$ rpki-client -vvf rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft File: 3Hp9C5oBv4XomicX87lm2Z5F9-c.mft (raw, json) Hash identifier: GS5ZPFjE5Y+Fos/j770uLLLivAJmyTqlRBU9VG5bxu8= Subject key identifier: 73:BD:6F:44:2E:E7:58:B7:BF:31:D1:F7:87:FB:7C:36:78:CC:F3:B8 Authority key identifier: DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7 Certificate issuer: /CN=A9198A90/serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft Manifest number: 10 Signing time: Mon 27 Jul 2026 11:33:46 +0000 Manifest this update: Mon 27 Jul 2026 11:33:45 +0000 Manifest next update: Mon 03 Aug 2026 11:33:45 +0000 Files and hashes: 1: 3Hp9C5oBv4XomicX87lm2Z5F9-c.crl (hash: PwaChqUoJYu7IqCbpZWFq6PR2L8pEOPgKcLq7fSnrp8=) 2: 03C24D0680E611F1A15EA29461A30FBC.roa (hash: u7JbDFz3qAshRF4caNqctdr/Pu6iadoZfhpdKTIEvOY=) 3: 2E45B7DE80E611F1936909A061A30FBC.roa (hash: boIChwmQ8OLdUTt45ZhPNZwjS9L/s3K4KKRa2qyDCXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198A90, serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7 Validity Not Before: Jul 27 11:33:45 2026 GMT Not After : Aug 3 11:33:45 2026 GMT Subject: CN=6a67421a-983a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:d7:bd:7c:7e:8c:26:f3:1c:44:41:fe:94: 37:5b:eb:b5:bb:72:63:6e:98:ef:71:1d:83:07:fd: 06:30:52:b5:ca:df:87:47:31:69:75:8d:ca:71:4c: 6a:43:29:55:a4:34:36:7f:7d:3f:5f:4a:88:2a:ff: 79:a0:8b:a2:7d:ea:71:21:d3:c7:75:b5:f1:91:21: 62:f0:14:63:4c:b1:64:a1:1a:d0:96:c3:2c:df:0c: df:54:e7:cc:2b:3d:c1:c1:73:bd:1b:56:ef:f2:bc: b2:3e:3e:7a:80:71:38:29:66:4e:45:f6:de:b9:71: 28:df:0b:24:d9:e7:55:e2:54:84:0c:b2:4f:8d:94: 57:39:d3:1a:7d:9e:80:e7:f2:47:20:68:d6:de:f6: b9:8f:b4:55:f1:d1:98:16:05:1c:57:2f:80:cd:13: 92:b3:22:9d:74:a0:8d:8a:63:ef:96:dc:ae:6c:f5: 4f:96:7a:ed:9a:9d:a6:84:af:26:78:38:f9:28:ab: 66:ca:fd:ce:c0:d2:33:16:f8:0b:67:2d:13:5e:b2: d2:6d:3a:2e:d3:f8:d7:f2:d0:fe:4b:70:a7:a8:e6: 82:08:cc:7c:c0:f2:9f:71:10:76:df:45:d3:09:fb: 3c:b4:47:de:7d:45:fe:04:47:fe:e5:68:14:2b:14: f0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BD:6F:44:2E:E7:58:B7:BF:31:D1:F7:87:FB:7C:36:78:CC:F3:B8 X509v3 Authority Key Identifier: keyid:DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a6:f5:d2:39:98:44:7c:af:ca:6c:97:09:65:07:0e:b2:05: c8:99:9f:a8:a0:a8:29:88:fa:58:7f:8d:86:2a:73:13:cc:09: 