$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: VTfET1ShE1G/xVtKKYYTkccSNc+NFj9wMCKMEHLMe58= Subject key identifier: 31:48:2E:CD:95:C7:A9:1D:73:80:26:4F:B9:54:99:98:A3:6B:6C:7B Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: ED Signing time: Sat 25 Jul 2026 08:21:19 +0000 Manifest this update: Sat 25 Jul 2026 08:21:19 +0000 Manifest next update: Sat 01 Aug 2026 08:21:19 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: DSbsvzRLj117tzE74benTYqfWr/UKXpQo1bXN3waLjQ=) 2: 0148654664AE11F1AC9CD4CD9247A888.roa (hash: ATbAStUN8zthpYScUZVPvySD7fOyN5UEOevK5CPEhGo=) 3: 375E8232C13411F0A297231CC4F9AE02.roa (hash: Vk4rtcyT+sEg6r9C5XD5asADCupwzxSQL05nWxyvlEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 08:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Jul 25 08:21:19 2026 GMT Not After : Aug 1 08:21:19 2026 GMT Subject: CN=6a6471ff-292c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:af:0f:71:ce:f6:4b:a0:f8:24:5f:45:3f: 2c:6b:3f:02:b2:9e:cf:d0:cf:60:bd:ee:fc:b6:cc: 11:82:4a:87:08:1d:ca:c5:32:30:07:9a:f4:19:d2: 9b:ef:b4:aa:3e:80:72:57:bf:bd:90:bc:e0:f8:f8: f5:5d:6e:19:e0:47:f4:ac:b2:d9:f2:d9:20:7e:80: ca:c7:57:86:35:3a:6a:a5:fe:3d:a4:37:5d:f6:56: 35:85:18:31:b4:bd:45:cd:47:b3:54:11:d6:c7:12: 04:73:d2:c4:a7:84:27:52:d0:78:94:6b:77:fd:56: 93:f4:71:4b:24:03:ca:b3:be:e5:e9:87:fd:5b:00: 3a:84:f2:67:e5:25:b0:9f:45:7e:b0:3d:df:5f:0e: e3:19:cb:ac:ec:88:24:d1:2f:84:a0:b5:cb:64:44: ba:dc:fd:5f:e4:81:bb:f0:72:b0:12:e4:4b:f2:b8: 20:db:f6:ef:ff:a7:41:d1:bf:bd:a8:9e:42:cd:9a: 5b:ce:a7:9c:30:c3:47:6a:e6:bb:85:db:93:c2:e9: e6:9f:64:ad:2a:93:25:f4:de:35:06:f8:7c:ea:67: a0:d1:4f:ce:1d:e5:57:3c:c4:2a:f7:a5:9b:90:43: 9e:28:11:af:5e:c4:d5:21:b4:5d:a8:98:90:1e:ef: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:48:2E:CD:95:C7:A9:1D:73:80:26:4F:B9:54:99:98:A3:6B:6C:7B X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:cb:a7:2e:78:03:f2:3e:30:17:6d:ae:32:4e:81:9f:9f:7a: 06:47:31:e5:00:43:3f:0f:99:57:4f:d6:d2:99:4d:94:0c:ec: 7a:26:e1:0f:a6:9b:c1:ae:f0:2b:30:e3:80:fb:9e:da:13:3d: 77:df:8f:4b:82:0b:65:26:17:c6:80:1b:41:59:ef:7f:87:03: 03:e8:37:37:10:a3:e7:7f:60:b1:75:ae:58:8e:56:f6:f3:81: 17:45:d8:7d:03:b9:45:0b:82:02:d9:33:94:da:24:24:6e:49: b8:7e:8e:77:51:2d:cb:b0:85:98:11:d8:35:3d:69:60:b1:4d: c1:68:51:9d:75:8f:f2:ca:85:69:66:85:e0:f9:78:1b:f8:9e: 2d:ef:af:6f:e2:9d:7e:34:c4:1f:47:d4:06:73:82:a4:a8:a0: 4d:62:ac:77:93:8e:e8:50:4e:6d:d6:60:9b:a7:c0:2a:9b:01: 76:60:93:e6:98:50:fb:13:e6:25:c3:49:10:c8:ec:5b:7d:62: b8:f5:83:e9:97:c0:5f:a0:2a:89:8c:e5:b7:5a:47:3b:d7:26: 45:13:25:99:b0:f0:be:f6:3a:5c:91:cb:26:ce:47:dd:a4:c0: c1:55:3a:4c:3e:60:60:5d:88:f2:60:55:b2:e2:cb:9e:28:3f: 70:9b:12:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwNzI1MDgyMTE5WhcNMjYwODAxMDgyMTE5WjAYMRYwFAYD VQQDEw02YTY0NzFmZi0yOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV6vD3HO9kug+CRfRT8saz8Csp7P0M9gve78tswRgkqHCB3KxTIwB5r0GdKb 77SqPoByV7+9kLzg+Pj1XW4Z4Ef0rLLZ8tkgfoDKx1eGNTpqpf49pDdd9lY1hRgx tL1FzUezVBHWxxIEc9LEp4QnUtB4lGt3/VaT9HFLJAPKs77l6Yf9WwA6hPJn5SWw n0V+sD3fXw7jGcus7Igk0S+EoLXLZES63P1f5IG78HKwEuRL8rgg2/bv/6dB0b+9 qJ5CzZpbzqecMMNHaua7hduTwunmn2StKpMl9N41Bvh86meg0U/OHeVXPMQq96Wb kEOeKBGvXsTVIbRdqJiQHu8RdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFILs2V x6kdc4AmT7lUmZija2x7MB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DQjE0QkYyNjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Za a0NDa0NELWh3OWxrc2hNTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAocunLngD8j4wF22uMk6Bn596Bkcx5QBDPw+ZV0/W0plNlAzseibhD6abwa7w KzDjgPue2hM9d9+PS4ILZSYXxoAbQVnvf4cDA+g3NxCj539gsXWuWI5W9vOBF0XY fQO5RQuCAtkzlNokJG5JuH6Od1Ety7CFmBHYNT1pYLFNwWhRnXWP8sqFaWaF4Pl4 G/ieLe+vb+KdfjTEH0fUBnOCpKigTWKsd5OO6FBObdZgm6fAKpsBdmCT5phQ+xPm JcNJEMjsW31iuPWD6ZfAX6AqiYzlt1pHO9cmRRMlmbDwvvY6XJHLJs5H3aTAwVU6 TD5gYF2I8mBVsuLLnig/cJsSlw== -----END CERTIFICATE-----Generated at Sun Jul 26 20:16:49 2026 by rpki-client