$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft File: pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json) Hash identifier: AVZQ/zc8ip2X6tV0RIzwu29hZGNSPfukS7aC/8bgHJ0= Subject key identifier: C0:9E:7B:C2:18:3B:64:E5:95:9F:F5:01:87:7B:48:21:3C:89:4A:F6 Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Certificate serial: 359A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft Manifest number: 3572 Signing time: Tue 04 Aug 2026 15:14:10 +0000 Manifest this update: Tue 04 Aug 2026 15:14:10 +0000 Manifest next update: Tue 11 Aug 2026 15:14:10 +0000 Files and hashes: 1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: 2yDNpxrUg70hGudolfgeIwsQhpux0kAXcD9DJlskcrM=) 2: 1A1E4A7A6A6911F18287CF148C47A888.roa (hash: PFvhmpVV6scs/whQYid+4y3ffoZY6BXEcRXZF/STKOc=) 3: 18DC10026A6911F18287CF148C47A888.roa (hash: f5urIEiMMn7bTJnK6EndkOMWrKDIiWeFnU13yuaM8BM=) 4: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=) 5: 1998442A6A6911F18287CF148C47A888.roa (hash: M/p8XcwCACjksBG0lPH9EKkwR4b9TAusIscrzIwTeTY=) 6: 81CE23A6794C11F1BC374DFC78A30FBC.roa (hash: hd0r2prWlA4+0LF9b/xFRJOUyttYhz792UHJpUj+rF4=) 7: ADC4AF7A794C11F183C8766D79A30FBC.roa (hash: REZG1hbCbWcLjdEWLIy80wtl+wdmwwM8/vxZUIlggVI=) 8: 9B0A4EBC876111F19DB69EE44411F970.roa (hash: /qg+TWr9wIm15M5IenURO4Ua7PIPI2C6O35Eo/+09R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 15:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13722 (0x359a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Validity Not Before: Aug 4 15:14:10 2026 GMT Not After : Aug 11 15:14:10 2026 GMT Subject: CN=6a7201c2-902d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:d1:4c:bd:5e:0f:03:eb:66:e3:3b:a6:ed: da:97:b3:66:cd:52:07:df:d6:cf:13:10:b2:51:d7: c3:80:a2:51:75:2b:b0:f9:35:14:fb:a3:e8:3c:14: 89:43:ac:47:9a:ef:c2:e2:c7:75:d9:fd:c1:a0:04: 54:08:58:8e:fa:51:6d:d1:dc:57:66:5f:5a:ab:de: d9:ad:4f:4b:d6:7d:cf:94:89:da:38:ca:0a:62:2c: e4:18:24:1c:2d:f9:a7:f4:e7:d7:0f:2e:d6:d2:83: 0e:30:bb:52:a2:7a:f9:a4:26:fc:05:75:1a:a2:a5: 4f:70:77:27:50:91:e3:e1:68:f3:a9:87:d4:ad:f9: 2e:c8:ff:17:94:3b:82:ee:02:69:fa:9e:25:10:c1: 16:f9:3f:1c:c7:37:8c:23:90:f3:e4:38:73:7a:c6: 29:b3:07:d1:72:fd:5e:38:b7:e2:08:e2:40:8e:ae: e2:03:8a:d8:ab:6f:36:50:43:d1:b6:e2:7e:12:50: 6f:a6:77:e8:d0:6f:e7:26:08:e1:f1:3b:e1:09:10: 6e:2c:4e:92:80:49:59:b4:ad:7f:2d:dd:a1:dd:98: 6e:f7:d3:0a:76:17:78:54:a3:e6:ad:92:b1:3b:4b: 8b:c0:fd:f9:14:88:12:d7:ce:17:bc:78:5b:bb:01: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9E:7B:C2:18:3B:64:E5:95:9F:F5:01:87:7B:48:21:3C:89:4A:F6 