$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft File: cg3tscVvVSBB9EiED3YVdts3rfI.mft (raw, json) Hash identifier: WnyvI5/YukyfG4OvPGLAkAHEcNeq0hYRakI5rORafx8= Subject key identifier: CC:B1:45:A6:78:53:99:F1:13:07:EC:B2:F8:88:09:3F:FD:78:15:9F Authority key identifier: 72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2 Certificate issuer: /CN=A9135597/serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft Manifest number: 029E Signing time: Sun 05 Jul 2026 02:21:52 +0000 Manifest this update: Sun 05 Jul 2026 02:21:51 +0000 Manifest next update: Sun 12 Jul 2026 02:21:51 +0000 Files and hashes: 1: cg3tscVvVSBB9EiED3YVdts3rfI.crl (hash: dT8jQ0TRTWdWBFc9cOeLZRgeF2kSAIdLbyozcBFrg9Y=) 2: 1A47E4986DE811F1A234B57A5CA30FBC.roa (hash: 1gx+6aoEh7HCS4ZBkElgy0tGymufvKOntntuWXEXFU4=) 3: 19C7B1C46DE811F1A234B57A5CA30FBC.roa (hash: GKp1QODQO8zjgMFMSHC7XIbNh/54vtscAesJ+Vx1oaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 02:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=720DEDB1C56F552041F448840F761576DB37ADF2 Validity Not Before: Jul 5 02:21:51 2026 GMT Not After : Jul 12 02:21:51 2026 GMT Subject: CN=6a49bfc0-b65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:78:b8:d7:d7:9a:f0:12:ea:b5:35:5a:6b: 0f:cb:0b:28:4a:b4:83:9f:01:6d:54:cd:76:de:b8: af:07:98:ce:36:00:33:30:2d:eb:75:bc:76:0b:d0: 3a:43:70:c1:67:4e:cc:be:60:e2:26:eb:54:35:17: 61:4f:ab:f8:b8:49:ce:b2:f5:8d:13:eb:fe:ef:0d: 68:c4:c4:72:72:39:df:04:75:1e:86:56:58:7f:c6: 4d:8d:fe:e7:bd:c6:c7:03:49:6e:85:98:5f:f0:58: ad:5a:fe:3c:64:29:b0:7c:50:c8:b8:fd:d1:92:c5: 1e:31:e5:51:db:4f:40:87:eb:dc:3a:be:2e:55:cb: 90:e5:e9:d6:4c:66:89:77:18:38:1b:47:7e:14:7e: 2d:50:e5:d6:fa:3e:56:62:18:ec:dd:41:5b:ee:0b: 71:6a:ca:77:c2:57:f1:87:14:d0:53:b1:1f:a7:f5: 71:d7:ff:be:fd:66:4d:b4:ca:06:83:2e:ea:ec:b6: 44:4f:c8:da:e2:a5:0f:12:9d:32:ac:f2:d0:2b:25: b3:91:cd:2a:ab:66:e5:a5:bc:05:b3:c9:cd:e1:04: e4:02:3d:f5:2f:dd:fe:b4:43:fd:68:dd:08:08:fe: c6:ff:eb:9e:ad:ac:b8:0a:b3:57:a7:ed:97:ef:53: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B1:45:A6:78:53:99:F1:13:07:EC:B2:F8:88:09:3F:FD:78:15:9F X509v3 Authority Key Identifier: keyid:72:0D:ED:B1:C5:6F:55:20:41:F4:48:84:0F:76:15:76:DB:37:AD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cg3tscVvVSBB9EiED3YVdts3rfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/cg3tscVvVSBB9EiED3YVdts3rfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ef:a2:b3:1d:27:9d:08:f8:5a:09:60:f0:d4:4b:ed:59:94: 