$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: BaouHnOdywxB+XOzeOiMZl84KSnBmcIwbvdeVLk80EE= Subject key identifier: 2A:2C:02:06:58:65:56:C3:AD:69:20:FA:9B:A3:C6:85:14:AE:FE:78 Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 52 Signing time: Fri 17 Jul 2026 09:35:31 +0000 Manifest this update: Fri 17 Jul 2026 09:35:30 +0000 Manifest next update: Fri 24 Jul 2026 09:35:30 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: IRCm3ANG4ipw2nka0kGk3oGaa30icNgC15GQw/YHSKw=) 2: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) 3: 604F4E3C0D6611F1AAA528DE1B3D8C67.roa (hash: zn+Y2EzBvu1Td2sgtLKQfgs/gBSjMOZeXn2CBE9VYms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: Jul 17 09:35:30 2026 GMT Not After : Jul 24 09:35:30 2026 GMT Subject: CN=6a59f763-350e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:a4:1b:52:de:e8:d4:e6:be:c6:f8:87:6e: 2b:f5:05:6a:5f:4a:28:06:cc:1b:b8:44:72:94:75: ab:41:5a:85:8e:b8:94:41:5f:48:5f:f1:78:ab:03: 7b:f5:4b:a9:41:eb:36:cd:4a:41:a4:72:57:d9:be: 2d:b1:89:06:8c:d8:f2:58:29:36:db:0b:95:7a:39: 87:9a:6b:aa:80:0c:28:f5:e2:17:58:f2:90:8e:6d: 78:64:61:3e:a2:f6:bc:37:67:aa:27:94:0c:d4:0d: f4:06:2c:72:92:64:72:be:a8:44:fa:aa:73:2f:31: 95:06:57:20:6b:11:b9:61:b9:6b:c6:33:01:3a:09: 69:1c:20:c5:46:b5:1b:ad:7c:4e:96:a6:b3:ca:ee: 3b:c2:e2:d4:c4:c1:9c:48:31:b1:13:b0:70:54:9f: 3c:7f:15:db:6e:01:7e:fd:d1:d3:e7:e6:99:a2:31: 00:1f:7b:26:1f:03:bf:f5:e6:4e:0f:0e:24:8d:04: 95:ea:60:50:8b:cd:f8:ac:93:a8:50:17:24:4b:18: 19:23:32:40:1e:41:79:6e:ee:67:b7:ab:bb:5b:a1: 63:f3:de:d2:79:cd:56:4b:3c:7a:78:db:b8:ad:c2: b2:22:4f:24:ab:73:3a:8a:b7:3f:c7:7a:fc:32:92: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2C:02:06:58:65:56:C3:AD:69:20:FA:9B:A3:C6:85:14:AE:FE:78 X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:fb:17:43:92:33:28:9c:21:bb:87:01:5f:98:5c:a5:fb:23: f6:00:8c:a0:7f:f6:cb:2d:52:df:ce:26:37:9a:3a:41:39:41: 85:98:14:86:05:2a:97:44:65:45:65:4e:59:4e:43:26:2e:c8: 41:fb:38:4d:55:e8:d3:17:1e:ce:57:3b:fa:3b:d0:6a:71:8f: 53:6c:c8:0b:d7:54:03:e3:24:f4:69:4a:d3:72:ec:f3:a9:54: 52:d2:9f:e7:af:11:99:3d:fc:12:8b:af:77:9b:89:4d:78:e1: c4:20:92:13:9e:7c:e4:07:b9:d2:45:ff:2a:46:6d:b7:b8:2a: 6c:68:02:fc:2b:6b:1a:02:a2:5f:53:81:98:35:90:56:f0:e2: 5e:cc:e6:2d:92:68:27:77:ff:70:56:5e:15:c6:ac:50:bd:88: c1:52:93:c9:70:2a:96:20:cf:c6:98:43:2b:0e:4c:51:a6:c0: 64:b6:ef:c9:7f:d6:e7:1a:28:46:6b:0f:c9:c4:ed:fb:94:11: 82:37:38:56:c8:e9:41:a2:95:e9:c7:64:6d:f8:d5:cf:ed:37: 0a:cc:8b:16:79:81:84:5f:e5:4b:fe:e9:40:ce:25:0f:d8:18: da:f8:13:11:c5:47:af:19:7d:e6:0c:6f:f4:1a:83:ea:d3:e7: 62:fc:31:8d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD OUNGOUNDMjAeFw0yNjA3MTcwOTM1MzBaFw0yNjA3MjQwOTM1MzBaMBgxFjAUBgNV BAMTDTZhNTlmNzYzLTM1MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2GqQbUt7o1Oa+xviHbiv1BWpfSigGzBu4RHKUdatBWoWOuJRBX0hf8XirA3v1 S6lB6zbNSkGkclfZvi2xiQaM2PJYKTbbC5V6OYeaa6qADCj14hdY8pCObXhkYT6i 9rw3Z6onlAzUDfQGLHKSZHK+qET6qnMvMZUGVyBrEblhuWvGMwE6CWkcIMVGtRut fE6WprPK7jvC4tTEwZxIMbETsHBUnzx/FdtuAX790dPn5pmiMQAfeyYfA7/15k4P DiSNBJXqYFCLzfisk6hQFyRLGBkjMkAeQXlu7me3q7tboWPz3tJ5zVZLPHp427it wrIiTySrczqKtz/HevwykuudAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKiwCBlhl VsOtaSD6m6PGhRSu/ngwHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3 QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MzE0LzM2NTk3NEM2MDk3QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVu SWFTY3lDaTZkdThuUG5NSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBY+xdDkjMonCG7hwFfmFyl+yP2AIygf/bLLVLfziY3mjpBOUGFmBSGBSqXRGVF ZU5ZTkMmLshB+zhNVejTFx7OVzv6O9BqcY9TbMgL11QD4yT0aUrTcuzzqVRS0p/n rxGZPfwSi693m4lNeOHEIJITnnzkB7nSRf8qRm23uCpsaAL8K2saAqJfU4GYNZBW 8OJezOYtkmgnd/9wVl4VxqxQvYjBUpPJcCqWIM/GmEMrDkxRpsBktu/Jf9bnGihG aw/JxO37lBGCNzhWyOlBopXpx2Rt+NXP7TcKzIsWeYGEX+VL/ulAziUP2Bja+BMR xUevGX3mDG/0GoPq0+di/DGN -----END CERTIFICATE-----Generated at Sat Jul 18 08:18:17 2026 by rpki-client