$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: 8eN5TiEqJ4i6xtag/K2C8UzHO7XnVk2CBuX0+P3NpgI= Subject key identifier: BB:2B:77:2C:F7:95:30:2D:CF:95:14:31:A9:F1:25:C1:7F:A2:CF:7D Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 0896 Signing time: Tue 28 Jul 2026 21:09:34 +0000 Manifest this update: Tue 28 Jul 2026 21:09:34 +0000 Manifest next update: Tue 04 Aug 2026 21:09:34 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: 5DAzLi/SZzRkC4QCtXw4zExgYZnoaVJK4jGIxcRnMEU=) 2: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: j/nx+4vpcVwnZKmSSpLKnqMW2rDHsGt2fGRTh04AQY4=) 3: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: cXh6EKmO4mNgo6W7SACQlk54+m7ofX19QIFxCjJGshk=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: Oay45StLaCFy3ElLitbFqzSRt2aPUrYuOR3+p3SZq8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Jul 28 21:09:34 2026 GMT Not After : Aug 4 21:09:34 2026 GMT Subject: CN=6a691a8e-64c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:d4:ce:7c:7b:5d:5a:ad:09:da:49:43:72: 3b:a9:6b:71:6f:0a:28:4a:42:8b:6c:5c:c4:7a:de: d0:52:bd:70:b0:29:4f:c8:90:73:bd:2d:6b:2e:cb: 04:2b:f8:fb:f9:0c:68:5e:5a:75:bd:7c:62:61:ee: 05:2d:5b:25:16:22:3e:1e:fd:32:c9:bd:c9:9c:6c: 94:15:17:dc:0c:83:b4:a1:d3:a8:85:b2:10:9c:e8: b7:00:0f:c2:80:9c:c9:1b:56:71:a3:42:ec:5f:32: 0a:8e:a6:c6:3d:b1:66:ee:15:b7:c1:c0:ba:e2:ae: 7d:2a:85:c3:ef:f9:e0:2a:c6:e5:79:ce:e3:4b:f2: d1:84:a3:ee:1f:6a:a9:90:e4:2f:25:da:05:16:c6: 77:da:67:1a:15:fc:39:0a:5e:21:1f:ee:24:36:cf: 2a:c8:dc:a7:b9:a8:79:01:46:bc:af:11:6c:d2:78: d9:7c:1f:1b:ee:86:8e:1e:0a:49:22:cc:71:2c:a4: 72:b9:76:ac:42:2a:23:92:61:9f:a4:42:80:b5:6e: 2b:0c:c4:8c:ed:f9:2b:68:d4:45:40:66:39:90:7f: 7d:f1:b8:41:a3:3c:71:7e:6c:68:43:b9:03:03:dd: 65:4d:c5:53:4e:6c:98:97:e9:d4:2e:f3:0c:13:1a: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2B:77:2C:F7:95:30:2D:CF:95:14:31:A9:F1:25:C1:7F:A2:CF:7D X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:db:a9:e6:95:d2:c4:f1:72:9a:95:57:43:ab:e4:77:20:59: ec:dd:a8:e6:b6:5e:7a:17:ad:3d:b4:83:94:73:b9:cb:5d:dd: 9c:d0:11:ed:09:7b:52:a0:82:b6:a7:5a:98:cc:4a:67:65:7d: 66:be:17:ff:8b:2d:6f:ee:2c:67:49:81:49:45:d9:46:f1:40: f5:9b:6a:80:41:94:46:f1:55:61:6d:91:37:c6:c9:f4:89:7c: 0c:c8:99:62:71:52:c7:04:1d:b2:5a:50:27:91:4b:5e:68:2b: 3c:56:59:b8:b0:d6:08:2b:d0:45:0b:ef:41:82:09:55:53:2a: c9:1f:09:d6:7d:84:a9:68:8a:ff:69:2a:2a:09:50:9d:59:25: b7:0c:67:c1:51:c5:3a:58:fa:df:09:6c:85:4e:b4:41:af:ee: 2d:04:5e:79:5a:be:24:16:9e:40:1b:c9:50:a9:b4:a7:7a:05: 06:fd:bf:ce:a8:b4:b5:26:5d:da:73:74:ce:88:59:d2:61:4f: e3:3b:64:3b:71:da:55:ce:4c:9e:dc:aa:70:bc:76:e2:8b:99: 0d:35:94:99:b1:99:8c:7b:98:01:79:1b:e3:44:1d:32:b2:b8: 48:bd:de:85:90:38:06:6c:b9:f9:b8:a0:c0:78:d1:35:6e:06: e8:a0:f4:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwNzI4MjEwOTM0WhcNMjYwODA0MjEwOTM0WjAYMRYwFAYD VQQDEw02YTY5MWE4ZS02NGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtPUznx7XVqtCdpJQ3I7qWtxbwooSkKLbFzEet7QUr1wsClPyJBzvS1rLssE K/j7+QxoXlp1vXxiYe4FLVslFiI+Hv0yyb3JnGyUFRfcDIO0odOohbIQnOi3AA/C gJzJG1Zxo0LsXzIKjqbGPbFm7hW3wcC64q59KoXD7/ngKsblec7jS/LRhKPuH2qp kOQvJdoFFsZ32mcaFfw5Cl4hH+4kNs8qyNynuah5AUa8rxFs0njZfB8b7oaOHgpJ IsxxLKRyuXasQiojkmGfpEKAtW4rDMSM7fkraNRFQGY5kH998bhBozxxfmxoQ7kD A91lTcVTTmyYl+nULvMMExq8PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsrdyz3 lTAtz5UUManxJcF/os99MB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS9up5pXSxPFympVXQ6vkdyBZ7N2o5rZeehetPbSDlHO5y13dnNAR7Ql7UqCC tqdamMxKZ2V9Zr4X/4stb+4sZ0mBSUXZRvFA9ZtqgEGURvFVYW2RN8bJ9Il8DMiZ YnFSxwQdslpQJ5FLXmgrPFZZuLDWCCvQRQvvQYIJVVMqyR8J1n2EqWiK/2kqKglQ nVkltwxnwVHFOlj63wlshU60Qa/uLQReeVq+JBaeQBvJUKm0p3oFBv2/zqi0tSZd 2nN0zohZ0mFP4ztkO3HaVc5MntyqcLx24ouZDTWUmbGZjHuYAXkb40QdMrK4SL3e hZA4Bmy5+bigwHjRNW4G6KD0gQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:53:59 2026 by rpki-client