$ rpki-client -vvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft File: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json) Hash identifier: UtXmB4gyvA4kpMtBujNFud+MLWFBdUsRF93sARvjWVg= Subject key identifier: 77:C4:5A:AC:17:95:FC:02:02:51:E4:FB:18:FA:FC:86:A1:EE:98:97 Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 Certificate issuer: /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft Manifest number: D2 Signing time: Mon 27 Jul 2026 08:52:37 +0000 Manifest this update: Mon 27 Jul 2026 08:52:37 +0000 Manifest next update: Mon 03 Aug 2026 08:52:37 +0000 Files and hashes: 1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: 6fOpI9y74F0xZN0Q7wUsa8inRGc9eSbKcTkad6vw94U=) 2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: 33GM4Ev+qxmSxYN6+COOoVbBWpx3q5s4t5+8sg62BMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2 Validity Not Before: Jul 27 08:52:37 2026 GMT Not After : Aug 3 08:52:37 2026 GMT Subject: CN=6a671c55-0846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:46:44:82:4d:85:a0:ed:06:f2:c2:0e:1c: eb:dd:c1:11:f9:59:ea:fc:db:90:74:4b:16:be:1d: 3c:3d:ae:fc:ab:c5:1b:01:98:a6:c8:7d:22:3e:9d: 97:0f:a0:ef:c0:62:5a:a5:27:c3:0b:aa:40:de:49: 3d:96:be:6f:6f:36:69:82:8a:37:97:83:ab:ed:c0: 1c:ed:eb:2e:e2:1a:9a:aa:37:93:c1:bf:fd:5e:48: d2:5c:62:4d:11:38:35:f8:ea:df:0b:a6:72:c2:73: 3d:f0:91:e8:f3:16:53:9b:4a:bd:ea:04:65:af:b4: 73:b9:b6:6c:77:cc:e6:b1:9c:55:b1:96:a5:b4:5a: 8c:52:4f:94:3d:bc:4a:08:98:59:87:8f:76:a2:f7: 5a:62:ee:14:d5:5e:c5:d1:3e:83:c7:0d:71:a0:45: f9:a1:52:bb:4e:5a:64:65:41:81:08:77:57:e8:26: 37:3e:79:31:34:79:3b:99:ba:16:14:9f:e8:d8:7a: bd:35:d1:7e:55:39:84:5d:5b:a0:54:95:80:de:a5: c9:12:80:5e:0e:a7:62:5a:f9:51:14:a1:96:e7:9c: 4b:e3:79:b0:e0:57:aa:ac:aa:23:f8:7e:04:97:8d: d0:4d:bd:b2:50:7a:a7:82:5e:e7:d2:58:1e:46:1f: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:C4:5A:AC:17:95:FC:02:02:51:E4:FB:18:FA:FC:86:A1:EE:98:97 X509v3 Authority Key Identifier: keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bc:70:ed:db:76:f1:6f:9f:be:77:f9:a4:e5:40:a2:d0:b5: 00:5e:71:05:ea:a3:b6:9a:89:78:27:ee:02:8e:9a:ee:36:66: 08:f0:07:48:a8:a7:7d:07:01:b3:56:d2:e0:33:f0:ff:b6:7a: 8b:4f:19:7e:ca:8c:54:5f:56:63:07:2c:66:05:f3:85:6f:d1: c4:9b:00:4e:9a:1a:2c:44:39:77:16:77:d3:6b:c7:cd:11:73: 77:8c:34:61:c8:fd:49:0a:c6:01:9f:e9:70:f5:57:73:53:c6: 00:4b:f9:d7:7b:f9:7d:4d:79:60:68:70:d0:41:80:40:b6:bf: f5:57:50:e4:33:00:f1:15:2a:5f:6d:81:75:80:1c:00:67:b4: 1a:7f:33:45:be:a9:51:c8:79:7e:a2:bb:b7:2d:37:c8:a2:93: 62:fd:eb:3a:06:44:63:62:eb:71:04:dd:76:3d:7e:7f:da:54: b7:01:75:86:98:ed:b7:a1:8e:99:23:f0:35:9c:50:4e:e1:ba: 36:29:39:a5:27:45:6e:a8:82:de:4d:64:49:8a:44:f7:18:9c: d3:77:9d:ec:51:ce:81:7e:00:16:c0:cc:5b:18:b3:d6:d7:b6: cb:61:a6:79:e5:d6:25:13:99:79:95:3d:8d:39:ee:73:ed:37: 72:d0:d9:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE1NkQxMTAvBgNVBAUTKDQ5REREMUU0QzVBOUZDNzY2NjI2RDJGQTNCNjYzN0RB ODBFQTJGRDIwHhcNMjYwNzI3MDg1MjM3WhcNMjYwODAzMDg1MjM3WjAYMRYwFAYD VQQDEw02YTY3MWM1NS0wODQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodhGRIJNhaDtBvLCDhzr3cER+Vnq/NuQdEsWvh08Pa78q8UbAZimyH0iPp2X D6DvwGJapSfDC6pA3kk9lr5vbzZpgoo3l4Or7cAc7esu4hqaqjeTwb/9XkjSXGJN ETg1+OrfC6ZywnM98JHo8xZTm0q96gRlr7RzubZsd8zmsZxVsZaltFqMUk+UPbxK CJhZh492ovdaYu4U1V7F0T6Dxw1xoEX5oVK7TlpkZUGBCHdX6CY3PnkxNHk7mboW FJ/o2Hq9NdF+VTmEXVugVJWA3qXJEoBeDqdiWvlRFKGW55xL43mw4FeqrKoj+H4E l43QTb2yUHqngl7n0lgeRh+FdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfEWqwX lfwCAlHk+xj6/Iah7piXMB8GA1UdIwQYMBaAFEnd0eTFqfx2ZibS+jtmN9qA6i/S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTU2RC83Q0QzREVBQzRF ODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9IWm1KdEw2TzJZMzJvRHFM OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NkM1I1TVdwX0habUp0TDZPMlkzMm9EcUw5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTU2RC83Q0QzREVBQzRFODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9I Wm1KdEw2TzJZMzJvRHFMOUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsrxw7dt28W+fvnf5pOVAotC1AF5xBeqjtpqJeCfuAo6a7jZmCPAHSKinfQcB s1bS4DPw/7Z6i08ZfsqMVF9WYwcsZgXzhW/RxJsATpoaLEQ5dxZ302vHzRFzd4w0 Ycj9SQrGAZ/pcPVXc1PGAEv513v5fU15YGhw0EGAQLa/9VdQ5DMA8RUqX22BdYAc AGe0Gn8zRb6pUch5fqK7ty03yKKTYv3rOgZEY2LrcQTddj1+f9pUtwF1hpjtt6GO mSPwNZxQTuG6Nik5pSdFbqiC3k1kSYpE9xic03ed7FHOgX4AFsDMWxiz1te2y2Gm eeXWJROZeZU9jTnuc+03ctDZ+Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:05:19 2026 by rpki-client