$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft (raw, json) Hash identifier: UXsy/5Ud1MNGH+yhRSQ8/smSsfgUVnUj/d/r1ZfLSaM= Subject key identifier: B5:61:68:37:8C:09:30:1C:2C:54:72:7E:6A:CA:D5:31:C0:77:F9:EB Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft Manifest number: 0CC8 Signing time: Sun 26 Jul 2026 18:50:21 +0000 Manifest this update: Sun 26 Jul 2026 18:50:20 +0000 Manifest next update: Sun 02 Aug 2026 18:50:20 +0000 Files and hashes: 1: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl (hash: Z/Q9b4rxjkQFd+Vd7EqsBIWjSmDTbWOAe64E5mZeWHU=) 2: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (hash: 2ZECssZFKej2Bnmujg65SvPR+m2K68FZcUfUc+ikvVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Jul 26 18:50:20 2026 GMT Not After : Aug 2 18:50:20 2026 GMT Subject: CN=6a6656ed-cbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:0e:8f:63:4d:20:f1:51:7d:ee:a6:01:cd: ab:0a:1c:34:fa:e6:e2:58:c6:b3:a2:4e:e0:d8:60: 7b:4c:97:a5:49:b4:92:b9:4c:7c:f6:e6:d9:8b:97: a3:bf:27:e0:75:88:bd:04:41:91:0e:71:f5:fc:31: 33:5a:1c:4b:dd:94:6d:95:a6:b3:f3:12:3b:55:1e: ea:1d:0c:c2:73:76:b1:15:44:7e:7e:0f:b4:f2:93: 10:b7:ca:e8:ac:e6:84:d1:65:d2:6d:7c:6f:96:4c: d9:ad:da:d0:96:6e:d2:16:c8:31:6f:2b:64:17:d9: 65:ee:43:dd:82:5f:8b:30:88:89:ee:ce:fb:09:7f: 55:b1:6b:92:b7:d6:b4:fd:ab:f8:ac:a9:3e:3a:72: a5:16:30:27:7a:fd:2d:f5:7e:44:34:69:f7:52:fe: b6:27:72:f1:c6:c0:5b:60:7b:74:16:26:22:2b:30: 7a:35:43:7f:66:fc:e6:12:18:88:25:c4:f6:52:c7: 33:9b:c4:05:67:ce:49:61:c9:72:74:c8:54:56:cc: 5c:85:97:38:e2:52:65:51:8f:91:7f:e9:19:40:f0: c1:b2:82:36:bf:3c:5f:f2:f2:f4:b1:7c:56:c4:4d: 86:07:1d:2a:e1:92:8e:cc:d6:5e:27:2b:32:11:da: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:61:68:37:8C:09:30:1C:2C:54:72:7E:6A:CA:D5:31:C0:77:F9:EB X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2d:30:fd:fd:a0:53:f4:6a:be:1a:e6:72:59:df:77:ff:c0: 2f:7e:be:2e:a9:7d:96:5b:71:26:89:db:75:85:62:dc:e9:ec: 58:c0:0d:b7:90:3e:e3:ef:d0:5d:f0:f8:bf:a1:de:23:e7:82: e1:cd:86:61:5b:52:27:95:c4:33:7a:9d:2b:20:86:c8:2e:f3: 57:2e:a5:e1:91:43:e8:79:cf:16:16:ea:9c:12:4f:7b:7b:3d: 35:4c:45:17:47:4f:4b:bd:cc:63:63:6f:7e:7a:89:c0:b2:85: c9:9b:9d:0a:c1:99:38:56:c4:9d:5e:a7:5e:de:34:37:95:90: ff:e7:ab:6c:95:93:e7:cb:13:68:6c:44:2e:36:47:05:c8:57: 05:53:31:58:81:82:b2:07:1f:52:fc:ce:78:96:ca:33:a9:02: 84:e2:eb:19:d0:19:ac:27:50:4c:b5:45:1e:ee:4c:c6:8d:4e: bc:45:a9:9e:55:a0:db:33:06:c7:37:b8:f8:e8:e8:af:9a:45: 68:8c:fb:c4:af:60:ec:d2:6a:02:12:0e:b2:30:98:9e:d3:82: 87:58:a6:46:a9:be:c4:5e:05:9b:fb:21:a3:37:52:44:bb:c0: 37:46:c6:24:49:43:8b:ce:58:be:04:20:82:f2:83:f7:a6:0e: 9e:2d:87:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjYwNzI2MTg1MDIwWhcNMjYwODAyMTg1MDIwWjAYMRYwFAYD VQQDEw02YTY2NTZlZC1jYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUQOj2NNIPFRfe6mAc2rChw0+ubiWMazok7g2GB7TJelSbSSuUx89ubZi5ej vyfgdYi9BEGRDnH1/DEzWhxL3ZRtlaaz8xI7VR7qHQzCc3axFUR+fg+08pMQt8ro rOaE0WXSbXxvlkzZrdrQlm7SFsgxbytkF9ll7kPdgl+LMIiJ7s77CX9VsWuSt9a0 /av4rKk+OnKlFjAnev0t9X5ENGn3Uv62J3LxxsBbYHt0FiYiKzB6NUN/ZvzmEhiI JcT2Usczm8QFZ85JYclydMhUVsxchZc44lJlUY+Rf+kZQPDBsoI2vzxf8vL0sXxW xE2GBx0q4ZKOzNZeJysyEdo0zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVhaDeM CTAcLFRyfmrK1THAd/nrMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExF RTN5OUhJN1VUWnl5Vlg5RDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADy0w/f2gU/Rqvhrmclnfd//AL36+Lql9lltxJonbdYVi3OnsWMANt5A+4+/Q XfD4v6HeI+eC4c2GYVtSJ5XEM3qdKyCGyC7zVy6l4ZFD6HnPFhbqnBJPe3s9NUxF F0dPS73MY2NvfnqJwLKFyZudCsGZOFbEnV6nXt40N5WQ/+erbJWT58sTaGxELjZH BchXBVMxWIGCsgcfUvzOeJbKM6kChOLrGdAZrCdQTLVFHu5Mxo1OvEWpnlWg2zMG xze4+Ojor5pFaIz7xK9g7NJqAhIOsjCYntOCh1imRqm+xF4Fm/shozdSRLvAN0bG JElDi85YvgQggvKD96YOni2H+A== -----END CERTIFICATE-----Generated at Mon Jul 27 08:08:36 2026 by rpki-client