$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: KpUC5RtaROdb6vdC+8LdG2jYvgfPLwAri92CDwa5VIY= Subject key identifier: 94:4B:51:36:D5:7E:86:39:6F:0A:7D:90:D0:2A:DB:5A:8C:48:68:B9 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 358D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3577 Signing time: Tue 28 Jul 2026 14:35:40 +0000 Manifest this update: Tue 28 Jul 2026 14:35:40 +0000 Manifest next update: Tue 04 Aug 2026 14:35:40 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: GXYOPJjvN9lUFkAPMlaoWHsyfs89Aes9uqI0J5oeBq0=) 2: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) 3: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jul 28 14:35:40 2026 GMT Not After : Aug 4 14:35:40 2026 GMT Subject: CN=6a68be3c-8efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:a5:66:a6:de:74:f6:cf:58:4c:58:03:48: 58:fd:62:e3:03:65:37:f7:b5:30:f0:4f:5d:90:02: 09:41:24:7d:c3:2e:3b:56:62:4c:33:af:46:f7:5e: 81:c6:88:65:cd:00:b5:f5:a7:c4:f3:e1:4f:9b:11: 40:65:d9:37:11:7a:21:61:68:cc:24:20:6a:26:f4: a1:a9:4c:3b:ab:a2:03:06:12:b7:4d:ba:b9:3e:74: 2a:7d:31:30:04:61:70:8f:1d:0e:bb:c4:f7:e8:48: ce:5e:7c:f3:dd:06:56:d1:ed:8f:7c:73:bd:36:0d: 1e:73:89:8c:ab:67:e1:28:03:d6:54:8f:06:dd:dc: 98:2b:88:a3:ca:27:aa:2d:fe:40:8f:e9:3b:95:6a: 23:cc:69:43:b2:de:13:c5:2f:d7:39:b3:4c:5f:4b: dc:ae:8a:2b:e3:2c:8d:d8:4b:ad:c7:36:da:5c:c3: e5:36:5c:98:29:b6:6f:26:9a:06:66:24:65:01:69: 06:6b:aa:52:78:7a:42:bd:5c:e7:ce:d4:8d:70:1a: c2:06:a5:d0:cc:0a:bd:4f:b5:7c:98:01:bd:dd:de: 49:f4:87:f0:5d:17:87:d1:89:02:bd:74:0a:54:a6: 82:dc:88:13:93:86:8c:37:f6:ed:39:74:7a:e2:92: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4B:51:36:D5:7E:86:39:6F:0A:7D:90:D0:2A:DB:5A:8C:48:68:B9 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d4:39:d6:76:13:c6:8d:68:88:52:83:de:42:b1:7d:07:7e: b7:e3:30:2f:fd:88:67:08:1b:58:56:f4:e0:e3:a6:5f:08:62: a3:55:bb:07:e0:64:fa:48:5d:67:b8:f3:00:45:e7:36:8d:0a: ee:50:35:d0:60:b8:01:eb:6f:cb:77:ff:f4:b4:c3:ff:61:c0: b6:92:31:c1:7e:7f:8c:71:4e:01:5e:e3:03:e2:bf:2e:a5:2b: 4c:5c:db:f3:7c:54:c0:93:bc:27:59:bc:65:20:a0:87:7c:81: 7b:17:63:25:fc:0f:d9:ad:20:2e:62:db:a8:e6:61:2a:25:94: 22:ad:15:27:4d:51:9e:7c:57:2b:02:64:67:6c:d2:27:71:c9: 01:3f:d0:ce:de:4d:1c:35:12:5b:a5:cf:91:de:f5:f0:14:43: 58:78:06:72:56:32:c0:26:43:73:09:eb:f0:9d:ad:53:12:9a: 5b:ae:79:09:a6:3d:0c:bc:d8:c2:74:75:c1:cb:03:3a:4d:88: 14:86:86:48:7b:53:a0:28:a2:af:b3:83:4b:f8:0b:11:ac:c1: 7c:57:02:36:4a:6a:dd:d2:c9:fe:6f:2e:22:88:51:e3:d4:77: 8b:aa:40:c2:7a:6a:65:4c:fa:b3:54:ff:80:11:cf:9f:12:8c: 6f:c5:b4:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwNzI4MTQzNTQwWhcNMjYwODA0MTQzNTQwWjAYMRYwFAYD VQQDEw02YTY4YmUzYy04ZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwt6lZqbedPbPWExYA0hY/WLjA2U397Uw8E9dkAIJQSR9wy47VmJMM69G916B xohlzQC19afE8+FPmxFAZdk3EXohYWjMJCBqJvShqUw7q6IDBhK3Tbq5PnQqfTEw BGFwjx0Ou8T36EjOXnzz3QZW0e2PfHO9Ng0ec4mMq2fhKAPWVI8G3dyYK4ijyieq Lf5Aj+k7lWojzGlDst4TxS/XObNMX0vcroor4yyN2EutxzbaXMPlNlyYKbZvJpoG ZiRlAWkGa6pSeHpCvVznztSNcBrCBqXQzAq9T7V8mAG93d5J9IfwXReH0YkCvXQK VKaC3IgTk4aMN/btOXR64pLPOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRLUTbV foY5bwp9kNAq21qMSGi5MB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANdQ51nYTxo1oiFKD3kKxfQd+t+MwL/2IZwgbWFb04OOmXwhio1W7B+Bk+khd Z7jzAEXnNo0K7lA10GC4Aetvy3f/9LTD/2HAtpIxwX5/jHFOAV7jA+K/LqUrTFzb 83xUwJO8J1m8ZSCgh3yBexdjJfwP2a0gLmLbqOZhKiWUIq0VJ01RnnxXKwJkZ2zS J3HJAT/Qzt5NHDUSW6XPkd718BRDWHgGclYywCZDcwnr8J2tUxKaW655CaY9DLzY wnR1wcsDOk2IFIaGSHtToCiir7ODS/gLEazBfFcCNkpq3dLJ/m8uIohR49R3i6pA wnpqZUz6s1T/gBHPnxKMb8W0vg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:52:01 2026 by rpki-client