$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft File: 3W8BT4rUXahdDhbys3aHZ5REhbM.mft (raw, json) Hash identifier: XTGdkkg0fcRBf2Q5kwUNZG8FzLBiWz1wT6bXo8xs7pk= Subject key identifier: 08:97:B7:E9:FB:AF:71:99:E3:AB:31:19:56:37:70:C0:57:F9:3C:3D Authority key identifier: DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 Certificate issuer: /CN=A91E8458/serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft Manifest number: 08A2 Signing time: Sun 26 Jul 2026 21:10:46 +0000 Manifest this update: Sun 26 Jul 2026 21:10:46 +0000 Manifest next update: Sun 02 Aug 2026 21:10:46 +0000 Files and hashes: 1: 3W8BT4rUXahdDhbys3aHZ5REhbM.crl (hash: 6BuNuPRuSiDZPcnbaFMuyrxnXCp2w3Cmeqb9FxJSNpc=) 2: FAE7339CF7B911EA91318653C4F9AE02.roa (hash: gjXk5FJ28SiJiqatM16BZg/99HgL3HEPLn3XZb4vIWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8458, serialNumber=DD6F014F8AD45DA85D0E16F2B3768767944485B3 Validity Not Before: Jul 26 21:10:46 2026 GMT Not After : Aug 2 21:10:46 2026 GMT Subject: CN=6a6677d6-bc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:4e:87:4e:0c:0d:a1:69:82:ec:ae:91:d9: 43:63:3d:cb:96:e6:d7:05:79:85:7b:9c:ee:d1:ee: fb:4a:65:0f:25:52:d3:3b:28:8a:ad:f6:8f:f7:5d: 8a:ef:0a:ab:d9:44:50:cd:0f:4e:88:47:39:fe:55: 24:6c:ba:c0:5f:46:31:6d:72:97:3b:eb:24:a0:62: fb:34:08:a6:1f:b7:30:c3:e4:7d:0f:7c:f6:69:f9: f0:86:dd:d6:1c:9e:a2:be:61:89:5e:b9:43:1f:25: 55:38:72:ee:4d:47:3f:49:d9:bd:84:ee:39:5b:db: 93:a7:8c:8c:72:a5:a7:13:7e:0d:4e:17:8b:a4:84: 12:0a:b7:17:45:e5:4b:a2:96:df:be:e7:c8:2e:c1: cd:b9:44:e8:df:b2:4e:c9:6a:b6:e0:6b:6e:6e:4e: f3:49:6a:84:a7:c3:d2:bf:0e:ec:14:ae:21:ad:a7: 36:d2:b2:03:19:2f:91:11:c8:f9:f2:b7:d0:c0:59: 1a:f1:b2:5e:6b:ce:1e:f2:81:a7:d5:fc:6e:1e:19: 8d:f0:f8:b2:46:c5:a7:fa:b5:fa:fd:c2:ca:2c:90: ae:6b:db:64:31:39:4e:69:6d:1e:75:54:f2:bd:aa: 92:91:47:c7:03:e8:2f:94:42:2a:ad:68:75:71:3c: f5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:97:B7:E9:FB:AF:71:99:E3:AB:31:19:56:37:70:C0:57:F9:3C:3D X509v3 Authority Key Identifier: keyid:DD:6F:01:4F:8A:D4:5D:A8:5D:0E:16:F2:B3:76:87:67:94:44:85:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3W8BT4rUXahdDhbys3aHZ5REhbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8458/F8AF1202F61511EA8377006CC4F9AE02/3W8BT4rUXahdDhbys3aHZ5REhbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:31:71:27:84:83:8c:b8:c7:44:b9:b3:1b:ec:02:e0:11:74: 