$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: 8pMtYD81hajnHjOWzLTBJDYjEiKHqWmcuVLhQVuchT8= Subject key identifier: E4:65:92:0A:D0:2F:50:DA:B3:2A:BC:C2:EE:07:3E:73:33:C8:8B:43 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: 0111 Signing time: Mon 27 Jul 2026 08:01:14 +0000 Manifest this update: Mon 27 Jul 2026 08:01:13 +0000 Manifest next update: Mon 03 Aug 2026 08:01:13 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: JQdTGzlPh1MNFZ7O3Ix1aiCr0Sr+PoV9dorSMQY3Z+0=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Jul 27 08:01:13 2026 GMT Not After : Aug 3 08:01:13 2026 GMT Subject: CN=6a67104a-cf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c7:84:89:53:31:c5:0d:03:e8:7d:0b:fa:26: 18:5d:e0:55:16:e7:03:cf:76:ff:00:4f:e1:b5:b7: 04:47:f9:b5:22:70:09:b9:9f:ae:48:80:ae:8b:69: b3:bd:63:2d:0c:af:09:bf:27:85:16:41:d9:a0:5e: e1:0b:b1:d5:05:09:2e:a8:40:8e:ef:da:ff:6b:1d: 0e:a7:02:6c:82:72:ab:b5:64:d4:c0:d9:a9:0b:1c: 5e:d5:de:14:dd:6a:5e:f7:59:63:bf:e2:83:dc:7e: 98:9e:b6:8d:0d:5e:e0:87:5c:c7:0e:dd:27:47:dd: c5:d5:f2:8d:de:5f:2f:06:15:9a:b3:49:91:f8:8d: 26:bc:8c:fc:74:ad:3b:3a:7f:c7:43:89:e1:cf:19: 6e:84:c1:c1:98:c0:9b:8f:57:fe:49:84:83:bb:15: 15:4c:62:83:9a:b0:f8:dc:f1:f3:f2:8b:76:69:39: 29:43:f6:d4:5e:13:45:de:aa:40:70:51:82:d9:12: bb:78:d2:fe:2b:04:d4:63:cb:24:b6:f2:61:1b:74: e9:cd:0d:85:2e:6c:5f:25:34:f4:d6:59:e5:1c:29: 28:93:9b:f6:2b:02:ea:71:45:87:34:7f:23:c5:79: 6c:ea:2d:b1:c8:3b:19:c0:80:63:20:ce:f0:e6:af: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:65:92:0A:D0:2F:50:DA:B3:2A:BC:C2:EE:07:3E:73:33:C8:8B:43 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:f3:5d:5f:3b:65:9a:fc:8d:7b:00:b0:44:b0:ed:f0:eb:df: 04:bd:20:72:9b:1a:9e:db:3f:81:31:78:c2:02:d8:e8:39:c4: a4:70:8a:09:23:24:62:19:16:12:5c:61:a5:d3:90:60:1d:60: 15:ec:9e:1f:fc:0d:8d:52:a7:71:43:b1:33:c7:3c:09:29:00: 81:49:6a:33:b9:43:fd:dc:a7:de:24:e0:c8:2d:30:08:e1:2d: 01:15:ac:ab:64:95:2a:91:c0:91:c7:56:7b:ca:47:55:91:b9: 19:73:bd:57:d6:4a:c0:53:10:66:4c:1d:b6:c2:d1:1f:98:59: 05:b8:1c:b4:d8:3c:60:1a:84:74:93:59:2e:36:42:a0:76:a5: 16:f2:65:7b:f0:41:d7:2e:2d:f4:46:a4:72:83:66:14:fc:22: 43:0b:9d:02:d4:a7:dd:ef:c6:c6:2c:54:38:60:48:28:82:55: 5a:bd:65:6f:f3:1a:c4:35:f9:b5:0b:47:0a:51:28:28:d1:ee: 4b:1f:b5:6e:1c:d4:36:e3:f1:aa:70:9f:3a:6e:71:a6:7f:96: bf:ba:45:ae:cd:be:dd:4b:bf:10:51:e9:4a:24:27:22:13:12: 1c:7b:6b:ee:8c:71:2c:98:89:2a:43:4b:a0:ba:2f:de:35:3d: 41:bf:77:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB ODYyREZCNjIwHhcNMjYwNzI3MDgwMTEzWhcNMjYwODAzMDgwMTEzWjAYMRYwFAYD VQQDEw02YTY3MTA0YS1jZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48eEiVMxxQ0D6H0L+iYYXeBVFucDz3b/AE/htbcER/m1InAJuZ+uSICui2mz vWMtDK8JvyeFFkHZoF7hC7HVBQkuqECO79r/ax0OpwJsgnKrtWTUwNmpCxxe1d4U 3Wpe91ljv+KD3H6YnraNDV7gh1zHDt0nR93F1fKN3l8vBhWas0mR+I0mvIz8dK07 On/HQ4nhzxluhMHBmMCbj1f+SYSDuxUVTGKDmrD43PHz8ot2aTkpQ/bUXhNF3qpA cFGC2RK7eNL+KwTUY8sktvJhG3TpzQ2FLmxfJTT01lnlHCkok5v2KwLqcUWHNH8j xXls6i2xyDsZwIBjIM7w5q+GeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFORlkgrQ L1Dasyq8wu4HPnMzyItDMB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5 RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h WHpQbkhHUVo0bWVvWXQtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgvNdXztlmvyNewCwRLDt8OvfBL0gcpsants/gTF4wgLY6DnEpHCKCSMkYhkW ElxhpdOQYB1gFeyeH/wNjVKncUOxM8c8CSkAgUlqM7lD/dyn3iTgyC0wCOEtARWs q2SVKpHAkcdWe8pHVZG5GXO9V9ZKwFMQZkwdtsLRH5hZBbgctNg8YBqEdJNZLjZC oHalFvJle/BB1y4t9EakcoNmFPwiQwudAtSn3e/GxixUOGBIKIJVWr1lb/MaxDX5 tQtHClEoKNHuSx+1bhzUNuPxqnCfOm5xpn+Wv7pFrs2+3Uu/EFHpSiQnIhMSHHtr 7oxxLJiJKkNLoLov3jU9Qb93mw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:15:17 2026 by rpki-client