$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft File: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft (raw, json) Hash identifier: UhheTto4BRX2N+Kg2FIZZ9Z776E6KL78aom8FdnUHw4= Subject key identifier: 98:48:B3:42:60:E0:AD:C5:FA:94:11:16:EE:74:5B:92:2B:E8:BF:BF Authority key identifier: DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 Certificate issuer: /CN=A91B31CB/serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft Manifest number: 0144 Signing time: Fri 03 Jul 2026 06:03:25 +0000 Manifest this update: Fri 03 Jul 2026 06:03:25 +0000 Manifest next update: Fri 10 Jul 2026 06:03:25 +0000 Files and hashes: 1: 3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl (hash: +cd0ds51SGTBM+w34nm1XJiBeju8lAyjlskPwZAopaE=) 2: 67030B7889F111EFB3186A7BC4F9AE02.roa (hash: d7xVs3t7CcfMe/ajdsTZTFxRrOglm1vaW7xirB1AT90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Jul 2026 06:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CB, serialNumber=DFE4ACDCA0A62243654BD20936820578E92D2524 Validity Not Before: Jul 3 06:03:25 2026 GMT Not After : Jul 10 06:03:25 2026 GMT Subject: CN=6a4750ad-77f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:b1:30:3a:a0:90:01:0f:a4:b1:42:06:52: 98:a0:cb:b6:5a:5a:fa:56:f8:0c:53:25:72:35:d2: b3:85:54:28:6e:ef:0d:2f:7f:ba:42:73:17:95:33: d0:44:47:b9:e7:9e:d5:e6:f8:7e:2c:74:5e:a8:53: 82:7f:30:f8:fb:fc:67:71:d4:09:25:03:14:f9:70: 40:ae:2e:de:6e:3c:4b:26:61:24:f4:23:f6:a3:79: 72:92:c5:99:ab:9f:7a:14:7d:42:e0:61:e5:c7:72: f6:2f:8d:e0:59:91:a0:11:57:46:36:58:9c:8b:4a: 8d:72:15:93:19:af:2d:ff:d8:ca:88:71:03:fa:c5: a2:b3:7a:ea:3b:08:cd:fe:29:c4:37:c0:43:0f:ac: 48:d2:09:2b:45:c2:5e:da:3b:8e:3e:45:35:23:f1: 4e:e2:2c:6d:32:35:cc:eb:01:24:2b:e3:e6:88:2e: 23:24:23:82:7e:59:20:f2:c6:6e:8d:4e:f0:63:43: a4:97:01:45:bf:ae:76:27:67:69:f7:66:b0:da:2a: a3:7d:b9:e9:40:33:e1:83:4a:9a:f7:12:8e:9a:6d: 3a:22:19:c1:a1:fd:7a:34:cd:f3:c9:d4:7e:2a:89: bd:2a:00:6e:62:99:27:0b:c5:92:c4:c3:4b:69:43: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:48:B3:42:60:E0:AD:C5:FA:94:11:16:EE:74:5B:92:2B:E8:BF:BF X509v3 Authority Key Identifier: keyid:DF:E4:AC:DC:A0:A6:22:43:65:4B:D2:09:36:82:05:78:E9:2D:25:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CB/F44CCF7E89F011EFAD26B97AC4F9AE02/3-Ss3KCmIkNlS9IJNoIFeOktJSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ae:2e:3d:7a:c5:eb:6a:2e:72:86:4a:c2:55:ab:fe:d2:e3: b4:18:0b:af:c2:09:dd:8c:6a:33:59:f6:f4:97:1b:7e:e6:dc: 9a:ce:5f:34:05:51:cd:3b:1d:02:16:49:b0:57:51:e9:d3:e4: 5d:21:db:f3:d2:2a:6e:83:c5:d9:a7:ac:5f:2a:a4:21:c3:23: 92:42:d3:cc:bc:52:02:6a:ab:0a:2c:4b:76:5f:38:02:88:72: 37:b2:fa:a8:75:5d:dd:4b:18:2e:ea:f7:1c:4e:c5:2a:ca:4a: e8:97:c3:dd:15:ad:70:7e:48:a6:6c:b4:10:f9:e4:be:9a:27: 66:a8:90:41:82:9e:61:a8:91:eb:22:e5:d2:bb:59:9e:7b:2f: d2:47:68:25:b7:4f:ba:d1:db:d3:18:7f:d8:f1:d5:53:1a:b1: 68:3d:b8:14:7b:65:80:cd:ba:cb:e6:3d:2d:82:b6:59:24:be: b9:80:50:10:cf:bc:25:47:32:75:82:eb:c2:e0:af:a4:6c:2f: 6c:d5:f0:07:f4:b9:c8:87:d5:38:cc:7f:35:52:a1:05:ab:74: 2b:84:78:75:e7:4b:65:9d:87:f6:c9:6b:03:47:57:67:5d:d1: 12:19:de:6d:8f:b3:97:e1:82:bf:63:4c:15:f6:47:a6:b8:4a: 7a:57:cf:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0IxMTAvBgNVBAUTKERGRTRBQ0RDQTBBNjIyNDM2NTRCRDIwOTM2ODIwNTc4 RTkyRDI1MjQwHhcNMjYwNzAzMDYwMzI1WhcNMjYwNzEwMDYwMzI1WjAYMRYwFAYD VQQDEw02YTQ3NTBhZC03N2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgexMDqgkAEPpLFCBlKYoMu2Wlr6VvgMUyVyNdKzhVQobu8NL3+6QnMXlTPQ REe5557V5vh+LHReqFOCfzD4+/xncdQJJQMU+XBAri7ebjxLJmEk9CP2o3lyksWZ q596FH1C4GHlx3L2L43gWZGgEVdGNlici0qNchWTGa8t/9jKiHED+sWis3rqOwjN /inEN8BDD6xI0gkrRcJe2juOPkU1I/FO4ixtMjXM6wEkK+PmiC4jJCOCflkg8sZu jU7wY0OklwFFv652J2dp92aw2iqjfbnpQDPhg0qa9xKOmm06IhnBof16NM3zydR+ Kom9KgBuYpknC8WSxMNLaUNNxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhIs0Jg 4K3F+pQRFu50W5Ir6L+/MB8GA1UdIwQYMBaAFN/krNygpiJDZUvSCTaCBXjpLSUk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDQi9GNDRDQ0Y3RTg5 RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlrTmxTOUlKTm9JRmVPa3RK U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMtU3MzS0NtSWtObFM5SUpOb0lGZU9rdEpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzFDQi9GNDRDQ0Y3RTg5RjAxMUVGQUQyNkI5N0FDNEY5QUUwMi8zLVNzM0tDbUlr TmxTOUlKTm9JRmVPa3RKU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAia4uPXrF62oucoZKwlWr/tLjtBgLr8IJ3YxqM1n29Jcbfubcms5fNAVRzTsd AhZJsFdR6dPkXSHb89IqboPF2aesXyqkIcMjkkLTzLxSAmqrCixLdl84AohyN7L6 qHVd3UsYLur3HE7FKspK6JfD3RWtcH5Ipmy0EPnkvponZqiQQYKeYaiR6yLl0rtZ nnsv0kdoJbdPutHb0xh/2PHVUxqxaD24FHtlgM26y+Y9LYK2WSS+uYBQEM+8JUcy dYLrwuCvpGwvbNXwB/S5yIfVOMx/NVKhBat0K4R4dedLZZ2H9slrA0dXZ13REhne bY+zl+GCv2NMFfZHprhKelfP/g== -----END CERTIFICATE-----Generated at Sun Jul 5 07:51:38 2026 by rpki-client