$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft File: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json) Hash identifier: bTbX1q4BZ/n+J340R8Ty+q4RII76poD4N88l/tXEMKU= Subject key identifier: E4:0C:C3:B9:DE:80:0D:F8:53:BF:54:DC:98:3E:FA:9E:65:A1:1F:04 Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 Certificate issuer: /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Certificate serial: 0C01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft Manifest number: 0BF1 Signing time: Tue 28 Jul 2026 19:08:58 +0000 Manifest this update: Tue 28 Jul 2026 19:08:57 +0000 Manifest next update: Tue 04 Aug 2026 19:08:57 +0000 Files and hashes: 1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: jRXF/kP9iUmox3gSwS84K4HKkM0Ka/4DHZhUh/auKnQ=) 2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: ygGwfR0Fy0GYr4xDIiSFtgwRtiLp/q0solcHFJQ7qpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3073 (0xc01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5 Validity Not Before: Jul 28 19:08:57 2026 GMT Not After : Aug 4 19:08:57 2026 GMT Subject: CN=6a68fe4a-6c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:39:1f:77:40:d6:d5:40:84:70:40:4b:95: 0e:d6:7b:2a:7d:e3:ec:e8:f8:09:e9:89:e2:65:3e: 37:ce:e2:01:8e:bc:a7:d0:53:44:b8:44:41:38:21: 92:f3:a7:87:85:a2:c7:93:70:61:05:80:8e:94:62: 63:f4:ea:fa:6d:44:2a:f3:d1:ab:83:3d:b9:6c:69: 83:b9:7c:6a:6d:fe:23:45:c8:78:23:cd:eb:4b:1d: 04:dd:6d:18:b2:eb:7a:1a:a2:b5:2b:51:65:fe:49: 7f:02:17:95:c8:ef:d0:9d:c2:b2:44:31:aa:fe:dc: f6:6c:ee:16:12:6b:dc:8a:ba:8a:60:7e:e9:92:e6: 37:b4:5c:79:2d:39:37:23:37:ae:ed:3a:ad:48:19: 9c:00:33:ee:99:07:82:ee:13:9a:b3:72:01:ac:c0: 03:01:73:fb:f6:12:8d:81:5c:a2:8f:be:aa:fb:7c: 81:b1:1c:e8:9f:6d:40:80:d8:d5:5e:84:92:94:40: 5b:90:33:8e:92:b9:03:49:aa:c5:c4:98:19:41:c5: 22:78:05:63:c5:f0:a7:65:c6:30:89:e8:b5:fc:eb: 06:4d:cb:8b:c9:f9:26:e4:f2:6c:24:0e:6f:7b:b0: b4:52:0e:7f:66:2e:81:01:48:49:ac:84:1e:03:94: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0C:C3:B9:DE:80:0D:F8:53:BF:54:DC:98:3E:FA:9E:65:A1:1F:04 X509v3 Authority Key Identifier: keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d2:f6:20:44:73:bf:13:18:be:2f:d1:a4:14:66:7b:76:8f: cd:73:01:1f:6d:52:16:ee:4d:88:22:89:c6:87:3f:ba:1b:30: 73:bf:24:65:36:1a:cb:63:50:02:cf:ef:c3:b2:ae:0e:84:30: c8:ec:2b:6e:d7:f1:c8:eb:bb:04:34:f3:35:bc:68:c8:8b:a9: 51:95:6d:0f:d8:52:ae:99:d1:bb:a7:c7:7c:53:00:47:4a:88: 81:8d:01:c9:1e:0b:6c:c7:e0:65:29:7e:94:57:4f:58:2c:5b: 84:5e:18:53:d2:25:e4:73:e8:79:66:8e:b6:85:e1:51:a1:7d: 9e:9e:e0:93:b0:a8:1e:d7:40:c6:26:0d:b7:cf:7c:c8:30:90: fe:69:63:f2:ec:95:70:46:55:3a:3d:64:6b:99:c0:98:75:c3: 62:c9:30:5c:54:f4:17:8e:11:b4:36:5b:0c:14:0f:2f:9e:dd: d4:05:16:9b:9e:57:3b:5b:99:9a:9a:d8:b7:92:22:d1:da:7d: 21:93:36:f3:84:d9:14:57:11:a0:fe:5c:f3:d9:93:11:68:8c: c6:14:b1:6c:45:e7:32:aa:b5:b8:3a:d7:cc:83:a2:47:5f:09: 77:00:b2:e0:5e:02:6e:bc:f8:57:47:bf:2d:c3:72:0b:86:92: 4a:d0:c9:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEwMTYxMTAvBgNVBAUTKERGMkY4QTc1RjNFOTI3NUUwRDRGMTBGQzZBMzE5OTk3 OTExQkU1QjUwHhcNMjYwNzI4MTkwODU3WhcNMjYwODA0MTkwODU3WjAYMRYwFAYD VQQDEw02YTY4ZmU0YS02YzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmM5H3dA1tVAhHBAS5UO1nsqfePs6PgJ6YniZT43zuIBjryn0FNEuERBOCGS 86eHhaLHk3BhBYCOlGJj9Or6bUQq89Grgz25bGmDuXxqbf4jRch4I83rSx0E3W0Y sut6GqK1K1Fl/kl/AheVyO/QncKyRDGq/tz2bO4WEmvcirqKYH7pkuY3tFx5LTk3 Izeu7TqtSBmcADPumQeC7hOas3IBrMADAXP79hKNgVyij76q+3yBsRzon21AgNjV XoSSlEBbkDOOkrkDSarFxJgZQcUieAVjxfCnZcYwiei1/OsGTcuLyfkm5PJsJA5v e7C0Ug5/Zi6BAUhJrIQeA5Q0fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQMw7ne gA34U79U3Jg++p5loR8EMB8GA1UdIwQYMBaAFN8vinXz6SdeDU8Q/GoxmZeRG+W1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTAxNi9DMDY3NzIyNjQx NzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEoxNE5UeEQ4YWpHWmw1RWI1 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5LUtkZlBwSjE0TlR4RDhhakdabDVFYjViVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTAxNi9DMDY3NzIyNjQxNzExMUVBQUFEMjZBNkNDNEY5QUUwMi8zeS1LZGZQcEox NE5UeEQ4YWpHWmw1RWI1YlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVtL2IERzvxMYvi/RpBRme3aPzXMBH21SFu5NiCKJxoc/uhswc78kZTYay2NQ As/vw7KuDoQwyOwrbtfxyOu7BDTzNbxoyIupUZVtD9hSrpnRu6fHfFMAR0qIgY0B yR4LbMfgZSl+lFdPWCxbhF4YU9Il5HPoeWaOtoXhUaF9np7gk7CoHtdAxiYNt898 yDCQ/mlj8uyVcEZVOj1ka5nAmHXDYskwXFT0F44RtDZbDBQPL57d1AUWm55XO1uZ mprYt5Ii0dp9IZM284TZFFcRoP5c89mTEWiMxhSxbEXnMqq1uDrXzIOiR18JdwCy 4F4Cbrz4V0e/LcNyC4aSStDJvg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:43:06 2026 by rpki-client