUQzNjQxRC8zb3dSWlZFRUst am5Ka3Z0dFlMd28zZTdKTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAauvzrCurUsUrfiFOjGMJRNvhor984y7ld/zTrwir7/bFGP6L9TYicgoYuJ0S XG7ChiykWHDiXV9p8DaJP6Kji493koDDbnv0llVGcjSvgGVFIOQz+ZW0+49DRzsf D4Lr+BSbyG7YvyKnos2CYHVyT+eEfqkSeiYj02QEGYnf5StQgPGp8z8zS7yhPB1C l+WtGIWSPVE7COvVAo6p8rqaid/aYqswvYYul5Najref2Ucqwiyzz/yJGyPG6TlO 2FwjvIWT1IfkSNp5/Z1StIpyo1rfkk9QdGonOvk01cDVG0DU2SzwfsrmKF06rKrA weK+H1sSWDdZ6hGkdniCkVxtGQ== -----END CERTIFICATE-----Generated at Wed Jul 29 06:50:21 2026 by rpki-client