$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: dT+UgmUR6jICCBV3ZO/zBc1YJuTgLCg8/E4i5xqFcZI= Subject key identifier: FD:86:9D:C6:26:75:5B:ED:17:AE:84:EA:80:42:41:B5:AA:A9:F6:2A Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0EA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0E5A Signing time: Tue 28 Jul 2026 17:57:07 +0000 Manifest this update: Tue 28 Jul 2026 17:57:07 +0000 Manifest next update: Tue 04 Aug 2026 17:57:07 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: ydLh1UP6ENpGsgfzadGTi5CO86A0sF2/P5NitayXIWk=) 2: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: V7vJC1rGtCuOdSFWDJjdd3JhuVIPp/Zsx063dJpSpzo=) 3: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (hash: R/iJ4c5PH31y7CSM0LznhAJ3uqMaJ3657UNaVBCq6Pk=) 4: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: GS10eEt1MCcAl1eDM0DD66Q/CuCpMh/GfO+nM5nY1Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3747 (0xea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Jul 28 17:57:07 2026 GMT Not After : Aug 4 17:57:07 2026 GMT Subject: CN=6a68ed73-fc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:23:a3:bb:66:25:a6:19:c3:5c:76:61:8d: f8:34:fb:17:da:60:e5:26:30:54:e5:56:be:3b:b8: f8:1e:63:47:1c:7c:a5:e6:a7:72:01:59:2e:3e:e6: 70:62:42:15:ea:70:a7:05:67:23:94:64:d6:17:a2: 9e:65:d7:b4:b1:03:f6:86:9a:51:0d:29:f7:b1:ae: 1d:43:e2:e5:e3:82:8c:61:1d:7a:b1:66:79:3b:1a: a7:27:6e:46:6e:17:1b:02:d0:30:67:d6:48:b6:36: 34:8d:5e:a9:16:fd:2f:ed:27:13:22:d7:aa:0b:76: 93:5a:46:21:15:f1:03:60:af:3e:5c:59:73:2d:27: 37:a3:06:7c:28:da:37:72:be:59:2f:43:d6:77:01: 4e:0e:88:a6:dc:0c:76:f9:66:24:8e:53:2c:4a:c6: 56:5c:8c:8b:db:d6:df:6b:62:20:95:38:2d:d9:1e: ba:98:4f:df:77:b9:1a:d0:29:2c:b3:5a:47:48:b5: b0:50:9b:3f:d9:a4:49:89:fc:a1:f8:02:0d:7c:fd: 8e:d2:af:d7:3d:51:a2:39:7e:fd:9e:cf:0b:fe:1c: d6:b9:69:c7:36:7d:b5:f1:8a:b9:34:9f:ec:df:30: 00:f3:ee:70:c2:06:de:4c:1e:a0:8e:0d:62:1f:df: 50:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:86:9D:C6:26:75:5B:ED:17:AE:84:EA:80:42:41:B5:AA:A9:F6:2A X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:24:84:f7:88:a5:5a:d5:0d:0b:61:8a:f2:f9:18:20:a3:d0: 42:4f:81:81:20:41:3f:3c:61:b6:d7:a1:db:20:ca:0f:67:6f: 12:db:1e:5d:11:1b:4d:61:49:36:04:22:6f:61:db:79:1f:56: a4:93:14:64:1f:47:0a:9f:ce:56:7b:3e:9d:06:e2:64:c9:6d: 0e:d0:1b:5d:6e:1b:27:0c:7a:6f:07:a9:01:ee:35:65:18:06: e9:6c:6c:34:44:15:47:58:a9:64:e7:9e:1a:45:2c:8e:08:04: 0a:2f:bd:d7:c2:03:29:97:ab:a1:6e:91:bb:81:d9:2e:9e:8c: 6f:57:e7:55:b1:73:e9:c2:69:d1:f0:20:4e:7c:77:3f:99:b2: c2:ed:0b:aa:22:1d:00:0d:66:5f:88:94:e0:29:dd:1c:02:ad: 8a:51:73:16:ea:27:33:95:4a:d0:18:88:4b:0a:dc:30:13:fa: 9b:69:03:d7:60:ee:ea:ef:e5:1a:da:51:e4:49:b3:71:fb:10: ec:83:c7:c7:98:4d:59:63:9f:21:1f:bb:39:76:5f:8c:b2:33: 36:c7:6c:8f:cb:52:63:11:44:55:76:ab:1c:a7:62:14:31:78: e8:1f:5b:0c:70:51:fb:87:0c:a6:3c:17:a5:20:eb:f5:5c:ac: 68:dc:18:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwNzI4MTc1NzA3WhcNMjYwODA0MTc1NzA3WjAYMRYwFAYD VQQDEw02YTY4ZWQ3My1mYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+Yjo7tmJaYZw1x2YY34NPsX2mDlJjBU5Va+O7j4HmNHHHyl5qdyAVkuPuZw YkIV6nCnBWcjlGTWF6KeZde0sQP2hppRDSn3sa4dQ+Ll44KMYR16sWZ5OxqnJ25G bhcbAtAwZ9ZItjY0jV6pFv0v7ScTIteqC3aTWkYhFfEDYK8+XFlzLSc3owZ8KNo3 cr5ZL0PWdwFODoim3Ax2+WYkjlMsSsZWXIyL29bfa2IglTgt2R66mE/fd7ka0Cks s1pHSLWwUJs/2aRJifyh+AINfP2O0q/XPVGiOX79ns8L/hzWuWnHNn218Yq5NJ/s 3zAA8+5wwgbeTB6gjg1iH99QZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2GncYm dVvtF66E6oBCQbWqqfYqMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwSSE94ilWtUNC2GK8vkYIKPQQk+BgSBBPzxhtteh2yDKD2dvEtseXREbTWFJ NgQib2HbeR9WpJMUZB9HCp/OVns+nQbiZMltDtAbXW4bJwx6bwepAe41ZRgG6Wxs NEQVR1ipZOeeGkUsjggECi+918IDKZeroW6Ru4HZLp6Mb1fnVbFz6cJp0fAgTnx3 P5mywu0LqiIdAA1mX4iU4CndHAKtilFzFuonM5VK0BiISwrcMBP6m2kD12Du6u/l GtpR5EmzcfsQ7IPHx5hNWWOfIR+7OXZfjLIzNsdsj8tSYxFEVXarHKdiFDF46B9b DHBR+4cMpjwXpSDr9VysaNwYLA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:34:53 2026 by rpki-client