$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: EQDu19onI+5tIML0FKtYorjfbOmnkTyzluDmpQldERI= Subject key identifier: 50:81:F3:FE:16:5D:CE:0D:71:5A:E9:7E:81:7E:6A:9E:42:37:4E:28 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D7B Signing time: Tue 28 Jul 2026 15:35:49 +0000 Manifest this update: Tue 28 Jul 2026 15:35:48 +0000 Manifest next update: Tue 04 Aug 2026 15:35:48 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: DzlaroPc9LIjlHzcO86feB4QWNSIm0U4F5jDNkVUqXQ=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: vVuI5scmnpoPSrcTwhxxR+hl6leJwJVgbaLFPIHUZ9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11672 (0x2d98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jul 28 15:35:48 2026 GMT Not After : Aug 4 15:35:48 2026 GMT Subject: CN=6a68cc54-bd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:96:5c:82:01:85:30:4f:1c:e7:78:f4:08: 0a:91:34:c1:2e:de:76:35:f9:eb:ec:9f:7f:9d:db: 08:59:09:8e:b3:da:71:e5:c6:ed:97:52:6f:4f:2a: 74:c4:07:83:08:d6:32:0e:9f:82:4d:0b:63:b3:3a: be:e3:a0:38:a9:76:a8:f7:7d:56:c9:a7:74:87:eb: 68:73:34:65:79:86:60:4f:ba:49:c1:e0:8b:74:67: 2a:c7:b0:a3:0d:52:26:f1:70:a0:83:30:2a:8e:30: 54:f6:2c:62:29:39:e3:3f:84:3d:9d:e6:26:f6:80: 5f:c4:1f:95:9b:94:a6:21:ba:2a:2f:f5:60:15:89: c3:48:f2:29:af:01:f6:51:7e:86:44:bb:92:76:25: b1:18:42:89:03:08:7d:57:60:45:80:62:1e:e4:cd: 44:ab:fa:53:8b:0d:3c:c8:4d:56:e2:18:47:41:67: 37:20:1e:6c:f5:a6:99:2e:ed:3a:b2:df:69:87:ce: 40:28:0d:5b:f6:6c:df:e9:60:3e:7a:f5:4b:a7:0a: 08:48:90:d5:d5:7c:98:96:68:d7:0c:91:c5:7e:46: 05:39:de:e0:72:f2:3a:27:f7:8b:d0:5b:26:17:d4: fe:e2:c3:0f:cd:69:c3:62:df:fe:7a:69:9b:39:6f: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:81:F3:FE:16:5D:CE:0D:71:5A:E9:7E:81:7E:6A:9E:42:37:4E:28 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c7:0a:52:9e:e9:79:d1:15:f9:3d:25:3d:4f:2f:cc:85:c1: 11:2a:b0:ec:19:08:41:c4:17:8c:ec:8c:f8:d0:6f:9c:22:1b: dd:d9:c3:fa:e9:9b:6a:ab:b8:8d:3f:65:67:d2:cd:ac:79:fb: 71:f3:73:ba:2b:21:57:6b:b2:e1:61:d4:aa:0f:93:41:a5:b2: 23:69:1b:13:31:f4:85:0f:c6:f8:7e:f4:8c:22:0e:4a:58:c6: 5f:9e:5a:4a:4d:c1:d0:36:38:26:47:88:11:00:b9:db:57:fd: d1:7b:f8:fe:9e:55:11:a0:b5:ea:d7:d7:4d:07:0e:22:2d:6a: 0b:44:b8:bd:f5:32:81:42:f9:a5:e3:e8:44:7b:33:28:cd:8c: 4d:4a:4a:f3:fd:e8:ee:3c:1a:78:b8:1d:6c:88:11:5c:b9:3c: ab:4c:b7:1c:6c:7b:35:a7:d7:d7:ca:24:6c:70:a7:e1:5b:29: a7:08:d3:e3:f9:6a:b6:5d:a9:76:14:0c:b6:c7:22:98:e5:68: 58:7f:68:b8:2a:eb:55:3d:66:22:96:f0:c3:e5:89:2f:96:d2: 97:dc:2e:9a:43:17:5e:82:73:82:ef:df:55:99:9d:3c:e7:73: 0d:e1:fc:ab:ed:ea:44:34:07:a9:e2:84:d2:a8:2f:d1:23:d6: 82:0f:eb:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNzI4MTUzNTQ4WhcNMjYwODA0MTUzNTQ4WjAYMRYwFAYD VQQDEw02YTY4Y2M1NC1iZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Y6WXIIBhTBPHOd49AgKkTTBLt52Nfnr7J9/ndsIWQmOs9px5cbtl1JvTyp0 xAeDCNYyDp+CTQtjszq+46A4qXao931Wyad0h+toczRleYZgT7pJweCLdGcqx7Cj DVIm8XCggzAqjjBU9ixiKTnjP4Q9neYm9oBfxB+Vm5SmIboqL/VgFYnDSPIprwH2 UX6GRLuSdiWxGEKJAwh9V2BFgGIe5M1Eq/pTiw08yE1W4hhHQWc3IB5s9aaZLu06 st9ph85AKA1b9mzf6WA+evVLpwoISJDV1XyYlmjXDJHFfkYFOd7gcvI6J/eL0Fsm F9T+4sMPzWnDYt/+emmbOW9/BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCB8/4W Xc4NcVrpfoF+ap5CN04oMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFccKUp7pedEV+T0lPU8vzIXBESqw7BkIQcQXjOyM+NBvnCIb3dnD+umbaqu4 jT9lZ9LNrHn7cfNzuishV2uy4WHUqg+TQaWyI2kbEzH0hQ/G+H70jCIOSljGX55a Sk3B0DY4JkeIEQC521f90Xv4/p5VEaC16tfXTQcOIi1qC0S4vfUygUL5pePoRHsz KM2MTUpK8/3o7jwaeLgdbIgRXLk8q0y3HGx7NafX18okbHCn4VsppwjT4/lqtl2p dhQMtscimOVoWH9ouCrrVT1mIpbww+WJL5bSl9wumkMXXoJzgu/fVZmdPOdzDeH8 q+3qRDQHqeKE0qgv0SPWgg/r+Q== -----END CERTIFICATE-----Generated at Wed Jul 29 08:00:44 2026 by rpki-client