$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: rJpSwTdbLQ2I9t1QIDO/Ob/FL951I3pQ9FnXOisJtN4= Subject key identifier: 5A:28:63:E9:C4:94:00:FE:C8:CE:EE:A7:42:FB:F3:DF:E0:47:20:11 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0D7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0D43 Signing time: Tue 28 Jul 2026 18:27:18 +0000 Manifest this update: Tue 28 Jul 2026 18:27:17 +0000 Manifest next update: Tue 04 Aug 2026 18:27:17 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: aGEbTLxFEoqEEl5vZQCnjlsdk8uTST5gTyhF1nYE1Lg=) 2: 2DDAE1EE81D511F1AEFB89D96BA30FBC.roa (hash: aOcCIKwJEDtblzo1vvfFm3gzIMaKBHMiRAFEgVPjm1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: Jul 28 18:27:17 2026 GMT Not After : Aug 4 18:27:17 2026 GMT Subject: CN=6a68f485-8630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:95:0b:81:a1:58:bb:04:ba:6e:50:17:88:b9: c3:53:1e:f6:43:ad:c5:69:ca:17:8a:5a:fc:61:79: 1f:24:97:1d:57:48:d4:c3:4c:c5:24:af:49:d5:58: 41:ab:e6:93:15:ea:c3:33:ab:b2:c3:96:d9:a9:77: a6:79:5f:fa:ff:77:21:da:bf:96:e1:4e:f5:97:60: 85:58:c7:da:3c:76:ba:8a:d6:7d:48:c2:3f:55:79: ba:ee:f2:53:09:f9:32:8c:41:cd:55:4c:21:2b:e8: a5:d6:b5:03:76:af:75:78:23:e3:86:13:e7:25:71: 22:93:a0:1d:a0:14:25:2a:63:19:97:39:ff:c4:fe: d8:95:66:fa:c8:18:06:4a:5f:16:31:96:86:e9:72: 06:16:0a:08:45:d9:0f:79:63:0b:06:ef:3b:5f:45: ad:48:b8:75:c0:98:48:15:58:7b:e6:bf:05:61:53: 9e:43:fc:68:c7:28:50:e3:1b:28:6d:0b:0a:e5:86: 89:6d:e3:8d:9e:7c:b7:07:d9:66:bb:a2:77:12:5e: c1:03:6f:46:f7:e1:d4:30:34:7c:04:bd:a6:00:8b: e2:6d:d3:9b:d5:c3:08:73:9a:5e:00:29:2a:b5:58: e1:98:53:be:1c:4f:24:19:42:5f:2f:05:fe:35:17: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:28:63:E9:C4:94:00:FE:C8:CE:EE:A7:42:FB:F3:DF:E0:47:20:11 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:04:aa:b5:8d:00:bc:72:22:85:0f:32:35:0f:cc:44:03:3a: 7f:65:27:9f:a7:7c:83:b2:4d:80:87:b6:f8:78:60:82:8e:e3: e6:08:23:26:dd:a6:6d:88:c7:e2:91:0e:8e:fa:39:28:b4:c6: b9:46:50:de:5d:db:fe:c8:27:ea:37:3f:c4:f9:38:33:7c:56: 5e:f0:ae:4d:1e:ec:24:6f:b4:46:b3:26:bd:e5:d6:e7:e5:1d: d9:4d:fc:67:97:82:1a:bf:2c:2a:45:32:63:9d:4d:12:a1:e6: ef:80:e8:b6:d2:19:c5:29:a0:bc:a1:8b:5e:d2:00:59:0e:71: 32:1d:d9:bf:62:7d:79:36:59:89:39:6c:f3:95:e4:66:14:b9: 20:1e:c9:60:a1:8d:90:77:25:76:7b:f0:c8:71:09:38:4d:e7: d7:a3:d2:98:c7:60:bd:1d:6a:f7:57:a5:ef:5b:e2:46:61:14: 7f:d8:bb:2e:06:71:bb:98:bd:69:9a:bf:9e:a3:f1:98:e4:59: 30:23:d7:06:5e:b0:91:b1:6c:67:a9:5d:bb:c6:2f:38:e6:31: f6:e8:2d:dd:a2:a2:87:87:01:a2:16:56:e2:7d:c8:68:e2:85: d3:7c:e7:b3:39:5f:d1:58:64:30:a6:c8:a1:ee:21:f6:64:05: ee:0c:b4:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjYwNzI4MTgyNzE3WhcNMjYwODA0MTgyNzE3WjAYMRYwFAYD VQQDEw02YTY4ZjQ4NS04NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJULgaFYuwS6blAXiLnDUx72Q63FacoXilr8YXkfJJcdV0jUw0zFJK9J1VhB q+aTFerDM6uyw5bZqXemeV/6/3ch2r+W4U71l2CFWMfaPHa6itZ9SMI/VXm67vJT CfkyjEHNVUwhK+il1rUDdq91eCPjhhPnJXEik6AdoBQlKmMZlzn/xP7YlWb6yBgG Sl8WMZaG6XIGFgoIRdkPeWMLBu87X0WtSLh1wJhIFVh75r8FYVOeQ/xoxyhQ4xso bQsK5YaJbeONnny3B9lmu6J3El7BA29G9+HUMDR8BL2mAIvibdOb1cMIc5peACkq tVjhmFO+HE8kGUJfLwX+NRdx1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFooY+nE lAD+yM7up0L789/gRyARMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAngSqtY0AvHIihQ8yNQ/MRAM6f2Unn6d8g7JNgIe2+Hhggo7j5ggjJt2mbYjH 4pEOjvo5KLTGuUZQ3l3b/sgn6jc/xPk4M3xWXvCuTR7sJG+0RrMmveXW5+Ud2U38 Z5eCGr8sKkUyY51NEqHm74DottIZxSmgvKGLXtIAWQ5xMh3Zv2J9eTZZiTls85Xk ZhS5IB7JYKGNkHcldnvwyHEJOE3n16PSmMdgvR1q91el71viRmEUf9i7LgZxu5i9 aZq/nqPxmORZMCPXBl6wkbFsZ6ldu8YvOOYx9ugt3aKih4cBohZW4n3IaOKF03zn szlf0VhkMKbIoe4h9mQF7gy0Nw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:48:15 2026 by rpki-client