$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: eUZBzqt+kfDvfkd0eY0zez3/Vr06NlD6m4Vfp2myi0M= Subject key identifier: E5:0B:C8:FE:F5:98:D1:C3:D2:D4:70:63:66:DA:AC:9C:02:3E:F9:B0 Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: 0115 Signing time: Mon 27 Jul 2026 07:59:21 +0000 Manifest this update: Mon 27 Jul 2026 07:59:20 +0000 Manifest next update: Mon 03 Aug 2026 07:59:20 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: wS0IfCiOYH9ClUuc7u8eYtrUdetkppJRFPj2t0dyF8k=) 2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Jul 27 07:59:20 2026 GMT Not After : Aug 3 07:59:20 2026 GMT Subject: CN=6a670fd9-184f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:d1:16:8a:b4:1c:2b:c1:55:3b:44:c4:4f: df:51:2b:d5:cd:e1:be:eb:fe:26:00:10:a6:77:bf: 1f:9f:cc:21:23:3c:e2:f7:2d:b1:e5:22:47:19:ac: fe:9c:0d:80:ad:01:5b:8b:71:f5:d3:c2:6c:83:08: a4:e4:dd:92:0a:e9:f3:22:5d:ad:70:47:96:6a:e2: 15:ed:18:db:10:ae:29:96:2d:85:b8:24:40:d0:e1: 04:ac:40:c2:ac:2f:7e:de:0d:3a:61:47:12:79:56: 5f:47:7d:79:cf:e5:f6:49:06:1c:c7:f6:57:2c:e0: 75:fc:08:dc:80:f6:60:5d:69:95:89:72:ae:0a:44: c5:f8:7a:6f:a3:d5:9b:cb:0f:74:12:ab:24:53:c4: 0d:71:ee:81:ce:63:ab:cc:09:3d:81:1c:40:37:a1: 07:df:23:bf:42:18:ee:ae:6d:de:f1:c9:a8:9d:6a: cf:5a:77:80:8c:f4:6f:8d:37:40:90:70:06:38:18: b0:b6:f5:55:f7:a8:23:82:e9:4e:b5:e0:9d:9f:bc: 63:ff:9c:ac:30:71:7a:ec:3c:9f:00:41:01:6b:0e: 7c:cf:01:62:ae:e2:25:cf:32:54:1a:d3:d4:72:d5: 9f:85:9a:b0:30:7c:c5:2c:35:26:91:06:ab:a8:69: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0B:C8:FE:F5:98:D1:C3:D2:D4:70:63:66:DA:AC:9C:02:3E:F9:B0 X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9f:41:74:80:c2:e4:0f:cb:b9:eb:44:b9:29:27:6c:df:7e: 6a:2d:97:7c:eb:88:83:5d:0d:5d:84:2e:3c:6b:41:a6:d1:8b: fa:bb:84:63:40:97:a0:09:cb:55:d0:c7:08:d9:c6:84:f0:ff: 61:23:9c:66:29:d3:0f:48:91:8d:82:cd:7e:46:83:09:e7:0b: 8f:2e:41:1e:d3:c1:7d:be:3a:98:73:71:9d:72:be:ac:9d:76: aa:e9:49:d8:8c:0f:ce:24:f7:4b:1b:3d:77:da:80:fe:1f:a4: 87:ab:04:98:12:07:3c:1e:ba:b5:5e:76:b1:01:ee:f6:33:94: 03:b3:fe:a7:c5:94:41:7d:37:50:e9:bf:0a:65:b4:90:3a:a1: b7:5c:5a:e3:21:01:6f:02:d4:61:82:8e:03:62:b8:58:63:65: 64:df:7a:9d:9e:21:b9:1f:bd:78:ae:83:58:d9:8d:ad:10:27: 08:9f:5d:ff:30:32:c1:7f:00:12:9e:47:e1:b5:ae:23:2e:71: ce:34:b7:64:46:ce:b1:55:e5:70:cf:ce:16:61:f7:fe:d9:40: 9e:e1:a6:97:3e:df:b4:f2:69:5d:9a:30:a2:af:a3:a3:39:eb: 0f:6e:bf:95:34:ed:d2:e9:bf:85:8d:16:c8:d8:99:f4:3d:0e: 1b:e7:02:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKEREQTQ5RjQxRjYxOEE1NUY5Q0E3Q0ZDNTVCQUVBN0I2 MTZEOTU3NjIwHhcNMjYwNzI3MDc1OTIwWhcNMjYwODAzMDc1OTIwWjAYMRYwFAYD VQQDEw02YTY3MGZkOS0xODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrvRFoq0HCvBVTtExE/fUSvVzeG+6/4mABCmd78fn8whIzzi9y2x5SJHGaz+ nA2ArQFbi3H108Jsgwik5N2SCunzIl2tcEeWauIV7RjbEK4pli2FuCRA0OEErEDC rC9+3g06YUcSeVZfR315z+X2SQYcx/ZXLOB1/AjcgPZgXWmViXKuCkTF+Hpvo9Wb yw90EqskU8QNce6BzmOrzAk9gRxAN6EH3yO/Qhjurm3e8cmonWrPWneAjPRvjTdA kHAGOBiwtvVV96gjgulOteCdn7xj/5ysMHF67DyfAEEBaw58zwFiruIlzzJUGtPU ctWfhZqwMHzFLDUmkQarqGmmEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOULyP71 mNHD0tRwY2barJwCPvmwMB8GA1UdIwQYMBaAFN2kn0H2GKVfnKfPxVuup7YW2Vdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GQzUwNTAwRUU3 NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBWLWNwOF9GVzY2bnRoYlpW MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GQzUwNTAwRUU3NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBW LWNwOF9GVzY2bnRoYlpWMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZ9BdIDC5A/LuetEuSknbN9+ai2XfOuIg10NXYQuPGtBptGL+ruEY0CXoAnL VdDHCNnGhPD/YSOcZinTD0iRjYLNfkaDCecLjy5BHtPBfb46mHNxnXK+rJ12qulJ 2IwPziT3Sxs9d9qA/h+kh6sEmBIHPB66tV52sQHu9jOUA7P+p8WUQX03UOm/CmW0 kDqht1xa4yEBbwLUYYKOA2K4WGNlZN96nZ4huR+9eK6DWNmNrRAnCJ9d/zAywX8A Ep5H4bWuIy5xzjS3ZEbOsVXlcM/OFmH3/tlAnuGmlz7ftPJpXZowoq+joznrD26/ lTTt0um/hY0WyNiZ9D0OG+cCxw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:41:53 2026 by rpki-client