$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft File: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft (raw, json) Hash identifier: WWb3JUTjZ8/lWDWcNuctTxCYTsnk64A9Nsf5BwBVx4Q= Subject key identifier: FA:1C:DF:D7:9F:93:C9:43:C9:D6:A4:21:B7:1C:AC:8E:1B:1D:0D:AC Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 Certificate issuer: /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft Manifest number: 08CF Signing time: Thu 16 Jul 2026 20:44:33 +0000 Manifest this update: Thu 16 Jul 2026 20:44:33 +0000 Manifest next update: Thu 23 Jul 2026 20:44:33 +0000 Files and hashes: 1: L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl (hash: Ej7LN6A/jRSTXAHFnP2XVWSliQ5nM5s/H9qYrJEaokI=) 2: A29A7DF20E2011EB81D90E2EC4F9AE02.roa (hash: edMpAdsKCKk/U5YKtWRInEEpB1MnGnib+hFAYPoQeoE=) 3: FB53E88A2D9F11F19981FFD49F833773.roa (hash: ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 20:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369 Validity Not Before: Jul 16 20:44:33 2026 GMT Not After : Jul 23 20:44:33 2026 GMT Subject: CN=6a5942b1-1c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b0:22:32:58:65:5e:c1:49:e2:f0:01:d3:cc: 99:55:8e:eb:77:f2:d0:fe:be:54:0e:08:41:9c:43: ae:0c:f2:71:21:ee:62:c4:46:16:4d:2c:c4:4c:df: 8e:4a:b8:a5:e9:94:66:59:d5:3e:e0:b0:80:51:7a: f3:a2:6f:39:62:83:2d:28:33:b9:77:ab:39:6e:00: 7a:3d:04:55:26:af:d9:45:50:8f:f2:57:6f:8a:b5: ed:42:46:00:62:51:b8:12:70:dc:e0:47:5a:04:26: 5f:01:02:d7:25:e5:89:66:41:13:46:ed:23:e6:8f: 1c:12:06:3b:07:fb:c0:f2:82:40:29:c9:81:c0:a5: 8e:d0:30:ec:f1:cb:8e:7f:75:70:9d:25:ad:14:a4: 08:2a:05:2a:04:dc:c9:aa:bd:42:a6:28:0d:10:1e: 5d:80:45:e4:b4:ff:9b:be:ae:38:92:e3:d0:f3:cc: 79:6e:fc:b5:bf:8e:d3:22:78:3f:c6:40:1c:14:f4: b7:81:9a:10:b9:11:08:8e:52:d1:72:71:33:d6:93: 8b:61:42:08:e4:3b:8b:f9:21:1a:5a:4a:98:49:dd: a9:55:4a:0d:a0:9c:c8:3c:00:18:20:bc:77:1f:be: 15:6d:8c:ff:ec:cc:ac:f7:dc:a1:8a:71:33:59:bb: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1C:DF:D7:9F:93:C9:43:C9:D6:A4:21:B7:1C:AC:8E:1B:1D:0D:AC X509v3 Authority Key Identifier: keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:62:4d:4a:b8:63:1d:bf:6e:99:30:29:74:47:32:fa:98:63: b5:69:11:a4:89:cb:e3:c0:7b:48:e0:04:80:e3:2b:58:18:5c: 93:af:17:f7:9d:4f:0b:74:97:29:e9:49:ef:ea:bb:ae:5b:1b: 9a:32:78:ec:1a:4d:f0:5f:5d:b6:4e:3b:51:ae:a5:09:47:24: 70:dd:dc:a5:46:e6:48:50:22:dd:c4:b8:de:b2:94:07:d4:bd: 7b:cf:c2:6b:90:19:c6:1c:92:53:82:5b:db:c2:5f:98:d2:09: dd:2c:0f:7c:11:c9:b6:34:d0:93:52:b9:ca:2e:43:f7:52:9a: e2:1d:a8:1e:b5:86:1e:7e:ea:ff:4f:b4:15:51:48:d9:29:f3: 33:0d:5b:c8:c8:03:56:2f:bc:2b:a0:27:de:70:3b:50:c2:0e: 6a:47:7c:89:b2:67:75:97:0e:a6:be:f8:5b:2d:f6:67:72:ca: b5:fc:76:fc:fa:a9:e4:19:63:f3:81:ed:9b:fa:62:66:20:02: e7:73:b3:02:0a:2d:18:05:21:a2:53:25:80:b7:e0:4a:74:5e: 12:fa:e7:bf:20:cf:f8:52:fd:aa:44:04:70:57:6b:4f:51:95: 5b:6f:83:4a:76:48:d4:77:6a:3a:10:4a:c1:f7:99:38:6f:dc: 40:c3:b6:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJFRTkxMTAvBgNVBAUTKDJGN0FFQkRDNzAxNzlENzE2OTRGQzY5OUQ1RjNFNDBF NTg0QUIzNjkwHhcNMjYwNzE2MjA0NDMzWhcNMjYwNzIzMjA0NDMzWjAYMRYwFAYD VQQDEw02YTU5NDJiMS0xYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37AiMlhlXsFJ4vAB08yZVY7rd/LQ/r5UDghBnEOuDPJxIe5ixEYWTSzETN+O Sril6ZRmWdU+4LCAUXrzom85YoMtKDO5d6s5bgB6PQRVJq/ZRVCP8ldvirXtQkYA YlG4EnDc4EdaBCZfAQLXJeWJZkETRu0j5o8cEgY7B/vA8oJAKcmBwKWO0DDs8cuO f3VwnSWtFKQIKgUqBNzJqr1CpigNEB5dgEXktP+bvq44kuPQ88x5bvy1v47TIng/ xkAcFPS3gZoQuREIjlLRcnEz1pOLYUII5DuL+SEaWkqYSd2pVUoNoJzIPAAYILx3 H74VbYz/7Mys99yhinEzWbvscwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoc39ef k8lDydakIbccrI4bHQ2sMB8GA1UdIwQYMBaAFC9669xwF51xaU/GmdXz5A5YSrNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkVFOS8zMjQ4NDFGNEU2 RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5YRnBUOGFaMWZQa0RsaEtz MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzcnIzSEFYblhGcFQ4YVoxZlBrRGxoS3Myay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkVFOS8zMjQ4NDFGNEU2RkUxMUVBODM4RUExNDhDNEY5QUUwMi9MM3JyM0hBWG5Y RnBUOGFaMWZQa0RsaEtzMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASmJNSrhjHb9umTApdEcy+phjtWkRpInL48B7SOAEgOMrWBhck68X951PC3SX KelJ7+q7rlsbmjJ47BpN8F9dtk47Ua6lCUckcN3cpUbmSFAi3cS43rKUB9S9e8/C a5AZxhySU4Jb28JfmNIJ3SwPfBHJtjTQk1K5yi5D91Ka4h2oHrWGHn7q/0+0FVFI 2SnzMw1byMgDVi+8K6An3nA7UMIOakd8ibJndZcOpr74Wy32Z3LKtfx2/Pqp5Blj 84Htm/piZiAC53OzAgotGAUholMlgLfgSnReEvrnvyDP+FL9qkQEcFdrT1GVW2+D SnZI1HdqOhBKwfeZOG/cQMO23w== -----END CERTIFICATE-----Generated at Sat Jul 18 05:23:29 2026 by rpki-client