$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: 0CCUXd1i/Ct6MmdIfC2TVHgABTZ354gpSfK1dX+yzpU= Subject key identifier: C9:D1:D4:79:00:63:20:60:73:62:85:85:CE:CB:44:F7:33:BD:F1:36 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0938 Signing time: Tue 28 Jul 2026 14:48:03 +0000 Manifest this update: Tue 28 Jul 2026 14:48:02 +0000 Manifest next update: Tue 04 Aug 2026 14:48:02 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: q3qfO38n46MwIdw3QhduVZPiUSigjPJ+ZqMW5IXdpC0=) 2: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) 3: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: TJX/2z4AnWBNVG5vc+6iQbCnon+csxAc9hGSLvA14T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jul 28 14:48:02 2026 GMT Not After : Aug 4 14:48:02 2026 GMT Subject: CN=6a68c123-5919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:f1:0e:ae:aa:05:93:42:d4:f4:e3:a9:5d: e0:17:3c:c9:29:bc:6d:bf:13:d1:89:b2:36:2a:55: 2d:22:90:a1:e4:0f:28:a5:80:9c:14:03:36:32:67: 3c:ea:ca:f9:26:30:b1:82:a9:99:4d:31:7a:5e:db: fa:69:91:3f:51:34:1d:98:5d:1e:cc:b6:69:bd:b4: 6a:92:07:52:04:e0:9e:36:a5:cf:20:e3:57:4d:b2: e6:d3:bf:5d:e8:33:24:71:13:02:64:b4:08:16:19: 66:e0:e2:43:87:63:80:60:89:5c:5c:9b:88:08:d9: 16:ba:36:6b:5b:f9:86:52:79:29:18:52:15:73:05: d4:2e:6a:88:bd:9c:55:6a:33:f6:69:8d:8e:2a:d5: 3c:f9:4a:61:fb:ec:8f:c5:fc:27:f1:05:2c:13:7a: 02:6e:79:f2:d0:a8:d9:9b:1b:d1:01:13:32:6a:25: 10:5e:c6:b3:ca:4c:4c:72:f2:19:c7:bb:4d:c7:01: 54:49:a8:f4:08:6d:06:0a:ae:6d:b3:e5:93:c8:4f: 4d:b0:5b:50:17:c6:2a:b4:67:ae:3d:f9:6a:c9:9b: 0f:39:ca:27:70:fe:77:0b:be:14:72:ac:97:99:64: cd:9d:b4:ec:85:5d:88:8c:63:a2:4b:e0:b1:69:fc: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:D4:79:00:63:20:60:73:62:85:85:CE:CB:44:F7:33:BD:F1:36 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:5d:fe:f7:14:e0:e1:48:e7:46:39:a7:0d:81:e9:f4:7e:ea: ab:57:a6:03:29:36:c9:20:0f:ec:2e:9f:38:82:f0:18:7b:a8: 90:e7:c2:5f:2d:86:a6:46:65:04:5b:a0:ed:74:fc:55:42:81: fc:26:68:13:3d:a3:66:f6:73:e5:1f:97:e0:89:54:40:ee:65: 62:11:66:df:cb:5d:07:b4:bc:a4:f2:2b:4a:a7:df:bf:2c:0f: 89:c7:d8:67:c9:d5:a0:95:55:a5:2d:ca:6e:fa:60:ff:82:a0: d9:f2:61:67:65:25:48:82:ea:fe:14:a6:3a:c2:98:5b:90:e8: ad:b1:90:77:4b:c4:72:60:84:3d:bf:f3:e9:b2:06:56:56:28: 8f:0c:e9:92:7f:0a:b1:66:90:75:e0:3a:96:b7:0c:0a:bb:6e: c3:99:cd:37:0d:95:05:75:5d:86:fd:a7:de:2b:6f:60:5f:a4: 53:96:20:48:bd:a1:19:a0:f0:d7:e9:93:d3:45:94:b6:be:97: a1:cf:34:fc:3b:bd:33:25:4f:d7:38:af:fd:05:aa:9c:eb:3b: a8:1e:7e:93:d1:f7:4d:c9:eb:f8:e2:7e:dd:2f:75:ef:fa:11: 03:5d:f1:1b:96:d8:cc:8a:9c:80:df:ac:a8:e9:c6:b6:11:5a: d7:ff:86:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwNzI4MTQ0ODAyWhcNMjYwODA0MTQ0ODAyWjAYMRYwFAYD VQQDEw02YTY4YzEyMy01OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ7xDq6qBZNC1PTjqV3gFzzJKbxtvxPRibI2KlUtIpCh5A8opYCcFAM2Mmc8 6sr5JjCxgqmZTTF6Xtv6aZE/UTQdmF0ezLZpvbRqkgdSBOCeNqXPIONXTbLm079d 6DMkcRMCZLQIFhlm4OJDh2OAYIlcXJuICNkWujZrW/mGUnkpGFIVcwXULmqIvZxV ajP2aY2OKtU8+Uph++yPxfwn8QUsE3oCbnny0KjZmxvRARMyaiUQXsazykxMcvIZ x7tNxwFUSaj0CG0GCq5ts+WTyE9NsFtQF8YqtGeuPflqyZsPOconcP53C74UcqyX mWTNnbTshV2IjGOiS+CxafwLowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnR1HkA YyBgc2KFhc7LRPczvfE2MB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP13+9xTg4UjnRjmnDYHp9H7qq1emAyk2ySAP7C6fOILwGHuokOfCXy2GpkZl BFug7XT8VUKB/CZoEz2jZvZz5R+X4IlUQO5lYhFm38tdB7S8pPIrSqffvywPicfY Z8nVoJVVpS3Kbvpg/4Kg2fJhZ2UlSILq/hSmOsKYW5DorbGQd0vEcmCEPb/z6bIG VlYojwzpkn8KsWaQdeA6lrcMCrtuw5nNNw2VBXVdhv2n3itvYF+kU5YgSL2hGaDw 1+mT00WUtr6Xoc80/Du9MyVP1ziv/QWqnOs7qB5+k9H3Tcnr+OJ+3S917/oRA13x G5bYzIqcgN+sqOnGthFa1/+GrQ== -----END CERTIFICATE-----Generated at Wed Jul 29 10:34:19 2026 by rpki-client