$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft File: 3rTAuQf6yhxdN3a9SUb0uqjKazA.mft (raw, json) Hash identifier: pwb/6cScprPApj/tzxDO+8a7pmRJupS67ZmOkpRy+lw= Subject key identifier: F4:11:69:15:D4:CB:D7:F8:CC:E4:0E:04:55:DC:10:D3:B2:70:F2:88 Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 Certificate issuer: /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft Manifest number: FE Signing time: Wed 29 Jul 2026 07:42:19 +0000 Manifest this update: Wed 29 Jul 2026 07:42:19 +0000 Manifest next update: Wed 05 Aug 2026 07:42:19 +0000 Files and hashes: 1: 3rTAuQf6yhxdN3a9SUb0uqjKazA.crl (hash: bNLXY1703wMu1Akok7LbsALATsAQaJIuKGTIIHDz9S8=) 2: 938098BE5CFE11F18D5CD5949D833773.roa (hash: YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 07:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30 Validity Not Before: Jul 29 07:42:19 2026 GMT Not After : Aug 5 07:42:19 2026 GMT Subject: CN=6a69aedb-e279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:d1:e8:61:33:8d:65:da:43:59:cc:3b:ac: 93:bb:20:5e:20:1e:b6:59:17:89:f7:62:6b:92:6f: 9c:b7:d8:07:14:23:f8:29:20:6f:88:b7:a0:a0:2c: 8c:46:80:40:4b:01:6b:f7:63:12:76:ef:99:9b:b4: 01:b2:47:74:3b:dc:66:1e:85:39:cd:5a:f4:8a:94: 3e:d1:18:4c:da:ab:ff:90:c7:2f:3f:c1:6f:58:3a: ce:2c:22:f8:9d:51:73:73:59:cc:60:54:9e:b9:1f: 06:5c:18:04:3b:17:ad:df:33:79:34:4f:73:69:44: 3c:8f:37:49:f7:26:4c:e0:02:bf:68:21:a8:21:e7: 77:f7:35:12:23:d5:c4:dd:38:6b:1b:f3:d7:5b:2a: b9:2c:0e:a7:61:f1:52:58:35:e2:f8:9f:a3:68:1e: bc:a0:9b:42:8d:7c:28:23:5a:72:ed:b3:ed:a7:24: 95:e6:18:e4:16:47:20:da:36:ae:2d:07:4d:24:9a: c3:e2:73:4b:08:22:41:d0:85:5e:1f:f3:9d:69:71: ca:db:af:d3:56:96:54:74:2f:88:e2:ce:60:c6:38: fe:7c:db:77:b5:da:05:97:02:b4:80:c2:36:6b:3c: bf:1e:60:3d:13:72:5b:6f:d6:39:75:7e:4c:7d:ba: 38:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:11:69:15:D4:CB:D7:F8:CC:E4:0E:04:55:DC:10:D3:B2:70:F2:88 X509v3 Authority Key Identifier: keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:73:34:fa:7c:95:ee:49:51:3f:98:c8:3d:3d:21:8a:05:6f: 35:12:9f:f2:47:8a:9e:e3:17:05:c3:25:30:e9:e0:73:43:91: b0:d6:ea:6e:c0:4c:db:9a:d8:75:c9:33:ac:af:aa:36:02:3f: 21:08:dc:b8:ae:17:48:79:34:6b:18:0b:31:be:38:fc:df:e2: f3:ac:78:bc:f1:5e:a3:63:e3:af:9f:bf:45:6e:99:73:d9:88: 56:e2:9d:f8:46:05:b7:de:7f:3a:93:e6:dc:b9:50:8b:5e:ed: 1e:59:7c:8f:57:52:4e:f0:d1:0b:3e:9c:eb:88:55:f4:81:7e: ec:cd:49:04:a3:a8:50:aa:35:1c:0b:b3:a1:cb:10:80:87:69: e5:33:be:7d:60:6e:dd:58:18:87:69:9f:01:68:d0:f8:b4:e0: b8:87:1d:14:fc:76:1f:0a:80:36:e6:d4:21:ec:31:36:d9:8f: 8a:9f:a2:15:9e:a9:ce:dd:7e:0e:23:c3:f7:89:91:df:a9:30: 43:f8:01:2b:ac:32:0b:2d:35:a9:6b:2e:b2:22:1c:be:37:8f: 22:9c:97:40:4b:c2:d2:21:d9:a9:78:ac:39:0c:37:82:ba:23: 3f:31:71:30:c2:e4:48:e4:7c:a5:a3:39:51:82:b4:6d:26:f7: 21:49:55:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNUYxMTAvBgNVBAUTKERFQjRDMEI5MDdGQUNBMUM1RDM3NzZCRDQ5NDZGNEJB QThDQTZCMzAwHhcNMjYwNzI5MDc0MjE5WhcNMjYwODA1MDc0MjE5WjAYMRYwFAYD VQQDEw02YTY5YWVkYi1lMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvC/R6GEzjWXaQ1nMO6yTuyBeIB62WReJ92Jrkm+ct9gHFCP4KSBviLegoCyM RoBASwFr92MSdu+Zm7QBskd0O9xmHoU5zVr0ipQ+0RhM2qv/kMcvP8FvWDrOLCL4 nVFzc1nMYFSeuR8GXBgEOxet3zN5NE9zaUQ8jzdJ9yZM4AK/aCGoIed39zUSI9XE 3ThrG/PXWyq5LA6nYfFSWDXi+J+jaB68oJtCjXwoI1py7bPtpySV5hjkFkcg2jau LQdNJJrD4nNLCCJB0IVeH/OdaXHK26/TVpZUdC+I4s5gxjj+fNt3tdoFlwK0gMI2 azy/HmA9E3Jbb9Y5dX5Mfbo4+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQRaRXU y9f4zOQOBFXcENOycPKIMB8GA1UdIwQYMBaAFN60wLkH+socXTd2vUlG9Lqoymsw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I1Ri9CMTcwQzkxMjEz NjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnloeGROM2E5U1ViMHVxakth ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNyVEF1UWY2eWh4ZE4zYTlTVWIwdXFqS2F6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I1Ri9CMTcwQzkxMjEzNjYxMUYwODJFM0M1MERDNEY5QUUwMi8zclRBdVFmNnlo eGROM2E5U1ViMHVxakthekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASnM0+nyV7klRP5jIPT0higVvNRKf8keKnuMXBcMlMOngc0ORsNbqbsBM25rY dckzrK+qNgI/IQjcuK4XSHk0axgLMb44/N/i86x4vPFeo2Pjr5+/RW6Zc9mIVuKd +EYFt95/OpPm3LlQi17tHll8j1dSTvDRCz6c64hV9IF+7M1JBKOoUKo1HAuzocsQ gIdp5TO+fWBu3VgYh2mfAWjQ+LTguIcdFPx2HwqANubUIewxNtmPip+iFZ6pzt1+ DiPD94mR36kwQ/gBK6wyCy01qWsusiIcvjePIpyXQEvC0iHZqXisOQw3grojPzFx MMLkSOR8paM5UYK0bSb3IUlVPw== -----END CERTIFICATE-----Generated at Wed Jul 29 12:56:12 2026 by rpki-client