$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: amN03wEzad0yd/xPQ5GvgEMmoBhZNY9R3BLGiCIpjcg= Subject key identifier: 53:1A:73:3B:57:4B:DF:15:34:24:0A:93:96:35:D1:F9:73:42:C2:EA Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0245 Signing time: Mon 27 Jul 2026 03:56:42 +0000 Manifest this update: Mon 27 Jul 2026 03:56:42 +0000 Manifest next update: Mon 03 Aug 2026 03:56:42 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: 8z4KQQllDvE+pCEvE6relfLJXtzOACu86821b7QHGPw=) 2: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) 3: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Jul 27 03:56:42 2026 GMT Not After : Aug 3 03:56:42 2026 GMT Subject: CN=6a66d6fa-6707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7c:10:07:45:38:e6:ec:63:d5:a6:40:5e:ba: 8f:49:e4:f9:20:c5:a8:4b:0b:d3:83:e3:fd:07:4c: cc:3d:83:0f:0f:9f:08:a2:ff:17:4f:61:70:d7:c6: d5:e3:cd:56:64:85:54:80:69:a9:f2:bb:26:dc:f0: 07:ec:f3:51:3e:23:fe:53:f7:5b:b4:05:7b:43:b3: eb:b3:d9:3b:ed:68:7f:06:0e:58:6b:ef:dc:28:6f: fd:c7:57:fd:95:7b:3b:1f:64:6e:d0:c3:cf:5c:87: 2f:fb:68:9c:e7:ea:8d:3f:31:00:59:93:fd:91:c7: 9e:27:e7:ae:df:cd:f7:3c:6e:4f:d1:35:6d:cd:fe: f5:5e:45:4a:a9:e7:b0:8e:13:f0:25:2c:7e:8c:d0: df:9f:4a:49:f4:da:e2:7a:a6:3e:e5:66:2b:2b:71: 47:2b:e1:18:a0:43:c7:2e:55:84:15:ad:4d:1e:4d: 19:6b:0f:56:d2:74:e5:0e:4e:39:a4:3c:91:ee:5d: c4:e8:bd:d1:35:1c:06:e6:65:78:71:d6:2c:46:a1: 8b:f1:35:87:57:f6:26:07:7c:18:13:56:b3:1d:0f: 29:39:2c:fc:49:57:93:c6:1a:2d:f5:5d:dd:ae:d9: 01:8d:fb:29:ac:c7:ba:99:e1:84:3f:1a:3a:44:fe: 90:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1A:73:3B:57:4B:DF:15:34:24:0A:93:96:35:D1:F9:73:42:C2:EA X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ba:80:b6:1a:06:4c:85:23:50:0a:1c:96:95:e8:78:21:54: a8:9e:ad:34:c1:06:e1:1e:0f:f5:bc:77:a0:35:c7:bd:f3:23: 39:15:28:fc:fe:99:af:e4:6f:14:55:c7:5d:f1:35:28:24:c8: 67:09:0d:ea:02:ae:cd:1a:21:33:ba:97:13:49:7a:33:c5:69: fc:de:1b:ed:87:e7:fd:b2:07:5d:89:f9:fe:c4:9f:be:3c:ad: df:1c:ad:3f:74:e4:29:d1:8b:1e:b0:c9:72:50:8e:7d:de:44: c1:d2:35:63:af:a9:5a:60:b3:be:39:30:75:8b:19:a3:43:1b: 9e:7c:1d:23:f7:38:e1:df:04:6e:69:df:96:c6:2c:0c:78:de: fe:0d:fe:4d:77:60:bf:16:45:d1:67:d8:c9:67:89:ef:ce:85: 87:ed:99:7c:9d:a6:04:ab:7a:1f:78:ad:e0:39:4e:fc:64:af: 6f:3a:f3:26:d0:b6:41:ca:30:f3:ca:d4:26:3f:07:86:3d:10: d3:05:fb:70:fd:f5:96:75:cd:d9:45:70:36:32:31:fd:46:ec: 25:55:35:65:21:56:10:59:1a:25:70:47:77:75:56:a4:c5:47: 4d:e0:ce:c0:09:4b:cf:86:36:fb:18:4f:10:1d:fa:94:4f:f4: bc:8f:b0:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwNzI3MDM1NjQyWhcNMjYwODAzMDM1NjQyWjAYMRYwFAYD VQQDEw02YTY2ZDZmYS02NzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3wQB0U45uxj1aZAXrqPSeT5IMWoSwvTg+P9B0zMPYMPD58Iov8XT2Fw18bV 481WZIVUgGmp8rsm3PAH7PNRPiP+U/dbtAV7Q7Prs9k77Wh/Bg5Ya+/cKG/9x1f9 lXs7H2Ru0MPPXIcv+2ic5+qNPzEAWZP9kceeJ+eu3833PG5P0TVtzf71XkVKqeew jhPwJSx+jNDfn0pJ9NrieqY+5WYrK3FHK+EYoEPHLlWEFa1NHk0Zaw9W0nTlDk45 pDyR7l3E6L3RNRwG5mV4cdYsRqGL8TWHV/YmB3wYE1azHQ8pOSz8SVeTxhot9V3d rtkBjfsprMe6meGEPxo6RP6QEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMacztX S98VNCQKk5Y10flzQsLqMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx7qAthoGTIUjUAoclpXoeCFUqJ6tNMEG4R4P9bx3oDXHvfMjORUo/P6Zr+Rv FFXHXfE1KCTIZwkN6gKuzRohM7qXE0l6M8Vp/N4b7Yfn/bIHXYn5/sSfvjyt3xyt P3TkKdGLHrDJclCOfd5EwdI1Y6+pWmCzvjkwdYsZo0MbnnwdI/c44d8EbmnflsYs DHje/g3+TXdgvxZF0WfYyWeJ786Fh+2ZfJ2mBKt6H3it4DlO/GSvbzrzJtC2Qcow 88rUJj8Hhj0Q0wX7cP31lnXN2UVwNjIx/UbsJVU1ZSFWEFkaJXBHd3VWpMVHTeDO wAlLz4Y2+xhPEB36lE/0vI+wrg== -----END CERTIFICATE-----Generated at Mon Jul 27 22:45:02 2026 by rpki-client