X509v3 Authority Key Identifier: keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:8e:ec:e9:45:aa:98:83:4a:43:2e:5b:ee:da:e6:a4:a2:45: 2d:fc:87:cc:f9:40:38:a3:10:58:70:d6:e4:e1:62:ac:1a:59: a4:41:12:13:18:d8:7a:f9:1d:d0:36:d5:69:ef:15:ff:bd:82: 8f:b8:b4:f2:73:7e:87:18:27:5e:32:02:62:f3:5a:60:55:bc: f7:90:5b:55:c1:ea:2a:a6:12:68:ae:81:95:27:b7:18:33:5e: 68:88:1f:dc:fc:37:35:08:fb:7e:d6:97:ff:df:67:04:a8:77: 1b:5d:74:06:65:ac:34:a8:46:5e:9e:ee:a0:c7:1a:6a:64:9c: 8f:8e:99:60:d4:3c:6d:5e:82:a4:be:f1:96:24:90:a6:eb:6e: b9:f8:7c:bc:f5:e8:b8:63:6f:92:72:2c:f6:08:b7:97:4a:0d: 0d:f6:51:3e:9b:67:cd:5e:25:92:4f:9f:16:c7:48:45:86:bf: 2c:a9:e0:10:24:d8:83:57:88:44:25:da:42:fd:6b:0c:1b:a7: 70:09:d0:d5:ce:78:28:8f:ba:44:3f:ad:87:c4:3b:91:28:e2: 3e:15:a5:36:41:6d:b5:e0:20:06:c2:73:48:f6:79:48:e9:68: 5a:c1:2b:46:c3:73:8c:1a:1e:fe:0c:fe:1a:34:f8:4b:b6:85: 48:29:1a:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NTMxMTAvBgNVBAUTKEE2NkREMDEwREEyNERGOEFFMTcwNkJEOTA4Q0JBNDNC RDEzODk2MzEwHhcNMjYwODA0MTUxNDEwWhcNMjYwODExMTUxNDEwWjAYMRYwFAYD VQQDEw02YTcyMDFjMi05MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1T3RTL1eDwPrZuM7pu3al7NmzVIH39bPExCyUdfDgKJRdSuw+TUU+6PoPBSJ Q6xHmu/C4sd12f3BoARUCFiO+lFt0dxXZl9aq97ZrU9L1n3PlInaOMoKYizkGCQc Lfmn9OfXDy7W0oMOMLtSonr5pCb8BXUaoqVPcHcnUJHj4WjzqYfUrfkuyP8XlDuC 7gJp+p4lEMEW+T8cxzeMI5Dz5DhzesYpswfRcv1eOLfiCOJAjq7iA4rYq282UEPR tuJ+ElBvpnfo0G/nJgjh8TvhCRBuLE6SgElZtK1/Ld2h3Zhu99MKdhd4VKPmrZKx O0uLwP35FIgS184XvHhbuwGz3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCee8IY O2TllZ/1AYd7SCE8iUr2MB8GA1UdIwQYMBaAFKZt0BDaJN+K4XBr2QjLpDvROJYx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc1My84MDUxNDU5MDFE QTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0cmhjR3ZaQ011a085RTRs akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BtM1FFTm9rMzRyaGNHdlpDTXVrTzlFNGxqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc1My84MDUxNDU5MDFEQTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0 cmhjR3ZaQ011a085RTRsakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI47s6UWqmINKQy5b7trmpKJFLfyHzPlAOKMQWHDW5OFirBpZpEESExjYevkd 0DbVae8V/72Cj7i08nN+hxgnXjICYvNaYFW895BbVcHqKqYSaK6BlSe3GDNeaIgf 3Pw3NQj7ftaX/99nBKh3G110BmWsNKhGXp7uoMcaamScj46ZYNQ8bV6CpL7xliSQ putuufh8vPXouGNvknIs9gi3l0oNDfZRPptnzV4lkk+fFsdIRYa/LKngECTYg1eI RCXaQv1rDBuncAnQ1c54KI+6RD+th8Q7kSjiPhWlNkFtteAgBsJzSPZ5SOloWsEr RsNzjBoe/gz+GjT4S7aFSCka4Q== -----END CERTIFICATE-----Generated at Thu Aug 6 14:52:35 2026 by rpki-client