$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: Z+BUCUBJMGuoL8Kog4WJsYJ/9EIqOmNjTRcSAI2FY54= Subject key identifier: F6:10:3B:31:25:45:1A:1C:9A:4D:70:6D:C8:A0:96:9E:9B:1E:54:24 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 02A3 Signing time: Mon 27 Jul 2026 02:59:04 +0000 Manifest this update: Mon 27 Jul 2026 02:59:04 +0000 Manifest next update: Mon 03 Aug 2026 02:59:04 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: VicRO70lZ+vMxfWSp8DkPjFRCWXXToIVsGES6PLefIo=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: cHa7YclYlDuD3d6uVoFpYSql4Y83b6GnqkLI1omuRXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Jul 27 02:59:04 2026 GMT Not After : Aug 3 02:59:04 2026 GMT Subject: CN=6a66c978-bf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:68:89:7b:b9:da:64:28:e1:a5:3d:17:93: d2:89:97:59:ad:db:f2:b3:f2:ad:1e:4d:10:f0:e4: 5d:5a:6d:0d:6a:ae:81:8a:0f:0f:a6:24:a8:d1:58: 00:9c:59:5c:0b:f2:41:48:53:88:37:50:c3:2b:4d: 39:a9:e2:51:db:63:e0:5d:cf:36:4c:85:b0:41:b0: f7:ed:2b:a4:42:5b:29:56:86:15:61:7a:de:4b:82: 9a:09:d2:c9:41:54:49:d5:45:46:25:45:d9:6f:9f: 22:b9:fa:d0:63:a3:b0:1a:63:89:8a:b6:be:93:d6: 7f:f4:83:b3:4f:1f:a8:0d:a6:8a:4d:5c:1f:7b:00: b7:dd:1d:fe:c3:8f:09:3f:41:2c:ac:d8:9a:f4:bc: 51:02:cd:d0:52:c2:3f:01:08:84:31:b8:72:9a:b0: 61:53:f5:11:fb:56:18:a9:e4:5d:8a:3d:04:cb:44: fd:c9:2b:94:34:49:32:b4:9f:0c:63:91:6f:3e:bf: 84:5d:46:3a:f1:43:a3:ad:49:e0:44:c6:4e:c4:38: 36:6a:00:da:78:dd:ed:6a:e1:70:8b:62:97:4d:b1: 2a:11:82:5c:3c:76:eb:44:27:7f:25:11:65:9f:13: c1:d6:72:f2:9e:63:9f:12:8c:2f:2b:35:84:0b:a7: ac:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:10:3B:31:25:45:1A:1C:9A:4D:70:6D:C8:A0:96:9E:9B:1E:54:24 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:01:a9:84:fc:cd:1a:31:5c:a8:3e:73:e1:42:fe:aa:8c:43: 01:ae:34:6c:b9:89:65:37:1d:40:ba:8b:b9:22:b0:d9:6e:3c: e9:70:b0:1e:f8:24:5e:2a:52:fb:db:86:12:12:ca:41:79:5c: 58:45:6a:df:28:1d:9f:93:4c:4e:81:fd:fe:c9:7f:f3:0a:dd: 79:45:03:21:26:d3:d5:64:d7:8d:fe:61:9c:82:01:1c:de:91: 74:d0:50:13:c3:93:96:bb:57:4d:05:45:ac:5c:19:2c:b8:35: 76:ec:61:49:73:25:15:78:38:cd:3e:4f:ce:6c:77:c1:83:03: 24:f3:88:6d:67:a8:d7:fd:78:17:53:cc:1c:3e:36:6d:86:aa: 47:0d:8a:95:50:60:b7:72:3c:32:95:83:af:6c:9c:2c:24:c8: 61:86:1b:6a:b1:f3:4c:63:0d:9e:7d:b2:db:2c:6b:db:68:ce: 8b:24:b8:0d:bc:93:2a:e0:03:76:e1:f2:f4:cf:a5:58:94:64: 6e:47:30:c4:eb:94:d7:30:8d:f4:e6:91:7c:3a:02:80:45:73: 12:48:c1:de:5f:90:b3:94:ce:3b:50:3e:a3:b1:0a:2e:0b:45: 65:ca:5c:ec:93:5b:73:61:79:91:18:4b:23:74:a1:13:e3:7f: a9:e6:9e:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjYwNzI3MDI1OTA0WhcNMjYwODAzMDI1OTA0WjAYMRYwFAYD VQQDEw02YTY2Yzk3OC1iZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlJoiXu52mQo4aU9F5PSiZdZrdvys/KtHk0Q8ORdWm0Naq6Big8PpiSo0VgA nFlcC/JBSFOIN1DDK005qeJR22PgXc82TIWwQbD37SukQlspVoYVYXreS4KaCdLJ QVRJ1UVGJUXZb58iufrQY6OwGmOJira+k9Z/9IOzTx+oDaaKTVwfewC33R3+w48J P0EsrNia9LxRAs3QUsI/AQiEMbhymrBhU/UR+1YYqeRdij0Ey0T9ySuUNEkytJ8M Y5FvPr+EXUY68UOjrUngRMZOxDg2agDaeN3tauFwi2KXTbEqEYJcPHbrRCd/JRFl nxPB1nLynmOfEowvKzWEC6esmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYQOzEl RRocmk1wbciglp6bHlQkMB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcwGphPzNGjFcqD5z4UL+qoxDAa40bLmJZTcdQLqLuSKw2W486XCwHvgkXipS +9uGEhLKQXlcWEVq3ygdn5NMToH9/sl/8wrdeUUDISbT1WTXjf5hnIIBHN6RdNBQ E8OTlrtXTQVFrFwZLLg1duxhSXMlFXg4zT5Pzmx3wYMDJPOIbWeo1/14F1PMHD42 bYaqRw2KlVBgt3I8MpWDr2ycLCTIYYYbarHzTGMNnn2y2yxr22jOiyS4DbyTKuAD duHy9M+lWJRkbkcwxOuU1zCN9OaRfDoCgEVzEkjB3l+Qs5TOO1A+o7EKLgtFZcpc 7JNbc2F5kRhLI3ShE+N/qeaedw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:59:49 2026 by rpki-client