20:51:04:f1:6f:49:84:6c:10:93:d8:a7:48:33:88:07:67:59: e9:69:98:7a:38:6e:17:d6:4e:9e:fc:5c:d4:98:cf:28:f1:55: 63:5d:94:94:92:c4:37:a9:59:c7:2b:24:64:9a:8f:a8:07:01: 50:75:66:f7:a0:d3:23:67:ca:e7:23:24:3e:39:7d:2b:7a:aa: d2:1d:4f:77:8d:6a:d4:79:6f:86:be:30:29:86:e0:e0:c6:18: e6:fb:7d:b5:a8:fd:4d:4a:dc:86:ab:11:f1:70:23:bd:3d:38: d3:73:85:7a:2a:d1:1c:83:55:bd:87:cd:fd:6f:38:a3:25:83: fd:29:f0:f5:1b:00:a4:43:fb:59:19:06:15:a0:f9:86:7a:bc: f3:16:83:3d:fc:cf:3e:20:e3:b5:11:09:bb:c8:2f:08:f6:02: b0:22:16:2e:eb:12:bb:79:91:e9:aa:29:3f:60:78:e7:66:fa: 34:78:8e:d7:69:15:a5:b2:17:4a:c3:02:79:77:5d:3e:75:d1: 0d:df:ff:31:e1:70:93:ce:98:94:f3:22:da:65:21:c1:24:71: c8:f0:d7:12:cb:b2:5a:9a:9b:44:d8:7c:42:f1:60:50:2d:09: 7f:56:a0:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTU5NzExMC8GA1UEBRMoNzIwREVEQjFDNTZGNTUyMDQxRjQ0ODg0MEY3NjE1NzZE QjM3QURGMjAeFw0yNjA3MDUwMjIxNTFaFw0yNjA3MTIwMjIxNTFaMBgxFjAUBgNV BAMTDTZhNDliZmMwLWI2NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzVXi419ea8BLqtTVaaw/LCyhKtIOfAW1UzXbeuK8HmM42ADMwLet1vHYL0DpD cMFnTsy+YOIm61Q1F2FPq/i4Sc6y9Y0T6/7vDWjExHJyOd8EdR6GVlh/xk2N/ue9 xscDSW6FmF/wWK1a/jxkKbB8UMi4/dGSxR4x5VHbT0CH69w6vi5Vy5Dl6dZMZol3 GDgbR34Ufi1Q5db6PlZiGOzdQVvuC3FqynfCV/GHFNBTsR+n9XHX/779Zk20ygaD LurstkRPyNripQ8SnTKs8tArJbORzSqrZuWlvAWzyc3hBOQCPfUv3f60Q/1o3QgI /sb/656trLgKs1en7ZfvU8TRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzLFFpnhT mfETB+yy+IgJP/14FZ8wHwYDVR0jBBgwFoAUcg3tscVvVSBB9EiED3YVdts3rfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1NTk3L0U5NzA3RDFFOUEz QTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNCQjlFaUVEM1lWZHRzM3Jm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2czdHNjVnZWU0JCOUVpRUQzWVZkdHMzcmZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 NTk3L0U5NzA3RDFFOUEzQTExRUQ4MUIxMjcxREM0RjlBRTAyL2NnM3RzY1Z2VlNC QjlFaUVEM1lWZHRzM3JmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAN76KzHSedCPhaCWDw1EvtWZQgUQTxb0mEbBCT2KdIM4gHZ1npaZh6OG4X1k6e /FzUmM8o8VVjXZSUksQ3qVnHKyRkmo+oBwFQdWb3oNMjZ8rnIyQ+OX0reqrSHU93 jWrUeW+GvjAphuDgxhjm+321qP1NStyGqxHxcCO9PTjTc4V6KtEcg1W9h839bzij JYP9KfD1GwCkQ/tZGQYVoPmGerzzFoM9/M8+IOO1EQm7yC8I9gKwIhYu6xK7eZHp qik/YHjnZvo0eI7XaRWlshdKwwJ5d10+ddEN3/8x4XCTzpiU8yLaZSHBJHHI8NcS y7JamptE2HxC8WBQLQl/VqDD -----END CERTIFICATE-----Generated at Sun Jul 5 08:35:44 2026 by rpki-client