$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: Gn+PYu528QmuNGWhoMRrhTKCZViNt1KQnIi1w4aTPJc= Subject key identifier: 7D:64:A8:D4:EA:68:DF:CF:34:E9:75:1B:3B:53:27:0D:99:1F:DE:92 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 0421 Signing time: Fri 17 Jul 2026 00:58:17 +0000 Manifest this update: Fri 17 Jul 2026 00:58:16 +0000 Manifest next update: Fri 24 Jul 2026 00:58:16 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: NsFDE0Bepd9FReaBVFicsvxKHBP9VjGHmQomvj9986s=) 2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: rpZGhIKFCgIxWTbQKzN+z1Oy8oMiVDudLIk2WruPJmM=) 3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: tXiBPn9WKqPR3A495dpcgE5SO+VgxVPY4ijGQaSknoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 00:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Jul 17 00:58:16 2026 GMT Not After : Jul 24 00:58:16 2026 GMT Subject: CN=6a597e29-c7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3e:00:05:e7:2e:fd:5c:34:aa:58:9d:c3:6d: a5:0e:2a:bb:2f:e9:c7:86:3f:5c:37:f3:f1:e2:53: 7f:fb:d5:5d:31:01:77:f6:a6:0f:37:85:9c:3b:50: ee:23:94:8c:ce:85:97:68:1c:13:15:02:34:e3:a0: a6:05:5b:f6:93:a2:06:47:de:95:2d:b7:27:ab:82: 8f:f3:03:5d:57:bf:de:b4:d5:1d:05:6b:e4:f7:6d: 09:f1:56:d1:29:81:e4:04:c1:7a:ef:f3:d0:37:2e: ba:24:38:f5:0b:2f:5c:5f:a9:bf:00:76:2b:53:06: b1:b6:2e:b8:ee:14:d4:7f:ad:47:39:dc:47:00:9d: 4e:05:32:eb:19:72:f3:09:28:76:cd:77:88:7d:b1: 20:1f:4a:cc:af:66:28:8c:f7:d6:5d:a0:d5:d2:66: 84:98:e4:fc:75:e9:31:56:e0:8d:72:95:7a:a3:e3: d3:99:5c:27:01:f4:7f:e5:ba:77:16:6b:0d:f4:18: 7e:7a:78:3b:39:d3:da:3f:c2:9d:ba:2f:c9:c9:a4: e4:6b:e1:b0:13:63:22:eb:ce:e0:6e:85:31:c7:7e: 93:e7:57:8a:66:d1:b0:d4:62:33:ef:07:b6:60:60: 78:46:cf:d3:4b:1b:c6:55:7a:78:fc:4f:bf:64:09: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:64:A8:D4:EA:68:DF:CF:34:E9:75:1B:3B:53:27:0D:99:1F:DE:92 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:71:3f:c1:d3:f8:4a:f5:31:db:50:a7:7a:6c:04:53:29:0a: 53:b3:33:51:29:7d:e4:bc:80:55:da:21:35:52:dd:2a:b4:ca: 73:bf:3b:89:16:41:bc:8d:f7:bc:af:fe:1d:b1:ab:cb:15:4e: a4:b6:df:e4:90:a8:a9:d6:7f:bd:3d:b6:4d:b9:d3:d6:4b:e7: 51:76:da:1a:a4:6d:fd:84:11:80:f0:f0:90:f5:ec:59:2d:fd: 01:fe:a5:b0:d1:2b:dc:b6:22:dc:e6:6d:88:4c:ea:04:08:b7: f2:ec:88:cb:b2:18:ed:ee:0d:1e:c4:03:9d:8c:da:7a:b7:92: 7e:06:4e:9a:1a:db:ab:32:81:97:e0:10:9a:92:8e:09:46:46: 47:7e:c9:73:c3:2e:51:48:7e:ca:26:bb:44:6b:e0:db:96:9d: 55:37:1c:2b:84:66:ef:85:a3:bb:6f:8b:28:08:7a:6e:5c:74: 61:b3:53:e9:c9:5f:b5:9a:9b:ea:09:21:65:a9:41:5e:9f:fb: fa:52:4c:a6:07:4f:55:7a:d4:6a:eb:cb:ff:0d:e9:7e:c3:62: ab:5d:25:c4:01:78:dc:05:09:26:a5:13:17:48:b9:b3:25:d1: ee:9c:e3:30:bc:f1:14:c4:c8:c2:e7:2f:3b:3f:c1:0a:39:67: e3:2b:20:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwNzE3MDA1ODE2WhcNMjYwNzI0MDA1ODE2WjAYMRYwFAYD VQQDEw02YTU5N2UyOS1jN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D4ABecu/Vw0qlidw22lDiq7L+nHhj9cN/Px4lN/+9VdMQF39qYPN4WcO1Du I5SMzoWXaBwTFQI046CmBVv2k6IGR96VLbcnq4KP8wNdV7/etNUdBWvk920J8VbR KYHkBMF67/PQNy66JDj1Cy9cX6m/AHYrUwaxti647hTUf61HOdxHAJ1OBTLrGXLz CSh2zXeIfbEgH0rMr2YojPfWXaDV0maEmOT8dekxVuCNcpV6o+PTmVwnAfR/5bp3 FmsN9Bh+eng7OdPaP8Kdui/JyaTka+GwE2Mi687gboUxx36T51eKZtGw1GIz7we2 YGB4Rs/TSxvGVXp4/E+/ZAlnPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1kqNTq aN/PNOl1GztTJw2ZH96SMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKXE/wdP4SvUx21CnemwEUykKU7MzUSl95LyAVdohNVLdKrTKc787iRZBvI33 vK/+HbGryxVOpLbf5JCoqdZ/vT22TbnT1kvnUXbaGqRt/YQRgPDwkPXsWS39Af6l sNEr3LYi3OZtiEzqBAi38uyIy7IY7e4NHsQDnYzaereSfgZOmhrbqzKBl+AQmpKO CUZGR37Jc8MuUUh+yia7RGvg25adVTccK4Rm74Wju2+LKAh6blx0YbNT6clftZqb 6gkhZalBXp/7+lJMpgdPVXrUauvL/w3pfsNiq10lxAF43AUJJqUTF0i5syXR7pzj MLzxFMTIwucvOz/BCjln4ysgwg== -----END CERTIFICATE-----Generated at Sat Jul 18 02:20:12 2026 by rpki-client