$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft File: 3eQo-rsWskLR46Gm8A_V48OKpY8.mft (raw, json) Hash identifier: tU2Swx4mFvKmMzc/yTqfZ7QvGP2j0SIR4pROoKJ0XYI= Subject key identifier: 47:16:7E:32:C7:BB:7B:34:E2:2E:89:FD:F9:2E:53:E6:C3:E8:DE:7E Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F Certificate issuer: /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft Manifest number: 58 Signing time: Mon 03 Aug 2026 09:48:10 +0000 Manifest this update: Mon 03 Aug 2026 09:48:09 +0000 Manifest next update: Mon 10 Aug 2026 09:48:09 +0000 Files and hashes: 1: 3eQo-rsWskLR46Gm8A_V48OKpY8.crl (hash: gduy1gSvFHCc3bznQj8TSTXpjAxA/F82T18KZ9pslJw=) 2: 50B86BE40BE411F1BD6D7437333D8C67.roa (hash: QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 09:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Validity Not Before: Aug 3 09:48:09 2026 GMT Not After : Aug 10 09:48:09 2026 GMT Subject: CN=6a7063da-f171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:d7:d2:77:c7:a7:39:b8:65:7b:c8:79:49: c1:d8:70:5c:61:ff:f0:12:d0:3a:89:ec:60:10:51: 3b:cf:48:d5:e6:c8:a7:3c:4e:f5:c7:f1:59:8e:b3: 96:5b:a0:46:67:bd:c9:57:ea:74:de:ad:22:be:d7: 2a:f3:df:b4:57:ed:e9:04:44:44:74:c9:13:e3:ba: d7:a9:de:50:4c:85:0a:eb:3f:51:5c:14:e7:ea:a1: cf:3d:74:13:83:b9:d2:67:d1:8a:17:45:b6:31:86: c2:6e:ac:a3:d1:b5:5d:2d:1b:f9:73:45:f0:85:08: 22:da:03:c9:c5:42:35:f2:62:f7:f9:d1:4a:38:bf: ad:4a:5d:c1:4a:7e:65:00:80:6c:92:1f:c6:de:31: 6a:da:42:d9:2e:fd:a1:05:e0:2c:83:0b:d0:d9:17: f1:c3:ef:99:00:8b:83:1f:51:ff:43:fc:03:d4:9d: b7:0d:f4:c0:6f:ad:53:c5:a4:26:94:b1:5d:77:f1: 20:9e:7e:ba:06:c6:cd:aa:b2:4c:86:98:4b:3c:1e: 96:91:4a:5d:1a:37:1b:7a:e0:d3:a7:26:df:8e:73: 9d:15:e9:ee:80:51:d1:f3:53:71:c1:69:28:5d:cd: 77:86:19:41:55:a9:e0:f5:25:23:ae:34:4e:80:9f: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:16:7E:32:C7:BB:7B:34:E2:2E:89:FD:F9:2E:53:E6:C3:E8:DE:7E X509v3 Authority Key Identifier: keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:76:44:60:66:e8:72:aa:2b:fc:bb:4c:5d:2b:f8:a6:7c:74: 3f:2a:ff:d3:b4:39:d8:be:cd:2a:6c:1e:e0:4b:95:da:88:4b: 63:a9:f8:ff:b1:f9:f2:60:e4:1d:0b:cd:c4:28:54:5b:09:71: e2:91:7b:cf:ef:d0:5c:59:cc:d0:0d:66:ab:b6:d2:2f:77:4a: 3f:ee:ad:df:a5:05:b3:b1:89:08:98:b3:2a:eb:0f:30:a8:b4: 3a:0a:45:d2:c7:4d:d0:66:8f:a1:57:98:2a:ee:54:3e:e0:3c: 45:37:95:45:ec:96:c4:81:0b:a7:a6:c3:48:66:00:53:d2:47: 58:22:2a:8a:85:70:76:b8:1f:73:f9:d0:80:c8:56:bb:03:3a: 52:28:7d:8c:db:45:63:a0:94:47:ef:d7:0a:eb:75:d0:0e:b7: ca:ca:03:71:6a:b2:e5:ae:56:5a:3d:53:f2:d3:49:66:64:8a: 36:3c:e4:b5:ee:42:69:d6:be:54:0e:97:f5:b8:9f:c0:f8:21: d3:27:36:97:b7:7d:89:ac:aa:d8:c3:9c:fd:04:8e:82:46:77: 48:f0:e3:51:fa:37:aa:d9:20:8d:8d:76:5f:00:16:4d:0c:1e: 03:16:e4:d5:09:3e:e7:f4:75:53:05:64:b0:95:d0:a6:69:bc: 73:ad:f2:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRERFNDI4RkFCQjE2QjI0MkQxRTNBMUE2RjAwRkQ1RTND MzhBQTU4RjAeFw0yNjA4MDMwOTQ4MDlaFw0yNjA4MTAwOTQ4MDlaMBgxFjAUBgNV BAMTDTZhNzA2M2RhLWYxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM2NfSd8enObhle8h5ScHYcFxh//AS0DqJ7GAQUTvPSNXmyKc8TvXH8VmOs5Zb oEZnvclX6nTerSK+1yrz37RX7ekERER0yRPjutep3lBMhQrrP1FcFOfqoc89dBOD udJn0YoXRbYxhsJurKPRtV0tG/lzRfCFCCLaA8nFQjXyYvf50Uo4v61KXcFKfmUA gGySH8beMWraQtku/aEF4CyDC9DZF/HD75kAi4MfUf9D/APUnbcN9MBvrVPFpCaU sV138SCefroGxs2qskyGmEs8HpaRSl0aNxt64NOnJt+Oc50V6e6AUdHzU3HBaShd zXeGGUFVqeD1JSOuNE6An2pHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURxZ+Mse7 ezTiLon9+S5T5sPo3n4wHwYDVR0jBBgwFoAU3eQo+rsWskLR46Gm8A/V48OKpY8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0NDMDMxOTQyMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tMUjQ2R204QV9WNDhPS3BZ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2VRby1yc1dza0xSNDZHbThBX1Y0OE9LcFk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0NDMDMxOTQyMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tM UjQ2R204QV9WNDhPS3BZOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDBdkRgZuhyqiv8u0xdK/imfHQ/Kv/TtDnYvs0qbB7gS5XaiEtjqfj/sfnyYOQd C83EKFRbCXHikXvP79BcWczQDWarttIvd0o/7q3fpQWzsYkImLMq6w8wqLQ6CkXS x03QZo+hV5gq7lQ+4DxFN5VF7JbEgQunpsNIZgBT0kdYIiqKhXB2uB9z+dCAyFa7 AzpSKH2M20VjoJRH79cK63XQDrfKygNxarLlrlZaPVPy00lmZIo2POS17kJp1r5U Dpf1uJ/A+CHTJzaXt32JrKrYw5z9BI6CRndI8ONR+jeq2SCNjXZfABZNDB4DFuTV CT7n9HVTBWSwldCmabxzrfIo -----END CERTIFICATE-----Generated at Tue Aug 4 22:57:27 2026 by rpki-client