$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: Aby30kIefi5YaVDxLuZvNHRVuOWImOq6eJPmaRAh1Tc= Subject key identifier: 31:A6:A4:B3:41:36:40:10:CD:C4:8C:B8:5F:CC:BC:74:DD:E1:2E:E2 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0D24 Signing time: Sun 26 Jul 2026 18:25:36 +0000 Manifest this update: Sun 26 Jul 2026 18:25:36 +0000 Manifest next update: Sun 02 Aug 2026 18:25:36 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: to5YLxZ/6NEPklRuRkAN+IP3HeIMMwAAU1vsmCHmqwo=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Jul 26 18:25:36 2026 GMT Not After : Aug 2 18:25:36 2026 GMT Subject: CN=6a665120-2b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:91:41:73:3a:e6:80:37:76:4b:58:ff:3a: 15:a0:f6:38:c0:d7:18:11:1c:8b:a8:d2:3f:f1:0d: b2:86:2d:1f:5e:de:35:ca:d1:75:b8:ba:e2:52:6d: 70:e1:91:8e:a7:c2:87:ce:7f:29:14:33:f8:3e:a8: 50:47:cb:2a:97:85:f9:1b:79:3e:ba:ac:e1:49:ef: ff:4c:0f:6c:cc:06:fd:7a:fb:a1:f3:c8:78:f4:0c: d3:4f:1a:b1:1f:ef:0d:0d:fd:d4:0d:b5:93:ae:fb: 03:d9:26:d0:d3:e2:42:ad:a5:a2:db:81:4b:81:d7: 52:39:77:95:f8:3a:0c:0f:60:7a:b7:5a:4e:74:cd: 9c:49:c6:71:b1:3b:11:1f:a5:39:ef:6f:00:1a:d9: f9:fd:0a:24:f5:ad:43:99:80:b4:ac:16:2b:5a:94: e6:5a:55:ba:9c:ad:bf:87:bb:07:21:ed:43:67:02: ef:15:92:e4:76:b8:23:15:75:aa:e0:09:3d:73:d2: d0:f8:72:31:d5:43:a9:e6:ff:55:84:6c:d5:45:85: 9b:05:50:05:6f:83:c4:1f:63:dc:f8:7a:71:af:2f: 2b:5d:4a:fa:d8:d4:a3:a9:d7:95:a1:08:23:c9:c3: de:dc:de:a7:cb:69:c2:a1:35:7e:d4:1b:83:6a:5d: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A6:A4:B3:41:36:40:10:CD:C4:8C:B8:5F:CC:BC:74:DD:E1:2E:E2 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f5:95:83:d6:ac:41:b8:7a:a9:cc:b0:9e:b2:5b:b0:52:f9: 75:e4:46:cc:23:90:92:2c:9a:b0:c5:d4:3a:f9:68:26:64:ef: c3:d7:cc:24:bd:94:5f:b8:43:a1:da:f6:6c:9f:6c:34:7c:94: bf:68:02:db:7f:01:de:60:fd:e7:2a:0f:ce:c0:69:d9:95:94: 68:0d:9d:31:f2:be:24:c7:29:0c:54:83:3a:3e:bc:d6:00:56: 4c:a1:ea:6e:33:73:4d:0c:df:fe:9b:df:f3:60:f2:38:85:de: 61:bf:0b:dd:70:d5:d0:7e:ad:33:9a:4d:2b:bb:28:62:18:fa: 30:40:26:b9:16:f9:b0:66:40:11:8d:72:98:56:99:cd:36:6a: de:17:74:5d:76:ab:e4:10:b6:2d:d2:63:48:5e:72:eb:d3:dd: ae:1e:52:38:0b:9f:43:e6:80:21:94:74:a6:c4:d7:50:66:f3: e6:e7:b1:19:1b:a2:04:78:e2:6f:ba:00:ee:3a:0f:cd:f9:c7: 54:34:91:36:1d:3d:ae:28:fd:93:5e:87:e2:58:52:6c:7b:fe: 72:04:56:63:22:98:6a:25:db:35:89:2a:8d:61:3d:79:0b:55: 99:ee:5e:8f:60:9a:af:5d:75:c2:de:f7:86:b8:9b:f0:fe:15: 14:31:99:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjYwNzI2MTgyNTM2WhcNMjYwODAyMTgyNTM2WjAYMRYwFAYD VQQDEw02YTY2NTEyMC0yYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr+RQXM65oA3dktY/zoVoPY4wNcYERyLqNI/8Q2yhi0fXt41ytF1uLriUm1w 4ZGOp8KHzn8pFDP4PqhQR8sql4X5G3k+uqzhSe//TA9szAb9evuh88h49AzTTxqx H+8NDf3UDbWTrvsD2SbQ0+JCraWi24FLgddSOXeV+DoMD2B6t1pOdM2cScZxsTsR H6U5728AGtn5/Qok9a1DmYC0rBYrWpTmWlW6nK2/h7sHIe1DZwLvFZLkdrgjFXWq 4Ak9c9LQ+HIx1UOp5v9VhGzVRYWbBVAFb4PEH2Pc+Hpxry8rXUr62NSjqdeVoQgj ycPe3N6ny2nCoTV+1BuDal2Q7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGmpLNB NkAQzcSMuF/MvHTd4S7iMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnPWVg9asQbh6qcywnrJbsFL5deRGzCOQkiyasMXUOvloJmTvw9fMJL2UX7hD odr2bJ9sNHyUv2gC238B3mD95yoPzsBp2ZWUaA2dMfK+JMcpDFSDOj681gBWTKHq bjNzTQzf/pvf82DyOIXeYb8L3XDV0H6tM5pNK7soYhj6MEAmuRb5sGZAEY1ymFaZ zTZq3hd0XXar5BC2LdJjSF5y69Pdrh5SOAufQ+aAIZR0psTXUGbz5uexGRuiBHji b7oA7joPzfnHVDSRNh09rij9k16H4lhSbHv+cgRWYyKYaiXbNYkqjWE9eQtVme5e j2Car111wt73hrib8P4VFDGZeg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:34 2026 by rpki-client