$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft File: pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json) Hash identifier: eciuNoWAtbNgzEGVTcVyI9ZOtQvhVwsv6+ii6HuIsc8= Subject key identifier: 28:59:78:EB:A2:08:41:18:29:3D:31:58:F9:5D:40:D9:8E:E9:5E:07 Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft Manifest number: 356E Signing time: Tue 28 Jul 2026 15:16:28 +0000 Manifest this update: Tue 28 Jul 2026 15:16:27 +0000 Manifest next update: Tue 04 Aug 2026 15:16:27 +0000 Files and hashes: 1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: +xWdpXsmSnnr50Hr3WWTm8QbSvxnx7ENPOevYscwy5k=) 2: ADC4AF7A794C11F183C8766D79A30FBC.roa (hash: REZG1hbCbWcLjdEWLIy80wtl+wdmwwM8/vxZUIlggVI=) 3: 1A1E4A7A6A6911F18287CF148C47A888.roa (hash: PFvhmpVV6scs/whQYid+4y3ffoZY6BXEcRXZF/STKOc=) 4: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=) 5: 9B0A4EBC876111F19DB69EE44411F970.roa (hash: /qg+TWr9wIm15M5IenURO4Ua7PIPI2C6O35Eo/+09R0=) 6: 18DC10026A6911F18287CF148C47A888.roa (hash: f5urIEiMMn7bTJnK6EndkOMWrKDIiWeFnU13yuaM8BM=) 7: 1998442A6A6911F18287CF148C47A888.roa (hash: M/p8XcwCACjksBG0lPH9EKkwR4b9TAusIscrzIwTeTY=) 8: 81CE23A6794C11F1BC374DFC78A30FBC.roa (hash: hd0r2prWlA4+0LF9b/xFRJOUyttYhz792UHJpUj+rF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Validity Not Before: Jul 28 15:16:27 2026 GMT Not After : Aug 4 15:16:27 2026 GMT Subject: CN=6a68c7cc-643f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:0c:df:16:4d:6b:f4:f5:49:20:9e:49:12: c6:48:40:f4:61:46:bf:cd:65:9e:e8:a7:89:d9:3d: 53:3f:3d:ed:41:6c:b7:c5:ff:0d:a8:dd:63:5d:b6: 08:99:30:0e:8e:c8:67:ba:7d:26:73:ab:17:26:3e: ab:c3:d8:a0:74:cf:d4:a4:68:7c:0c:6e:ef:81:1d: 20:62:db:f2:04:15:5c:07:8e:3b:53:c2:17:7c:59: ce:69:a2:92:bb:a9:18:35:05:00:87:de:80:f7:b7: 5c:20:9a:86:df:bb:be:bc:57:b0:4a:20:2d:e4:be: 43:50:ee:48:ce:22:44:38:90:d5:f5:35:1b:96:dc: 96:39:c6:6b:11:98:39:39:b3:dc:37:72:95:58:8b: 35:0b:d9:c7:04:92:4f:ff:48:8f:e1:4a:77:b0:0e: 8b:9e:fc:8a:f5:47:db:d6:4b:7e:04:54:b2:59:ea: ee:a4:02:a7:b1:97:15:2e:17:90:b1:51:47:16:e1: ee:f4:fb:bf:a9:4a:f9:73:00:94:a5:a4:e9:61:6a: be:bc:96:75:b2:74:9c:cb:f1:f8:e9:67:c1:fc:2f: f8:8e:21:05:30:42:d7:26:a9:5b:cb:67:b4:8c:11: dc:b8:0e:de:e0:3e:3a:c0:a0:15:aa:fd:b6:df:1d: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:59:78:EB:A2:08:41:18:29:3D:31:58:F9:5D:40:D9:8E:E9:5E:07 X509v3 Authority Key Identifier: keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bb:06:aa:f8:ea:64:51:90:6f:f5:77:09:0c:5c:2b:7f:53: 3c:4b:4e:87:00:94:4c:31:07:2a:cb:7e:5b:dd:f1:b9:a8:61: 2c:c1:09:66:f0:d0:d3:e7:db:ae:a5:53:51:fd:18:33:88:b5: 3a:bd:dc:7d:c6:33:98:1d:2c:21:8e:12:fb:20:0b:22:9c:ba: 8d:1a:5b:1f:62:c5:58:14:e6:b2:cd:34:aa:47:9d:41:08:9f: b8:32:0d:f2:4c:94:3a:ec:4a:68:75:9d:8c:99:72:f6:7f:5f: bd:b9:e9:46:c7:ec:6f:46:12:ed:05:7a:ba:e1:09:34:3b:d2: a0:24:dc:35:39:cd:57:2b:dc:61:c8:f0:e3:4c:30:35:e2:72: 0d:81:da:c3:1a:c3:a7:05:28:e8:81:37:4a:0f:db:bf:a2:64: 98:5d:4f:46:b6:b1:15:8a:ab:3a:ba:48:e3:98:b2:92:80:bb: 75:71:2f:ff:68:6b:d4:36:d7:6e:18:7e:e8:b0:11:f7:26:15: 55:be:ac:03:ad:cd:9e:b3:65:bb:ff:ab:4f:2e:53:78:19:ad: 1f:67:34:8c:d7:1d:a7:fa:30:0d:c1:3c:39:bc:97:81:77:f4: f5:0f:db:1a:eb:34:68:91:f4:22:a7:db:d9:47:cc:6e:b1:ed: 55:4e:a8:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NTMxMTAvBgNVBAUTKEE2NkREMDEwREEyNERGOEFFMTcwNkJEOTA4Q0JBNDNC RDEzODk2MzEwHhcNMjYwNzI4MTUxNjI3WhcNMjYwODA0MTUxNjI3WjAYMRYwFAYD VQQDEw02YTY4YzdjYy02NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7wM3xZNa/T1SSCeSRLGSED0YUa/zWWe6KeJ2T1TPz3tQWy3xf8NqN1jXbYI mTAOjshnun0mc6sXJj6rw9igdM/UpGh8DG7vgR0gYtvyBBVcB447U8IXfFnOaaKS u6kYNQUAh96A97dcIJqG37u+vFewSiAt5L5DUO5IziJEOJDV9TUbltyWOcZrEZg5 ObPcN3KVWIs1C9nHBJJP/0iP4Up3sA6LnvyK9Ufb1kt+BFSyWerupAKnsZcVLheQ sVFHFuHu9Pu/qUr5cwCUpaTpYWq+vJZ1snScy/H46WfB/C/4jiEFMELXJqlby2e0 jBHcuA7e4D46wKAVqv223x1DVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChZeOui CEEYKT0xWPldQNmO6V4HMB8GA1UdIwQYMBaAFKZt0BDaJN+K4XBr2QjLpDvROJYx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc1My84MDUxNDU5MDFE QTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0cmhjR3ZaQ011a085RTRs akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BtM1FFTm9rMzRyaGNHdlpDTXVrTzlFNGxqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc1My84MDUxNDU5MDFEQTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0 cmhjR3ZaQ011a085RTRsakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM7sGqvjqZFGQb/V3CQxcK39TPEtOhwCUTDEHKst+W93xuahhLMEJZvDQ0+fb rqVTUf0YM4i1Or3cfcYzmB0sIY4S+yALIpy6jRpbH2LFWBTmss00qkedQQifuDIN 8kyUOuxKaHWdjJly9n9fvbnpRsfsb0YS7QV6uuEJNDvSoCTcNTnNVyvcYcjw40ww NeJyDYHawxrDpwUo6IE3Sg/bv6JkmF1PRraxFYqrOrpI45iykoC7dXEv/2hr1DbX bhh+6LAR9yYVVb6sA63NnrNlu/+rTy5TeBmtH2c0jNcdp/owDcE8ObyXgXf09Q/b Gus0aJH0Iqfb2UfMbrHtVU6oEQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:27:55 2026 by rpki-client