$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: DoXiUbDbNKR/N5hmV2V0CTa/VtZgZ9aBAagQ335X/0A= Subject key identifier: 3B:23:84:D1:D5:D6:93:5E:05:0F:F0:A0:7F:57:F2:93:1F:D3:EF:2F Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0564 Signing time: Mon 27 Jul 2026 00:18:15 +0000 Manifest this update: Mon 27 Jul 2026 00:18:14 +0000 Manifest next update: Mon 03 Aug 2026 00:18:14 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: QB0lnrYXH+K0DW1Yk4Su1Ac6L26toSTXghqPHd/BS80=) 2: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=) 3: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1394 (0x572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Jul 27 00:18:14 2026 GMT Not After : Aug 3 00:18:14 2026 GMT Subject: CN=6a66a3c7-281b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:2e:13:82:e9:cd:57:0b:ed:bc:d2:42:8b: 47:75:9a:69:bb:7f:55:40:60:b1:cf:6a:8c:cb:4e: ef:11:66:70:c5:f8:9e:1e:d0:78:7e:1d:1b:01:64: 02:99:16:03:06:be:1a:d3:2e:ec:e5:d6:2a:d0:5a: 9c:84:d9:db:33:a1:d6:e3:30:5f:6c:dc:d0:50:47: a2:c1:2b:52:61:43:65:21:af:c0:1e:2a:f3:56:6f: 2f:44:22:47:8a:3e:e1:0b:a0:b6:2e:e6:b9:76:bd: 60:4d:22:a8:d6:85:0b:80:db:0a:2c:86:00:0a:b1: 49:c0:09:26:64:af:ff:2f:b9:14:b3:78:b6:89:32: 50:9c:0b:90:06:1c:94:a5:e6:cb:f7:86:8b:83:ef: d9:af:76:55:86:f1:5e:29:48:36:c7:0f:5a:69:c6: 42:ab:17:e6:80:eb:31:cf:f7:6b:df:1e:27:c0:38: 6d:13:f5:3f:73:c4:d3:07:6d:f9:bc:65:ff:2c:97: f1:9e:f3:7d:0c:0a:f7:60:f6:a1:af:52:fb:df:aa: 48:2b:5f:20:50:81:2c:ae:c3:c8:5f:38:45:b9:21: b9:1e:1e:10:25:e2:ea:5d:b6:08:b8:d2:0b:c2:0b: 15:c8:25:6b:48:24:2b:a5:0c:ab:bc:3f:34:67:d1: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:23:84:D1:D5:D6:93:5E:05:0F:F0:A0:7F:57:F2:93:1F:D3:EF:2F X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fb:1f:b6:97:f0:78:92:f1:bf:66:02:66:6c:ed:b9:03:d8: 8d:92:37:4d:cc:5c:35:8e:02:b7:d1:87:08:ef:3b:f5:cc:d5: b2:b7:3c:c7:c5:7e:a9:c5:aa:9c:2a:d1:6c:54:0d:b2:50:b0: 33:8e:1b:b6:24:e2:2e:b9:36:35:57:7f:29:96:b9:52:40:be: f2:86:90:66:88:51:c8:d9:0c:63:43:72:29:72:48:2d:2b:78: f8:fc:bc:0d:b6:ca:21:20:80:32:a4:fc:d1:dc:75:9c:a7:97: d3:97:ac:27:4a:a3:01:ea:74:a6:47:03:5e:eb:f2:98:e6:51: ac:34:22:dd:54:d2:32:78:09:3c:51:f8:d9:e7:ed:16:76:bd: a3:af:d0:19:c7:d0:1d:64:5a:80:0e:4e:f1:cc:36:d6:8c:09: 39:a1:a4:69:22:77:75:d8:b5:9b:1d:6d:a9:27:b5:ae:d1:23: f1:8f:93:f3:23:ea:c9:2c:b0:68:3d:12:f6:fc:36:7c:03:90: 8a:40:10:e2:0b:66:3c:23:91:db:70:ad:5e:94:fb:6d:d2:2a: 56:fa:47:fa:9e:55:fa:6c:a6:19:c4:bc:34:6c:89:80:3f:4a: fe:d9:6c:68:6c:31:8c:29:82:41:7d:bb:0e:d0:85:65:a4:8b: b1:7c:3a:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjYwNzI3MDAxODE0WhcNMjYwODAzMDAxODE0WjAYMRYwFAYD VQQDEw02YTY2YTNjNy0yODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzguE4LpzVcL7bzSQotHdZppu39VQGCxz2qMy07vEWZwxfieHtB4fh0bAWQC mRYDBr4a0y7s5dYq0FqchNnbM6HW4zBfbNzQUEeiwStSYUNlIa/AHirzVm8vRCJH ij7hC6C2Lua5dr1gTSKo1oULgNsKLIYACrFJwAkmZK//L7kUs3i2iTJQnAuQBhyU pebL94aLg+/Zr3ZVhvFeKUg2xw9aacZCqxfmgOsxz/dr3x4nwDhtE/U/c8TTB235 vGX/LJfxnvN9DAr3YPahr1L736pIK18gUIEsrsPIXzhFuSG5Hh4QJeLqXbYIuNIL wgsVyCVrSCQrpQyrvD80Z9HWDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsjhNHV 1pNeBQ/woH9X8pMf0+8vMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXPsftpfweJLxv2YCZmztuQPYjZI3TcxcNY4Ct9GHCO879czVsrc8x8V+qcWq nCrRbFQNslCwM44btiTiLrk2NVd/KZa5UkC+8oaQZohRyNkMY0NyKXJILSt4+Py8 DbbKISCAMqT80dx1nKeX05esJ0qjAep0pkcDXuvymOZRrDQi3VTSMngJPFH42eft Fna9o6/QGcfQHWRagA5O8cw21owJOaGkaSJ3ddi1mx1tqSe1rtEj8Y+T8yPqySyw aD0S9vw2fAOQikAQ4gtmPCOR23CtXpT7bdIqVvpH+p5V+mymGcS8NGyJgD9K/tls aGwxjCmCQX27DtCFZaSLsXw6ig== -----END CERTIFICATE-----Generated at Tue Jul 28 20:16:40 2026 by rpki-client