$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: knbbRAMU0GuC4GRrUvmnYqieYxekqDS3FdgILnfZ17k= Subject key identifier: 18:8D:44:80:91:B7:67:C6:B2:73:85:6E:6C:56:9B:60:D5:1A:52:AE Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0570 Signing time: Tue 18 Aug 2026 23:40:59 +0000 Manifest this update: Tue 18 Aug 2026 23:40:58 +0000 Manifest next update: Tue 25 Aug 2026 23:40:58 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: KtEccFzR6gVYXW6jzT/JkAKdG0yI7O8O6DUw+A9fiio=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Aug 18 23:40:58 2026 GMT Not After : Aug 25 23:40:58 2026 GMT Subject: CN=6a84ed8b-ebbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f6:4b:14:f0:2c:dc:93:36:5b:7c:53:9a:dd: 87:08:4f:d4:01:cc:43:aa:5b:b4:94:56:8e:35:19: a5:21:db:82:7f:4b:63:68:aa:d8:ea:e7:4e:c9:f7: 65:75:51:7f:fb:09:59:06:2b:74:dd:97:cb:64:b6: c9:7a:aa:70:f5:84:3f:6a:e3:d9:e7:f9:5c:25:c0: c8:ad:27:3d:50:32:db:31:67:3d:eb:8e:f8:5b:eb: f9:bb:fe:d5:85:49:23:f2:6c:e9:f6:01:c5:f1:f0: 37:18:6d:3a:4a:a7:66:83:ea:5b:d4:eb:8e:74:76: 15:b7:94:14:85:8d:1c:38:07:db:eb:96:b3:01:00: eb:cf:2d:9b:75:08:3b:ba:80:09:3b:74:df:86:56: ab:c9:1a:cf:3b:41:8b:1e:b9:41:26:d5:ef:48:c4: 90:a5:27:0e:8f:b4:ab:9c:da:ed:67:64:d6:d0:ff: e3:b2:2a:1d:8b:e4:aa:6b:4c:60:ef:ff:59:28:c9: ca:cd:93:46:bc:a8:c1:88:38:27:c3:c8:80:5f:de: 65:ef:9c:73:77:5f:32:d6:ed:ec:18:d3:61:d6:d1: 05:6e:19:30:0b:c6:8c:84:cc:0a:ca:7c:7a:df:c8: a2:be:cc:5a:33:dd:f3:eb:5a:58:c5:de:53:e6:4e: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8D:44:80:91:B7:67:C6:B2:73:85:6E:6C:56:9B:60:D5:1A:52:AE X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0b:7e:e0:c1:ed:aa:5d:22:2d:14:2f:9d:5b:6b:be:c0:5b: 7f:fa:c6:03:62:7b:be:64:bb:27:c6:d8:6a:dd:c9:7f:19:a1: 92:96:64:72:20:e1:8d:79:12:c2:d0:6b:ac:0a:e3:3f:3a:24: 9e:da:58:aa:ca:a6:31:39:86:c7:2e:ff:ff:6b:79:7b:2f:2a: e1:98:aa:94:cb:58:67:24:5d:20:8b:8b:73:ff:fc:9a:08:82: 91:26:31:d5:af:0a:c6:38:ed:6e:85:07:fe:02:9a:d2:f2:1b: 7f:2e:12:e0:af:b4:ab:e1:8a:b4:2e:d3:92:db:a9:53:7b:d1: f2:57:fc:ee:97:99:70:db:e4:38:9e:36:a2:ae:31:b5:ec:07: fd:f9:23:12:4a:39:0c:3d:e9:ab:cd:39:11:cd:7f:28:53:0d: 6b:60:51:9b:4d:4b:7f:3c:00:74:21:ae:e1:be:27:42:f1:04: 7a:6a:1c:fd:a2:08:18:7c:cc:1c:2c:ad:0d:bb:d2:5a:53:a5: 83:06:5f:ca:b9:b1:35:6a:3a:4c:bd:6d:16:0a:8f:0c:0e:54: 06:e0:22:19:63:b4:8c:32:5d:05:12:fc:ce:23:88:0a:2c:dc: 78:cc:31:94:cc:ea:c2:fd:86:31:9c:cf:df:b1:44:bc:52:83: 9d:9b:87:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjYwODE4MjM0MDU4WhcNMjYwODI1MjM0MDU4WjAYMRYwFAYD VQQDEw02YTg0ZWQ4Yi1lYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj/ZLFPAs3JM2W3xTmt2HCE/UAcxDqlu0lFaONRmlIduCf0tjaKrY6udOyfdl dVF/+wlZBit03ZfLZLbJeqpw9YQ/auPZ5/lcJcDIrSc9UDLbMWc96474W+v5u/7V hUkj8mzp9gHF8fA3GG06Sqdmg+pb1OuOdHYVt5QUhY0cOAfb65azAQDrzy2bdQg7 uoAJO3TfhlaryRrPO0GLHrlBJtXvSMSQpScOj7SrnNrtZ2TW0P/jsiodi+Sqa0xg 7/9ZKMnKzZNGvKjBiDgnw8iAX95l75xzd18y1u3sGNNh1tEFbhkwC8aMhMwKynx6 38iivsxaM93z61pYxd5T5k5grQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiNRICR t2fGsnOFbmxWm2DVGlKuMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsAt+4MHtql0iLRQvnVtrvsBbf/rGA2J7vmS7J8bYat3JfxmhkpZkciDhjXkS wtBrrArjPzokntpYqsqmMTmGxy7//2t5ey8q4ZiqlMtYZyRdIIuLc//8mgiCkSYx 1a8KxjjtboUH/gKa0vIbfy4S4K+0q+GKtC7TktupU3vR8lf87peZcNvkOJ42oq4x tewH/fkjEko5DD3pq805Ec1/KFMNa2BRm01LfzwAdCGu4b4nQvEEemoc/aIIGHzM HCytDbvSWlOlgwZfyrmxNWo6TL1tFgqPDA5UBuAiGWO0jDJdBRL8ziOICizceMwx lMzqwv2GMZzP37FEvFKDnZuHig== -----END CERTIFICATE-----Generated at Thu Aug 20 22:53:57 2026 by rpki-client