$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft (raw, json) Hash identifier: Ph8IRY9uz5nJo3QZ4K4nWS/6ZoBlWmnxBWC3AKtCquM= Subject key identifier: 21:3E:13:A0:08:18:E8:F8:28:95:D8:95:94:B6:4E:10:11:53:0E:C7 Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft Manifest number: 0CC9 Signing time: Tue 28 Jul 2026 18:40:52 +0000 Manifest this update: Tue 28 Jul 2026 18:40:52 +0000 Manifest next update: Tue 04 Aug 2026 18:40:52 +0000 Files and hashes: 1: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl (hash: yDujQrVnlzTabnmJe5Av5N/ZH9ASu0p6ahd1xXR3Iu0=) 2: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (hash: 2ZECssZFKej2Bnmujg65SvPR+m2K68FZcUfUc+ikvVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Jul 28 18:40:52 2026 GMT Not After : Aug 4 18:40:52 2026 GMT Subject: CN=6a68f7b4-c64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:ab:ab:a1:14:aa:38:10:b0:d4:83:40:22: 01:cb:b7:7c:a4:72:d6:a1:c6:57:b7:c7:6b:21:1d: cd:c8:26:d1:db:71:2e:25:e2:7f:b1:cc:67:51:ec: b7:19:fb:97:78:13:09:59:a1:aa:17:11:1c:a3:35: 23:35:53:51:97:aa:92:c8:97:4a:4f:0b:c4:6a:99: b1:b5:d1:36:58:61:5f:7c:61:68:e0:22:51:0a:18: 85:f2:bd:56:81:80:72:be:07:bd:14:59:59:23:e6: c2:95:e2:aa:ea:81:66:4a:77:9f:75:43:0e:2e:80: 7d:e4:83:54:f9:42:8d:fe:b9:4c:b3:28:54:66:51: 35:6a:2a:64:3e:9e:34:9e:ea:1a:fa:57:8f:43:b7: c3:22:f1:60:56:90:2b:e2:ff:b7:ef:14:cf:27:d1: 8b:e3:d5:f5:43:cf:9e:bb:52:80:54:d2:47:eb:a2: b9:24:36:d7:bc:48:66:fe:15:23:95:ba:a1:1b:3f: 96:2e:78:ff:f5:af:c3:6e:bb:57:0a:df:46:2b:79: 24:d3:bd:96:e6:48:d6:95:fd:94:8b:19:f1:bf:bf: 76:be:cc:23:00:57:e9:17:9c:d9:79:54:72:ab:18: 3a:24:2b:52:ce:cf:e6:11:98:44:97:60:19:e8:8a: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3E:13:A0:08:18:E8:F8:28:95:D8:95:94:B6:4E:10:11:53:0E:C7 X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:65:68:fa:7a:83:ed:f9:77:a7:a6:7e:e0:d9:72:f6:d2:dc: 9d:50:3f:d4:76:0a:38:c8:2b:63:e3:ec:d0:75:4e:c0:f4:e2: 5e:e6:3c:30:eb:71:c0:19:21:8f:cb:c0:f0:74:8f:ae:f2:d7: 17:5e:f2:f7:e8:76:bb:d9:f2:93:9c:88:8e:aa:b6:41:bf:65: 44:13:10:18:e0:74:86:12:69:b6:49:47:3a:08:6f:f0:d7:05: 66:27:4f:d1:9a:57:8e:41:ec:09:86:cb:5f:4d:b8:fa:2d:41: e9:7d:d4:83:92:c3:0a:c7:05:85:0b:4b:06:f7:5a:82:57:53: e3:5e:6a:ce:71:ee:2f:e9:b1:c8:94:f0:89:25:8a:29:c4:35: 3e:f0:a5:0a:27:b6:ce:18:d4:8a:fe:1e:85:9f:35:16:43:42: 38:1c:81:cf:72:af:7c:59:d3:e7:e7:50:d6:2d:11:b2:6b:2d: 83:63:8f:0a:e0:40:a2:07:d8:52:bc:0e:48:c5:ac:d2:8d:e4: c4:c1:cf:f9:f3:d1:bb:f8:cf:32:91:96:e9:7b:77:ae:28:cd: df:4c:cf:b5:04:57:d9:dc:36:0b:fc:d3:10:1c:84:22:05:77: a8:54:55:76:0f:a7:0e:2d:1b:51:f4:ef:09:6e:0f:25:31:9e: 31:f2:6e:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjYwNzI4MTg0MDUyWhcNMjYwODA0MTg0MDUyWjAYMRYwFAYD VQQDEw02YTY4ZjdiNC1jNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Eqrq6EUqjgQsNSDQCIBy7d8pHLWocZXt8drIR3NyCbR23EuJeJ/scxnUey3 GfuXeBMJWaGqFxEcozUjNVNRl6qSyJdKTwvEapmxtdE2WGFffGFo4CJRChiF8r1W gYByvge9FFlZI+bCleKq6oFmSnefdUMOLoB95INU+UKN/rlMsyhUZlE1aipkPp40 nuoa+lePQ7fDIvFgVpAr4v+37xTPJ9GL49X1Q8+eu1KAVNJH66K5JDbXvEhm/hUj lbqhGz+WLnj/9a/DbrtXCt9GK3kk072W5kjWlf2Uixnxv792vswjAFfpF5zZeVRy qxg6JCtSzs/mEZhEl2AZ6IrzJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCE+E6AI GOj4KJXYlZS2ThARUw7HMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExF RTN5OUhJN1VUWnl5Vlg5RDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWVo+nqD7fl3p6Z+4Nly9tLcnVA/1HYKOMgrY+Ps0HVOwPTiXuY8MOtxwBkh j8vA8HSPrvLXF17y9+h2u9nyk5yIjqq2Qb9lRBMQGOB0hhJptklHOghv8NcFZidP 0ZpXjkHsCYbLX024+i1B6X3Ug5LDCscFhQtLBvdagldT415qznHuL+mxyJTwiSWK KcQ1PvClCie2zhjUiv4ehZ81FkNCOByBz3KvfFnT5+dQ1i0Rsmstg2OPCuBAogfY UrwOSMWs0o3kxMHP+fPRu/jPMpGW6Xt3rijN30zPtQRX2dw2C/zTEByEIgV3qFRV dg+nDi0bUfTvCW4PJTGeMfJuzw== -----END CERTIFICATE-----Generated at Wed Jul 29 13:39:35 2026 by rpki-client