$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft File: PDiOKfqhof7qOJefIG9GaK2oyJ4.mft (raw, json) Hash identifier: 7wVey7RmCPx9bTtAzsVAeNfx9Gl+63HP3qXS+5SBoSM= Subject key identifier: F9:A6:0B:D4:7C:84:BC:E8:49:70:87:8F:75:B9:5B:F4:C7:7B:D5:E4 Authority key identifier: 3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E Certificate issuer: /CN=A91A4B9D/serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft Manifest number: 3A Signing time: Thu 16 Jul 2026 15:02:03 +0000 Manifest this update: Thu 16 Jul 2026 15:02:02 +0000 Manifest next update: Thu 23 Jul 2026 15:02:02 +0000 Files and hashes: 1: PDiOKfqhof7qOJefIG9GaK2oyJ4.crl (hash: tvnGOPxlhq45RTi5KESewbEBMEu3DXcoj6rHr/V6hzc=) 2: 1ECF684E387B11F1BDE8C228B8833773.roa (hash: wpIG5Mf53y4bmJfHAaok3Ne4FnPip0P/QZYb5ljnS2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 15:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B9D, serialNumber=3C388E29FAA1A1FEEA38979F206F4668ADA8C89E Validity Not Before: Jul 16 15:02:02 2026 GMT Not After : Jul 23 15:02:02 2026 GMT Subject: CN=6a58f26a-123a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ab:13:72:87:98:e3:88:a4:60:30:90:3e:86: 03:73:a4:b1:37:e3:44:2a:e5:e3:ef:13:3f:e2:b6: 70:92:c5:00:a8:f7:2f:b4:e6:0e:ba:06:69:c6:6e: b0:12:a9:d4:4b:7e:1d:21:e7:c9:49:81:e3:e9:5c: 1a:d4:1d:a9:c1:0b:23:c8:8a:2a:56:41:93:cd:f1: a1:bb:20:44:85:a1:3b:ef:8a:34:b5:c6:70:9e:09: 59:39:16:5a:02:53:b0:22:c4:0b:d7:0b:3d:1d:c2: 2c:bd:40:58:61:55:12:ad:a0:18:3f:aa:c8:e6:58: 89:d2:11:e7:28:f4:1f:f2:b6:e6:4f:8d:37:fe:3b: 58:85:97:99:52:42:b3:7e:00:55:5f:ec:cf:c7:24: c9:9a:9d:c3:12:71:66:81:6e:10:db:0d:a4:c8:b6: 25:1a:0c:7a:05:b1:23:62:8b:d0:72:36:70:20:ed: bb:7a:f1:a2:86:ba:ea:ee:a1:65:17:91:97:a3:78: ef:a5:09:5b:27:98:87:0f:50:57:ed:bf:4d:ad:b3: 88:52:a8:ed:98:9c:68:98:29:9e:a9:48:8d:db:f5: 6a:28:00:58:a3:41:f9:01:1a:1c:9a:9b:2b:47:62: b5:0b:48:07:b4:62:a4:fc:5a:97:cb:e0:f2:aa:87: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A6:0B:D4:7C:84:BC:E8:49:70:87:8F:75:B9:5B:F4:C7:7B:D5:E4 X509v3 Authority Key Identifier: keyid:3C:38:8E:29:FA:A1:A1:FE:EA:38:97:9F:20:6F:46:68:AD:A8:C8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDiOKfqhof7qOJefIG9GaK2oyJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/4CF3B3702D1211F1BFC478F598EE528E/PDiOKfqhof7qOJefIG9GaK2oyJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:04:18:c6:00:4e:07:40:65:c9:ac:0d:69:25:60:b5:08:fc: 