$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: zsIKgbXN5T/slvKUT7NpMrWXM5uozT4hpjmCTtGOIzY= Subject key identifier: F8:79:A6:70:3F:BC:1A:F4:02:A0:36:2A:F9:AD:2C:E7:55:0B:5A:E7 Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: 0134 Signing time: Mon 27 Jul 2026 07:33:00 +0000 Manifest this update: Mon 27 Jul 2026 07:32:59 +0000 Manifest next update: Mon 03 Aug 2026 07:32:59 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: ItkET17QEEsKW0c9aX6TARR1La79I2Xs/MaQynKtJvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: Jul 27 07:32:59 2026 GMT Not After : Aug 3 07:32:59 2026 GMT Subject: CN=6a6709ac-ada7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:50:e0:c4:fc:97:04:7a:1c:52:52:5b:d7: 50:e3:8f:17:18:f8:6f:40:b7:a4:24:a0:34:da:16: ea:58:24:d3:4f:83:ad:b9:2c:3d:d2:41:02:cf:3b: 76:f8:a7:bd:f7:88:40:fb:04:07:4a:a4:e2:cf:8d: db:53:50:ea:84:42:b4:21:56:95:c6:65:a6:98:f7: c3:5e:64:7e:48:c0:81:04:cb:16:70:26:ae:1c:2a: 8d:93:3e:a3:22:c2:38:c8:cf:23:75:e7:aa:0f:b9: b9:90:a6:79:29:59:15:f4:58:ec:a3:33:ae:f5:2a: 9e:7f:93:db:e1:07:e1:ba:08:d6:97:38:0c:3c:9f: fa:a6:6c:d7:60:04:ea:f7:e2:8a:35:8b:0b:c7:80: 9d:4a:0e:cb:8d:83:78:3b:49:3d:54:4c:2d:b9:0a: f4:b1:3d:4b:1f:26:60:6b:41:73:60:a5:c9:86:21: 98:c3:24:d8:aa:e1:3d:c0:ea:2f:4c:87:3e:1d:1a: b5:6d:15:5f:18:07:6c:ab:45:78:72:5b:70:ee:02: fe:e4:d6:87:cf:ed:11:42:3e:c8:c9:f6:99:23:44: e9:94:60:57:7d:00:83:cb:c8:6d:a7:b4:53:a6:6f: c2:79:a1:26:f2:45:7d:d1:ac:a2:25:35:2f:8f:5e: 01:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:79:A6:70:3F:BC:1A:F4:02:A0:36:2A:F9:AD:2C:E7:55:0B:5A:E7 X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b6:0d:76:08:9b:75:a3:c9:c9:27:c7:c7:01:b7:09:25:0e: 35:9c:40:51:db:dc:fc:29:5b:0d:93:de:6e:a9:f0:aa:07:dd: 3c:90:a6:77:bd:0a:14:4a:53:96:e7:91:41:58:ab:85:7c:cd: aa:83:e1:c1:6f:a1:87:a9:dd:42:14:df:f8:b9:d6:98:b3:f1: 5f:21:d2:45:34:8c:93:e9:49:e0:c0:ad:bf:ae:e0:94:91:3f: 84:7d:e3:d7:31:f0:86:b2:ea:39:2e:fc:29:aa:b6:ab:f9:13: ea:15:f3:15:d8:d9:1b:b4:9d:79:53:36:46:13:d8:98:3b:a6: d2:88:94:12:3e:4c:ab:15:77:e6:2b:2e:2c:52:f3:18:c4:f6: ea:8c:35:90:6a:b2:aa:06:17:9c:b1:d6:88:73:fe:dc:96:8c: df:45:e1:5f:6e:46:ab:25:92:fe:bc:ff:fa:9e:86:eb:53:04: 9d:80:36:05:bd:1a:bc:35:17:17:df:38:4e:12:13:29:64:d2: 68:d9:18:1d:db:f2:22:79:a0:d2:f1:19:d3:a9:57:31:34:e7: d2:e0:d5:06:0d:7a:b0:49:d5:63:1c:96:da:80:16:c0:11:58: ad:36:45:4e:4a:5c:26:de:5f:4a:bf:de:0f:78:6b:cf:e6:e9: 86:0d:00:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKERDMTEzMEQ4NjE2QkFCQzZDRTA4OEY1RjIwRTY5NzE5 QTk5QzMyQkIwHhcNMjYwNzI3MDczMjU5WhcNMjYwODAzMDczMjU5WjAYMRYwFAYD VQQDEw02YTY3MDlhYy1hZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR5Q4MT8lwR6HFJSW9dQ448XGPhvQLekJKA02hbqWCTTT4OtuSw90kECzzt2 +Ke994hA+wQHSqTiz43bU1DqhEK0IVaVxmWmmPfDXmR+SMCBBMsWcCauHCqNkz6j IsI4yM8jdeeqD7m5kKZ5KVkV9FjsozOu9Sqef5Pb4QfhugjWlzgMPJ/6pmzXYATq 9+KKNYsLx4CdSg7LjYN4O0k9VEwtuQr0sT1LHyZga0FzYKXJhiGYwyTYquE9wOov TIc+HRq1bRVfGAdsq0V4cltw7gL+5NaHz+0RQj7IyfaZI0TplGBXfQCDy8htp7RT pm/CeaEm8kV90ayiJTUvj14BswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPh5pnA/ vBr0AqA2KvmtLOdVC1rnMB8GA1UdIwQYMBaAFNwRMNhha6vGzgiPXyDmlxmpnDK7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS8wODlCQzRFNkI2 MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4Yk9DSTlmSU9hWEdhbWNN cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS8wODlCQzRFNkI2MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4 Yk9DSTlmSU9hWEdhbWNNcnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc7YNdgibdaPJySfHxwG3CSUONZxAUdvc/ClbDZPebqnwqgfdPJCmd70KFEpT lueRQVirhXzNqoPhwW+hh6ndQhTf+LnWmLPxXyHSRTSMk+lJ4MCtv67glJE/hH3j 1zHwhrLqOS78Kaq2q/kT6hXzFdjZG7SdeVM2RhPYmDum0oiUEj5MqxV35isuLFLz GMT26ow1kGqyqgYXnLHWiHP+3JaM30XhX25GqyWS/rz/+p6G61MEnYA2Bb0avDUX F984ThITKWTSaNkYHdvyInmg0vEZ06lXMTTn0uDVBg16sEnVYxyW2oAWwBFYrTZF TkpcJt5fSr/eD3hrz+bphg0ARA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:10 2026 by rpki-client