$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft File: X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json) Hash identifier: TNdEP65R0eDJm0uETt4UE2zMM+3rvNJ1pIBhKbQ7TvU= Subject key identifier: 3F:F4:C7:97:E5:E8:EF:60:A9:6D:BA:61:C8:E1:02:62:4B:22:78:CB Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA Certificate issuer: /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA Certificate serial: 3561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft Manifest number: 3561 Signing time: Tue 28 Jul 2026 14:38:33 +0000 Manifest this update: Tue 28 Jul 2026 14:38:33 +0000 Manifest next update: Tue 04 Aug 2026 14:38:33 +0000 Files and hashes: 1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: TxA/ny/J+Bn5XVD1Js7h3REv9xB1NSyERS79UyceIAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA Validity Not Before: Jul 28 14:38:33 2026 GMT Not After : Aug 4 14:38:33 2026 GMT Subject: CN=6a68bee9-3305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:d4:3a:42:84:03:60:78:ce:bb:a2:f3:08: f3:7a:7b:02:3b:ab:12:fc:24:1f:41:b0:28:75:b0: 8e:e8:bb:e8:0d:e0:cc:aa:90:e7:e7:0c:b5:d3:19: d8:51:6e:b2:4e:7e:5f:08:8e:b5:06:2e:e8:d0:5e: 61:fa:61:9e:f2:1b:91:8c:db:c8:36:5f:a7:b8:ef: 9c:fa:7c:8f:9f:d7:95:9d:4d:8e:3f:c3:28:b9:35: 42:95:3e:70:58:f9:ed:9e:53:cc:a4:e3:75:e1:41: a0:d4:64:a0:74:ba:24:9b:a4:ea:4c:46:33:02:ab: 7b:12:ad:6d:c1:78:3a:94:dd:78:6c:62:40:a2:e6: d1:0c:ad:d8:c9:59:5d:a7:01:75:1c:ac:a5:81:1d: ea:f8:44:2b:0f:54:48:47:65:fe:cb:2f:4d:56:19: e7:ee:68:9a:ad:55:83:06:27:e8:07:9c:d8:82:6e: 85:27:c7:43:77:61:8a:df:80:4d:59:a3:9f:ba:8f: 07:97:17:21:a7:07:34:38:14:1e:0b:20:22:e4:7e: 90:7c:3b:96:d3:41:d8:b6:b8:a9:1e:f9:37:e9:bf: 9f:fa:60:c6:48:6a:05:c8:04:42:88:95:e0:18:92: 84:1c:49:ff:11:c7:37:1a:fb:9b:0d:e8:b0:c0:69: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F4:C7:97:E5:E8:EF:60:A9:6D:BA:61:C8:E1:02:62:4B:22:78:CB X509v3 Authority Key Identifier: keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e5:bf:93:e3:63:82:39:58:b6:81:0c:d1:34:79:54:cf:e7: 7e:c7:34:85:17:89:eb:05:e7:85:d7:e4:94:2d:f0:44:4e:7c: 90:60:04:77:fb:a6:29:f2:2b:35:6f:77:aa:65:38:61:dd:6a: 2c:37:35:d3:82:f0:28:54:43:da:f5:44:12:4e:ca:a2:1a:c3: 3a:b2:94:df:8b:06:76:e8:ed:48:bf:0f:79:1d:4c:a9:00:7d: b0:b4:fe:50:e3:26:c7:b4:32:09:21:5b:0a:af:50:40:e8:52: e5:5f:b4:4a:c0:34:0c:cc:3c:c4:03:b4:d6:c4:80:6f:ad:cb: bb:ea:b2:9d:99:e2:e5:79:8b:e6:a6:78:a8:e1:95:3a:8e:24: 43:e2:7f:b2:c4:5c:47:9e:87:fe:68:73:2f:7e:8c:cd:40:51: 30:7f:2e:5b:a0:cb:1e:68:a4:56:57:11:1f:94:bc:3d:e0:e0: 46:fe:8d:13:10:bd:59:fb:17:7b:14:f9:62:0a:21:de:42:6e: 4d:17:5a:7c:70:bd:50:e0:80:a8:1d:e0:09:5e:81:d1:fb:23: d2:08:15:52:d8:34:87:9f:b7:6e:bb:21:da:28:17:bf:98:0b: 23:6e:b4:d6:e4:f9:34:33:37:51:6c:29:5d:9d:dd:12:90:31: c3:7a:59:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QkIxMTAvBgNVBAUTKDVGNzAzNjQ4RDczRjYwNjk0NTAxMThEQkEyNkY5NjY4 MkQ1QUU2Q0EwHhcNMjYwNzI4MTQzODMzWhcNMjYwODA0MTQzODMzWjAYMRYwFAYD VQQDEw02YTY4YmVlOS0zMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHXUOkKEA2B4zrui8wjzensCO6sS/CQfQbAodbCO6LvoDeDMqpDn5wy10xnY UW6yTn5fCI61Bi7o0F5h+mGe8huRjNvINl+nuO+c+nyPn9eVnU2OP8MouTVClT5w WPntnlPMpON14UGg1GSgdLokm6TqTEYzAqt7Eq1twXg6lN14bGJAoubRDK3YyVld pwF1HKylgR3q+EQrD1RIR2X+yy9NVhnn7miarVWDBifoB5zYgm6FJ8dDd2GK34BN WaOfuo8Hlxchpwc0OBQeCyAi5H6QfDuW00HYtripHvk36b+f+mDGSGoFyARCiJXg GJKEHEn/Ecc3GvubDeiwwGnQLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/0x5fl 6O9gqW26YcjhAmJLInjLMB8GA1UdIwQYMBaAFF9wNkjXP2BpRQEY26JvlmgtWubK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhCQi81QTBEOTU4ODFE OEQxMUUyQTlENjA3RUIwOEIwMkNEMi9YM0EyU05jX1lHbEZBUmpib20tV2FDMWE1 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzQTJTTmNfWUdsRkFSamJvbS1XYUMxYTVzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhCQi81QTBEOTU4ODFEOEQxMUUyQTlENjA3RUIwOEIwMkNEMi9YM0EyU05jX1lH bEZBUmpib20tV2FDMWE1c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGeW/k+NjgjlYtoEM0TR5VM/nfsc0hReJ6wXnhdfklC3wRE58kGAEd/umKfIr NW93qmU4Yd1qLDc104LwKFRD2vVEEk7KohrDOrKU34sGdujtSL8PeR1MqQB9sLT+ UOMmx7QyCSFbCq9QQOhS5V+0SsA0DMw8xAO01sSAb63Lu+qynZni5XmL5qZ4qOGV Oo4kQ+J/ssRcR56H/mhzL36MzUBRMH8uW6DLHmikVlcRH5S8PeDgRv6NExC9WfsX exT5Ygoh3kJuTRdafHC9UOCAqB3gCV6B0fsj0ggVUtg0h5+3brsh2igXv5gLI260 1uT5NDM3UWwpXZ3dEpAxw3pZ5g== -----END CERTIFICATE-----Generated at Wed Jul 29 08:58:52 2026 by rpki-client