6e:7c:ab:b6:8f:30:1b:52:a8:ed:04:ef:86:22:d3:a2:36:40: 0e:e0:e1:ce:8d:9e:af:66:74:c1:e2:64:31:c1:dd:05:40:6b: c0:2a:03:fb:11:c9:4a:5d:68:90:bd:07:99:92:c1:2e:8d:be: b6:69:7e:ab:49:07:57:9a:8a:91:8c:8f:36:25:67:00:45:4f: 38:33:bf:30:49:96:b4:a0:01:d7:43:67:ea:1d:42:8d:4a:e5: df:c1:60:8f:08:98:65:fb:e4:d5:83:a8:94:a0:1e:6a:ee:e9: bd:d1:2b:40:fb:5a:53:66:9f:73:03:7c:dc:12:f3:17:d6:bf: cf:9e:ac:95:43:1d:91:2f:5b:a8:6c:c4:a6:c2:d5:b1:5d:29: ee:0e:4b:99:dc:f5:b4:1b:14:37:ae:5b:5c:8d:31:cb:b9:2a: 22:40:bf:5a:3c:ff:a7:1e:6d:f3:9c:41:3c:c7:cf:e3:94:4f: 05:9d:bc:1d:a9:85:9a:75:6b:cb:81:1a:0d:12:64:39:1b:62: a7:06:1c:1a:5b:9e:42:66:4f:f9:45:b7:03:db:86:b1:0c:c5: 0f:97:27:3f:3e:ff:78:b5:28:08:32:b6:d5:78:f6:7a:42:bf: f4:bc:50:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0NTgxMTAvBgNVBAUTKERENkYwMTRGOEFENDVEQTg1RDBFMTZGMkIzNzY4NzY3 OTQ0NDg1QjMwHhcNMjYwNzI2MjExMDQ2WhcNMjYwODAyMjExMDQ2WjAYMRYwFAYD VQQDEw02YTY2NzdkNi1iYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g1Oh04MDaFpguyukdlDYz3LlubXBXmFe5zu0e77SmUPJVLTOyiKrfaP912K 7wqr2URQzQ9OiEc5/lUkbLrAX0YxbXKXO+skoGL7NAimH7cww+R9D3z2afnwht3W HJ6ivmGJXrlDHyVVOHLuTUc/Sdm9hO45W9uTp4yMcqWnE34NTheLpIQSCrcXReVL opbfvufILsHNuUTo37JOyWq24Gtubk7zSWqEp8PSvw7sFK4hrac20rIDGS+REcj5 8rfQwFka8bJea84e8oGn1fxuHhmN8PiyRsWn+rX6/cLKLJCua9tkMTlOaW0edVTy vaqSkUfHA+gvlEIqrWh1cTz11wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiXt+n7 r3GZ46sxGVY3cMBX+Tw9MB8GA1UdIwQYMBaAFN1vAU+K1F2oXQ4W8rN2h2eURIWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODQ1OC9GOEFGMTIwMkY2 MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhhaGREaGJ5czNhSFo1UkVo Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNXOEJUNHJVWGFoZERoYnlzM2FIWjVSRWhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQ1OC9GOEFGMTIwMkY2MTUxMUVBODM3NzAwNkNDNEY5QUUwMi8zVzhCVDRyVVhh aGREaGJ5czNhSFo1UkVoYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARDFxJ4SDjLjHRLmzG+wC4BF0bnyrto8wG1Ko7QTvhiLTojZADuDhzo2er2Z0 weJkMcHdBUBrwCoD+xHJSl1okL0HmZLBLo2+tml+q0kHV5qKkYyPNiVnAEVPODO/ MEmWtKAB10Nn6h1CjUrl38FgjwiYZfvk1YOolKAeau7pvdErQPtaU2afcwN83BLz F9a/z56slUMdkS9bqGzEpsLVsV0p7g5Lmdz1tBsUN65bXI0xy7kqIkC/Wjz/px5t 85xBPMfP45RPBZ28HamFmnVry4EaDRJkORtipwYcGlueQmZP+UW3A9uGsQzFD5cn Pz7/eLUoCDK21Xj2ekK/9LxQTQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:17:58 2026 by rpki-client