$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: OuuWXgABOF1EKZGuExvlDuq4/69/Q/lHGjbF4Qbc7qA= Subject key identifier: 0E:F0:1F:79:EB:4D:F5:AE:17:B6:54:50:A9:D1:CA:25:2E:44:FC:0D Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0CF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0CEE Signing time: Tue 28 Jul 2026 18:34:11 +0000 Manifest this update: Tue 28 Jul 2026 18:34:11 +0000 Manifest next update: Tue 04 Aug 2026 18:34:11 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: bZjapXTNxBZgP2J6aAAvGYKN4tEnL+sOL9HYrZgAJNI=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: STCKrvlRsuBwgCCitF/41y1bZsQULp/xbRwSRQTsp2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3320 (0xcf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Jul 28 18:34:11 2026 GMT Not After : Aug 4 18:34:11 2026 GMT Subject: CN=6a68f623-f02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:4b:ed:b7:b1:20:b3:8b:44:ad:b8:1b:fe: fb:73:09:3e:7f:61:24:7a:54:52:e3:ca:f8:16:f8: 1c:7e:db:5e:1c:a5:bf:0e:12:2e:89:b5:5f:b8:0f: e9:e5:a7:fc:6c:87:1c:a9:06:88:49:3f:63:7f:92: d1:ae:31:b0:47:39:98:cd:3f:e5:f6:52:b6:d2:07: 67:71:71:de:af:58:6f:7a:2d:c8:e9:79:cf:83:67: c7:de:a2:f2:16:bf:fa:54:db:d5:cc:3b:52:f1:09: c0:17:30:c3:9e:f5:b0:ab:62:71:71:c3:d7:86:af: 4c:5f:b7:94:46:e7:be:fb:5c:44:5c:18:2b:f0:8d: 7d:9d:e0:80:52:12:07:9e:8d:fc:37:7f:d7:2f:46: dd:d4:3b:ae:a9:7c:bd:18:66:38:a4:71:26:b6:fa: 21:80:7b:22:77:79:c0:22:36:00:96:56:af:2f:c0: a4:dd:5b:e8:0b:dd:d0:48:f5:eb:71:76:aa:23:11: 04:cd:7e:a6:93:8c:11:df:55:0d:e2:36:52:fa:38: 3b:4a:2a:2b:e9:79:4f:2a:66:b9:23:2d:80:b9:d0: ff:00:9f:4f:61:da:e1:e4:cd:40:ed:82:71:5b:e0: fe:92:e2:b8:95:6f:87:79:50:40:fb:77:c1:cd:1c: 67:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F0:1F:79:EB:4D:F5:AE:17:B6:54:50:A9:D1:CA:25:2E:44:FC:0D X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f1:38:63:45:d3:ee:53:a9:1c:0c:ab:93:0d:72:88:40:36: e7:ba:e7:06:bc:4c:10:69:69:73:a3:4e:be:bb:e2:d6:56:4e: 9c:c0:ef:e4:c3:32:48:4d:54:42:3b:40:1e:d9:5f:0d:50:23: d5:74:eb:c3:a2:db:30:8e:37:ee:dc:00:24:c1:7c:0f:c4:86: 17:af:a5:c7:2b:fb:60:ad:71:c8:e6:58:d6:39:a8:ca:63:29: a7:00:0c:9b:4e:06:33:9e:ef:9c:f9:0f:4a:34:d5:9c:10:ba: 50:21:a2:6e:f0:c7:90:60:16:dd:5f:60:e8:01:82:21:d0:5e: 88:b2:17:00:27:7a:8d:c3:98:07:bb:fe:30:84:4f:72:33:dd: ff:42:4f:f4:b6:d6:31:74:21:ef:87:01:4a:ac:03:27:9f:8a: 4c:89:72:94:45:f4:03:ed:9d:bd:6c:83:ae:f9:02:3e:15:0b: 22:00:67:4d:58:86:31:fd:f2:d4:56:5e:c4:f7:7c:33:4a:4a: 40:28:b7:de:c8:11:2a:37:28:97:68:f6:06:2d:92:c6:c0:98: 23:94:5a:e6:ee:13:70:6e:b4:a1:47:20:6a:1a:d5:9d:b4:e3: d1:8c:14:aa:46:f5:15:3e:ed:a1:67:af:b8:62:20:d4:4c:32: b2:8f:fd:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjYwNzI4MTgzNDExWhcNMjYwODA0MTgzNDExWjAYMRYwFAYD VQQDEw02YTY4ZjYyMy1mMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj/RL7bexILOLRK24G/77cwk+f2EkelRS48r4FvgcftteHKW/DhIuibVfuA/p 5af8bIccqQaIST9jf5LRrjGwRzmYzT/l9lK20gdncXHer1hvei3I6XnPg2fH3qLy Fr/6VNvVzDtS8QnAFzDDnvWwq2JxccPXhq9MX7eURue++1xEXBgr8I19neCAUhIH no38N3/XL0bd1DuuqXy9GGY4pHEmtvohgHsid3nAIjYAllavL8Ck3VvoC93QSPXr cXaqIxEEzX6mk4wR31UN4jZS+jg7Sior6XlPKma5Iy2AudD/AJ9PYdrh5M1A7YJx W+D+kuK4lW+HeVBA+3fBzRxnbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA7wH3nr TfWuF7ZUUKnRyiUuRPwNMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWPE4Y0XT7lOpHAyrkw1yiEA257rnBrxMEGlpc6NOvrvi1lZOnMDv5MMySE1U QjtAHtlfDVAj1XTrw6LbMI437twAJMF8D8SGF6+lxyv7YK1xyOZY1jmoymMppwAM m04GM57vnPkPSjTVnBC6UCGibvDHkGAW3V9g6AGCIdBeiLIXACd6jcOYB7v+MIRP cjPd/0JP9LbWMXQh74cBSqwDJ5+KTIlylEX0A+2dvWyDrvkCPhULIgBnTViGMf3y 1FZexPd8M0pKQCi33sgRKjcol2j2Bi2SxsCYI5Ra5u4TcG60oUcgahrVnbTj0YwU qkb1FT7toWevuGIg1Ewyso/9ew== -----END CERTIFICATE-----Generated at Wed Jul 29 09:59:17 2026 by rpki-client