$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: 3d37JLajlxn9sGN3fdCeY85ZwedEiXzkce3BrknXaJw= Subject key identifier: 8E:A2:70:61:6C:B4:1D:DD:CE:7C:02:F1:56:29:23:47:6D:9B:24:7A Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 0A30 Signing time: Sun 26 Jul 2026 20:14:12 +0000 Manifest this update: Sun 26 Jul 2026 20:14:12 +0000 Manifest next update: Sun 02 Aug 2026 20:14:12 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: nxGuht2TEO1yZhAgjY3ptkZPyCLQVXQCKYleqihaI/0=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: OYi6iPOzlWh6eoXqX49fJiVTJCcfXyryKflqKEAnvYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Jul 26 20:14:12 2026 GMT Not After : Aug 2 20:14:12 2026 GMT Subject: CN=6a666a94-a737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:2f:84:2b:28:a4:25:d4:0d:6c:af:0c:ef: 9c:3e:0a:d2:31:0f:95:7a:34:21:81:cd:8c:38:4b: 41:8f:ee:70:24:55:20:13:68:82:f4:ca:6f:f0:40: 65:ea:5f:fa:7d:5f:df:e9:36:50:20:e6:f1:54:c0: 26:f3:5b:65:3f:32:2d:73:0e:aa:f9:2f:32:e9:6c: fa:57:e6:46:d0:00:1b:59:2b:6a:dd:b0:ef:99:00: af:3b:0b:6a:8a:d4:72:a9:fa:0a:b1:62:6e:22:cd: 19:87:63:ee:c2:6c:14:4b:97:4c:bc:cc:d5:1c:5b: 7f:b4:cf:a1:24:60:43:42:8c:fe:9e:a6:23:a5:e3: 1b:8f:a2:b7:4b:f6:77:d3:2d:e9:d8:84:7a:cb:e2: 47:fd:67:9c:cc:2b:46:e7:86:12:a1:fb:bb:af:09: 90:cc:5b:fa:23:33:54:d7:f6:a4:bd:4d:2d:b5:0e: 38:70:bd:dc:50:10:43:d3:7f:ab:da:13:f7:a5:18: 73:96:3f:8a:db:cc:9b:26:2c:8f:16:f5:ba:13:3e: 79:cf:7c:c0:c8:fe:9e:df:b9:eb:f9:04:08:c5:63: 08:16:cf:ce:7b:07:2a:50:32:78:46:5f:41:6c:50: 1d:86:83:38:ed:61:d9:fb:06:7b:7a:90:bf:68:02: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A2:70:61:6C:B4:1D:DD:CE:7C:02:F1:56:29:23:47:6D:9B:24:7A X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3d:e3:90:0e:45:c5:2f:b1:3e:56:c4:c1:40:c8:f9:d3:03: eb:b8:ca:47:9f:6a:b8:fc:57:58:06:ee:50:7b:dc:0b:8a:16: c1:f8:23:88:b3:b2:b1:42:49:6e:be:92:16:0c:4c:9f:c5:73: 44:1d:61:63:dd:b4:d5:e8:28:64:58:21:da:f1:ff:dd:33:4b: 76:8e:e3:b8:98:c8:85:36:20:7d:4f:f3:17:18:49:96:b1:7f: 16:02:df:d4:cf:3d:cb:47:b3:b1:ee:5c:6b:83:1e:14:04:d4: 7e:75:52:27:f8:63:7b:dc:53:1e:e8:5b:2d:0c:1b:77:ba:32: ad:19:a6:98:d0:26:0e:5e:c8:9d:f9:48:48:7b:4a:58:8e:bd: f0:ad:f8:65:84:ae:f6:72:98:dd:7d:1b:92:ba:bd:e1:c7:fb: 1c:62:75:da:2e:2a:e9:8a:ce:bc:2c:66:cc:3e:97:32:ee:eb: f1:54:d9:cf:f5:b6:07:17:23:e9:17:7a:e4:86:18:d0:4a:a5: a6:47:64:e9:2c:59:61:24:12:da:a1:46:db:f4:63:3b:67:24: 9f:30:19:bf:5f:33:c9:42:6a:89:d9:07:a5:bb:0c:3e:e5:01: d6:83:e7:dd:e8:4c:01:fd:63:c2:94:ed:86:3d:32:02:4e:3c: de:c9:ed:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjYwNzI2MjAxNDEyWhcNMjYwODAyMjAxNDEyWjAYMRYwFAYD VQQDEw02YTY2NmE5NC1hNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7QvhCsopCXUDWyvDO+cPgrSMQ+VejQhgc2MOEtBj+5wJFUgE2iC9Mpv8EBl 6l/6fV/f6TZQIObxVMAm81tlPzItcw6q+S8y6Wz6V+ZG0AAbWStq3bDvmQCvOwtq itRyqfoKsWJuIs0Zh2PuwmwUS5dMvMzVHFt/tM+hJGBDQoz+nqYjpeMbj6K3S/Z3 0y3p2IR6y+JH/WeczCtG54YSofu7rwmQzFv6IzNU1/akvU0ttQ44cL3cUBBD03+r 2hP3pRhzlj+K28ybJiyPFvW6Ez55z3zAyP6e37nr+QQIxWMIFs/OewcqUDJ4Rl9B bFAdhoM47WHZ+wZ7epC/aAJU0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6icGFs tB3dznwC8VYpI0dtmyR6MB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhz3jkA5FxS+xPlbEwUDI+dMD67jKR59quPxXWAbuUHvcC4oWwfgjiLOysUJJ br6SFgxMn8VzRB1hY9201egoZFgh2vH/3TNLdo7juJjIhTYgfU/zFxhJlrF/FgLf 1M89y0ezse5ca4MeFATUfnVSJ/hje9xTHuhbLQwbd7oyrRmmmNAmDl7InflISHtK WI698K34ZYSu9nKY3X0bkrq94cf7HGJ12i4q6YrOvCxmzD6XMu7r8VTZz/W2Bxcj 6Rd65IYY0Eqlpkdk6SxZYSQS2qFG2/RjO2cknzAZv18zyUJqidkHpbsMPuUB1oPn 3ehMAf1jwpTthj0yAk483sntyg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:16 2026 by rpki-client