$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: kVkJDXSkvMbH8puR/jLXPLfSErW0mxeZMXFO+2fxbCA= Subject key identifier: CD:70:99:AF:79:C5:33:53:97:0B:E9:6F:BA:79:96:CE:7F:2E:3A:FF Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 04F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 04D8 Signing time: Wed 29 Jul 2026 00:30:52 +0000 Manifest this update: Wed 29 Jul 2026 00:30:52 +0000 Manifest next update: Wed 05 Aug 2026 00:30:52 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: VSmaptNkmEWof6D77EpNw4FQMk+Ep20q3CH5BOnJCxc=) 2: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=) 3: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw=) 4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: mocm69lqZdjVVtWbDT8lrUYvlh6Uzdf4NnBQ902rsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1270 (0x4f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Jul 29 00:30:52 2026 GMT Not After : Aug 5 00:30:52 2026 GMT Subject: CN=6a6949bc-9eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:06:7c:17:52:22:e7:11:a3:27:df:13:21: b4:e1:e7:ac:d3:9a:da:b6:46:de:55:d8:89:83:85: d1:63:5b:36:4a:1a:47:bb:34:04:eb:75:e6:e6:ce: d1:42:23:75:92:49:2a:2e:81:ad:37:90:01:bd:9b: 8a:58:ed:56:3b:63:db:70:07:ac:e9:82:5a:2e:ff: e1:b0:2e:e1:43:c1:b1:e1:de:12:49:e8:dd:af:0b: 0d:0b:ad:96:bf:7a:84:38:c0:35:5d:f9:29:a7:4a: a7:28:4a:6c:f6:f8:85:b1:4b:9c:70:f5:e8:f1:2b: 68:8f:0e:82:e7:1a:c1:9a:aa:63:2b:66:0c:14:f4: 3d:67:8f:5e:ed:33:92:cf:16:92:1d:73:e3:32:64: 0b:a3:12:29:bf:7b:a8:36:22:aa:94:ae:99:25:af: 03:5f:82:8c:8a:ad:aa:e2:f7:61:f0:f0:3e:e0:e0: b1:f1:8a:de:b7:f9:8a:53:c0:e9:bd:21:53:80:53: 8c:1f:9c:f3:37:44:cd:c1:7d:d9:38:b1:c3:91:fc: f6:ae:a4:c5:4a:2c:0f:ef:a5:04:b5:22:fd:8d:e7: d9:79:73:bf:36:93:a2:0c:04:09:80:e6:15:10:06: f8:42:79:a5:52:0a:f2:f4:84:56:72:21:e4:77:28: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:70:99:AF:79:C5:33:53:97:0B:E9:6F:BA:79:96:CE:7F:2E:3A:FF X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:80:d0:ec:e6:d3:5a:3c:5c:25:d9:a3:c6:68:f3:2c:d4:04: 9b:3e:03:73:37:c5:a8:74:ff:3a:e5:07:0a:90:a2:bc:71:ae: d5:0a:ee:a3:20:c7:26:1b:87:fa:55:8a:96:6d:31:83:3c:7e: f7:79:ed:a4:ed:4c:64:f9:d7:65:ba:54:57:4f:9f:c2:cb:66: 74:6c:6b:ba:45:31:8d:3e:a0:b0:fc:f0:be:ec:e3:8f:65:69: f1:c5:ac:73:20:4c:54:81:73:25:b0:88:ce:04:dc:f2:19:5b: fe:cb:f4:30:cb:61:f7:94:a4:3e:93:ba:de:f7:9c:fb:4f:81: 11:10:4b:c5:94:c2:0e:94:49:d1:12:15:eb:ad:df:7e:0e:13: 02:9a:f4:6c:d6:0d:06:14:2f:3d:58:4c:62:8b:bf:98:e7:68: af:86:c2:1e:b2:fe:22:a7:8a:b5:95:ca:cc:79:ef:49:c5:fb: 8d:1d:2d:e7:cc:08:24:7f:22:77:f6:16:dd:49:18:b8:f3:af: cd:61:53:d4:7b:7c:4e:27:ad:1e:75:5c:a9:64:4e:3c:fc:11: 8a:1d:c9:97:b5:80:7f:85:ce:d9:58:e1:0a:4c:0c:18:a2:4b: 01:11:2b:59:1c:fb:8c:a8:19:ed:f5:97:c6:07:d8:43:5e:fd: c9:f1:ee:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjYwNzI5MDAzMDUyWhcNMjYwODA1MDAzMDUyWjAYMRYwFAYD VQQDEw02YTY5NDliYy05ZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpgGfBdSIucRoyffEyG04ees05ratkbeVdiJg4XRY1s2ShpHuzQE63Xm5s7R QiN1kkkqLoGtN5ABvZuKWO1WO2PbcAes6YJaLv/hsC7hQ8Gx4d4SSejdrwsNC62W v3qEOMA1Xfkpp0qnKEps9viFsUuccPXo8Stojw6C5xrBmqpjK2YMFPQ9Z49e7TOS zxaSHXPjMmQLoxIpv3uoNiKqlK6ZJa8DX4KMiq2q4vdh8PA+4OCx8Yret/mKU8Dp vSFTgFOMH5zzN0TNwX3ZOLHDkfz2rqTFSiwP76UEtSL9jefZeXO/NpOiDAQJgOYV EAb4QnmlUgry9IRWciHkdyhABwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1wma95 xTNTlwvpb7p5ls5/Ljr/MB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADIDQ7ObTWjxcJdmjxmjzLNQEmz4DczfFqHT/OuUHCpCivHGu1QruoyDHJhuH +lWKlm0xgzx+93ntpO1MZPnXZbpUV0+fwstmdGxrukUxjT6gsPzwvuzjj2Vp8cWs cyBMVIFzJbCIzgTc8hlb/sv0MMth95SkPpO63vec+0+BERBLxZTCDpRJ0RIV663f fg4TApr0bNYNBhQvPVhMYou/mOdor4bCHrL+IqeKtZXKzHnvScX7jR0t58wIJH8i d/YW3UkYuPOvzWFT1Ht8TietHnVcqWROPPwRih3Jl7WAf4XO2VjhCkwMGKJLAREr WRz7jKgZ7fWXxgfYQ179yfHuXw== -----END CERTIFICATE-----Generated at Wed Jul 29 10:35:51 2026 by rpki-client