$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: 4G3gG8cQZ/Vz4yPt8MsHaef7SySe1ifJ0VKPqObeZ00= Subject key identifier: 80:99:87:FA:C3:C0:42:2C:92:07:31:64:38:96:78:00:B2:16:2C:09 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0426 Signing time: Mon 27 Jul 2026 01:23:17 +0000 Manifest this update: Mon 27 Jul 2026 01:23:17 +0000 Manifest next update: Mon 03 Aug 2026 01:23:17 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: F5FVVm+0ZdOYOwrZEpwbjiv5xkBYUvjNj5ReqZG8pvU=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: tXiBPn9WKqPR3A495dpcgE5SO+VgxVPY4ijGQaSknoI=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: rpZGhIKFCgIxWTbQKzN+z1Oy8oMiVDudLIk2WruPJmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Jul 27 01:23:17 2026 GMT Not After : Aug 3 01:23:17 2026 GMT Subject: CN=6a66b305-cb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:56:5c:44:c6:22:50:92:d2:c1:f4:44:82: 11:94:b5:9c:ab:c5:ce:e7:16:17:6e:e6:b5:d9:42: b3:11:1b:3c:7f:70:a8:f8:44:4c:f3:ea:db:6e:9c: 35:a0:c8:84:2f:15:64:22:c1:2e:69:79:09:ac:fc: aa:24:2f:a1:2f:36:fb:47:94:ee:f8:dd:93:78:99: 57:99:13:c7:d4:ca:eb:d1:36:77:fa:80:68:97:95: 0c:b0:63:93:0a:f5:74:ae:f3:1b:e1:ae:c8:2e:d1: 3d:ad:07:4b:5d:88:bc:e4:3b:d9:8b:1e:79:b0:d3: a8:f5:8c:8f:96:7a:91:47:b9:c1:cb:12:cc:fe:be: 15:50:79:3a:f2:92:4b:89:00:9b:7d:74:23:62:88: d7:72:7b:0c:6c:d2:9d:03:c2:25:fd:ef:7f:56:d2: 9c:0c:05:bb:23:cd:aa:10:a6:01:f4:37:18:fe:43: 27:da:d7:39:2a:06:2e:04:81:3a:01:f1:e5:fe:42: 88:08:b7:92:7b:e1:64:56:6d:bb:a7:5a:f8:9d:98: 09:67:75:19:46:9c:42:ff:fc:c2:2f:78:e8:8f:0a: ba:56:40:70:9f:8e:f4:a8:18:53:3e:bf:40:64:1a: 8e:98:90:60:75:d5:9f:eb:3f:bf:35:31:b0:78:ff: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:99:87:FA:C3:C0:42:2C:92:07:31:64:38:96:78:00:B2:16:2C:09 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:50:12:95:69:cc:93:c6:51:99:86:6b:79:01:b6:b3:dc:35: 2f:2d:fc:e7:f7:8a:51:55:27:34:ad:fd:a3:c2:d4:9b:26:e6: 35:b6:c7:bb:a4:37:41:66:29:52:ec:41:af:f0:34:b2:7e:a1: 49:a5:5c:14:d4:3c:05:cf:21:ea:5c:ab:6b:a7:97:81:ca:f3: 22:ca:04:a0:66:28:c0:0d:70:70:0b:94:bb:07:8c:19:62:06: 3a:34:2c:e6:78:21:76:90:0a:fd:45:e5:ec:a3:b2:a3:f8:52: 47:83:d0:8b:14:c7:24:64:86:44:99:b7:ac:3d:a8:2c:64:0e: 60:c3:6b:c1:db:83:f1:82:ad:a2:91:93:24:62:40:b8:94:4c: 52:23:f1:1c:49:8c:74:e2:17:91:c7:2d:23:9a:93:42:61:e0: 95:a7:13:a0:1b:30:7d:f2:6b:52:ec:1e:6f:46:cc:9b:6e:67: e3:1e:b9:88:87:4c:6e:60:4e:6b:4f:26:d4:31:92:73:57:fd: 70:c2:af:b4:ba:9e:b8:2c:95:65:3c:24:97:52:77:3a:54:ef: 02:2e:1d:b7:16:ff:3a:a3:bb:60:b6:01:b0:4a:00:49:7c:5d: 74:ec:23:1b:7e:f1:b0:ad:81:94:8c:7e:4e:6f:bb:74:d1:fb: 74:3e:33:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwNzI3MDEyMzE3WhcNMjYwODAzMDEyMzE3WjAYMRYwFAYD VQQDEw02YTY2YjMwNS1jYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCJWXETGIlCS0sH0RIIRlLWcq8XO5xYXbua12UKzERs8f3Co+ERM8+rbbpw1 oMiELxVkIsEuaXkJrPyqJC+hLzb7R5Tu+N2TeJlXmRPH1Mrr0TZ3+oBol5UMsGOT CvV0rvMb4a7ILtE9rQdLXYi85DvZix55sNOo9YyPlnqRR7nByxLM/r4VUHk68pJL iQCbfXQjYojXcnsMbNKdA8Il/e9/VtKcDAW7I82qEKYB9DcY/kMn2tc5KgYuBIE6 AfHl/kKICLeSe+FkVm27p1r4nZgJZ3UZRpxC//zCL3jojwq6VkBwn470qBhTPr9A ZBqOmJBgddWf6z+/NTGweP+rTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICZh/rD wEIskgcxZDiWeACyFiwJMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1ASlWnMk8ZRmYZreQG2s9w1Ly385/eKUVUnNK39o8LUmybmNbbHu6Q3QWYp UuxBr/A0sn6hSaVcFNQ8Bc8h6lyra6eXgcrzIsoEoGYowA1wcAuUuweMGWIGOjQs 5nghdpAK/UXl7KOyo/hSR4PQixTHJGSGRJm3rD2oLGQOYMNrwduD8YKtopGTJGJA uJRMUiPxHEmMdOIXkcctI5qTQmHglacToBswffJrUuweb0bMm25n4x65iIdMbmBO a08m1DGSc1f9cMKvtLqeuCyVZTwkl1J3OlTvAi4dtxb/OqO7YLYBsEoASXxddOwj G37xsK2BlIx+Tm+7dNH7dD4z9g== -----END CERTIFICATE-----Generated at Tue Jul 28 18:30:51 2026 by rpki-client