1a:db:1d:c7:51:46:29:1b:51:32:ad:65:1e:1f:26:f0:2d:ea: 00:ee:55:0c:ea:2a:89:86:b9:b4:98:e2:a1:16:4e:fe:10:bf: 5e:77:f8:0a:d5:20:99:5c:ad:e4:ad:f4:49:fa:bf:f2:3b:c6: 4c:52:84:a2:11:d4:fc:5a:e6:0b:61:16:8d:82:ba:ae:75:8d: 96:48:79:ec:cf:ad:9f:3b:4c:a8:71:be:9c:e6:c3:99:86:b9: fa:1f:ef:7d:fe:d5:c6:ba:6c:74:f0:88:5e:24:e9:60:6b:70: bf:cb:50:2c:99:15:9b:93:0f:9d:7a:3e:f6:e6:71:d4:8f:6d: 72:ad:6b:43:46:71:98:55:14:e5:a5:00:8d:c2:a3:4f:1d:a2: 9e:95:2c:76:4e:87:58:0e:4b:e8:ef:a6:6c:d3:6d:92:2e:10: 83:23:98:1c:2b:7e:5c:9a:b5:ef:44:8c:7f:bc:09:40:20:55: 99:83:34:d3:eb:4c:45:3c:20:6d:f7:a5:e9:f1:43:30:a6:28: 1a:32:17:a4:f2:c1:53:bb:62:d6:b2:f1:9a:54:e7:3a:f6:db: 54:9c:51:0b:b3:50:f4:c4:87:01:60:77:15:70:1a:15:08:cf: 6b:3a:04:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEI5RDExMC8GA1UEBRMoM0MzODhFMjlGQUExQTFGRUVBMzg5NzlGMjA2RjQ2NjhB REE4Qzg5RTAeFw0yNjA3MTYxNTAyMDJaFw0yNjA3MjMxNTAyMDJaMBgxFjAUBgNV BAMTDTZhNThmMjZhLTEyM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcqxNyh5jjiKRgMJA+hgNzpLE340Qq5ePvEz/itnCSxQCo9y+05g66BmnGbrAS qdRLfh0h58lJgePpXBrUHanBCyPIiipWQZPN8aG7IESFoTvvijS1xnCeCVk5FloC U7AixAvXCz0dwiy9QFhhVRKtoBg/qsjmWInSEeco9B/ytuZPjTf+O1iFl5lSQrN+ AFVf7M/HJMmancMScWaBbhDbDaTItiUaDHoFsSNii9ByNnAg7bt68aKGuuruoWUX kZejeO+lCVsnmIcPUFftv02ts4hSqO2YnGiYKZ6pSI3b9WooAFijQfkBGhyamytH YrULSAe0YqT8WpfL4PKqh1nTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+aYL1HyE vOhJcIePdblb9Md71eQwHwYDVR0jBBgwFoAUPDiOKfqhof7qOJefIG9GaK2oyJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjlELzRDRjNCMzcwMkQx MjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3cU9KZWZJRzlHYUsyb3lK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUERpT0tmcWhvZjdxT0plZklHOUdhSzJveUo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 QjlELzRDRjNCMzcwMkQxMjExRjFCRkM0NzhGNTk4RUU1MjhFL1BEaU9LZnFob2Y3 cU9KZWZJRzlHYUsyb3lKNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsBBjGAE4HQGXJrA1pJWC1CPwa2x3HUUYpG1EyrWUeHybwLeoA7lUM6iqJhrm0 mOKhFk7+EL9ed/gK1SCZXK3krfRJ+r/yO8ZMUoSiEdT8WuYLYRaNgrqudY2WSHns z62fO0yocb6c5sOZhrn6H+99/tXGumx08IheJOlga3C/y1AsmRWbkw+dej725nHU j21yrWtDRnGYVRTlpQCNwqNPHaKelSx2TodYDkvo76Zs022SLhCDI5gcK35cmrXv RIx/vAlAIFWZgzTT60xFPCBt96Xp8UMwpigaMhek8sFTu2LWsvGaVOc69ttUnFEL s1D0xIcBYHcVcBoVCM9rOgSj -----END CERTIFICATE-----Generated at Sat Jul 18 03:28:29 2026 by rpki-client