$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: 9gEWK/wSA0Xog2SxzBHT0KOBquI9gmspZPpQeGdR51c= Subject key identifier: 14:E7:8E:C7:46:F5:40:18:00:9B:B9:09:24:28:F0:05:F0:E8:13:E3 Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 0884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2E2A Signing time: Tue 28 Jul 2026 16:48:59 +0000 Manifest this update: Tue 28 Jul 2026 16:48:59 +0000 Manifest next update: Tue 04 Aug 2026 16:48:59 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: S5+sedD1HBlUbfnmnZSrHdE30FDnoT3Bueq8WdEe4HM=) 2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=) 3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Jul 28 16:48:59 2026 GMT Not After : Aug 4 16:48:59 2026 GMT Subject: CN=6a68dd7b-684d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:0b:ef:7a:c1:7f:b8:df:a2:fa:95:30:13: 69:5d:a6:c7:ec:14:35:fa:60:09:4d:62:ca:dc:ae: e2:c7:b9:63:a6:49:d0:45:31:9b:bc:99:23:cd:df: 85:8c:1b:12:8b:c1:23:d4:b3:88:38:02:20:46:b3: fc:41:12:ca:0c:b2:cc:7e:58:f3:66:89:1f:60:34: 6f:7a:66:fa:ad:49:c0:6a:fb:7a:cf:c8:4d:7d:18: 7f:4d:32:c5:c0:27:18:1b:b5:e1:37:04:f2:eb:89: e7:38:e1:97:d0:05:00:0b:ea:4f:0b:6c:fc:cb:86: cb:7e:c7:6b:27:b7:08:8e:af:c8:0f:1b:1a:4e:13: 25:76:ba:b1:a5:53:d0:3c:7a:84:75:e4:66:38:0d: 77:8a:d2:ef:fc:f4:7f:4b:41:7e:07:c3:00:35:b3: 53:c4:77:3b:3c:4d:c2:08:8a:8b:48:f8:39:85:74: 9a:4b:93:31:aa:ee:e5:5a:b9:17:c5:76:05:ac:04: 78:9e:23:5c:55:6e:26:7d:89:5e:cb:a0:b8:3f:94: 29:be:73:04:05:81:c0:ea:7a:82:fc:dc:cd:b3:e7: 89:b0:dc:29:4e:68:9c:24:fe:ee:d5:12:64:d7:5d: 78:bd:fe:6d:3c:e0:3d:66:4b:50:05:d4:4a:8a:73: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E7:8E:C7:46:F5:40:18:00:9B:B9:09:24:28:F0:05:F0:E8:13:E3 X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:e9:96:2d:c4:1a:9c:17:bf:7b:8f:09:ce:3f:6a:b9:2c:60: 6e:5f:b7:a6:4b:45:1f:0e:4b:71:fe:1b:3b:d6:d1:58:d6:41: 60:b0:53:8b:c8:0c:95:7b:a1:7a:e1:d5:66:5e:8c:0f:cb:65: cf:c2:26:78:80:d2:30:6a:3e:70:c0:c4:b7:52:d9:81:ea:1b: 61:0b:ea:e8:82:e4:a9:23:79:8c:8e:da:6d:cb:aa:01:18:19: 15:68:6a:7e:c9:aa:0c:99:19:3e:71:05:a2:15:81:56:e3:81: 64:67:2c:5c:b3:a6:80:05:da:4d:4f:65:13:31:7a:13:bd:36: 75:e5:98:8d:5c:3a:d8:29:49:ae:c6:62:5e:1d:30:f6:ed:b1: 78:9a:3b:ce:06:7c:dc:8b:2b:15:a9:78:3a:d5:1f:dc:3b:c8: ce:9b:26:d3:ba:e8:43:ff:8f:89:fe:29:eb:d7:5a:28:30:2a: 8a:f5:18:ac:46:93:b2:3b:fc:d0:b1:e5:bd:07:6e:3c:a6:f5: 20:e6:70:e3:4e:f0:b9:f1:a0:e9:44:a4:13:af:3a:bd:e8:4b: ed:04:02:42:60:85:bb:1c:c2:5c:82:d2:3b:cb:02:58:7d:24: 9b:67:b4:d7:ee:a5:4f:cd:3c:b5:9e:75:eb:50:38:00:74:7a: 9c:59:91:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjYwNzI4MTY0ODU5WhcNMjYwODA0MTY0ODU5WjAYMRYwFAYD VQQDEw02YTY4ZGQ3Yi02ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOIL73rBf7jfovqVMBNpXabH7BQ1+mAJTWLK3K7ix7ljpknQRTGbvJkjzd+F jBsSi8Ej1LOIOAIgRrP8QRLKDLLMfljzZokfYDRvemb6rUnAavt6z8hNfRh/TTLF wCcYG7XhNwTy64nnOOGX0AUAC+pPC2z8y4bLfsdrJ7cIjq/IDxsaThMldrqxpVPQ PHqEdeRmOA13itLv/PR/S0F+B8MANbNTxHc7PE3CCIqLSPg5hXSaS5Mxqu7lWrkX xXYFrAR4niNcVW4mfYley6C4P5QpvnMEBYHA6nqC/NzNs+eJsNwpTmicJP7u1RJk 1114vf5tPOA9ZktQBdRKinN0iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTnjsdG 9UAYAJu5CSQo8AXw6BPjMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKemWLcQanBe/e48Jzj9quSxgbl+3pktFHw5Lcf4bO9bRWNZBYLBTi8gMlXuh euHVZl6MD8tlz8ImeIDSMGo+cMDEt1LZgeobYQvq6ILkqSN5jI7abcuqARgZFWhq fsmqDJkZPnEFohWBVuOBZGcsXLOmgAXaTU9lEzF6E702deWYjVw62ClJrsZiXh0w 9u2xeJo7zgZ83IsrFal4OtUf3DvIzpsm07roQ/+Pif4p69daKDAqivUYrEaTsjv8 0LHlvQduPKb1IOZw407wufGg6USkE686vehL7QQCQmCFuxzCXILSO8sCWH0km2e0 1+6lT808tZ5161A4AHR6nFmRFA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:01:29 2026 by rpki-client