$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: c/Tco9wmWvQOoH2B7teOvhPga580GzQqRUwqG/7C8LU= Subject key identifier: BB:8B:EC:F7:C0:7D:E1:2D:DE:52:D4:16:CA:5A:B4:C2:58:1F:8D:8A Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0B21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0B13 Signing time: Sun 26 Jul 2026 19:46:21 +0000 Manifest this update: Sun 26 Jul 2026 19:46:20 +0000 Manifest next update: Sun 02 Aug 2026 19:46:20 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: WB06xGpc+jvjwCZNK8KkjfVSvv4nENvUOQd5fwotlpU=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2849 (0xb21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Jul 26 19:46:20 2026 GMT Not After : Aug 2 19:46:20 2026 GMT Subject: CN=6a66640d-0f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a3:dc:30:9a:dc:77:64:3c:19:c4:87:79:52: b3:07:ec:2f:0f:16:f9:a0:f7:8c:96:a2:cb:1c:3e: 55:a8:46:d2:82:51:f2:05:98:4a:7a:d2:36:56:96: 45:59:14:41:35:e9:96:58:f0:d0:08:c7:72:37:0f: 5e:41:5e:55:ad:a8:d3:23:b3:52:5d:f3:b2:c9:ef: d9:b2:e8:71:48:3e:59:cb:48:81:b7:9c:33:0a:2b: 52:69:43:d4:3f:c6:85:b2:26:c5:df:96:37:de:db: 53:76:76:9b:98:f1:8b:34:1c:ce:e5:29:37:00:60: fb:4a:a5:8b:71:30:9e:d2:e6:58:1b:42:5b:e5:80: 97:67:2c:f4:85:b1:8c:90:2f:e2:2c:e9:4d:64:da: 7c:a1:b1:e5:f4:ba:d6:66:0d:d1:a2:48:21:af:e6: c5:c4:ef:3f:7e:a2:f2:2e:06:5a:9a:38:ba:ce:5c: 26:71:f9:58:69:8f:26:a3:74:49:35:1b:76:e9:1e: 56:01:92:ef:c0:35:87:11:1a:cc:df:d5:c3:14:58: 2d:8e:85:0e:54:6f:09:2b:27:e5:74:3b:81:e0:e0: 70:ff:64:83:bf:43:3a:a9:32:f5:c1:7f:92:2f:a5: a3:98:e0:9f:93:92:c8:a9:1a:a8:be:99:eb:f8:28: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:EC:F7:C0:7D:E1:2D:DE:52:D4:16:CA:5A:B4:C2:58:1F:8D:8A X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b7:c3:f3:73:d4:dc:c8:ee:c6:38:b2:d0:f4:a2:c9:a1:85: cb:af:6e:78:48:ec:2c:b4:28:09:fe:98:ce:3a:b7:9d:55:ef: 39:09:2c:ba:23:63:c1:0d:a7:8e:92:0a:3d:b0:8d:b2:91:27: 8b:d1:a7:2a:d3:f4:6e:52:cb:08:5f:82:3b:e8:f8:45:ac:3b: 52:4d:66:e2:e8:38:0e:ee:55:54:31:0d:8a:3f:03:18:a4:ce: d2:4c:47:95:d5:3e:c1:ad:98:88:44:a3:7f:23:76:69:b2:bf: f6:b3:ab:fd:14:56:a8:7a:b7:27:13:20:ec:11:98:6b:08:7f: 2b:25:95:aa:70:de:bd:9f:5e:68:4a:1f:8d:9b:73:ab:c6:85: 01:b0:d7:86:af:33:8c:fc:bf:21:a8:f2:04:86:68:7b:c9:2f: 78:cd:04:3a:5f:7c:30:eb:3f:a3:6e:82:85:9f:e9:54:60:56: 6c:f6:52:14:fc:2a:0e:b3:ab:4a:e5:dd:89:6c:9b:c5:a0:00: 8f:c7:1b:2a:3e:e2:f7:b9:19:2f:ca:d4:93:e7:c1:48:4c:39: 38:a0:67:34:2e:dd:db:f3:93:dc:25:7a:d0:1f:47:77:8f:55: 72:ea:25:cc:03:3d:d1:78:43:e6:d5:6a:e2:df:b7:d0:8b:0f: c7:de:56:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjYwNzI2MTk0NjIwWhcNMjYwODAyMTk0NjIwWjAYMRYwFAYD VQQDEw02YTY2NjQwZC0wZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+KPcMJrcd2Q8GcSHeVKzB+wvDxb5oPeMlqLLHD5VqEbSglHyBZhKetI2VpZF WRRBNemWWPDQCMdyNw9eQV5VrajTI7NSXfOyye/ZsuhxSD5Zy0iBt5wzCitSaUPU P8aFsibF35Y33ttTdnabmPGLNBzO5Sk3AGD7SqWLcTCe0uZYG0Jb5YCXZyz0hbGM kC/iLOlNZNp8obHl9LrWZg3Rokghr+bFxO8/fqLyLgZamji6zlwmcflYaY8mo3RJ NRt26R5WAZLvwDWHERrM39XDFFgtjoUOVG8JKyfldDuB4OBw/2SDv0M6qTL1wX+S L6WjmOCfk5LIqRqovpnr+ChqjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuL7PfA feEt3lLUFspatMJYH42KMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGLfD83PU3Mjuxjiy0PSiyaGFy69ueEjsLLQoCf6Yzjq3nVXvOQksuiNjwQ2n jpIKPbCNspEni9GnKtP0blLLCF+CO+j4Raw7Uk1m4ug4Du5VVDENij8DGKTO0kxH ldU+wa2YiESjfyN2abK/9rOr/RRWqHq3JxMg7BGYawh/KyWVqnDevZ9eaEofjZtz q8aFAbDXhq8zjPy/IajyBIZoe8kveM0EOl98MOs/o26ChZ/pVGBWbPZSFPwqDrOr SuXdiWybxaAAj8cbKj7i97kZL8rUk+fBSEw5OKBnNC7d2/OT3CV60B9Hd49Vcuol zAM90XhD5tVq4t+30IsPx95WqA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:24:00 2026 by rpki-client