$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft File: 3dzECt5nfyP4p5ukFo729r7wZcc.mft (raw, json) Hash identifier: 7giAh0v2CeyZumtBgoyXCBEvF/RfB2vm2+n44A2xtz8= Subject key identifier: 9B:77:72:81:0F:45:B1:CA:CB:78:DE:0A:49:EC:70:37:18:04:BF:4E Authority key identifier: DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 Certificate issuer: /CN=A91CB2E2/serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft Manifest number: A8 Signing time: Mon 27 Jul 2026 09:20:37 +0000 Manifest this update: Mon 27 Jul 2026 09:20:37 +0000 Manifest next update: Mon 03 Aug 2026 09:20:37 +0000 Files and hashes: 1: 3dzECt5nfyP4p5ukFo729r7wZcc.crl (hash: 4l5gtIN2EM2j2OKUZ1ZEs2+Z/xZnpKdF+Sa7uxsCz84=) 2: 240EF95E896311F0B911053BC4F9AE02.roa (hash: bgfPYSTEsSkfhGSuxOoFNVtQR8SOazKoHfsSU4GrHl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB2E2, serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Validity Not Before: Jul 27 09:20:37 2026 GMT Not After : Aug 3 09:20:37 2026 GMT Subject: CN=6a6722e5-fedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:ff:d2:91:c4:13:bc:3e:9d:2f:33:35:8c: 7b:30:6a:67:88:17:29:2d:d9:a7:fd:6e:f5:9b:30: c3:1c:4c:b8:f8:c1:ad:52:fa:fe:6a:25:df:dd:b7: 66:c7:53:da:ca:de:89:1e:ea:86:cc:cc:38:1c:9e: 87:77:b3:1b:04:8a:96:b0:6d:25:73:98:72:00:06: 67:2d:67:b7:0e:75:09:0c:8c:f2:d8:a2:22:89:0b: 21:6f:52:0d:85:ac:6f:ef:e6:b1:40:f3:b8:8f:f1: 83:10:2f:13:3c:2d:74:93:2e:b1:d7:99:28:e1:ff: 58:d0:33:3c:47:0e:64:fa:91:04:17:fb:fb:5a:ad: da:c8:18:e5:35:e3:43:92:ef:7c:c2:ff:61:b5:fd: 60:95:39:53:68:df:be:cb:1f:a4:6a:fb:2b:bc:8f: 95:7c:b3:92:18:54:3f:48:b0:c8:85:84:5a:02:86: 5d:dd:2d:d9:32:72:3d:1e:52:23:bd:5b:6f:62:3f: ba:1d:f9:f9:6d:4e:ed:55:17:57:8e:03:3c:74:85: c9:3a:e1:8d:62:17:c5:53:17:d8:71:89:d6:e9:30: 70:2a:82:ab:0d:d0:e3:bb:4b:47:2b:40:b6:26:6d: 0c:fa:30:08:74:be:10:db:7c:9a:2a:49:66:b9:41: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:77:72:81:0F:45:B1:CA:CB:78:DE:0A:49:EC:70:37:18:04:BF:4E X509v3 Authority Key Identifier: keyid:DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:74:18:68:b2:29:2b:5c:3a:ea:b1:23:a3:cb:ca:f5:2d:49: ad:54:b6:ef:4a:9f:74:94:5f:6b:b4:55:ff:be:89:55:62:23: 28:c9:5f:b7:11:5b:41:80:34:ac:56:46:ae:24:75:ae:6a:46: 45:2c:16:73:b7:99:ca:6a:5a:46:7c:72:56:84:5f:00:cc:dc: 07:db:f3:d3:20:71:64:fe:37:87:33:4d:54:3c:22:3d:35:7f: 2a:c8:06:82:58:1c:6e:a2:e8:ac:a8:a5:5c:4a:56:c4:84:33: c5:51:66:d7:6e:75:53:2b:0e:6c:84:be:ec:41:9b:be:f5:08: 09:49:9a:6c:1a:3e:3a:5c:33:51:96:a0:90:77:e8:d6:e2:8d: da:42:22:96:60:1c:a5:9a:37:49:7f:ba:92:f6:0f:7b:00:e2: 47:3e:5d:b8:bf:d2:e9:a0:d9:17:e2:e2:11:f6:03:52:4c:41: 2b:d8:25:91:0f:86:8c:76:78:bd:0b:40:04:65:7a:48:b0:1f: fb:2b:0f:8a:98:54:13:eb:fc:83:d8:9e:50:02:f1:e9:df:b4: c7:0c:de:6e:ca:81:88:13:0d:20:f7:4c:12:90:a3:cb:fb:d0: c6:7e:80:ac:ab:ff:c2:54:54:a9:c7:bc:b1:ab:48:27:7f:3e: 52:d7:98:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyRTIxMTAvBgNVBAUTKERERENDNDBBREU2NzdGMjNGOEE3OUJBNDE2OEVGNkY2 QkVGMDY1QzcwHhcNMjYwNzI3MDkyMDM3WhcNMjYwODAzMDkyMDM3WjAYMRYwFAYD VQQDEw02YTY3MjJlNS1mZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWP/0pHEE7w+nS8zNYx7MGpniBcpLdmn/W71mzDDHEy4+MGtUvr+aiXf3bdm x1Payt6JHuqGzMw4HJ6Hd7MbBIqWsG0lc5hyAAZnLWe3DnUJDIzy2KIiiQshb1IN haxv7+axQPO4j/GDEC8TPC10ky6x15ko4f9Y0DM8Rw5k+pEEF/v7Wq3ayBjlNeND ku98wv9htf1glTlTaN++yx+kavsrvI+VfLOSGFQ/SLDIhYRaAoZd3S3ZMnI9HlIj vVtvYj+6Hfn5bU7tVRdXjgM8dIXJOuGNYhfFUxfYcYnW6TBwKoKrDdDju0tHK0C2 Jm0M+jAIdL4Q23yaKklmuUHx0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJt3coEP RbHKy3jeCknscDcYBL9OMB8GA1UdIwQYMBaAFN3cxAreZ38j+KebpBaO9va+8GXH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjJFMi80MTFDNjNCMDg5 NTkxMUYwQkE2NTM0NURDNEY5QUUwMi8zZHpFQ3Q1bmZ5UDRwNXVrRm83MjlyN3da Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkekVDdDVuZnlQNHA1dWtGbzcyOXI3d1pjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjJFMi80MTFDNjNCMDg5NTkxMUYwQkE2NTM0NURDNEY5QUUwMi8zZHpFQ3Q1bmZ5 UDRwNXVrRm83MjlyN3daY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy3QYaLIpK1w66rEjo8vK9S1JrVS270qfdJRfa7RV/76JVWIjKMlftxFbQYA0 rFZGriR1rmpGRSwWc7eZympaRnxyVoRfAMzcB9vz0yBxZP43hzNNVDwiPTV/KsgG glgcbqLorKilXEpWxIQzxVFm1251UysObIS+7EGbvvUICUmabBo+OlwzUZagkHfo 1uKN2kIilmAcpZo3SX+6kvYPewDiRz5duL/S6aDZF+LiEfYDUkxBK9glkQ+GjHZ4 vQtABGV6SLAf+ysPiphUE+v8g9ieUALx6d+0xwzebsqBiBMNIPdMEpCjy/vQxn6A rKv/wlRUqce8satIJ38+UteYgg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:12:44 2026 by rpki-client