$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: tkiVJCjlgvCuDQGOSzcjH/z/ou12/XWcq8kvvCNLL1c= Subject key identifier: D6:09:7B:29:2F:4D:75:EF:41:8B:67:F7:2C:0E:14:C5:00:09:1B:68 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 0652 Signing time: Sun 26 Jul 2026 23:37:44 +0000 Manifest this update: Sun 26 Jul 2026 23:37:43 +0000 Manifest next update: Sun 02 Aug 2026 23:37:43 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: DR83SGQLGNfXT1Ojsr/7h3c/52Uvwg/5/NQhz9KLL50=) 2: 8192DC9279D811F1ABEE2BAB62A30FBC.roa (hash: lzRS46VNGCFR6mmK03gAm8rTcOnzGRW+6BC889P7ELo=) 3: 5AF5468879D811F18B1076AA62A30FBC.roa (hash: Txk3oJfW8oIUxGfHQSNc17ubTWdL39XUVrUs5+VxnYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Jul 26 23:37:43 2026 GMT Not After : Aug 2 23:37:43 2026 GMT Subject: CN=6a669a48-ebc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:30:44:22:ea:cb:47:ce:a7:b8:57:f3:c5: a1:c7:a2:06:c9:cd:a0:cb:4f:c8:13:60:28:11:2a: a7:a3:cb:b1:7d:32:b6:1f:6f:b5:a7:9d:1e:79:88: 93:b4:e2:b8:bd:db:2e:c7:66:76:9e:02:66:6a:2e: 7d:6a:db:0a:2b:d2:b9:68:f6:34:a9:e8:ac:05:b5: 23:80:d5:d0:80:57:96:3d:57:e1:87:67:f7:e8:d7: fe:ef:03:ba:dc:99:49:e3:86:df:97:eb:bb:0f:77: 1e:d3:c4:53:ee:f7:96:e8:a2:cb:ba:fc:6a:17:8c: dd:ae:de:e3:e0:3c:09:e7:c6:58:17:29:21:7d:4e: b9:fd:d3:ef:73:b8:aa:ac:3e:72:38:a1:e3:57:7c: 93:40:25:23:b5:cb:db:a8:99:9e:85:fd:fd:dd:ff: 86:76:8d:54:07:2d:38:42:35:8e:d2:c3:70:99:30: 83:4b:e3:37:9a:d9:cb:f4:a3:0f:1d:66:e7:61:53: d2:2e:fb:00:bd:9a:0e:c3:83:22:b0:4b:7f:97:cc: c8:f9:d6:c4:8c:94:f3:cf:dc:34:b2:9f:f0:7d:c1: 8d:49:77:23:0b:6c:8c:8c:04:31:60:e0:7f:8a:68: 1a:e5:61:70:b0:54:a7:70:9d:ae:f3:21:55:e0:9d: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:09:7B:29:2F:4D:75:EF:41:8B:67:F7:2C:0E:14:C5:00:09:1B:68 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4b:a4:53:b3:75:7f:dc:3d:7b:c7:67:2b:49:25:38:c9:e0: ef:fc:de:7d:9f:8d:1f:85:18:fc:a8:8d:6b:fa:e5:dd:84:ca: 78:1c:13:ff:6e:e3:51:1f:07:85:35:d9:88:eb:2d:da:3a:ea: aa:0b:a8:4f:ae:e1:cc:d4:b7:17:a6:5e:fb:95:25:0b:8f:6d: f9:cc:a8:43:f3:15:ff:83:70:3c:31:d7:6c:21:27:16:bc:0e: 68:cb:12:6b:6e:60:76:3d:12:bd:82:8d:47:81:e1:76:c2:cf: ee:af:ed:d0:08:d5:7e:00:dd:64:10:47:e8:a3:d2:e0:7b:89: 57:21:7a:3e:b1:55:34:a0:8a:15:9c:d0:a4:c8:38:b0:01:24: 3e:ca:01:b9:32:ab:22:b3:ff:12:36:c8:33:e8:54:1f:fa:07: a1:44:14:03:8f:ae:de:5d:6a:b7:1b:5f:9d:e3:58:fb:7d:78: 99:e5:d0:84:59:72:85:08:93:a7:84:8c:36:5c:fa:05:ad:8f: 79:9c:1a:7e:cf:7d:81:28:2a:12:a3:99:25:e9:e2:a0:56:c8: 76:ef:79:83:64:3f:df:17:25:b3:4c:5a:a5:67:fe:68:67:72: 6b:12:8b:29:4a:f3:ef:21:c4:c6:a2:57:8c:b5:84:a5:15:68: 68:c7:9d:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjYwNzI2MjMzNzQzWhcNMjYwODAyMjMzNzQzWjAYMRYwFAYD VQQDEw02YTY2OWE0OC1lYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7IwRCLqy0fOp7hX88Whx6IGyc2gy0/IE2AoESqno8uxfTK2H2+1p50eeYiT tOK4vdsux2Z2ngJmai59atsKK9K5aPY0qeisBbUjgNXQgFeWPVfhh2f36Nf+7wO6 3JlJ44bfl+u7D3ce08RT7veW6KLLuvxqF4zdrt7j4DwJ58ZYFykhfU65/dPvc7iq rD5yOKHjV3yTQCUjtcvbqJmehf393f+Gdo1UBy04QjWO0sNwmTCDS+M3mtnL9KMP HWbnYVPSLvsAvZoOw4MisEt/l8zI+dbEjJTzz9w0sp/wfcGNSXcjC2yMjAQxYOB/ imga5WFwsFSncJ2u8yFV4J2m4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYJeykv TXXvQYtn9ywOFMUACRtoMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYUukU7N1f9w9e8dnK0klOMng7/zefZ+NH4UY/KiNa/rl3YTKeBwT/27jUR8H hTXZiOst2jrqqguoT67hzNS3F6Ze+5UlC49t+cyoQ/MV/4NwPDHXbCEnFrwOaMsS a25gdj0SvYKNR4HhdsLP7q/t0AjVfgDdZBBH6KPS4HuJVyF6PrFVNKCKFZzQpMg4 sAEkPsoBuTKrIrP/EjbIM+hUH/oHoUQUA4+u3l1qtxtfneNY+314meXQhFlyhQiT p4SMNlz6Ba2PeZwafs99gSgqEqOZJenioFbIdu95g2Q/3xcls0xapWf+aGdyaxKL KUrz7yHExqJXjLWEpRVoaMedvA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:12:19 2026 by rpki-client