$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: CadrE1REGVKWP2tHH0qF1ZWDdHa1XkQarwXTdO8z//M= Subject key identifier: 6D:25:9D:B9:38:DD:F2:D7:40:3D:67:68:7F:FF:4F:51:50:2F:49:9B Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 0153 Signing time: Mon 27 Jul 2026 07:10:28 +0000 Manifest this update: Mon 27 Jul 2026 07:10:27 +0000 Manifest next update: Mon 03 Aug 2026 07:10:27 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: Vc4lD6WIBXQ0q9Hl2dWurcpyVWp2VPk3MByGbPw6cRA=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: 3kIF68zO8V/KZKS8dRul3MgYSoRJ3VG5qDumT+v5J+w=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: QMr7SSp5xbajHiCRuT5qA5lZIJuO6WaXl9EYEvA91Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Jul 27 07:10:27 2026 GMT Not After : Aug 3 07:10:27 2026 GMT Subject: CN=6a670464-ab3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:24:55:9e:f5:f9:2a:f0:6d:4d:df:14:a1: 1d:a6:c5:bc:d7:9d:21:63:50:7b:34:91:a0:e4:7c: b2:50:78:ff:43:7a:fc:1b:fc:97:13:f3:88:6b:da: 22:30:d6:52:20:bf:8e:66:63:e0:0e:40:ad:04:f5: 2e:23:de:60:a9:c1:a9:8a:dc:9e:fc:e1:a7:03:6c: 54:85:7b:9d:16:6b:0b:1b:45:72:b0:8e:b1:dd:9a: 4b:51:bd:08:39:a1:c8:95:80:ee:aa:75:29:45:1f: 90:ce:30:8a:d3:73:54:38:85:ec:5a:be:a4:cc:62: 94:19:dd:e4:dc:b3:8d:61:55:30:00:a9:f0:4e:d3: 74:ef:d7:e2:3c:24:10:f9:d7:b9:b0:80:4f:02:f6: f7:1d:6a:13:a7:d7:6f:55:7d:bb:a5:5c:78:16:07: b6:b8:b7:c7:e4:13:c7:82:6d:07:8a:85:56:ae:65: 83:de:85:11:68:ac:2c:6c:8a:6c:e0:4a:6b:34:05: 5d:ea:0e:3c:ee:76:49:32:74:9a:86:d4:32:58:5e: ff:32:56:3c:47:c3:51:4f:26:05:27:c7:3a:d2:13: d4:03:ae:7a:3a:b7:aa:f6:05:81:c7:67:85:ec:28: d5:9a:40:eb:ec:da:c1:d0:39:ea:1a:e5:46:26:79: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:25:9D:B9:38:DD:F2:D7:40:3D:67:68:7F:FF:4F:51:50:2F:49:9B X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:0e:82:e6:ae:c3:fd:a2:e3:ff:55:20:3c:5b:b6:16:a2:a2: f7:f9:e1:b2:a9:d9:1e:d9:26:20:05:eb:f7:fd:e9:66:92:c4: cb:fe:e5:61:7e:0b:82:e1:b2:1e:b6:d2:61:db:7c:d1:82:f6: d9:03:f8:87:cd:79:b5:49:81:16:9f:e3:42:42:f4:ec:a3:40: ab:90:9c:ce:b4:be:6a:be:05:9f:52:e6:0b:70:b5:25:11:11: 89:07:49:9b:11:0e:ef:2b:f0:6e:90:ce:21:be:11:ff:ad:fe: 59:b5:73:2a:0f:a9:4b:95:84:ca:c2:5a:af:36:70:0a:9c:dd: 12:03:4a:ee:d5:f0:25:a6:f7:a5:4b:ea:1a:81:52:ef:7d:dc: 8c:9c:9f:48:60:04:0f:4f:fc:82:0d:e6:14:24:b8:34:06:9d: 13:92:cc:5c:60:8e:b5:f6:9d:a7:4b:cc:f7:95:ac:fd:99:87: 2e:0a:fa:6d:8f:7c:88:f1:bb:a8:15:5c:92:95:99:06:f0:d1: 82:c4:df:aa:ea:36:47:3a:6c:d9:fd:c0:0a:06:ed:ed:18:0b: 9d:90:de:36:1a:ca:33:59:2c:97:d4:bb:49:50:ac:c9:55:1e: 5c:b7:f0:43:f1:41:40:3d:2d:17:12:f2:90:ce:b2:82:79:6e: e8:d1:c4:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjYwNzI3MDcxMDI3WhcNMjYwODAzMDcxMDI3WjAYMRYwFAYD VQQDEw02YTY3MDQ2NC1hYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdIkVZ71+SrwbU3fFKEdpsW8150hY1B7NJGg5HyyUHj/Q3r8G/yXE/OIa9oi MNZSIL+OZmPgDkCtBPUuI95gqcGpitye/OGnA2xUhXudFmsLG0VysI6x3ZpLUb0I OaHIlYDuqnUpRR+QzjCK03NUOIXsWr6kzGKUGd3k3LONYVUwAKnwTtN079fiPCQQ +de5sIBPAvb3HWoTp9dvVX27pVx4Fge2uLfH5BPHgm0HioVWrmWD3oURaKwsbIps 4EprNAVd6g487nZJMnSahtQyWF7/MlY8R8NRTyYFJ8c60hPUA656Oreq9gWBx2eF 7CjVmkDr7NrB0DnqGuVGJnk/rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0lnbk4 3fLXQD1naH//T1FQL0mbMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJw6C5q7D/aLj/1UgPFu2FqKi9/nhsqnZHtkmIAXr9/3pZpLEy/7lYX4LguGy HrbSYdt80YL22QP4h815tUmBFp/jQkL07KNAq5CczrS+ar4Fn1LmC3C1JRERiQdJ mxEO7yvwbpDOIb4R/63+WbVzKg+pS5WEysJarzZwCpzdEgNK7tXwJab3pUvqGoFS 733cjJyfSGAED0/8gg3mFCS4NAadE5LMXGCOtfadp0vM95Ws/ZmHLgr6bY98iPG7 qBVckpWZBvDRgsTfquo2Rzps2f3ACgbt7RgLnZDeNhrKM1ksl9S7SVCsyVUeXLfw Q/FBQD0tFxLykM6ygnlu6NHErw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:31:37 2026 by rpki-client