$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: 9NugsmNr6FcZf+aDZML9PcgdS9Dx6prbdH54dnP623w= Subject key identifier: F1:BC:81:CF:E8:64:BF:C2:D8:3F:A2:D4:60:8F:83:C6:41:F2:94:38 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0968 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0932 Signing time: Thu 16 Jul 2026 14:46:38 +0000 Manifest this update: Thu 16 Jul 2026 14:46:38 +0000 Manifest next update: Thu 23 Jul 2026 14:46:38 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: lVZWqsKzvJ4tSFCFNtZ5RGwsQ01UWjtlu2C1hPOFuts=) 2: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) 3: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: TJX/2z4AnWBNVG5vc+6iQbCnon+csxAc9hGSLvA14T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 14:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jul 16 14:46:38 2026 GMT Not After : Jul 23 14:46:38 2026 GMT Subject: CN=6a58eece-edf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:2c:20:14:62:d5:98:9a:c6:38:61:3b:86: 20:11:1b:9c:48:f7:d4:84:c8:0b:e8:39:e1:51:70: b0:ff:aa:37:03:8c:93:07:bc:3d:e5:a7:88:cd:79: e6:76:33:c5:f1:c7:7c:d1:0d:86:e9:f0:53:e9:38: ea:57:ec:7f:5b:5a:8f:93:f1:75:da:98:49:9f:b7: 22:7e:4d:a0:0f:6d:9c:98:e2:0e:40:54:97:22:61: 98:1d:85:44:c9:e8:7b:e0:a2:7f:33:1f:2e:78:5c: c0:8d:6c:91:e5:c1:2c:17:e7:3f:76:ba:85:91:42: d4:f8:3c:21:f4:09:ad:22:90:f4:30:eb:a7:ac:f7: 5e:41:5e:ec:1a:14:a5:b1:7c:ec:3b:7e:fc:6d:ad: 4a:c4:15:10:ff:20:48:88:03:1c:13:cb:35:85:f4: c1:8b:38:94:d3:bc:5c:ed:f6:b1:ae:5c:53:6d:0e: 42:4e:7c:e2:ae:ac:dc:b4:f2:f4:a3:8b:86:9a:c8: fc:e2:c4:85:31:f4:ed:76:74:0d:c8:33:1c:52:a7: c4:3e:01:eb:d8:80:8c:77:9b:36:96:0a:5f:f5:b6: 47:89:27:d6:30:e0:e3:5a:ce:18:9f:f5:d5:b8:44: ae:66:3e:47:cd:fa:e8:11:a7:2b:7d:a1:7b:6f:95: 73:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BC:81:CF:E8:64:BF:C2:D8:3F:A2:D4:60:8F:83:C6:41:F2:94:38 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e6:3e:d8:e1:f4:db:53:54:90:23:c1:ef:f8:59:39:d4:40: fb:54:11:ad:0e:53:74:12:b3:23:f6:58:20:14:45:09:c5:c9: b7:f5:7e:ea:13:f6:94:a6:b8:80:cd:c5:09:52:f4:0c:41:8b: 01:47:e9:de:a8:43:2a:4c:f4:ee:13:f6:23:29:7c:31:2e:a5: ca:8b:4f:14:57:07:36:4c:95:bb:e3:11:13:1b:ce:bf:4b:d9: 1c:72:24:f0:16:dd:e4:83:61:64:dd:17:44:a6:ba:a8:c2:ff: 03:4c:01:a0:dd:24:c5:9d:b6:b6:41:56:51:d4:0f:ee:7f:ec: 50:0b:bf:84:6e:8d:fe:11:db:5c:d2:da:7f:f0:96:a3:c8:5d: 5d:db:be:a4:6e:f9:68:a6:59:29:09:01:f5:41:7e:f7:be:e6: f4:30:0b:2a:3a:13:4e:b7:c6:a0:b5:c0:59:6d:27:04:df:13: 76:91:2c:94:2e:d8:46:fd:0c:9f:f6:43:26:9d:e4:6a:ec:fd: 90:c2:62:dc:b6:de:d3:56:2b:7c:7a:2a:34:7d:70:d0:94:e5: 86:d1:74:cd:63:70:70:b0:f7:7c:7d:d7:c0:87:29:9e:78:75: 03:e3:67:70:69:ff:a3:13:c7:ce:69:8b:6d:48:3d:4d:37:d0: c8:0b:02:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwNzE2MTQ0NjM4WhcNMjYwNzIzMTQ0NjM4WjAYMRYwFAYD VQQDEw02YTU4ZWVjZS1lZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuywsIBRi1ZiaxjhhO4YgERucSPfUhMgL6DnhUXCw/6o3A4yTB7w95aeIzXnm djPF8cd80Q2G6fBT6TjqV+x/W1qPk/F12phJn7cifk2gD22cmOIOQFSXImGYHYVE yeh74KJ/Mx8ueFzAjWyR5cEsF+c/drqFkULU+Dwh9AmtIpD0MOunrPdeQV7sGhSl sXzsO378ba1KxBUQ/yBIiAMcE8s1hfTBiziU07xc7faxrlxTbQ5CTnzirqzctPL0 o4uGmsj84sSFMfTtdnQNyDMcUqfEPgHr2ICMd5s2lgpf9bZHiSfWMODjWs4Yn/XV uESuZj5HzfroEacrfaF7b5VzzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPG8gc/o ZL/C2D+i1GCPg8ZB8pQ4MB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFOY+2OH021NUkCPB7/hZOdRA+1QRrQ5TdBKzI/ZYIBRFCcXJt/V+6hP2lKa4 gM3FCVL0DEGLAUfp3qhDKkz07hP2Iyl8MS6lyotPFFcHNkyVu+MRExvOv0vZHHIk 8Bbd5INhZN0XRKa6qML/A0wBoN0kxZ22tkFWUdQP7n/sUAu/hG6N/hHbXNLaf/CW o8hdXdu+pG75aKZZKQkB9UF+977m9DALKjoTTrfGoLXAWW0nBN8TdpEslC7YRv0M n/ZDJp3kauz9kMJi3Lbe01YrfHoqNH1w0JTlhtF0zWNwcLD3fH3XwIcpnnh1A+Nn cGn/oxPHzmmLbUg9TTfQyAsCqw== -----END CERTIFICATE-----Generated at Sat Jul 18 03:29:18 2026 by rpki-client