17:84:71:12:f9:bb:6b:de:bc:7c:19:c1:4d:0c:e2:4a:20:8d: 30:0c:f9:26:25:ed:a9:ca:de:ee:c3:83:67:96:bf:88:52:27: 3d:ef:54:d1:bc:aa:27:44:bf:b7:7e:54:19:c5:12:b8:39:76: 69:92:71:d9:11:ea:a3:e0:95:6d:db:20:ee:81:dc:51:7e:06: 64:91:14:dd:27:37:9d:9a:6d:1f:df:7d:ef:19:fd:b0:69:ec: 15:56:db:6a:b1:fb:5e:c4:bf:e5:1a:84:e5:04:b9:d6:9d:6c: 59:c2:47:92:fc:05:fa:ca:73:cf:23:84:da:4d:88:bc:19:b5: 51:c7:df:74:42:2c:5a:61:f6:91:0b:ff:84:b0:ce:7f:ce:f0: 2d:5c:34:d7:8f:e7:e5:ac:62:7b:54:92:22:24:6d:4c:19:fd: f8:f6:25:60:70:35:d6:27:86:69:2c:8f:f1:a1:36:4d:eb:ba: 5c:4f:73:7f:2b:d8:c3:61:11:74:f9:47:4c:95:c3:c7:3b:74: 38:c1:b0:0b:5c:2d:81:1e:d8:ee:07:bc:a7:21:98:27:88:c2: 11:4f:b4:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OEE5MDExMC8GA1UEBRMoREM3QTdEMEI5QTAxQkY4NUU4OUEyNzE3RjNCOTY2RDk5 RTQ1RjdFNzAeFw0yNjA3MjcxMTMzNDVaFw0yNjA4MDMxMTMzNDVaMBgxFjAUBgNV BAMTDTZhNjc0MjFhLTk4M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqO9e9fH6MJvMcREH+lDdb67W7cmNumO9xHYMH/QYwUrXK34dHMWl1jcpxTGpD KVWkNDZ/fT9fSogq/3mgi6J96nEh08d1tfGRIWLwFGNMsWShGtCWwyzfDN9U58wr PcHBc70bVu/yvLI+PnqAcTgpZk5F9t65cSjfCyTZ51XiVIQMsk+NlFc50xp9noDn 8kcgaNbe9rmPtFXx0ZgWBRxXL4DNE5KzIp10oI2KY++W3K5s9U+Weu2anaaEryZ4 OPkoq2bK/c7A0jMW+AtnLRNestJtOi7T+Nfy0P5LcKeo5oIIzHzA8p9xEHbfRdMJ +zy0R959Rf4ER/7laBQrFPBjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUc71vRC7n WLe/MdH3h/t8NnjM87gwHwYDVR0jBBgwFoAU3Hp9C5oBv4XomicX87lm2Z5F9+cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QTkwLzREODM5NTRDN0I5 MzExRjFBNkU3NkQxOTZGQTMwRkJDLzNIcDlDNW9CdjRYb21pY1g4N2xtMlo1Rjkt Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM0hwOUM1b0J2NFhvbWljWDg3bG0yWjVGOS1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 QTkwLzREODM5NTRDN0I5MzExRjFBNkU3NkQxOTZGQTMwRkJDLzNIcDlDNW9CdjRY b21pY1g4N2xtMlo1RjktYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBOpvXSOZhEfK/KbJcJZQcOsgXImZ+ooKgpiPpYf42GKnMTzAkXhHES+btr3rx8 GcFNDOJKII0wDPkmJe2pyt7uw4Nnlr+IUic971TRvKonRL+3flQZxRK4OXZpknHZ Eeqj4JVt2yDugdxRfgZkkRTdJzedmm0f333vGf2waewVVttqsftexL/lGoTlBLnW nWxZwkeS/AX6ynPPI4TaTYi8GbVRx990QixaYfaRC/+EsM5/zvAtXDTXj+flrGJ7 VJIiJG1MGf349iVgcDXWJ4ZpLI/xoTZN67pcT3N/K9jDYRF0+UdMlcPHO3Q4wbAL XC2BHtjuB7ynIZgniMIRT7RK -----END CERTIFICATE-----Generated at Tue Jul 28 15:41:00 2026 by rpki-client