$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: DKIj4n7xSTHJti9eC1bUonO+S7gruxQB3wC7fNPA5XI= Subject key identifier: A9:63:55:DF:73:B1:D5:26:3D:57:5E:EE:9A:F3:79:D5:60:79:99:D8 Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 63 Signing time: Tue 21 Jul 2026 09:53:23 +0000 Manifest this update: Tue 21 Jul 2026 09:53:22 +0000 Manifest next update: Tue 28 Jul 2026 09:53:22 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: ZEbNH14iTMgcLGLdlH2LpKLCbrWaH8kxrxT2xLxgW7o=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 09:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Jul 21 09:53:22 2026 GMT Not After : Jul 28 09:53:22 2026 GMT Subject: CN=6a5f4192-1641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:02:aa:1f:89:db:c5:37:c1:9b:1e:5b:1d: 53:88:c3:37:ac:40:cc:12:af:0b:24:9d:61:ab:08: 49:03:3a:fe:ce:a2:e4:2d:07:84:5e:93:e5:3e:7e: a0:39:19:c3:ed:a2:1c:db:06:be:51:00:b7:7a:cc: fe:ea:22:91:cb:77:83:10:ee:f8:2a:5b:3b:0f:8e: ec:54:86:b0:39:97:4e:4e:29:47:9d:4c:64:cf:ee: 05:0e:3f:50:22:4e:86:e6:0a:c9:1f:7c:61:3e:f4: 59:64:07:f9:b3:77:9a:78:ab:ee:4a:91:e4:9d:05: 52:ad:38:08:29:1e:45:1d:f0:ad:be:ec:6b:97:02: 81:d5:2e:e2:43:c7:cb:26:af:bf:6d:b6:7f:e3:1c: 66:25:06:e7:83:d0:af:96:12:3a:5e:61:4a:af:d1: d3:be:58:db:b8:7a:2f:3d:61:16:c2:4a:c5:37:0d: 5c:db:c2:9a:e9:1a:dd:1b:73:01:c3:44:54:84:d6: 39:2b:3b:99:35:f2:43:7c:63:4d:03:9d:1c:c5:db: 0a:40:3b:f4:5e:e6:56:d3:71:49:c1:b5:5f:7e:dc: 60:09:e5:4f:82:7c:10:8f:2f:1c:b8:ce:1a:57:28: 37:56:c7:9a:d5:4b:9e:85:49:c7:85:46:ab:4b:2c: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:55:DF:73:B1:D5:26:3D:57:5E:EE:9A:F3:79:D5:60:79:99:D8 X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:10:a1:bd:67:78:4a:81:c8:73:bb:55:e0:a3:41:c4:f8:f2: 79:42:da:ba:73:1b:4f:ce:44:bb:cd:c3:f4:1f:67:34:cf:8d: b3:9f:52:c3:4b:6d:c3:2d:d8:a5:05:8e:4b:8f:f7:4f:72:c4: 56:bf:c6:32:6c:b9:1b:cf:c6:81:3b:b5:08:15:48:32:fc:de: 44:a8:13:70:81:de:08:8c:3d:e7:d3:f1:30:53:d0:ed:f3:0d: 47:d8:4a:0c:d2:c2:c8:39:6b:78:15:5c:e3:32:3b:31:b6:f6: cf:b1:37:45:f9:50:7b:bc:90:7a:7f:c6:67:fc:bb:0f:82:55: 07:a9:3f:21:6b:ec:88:55:c5:93:bd:42:9d:a3:14:1a:a7:a5: d7:0f:2b:ec:21:de:d4:db:0e:18:7e:68:ff:f1:1a:e4:c3:cb: 78:76:44:d7:cc:36:e2:ca:a7:10:00:56:79:c6:01:e4:63:ef: 72:bf:e4:a7:b5:f2:53:9b:14:65:0f:02:ca:5d:02:2d:ac:5d: 39:01:9a:43:a4:17:cc:34:37:24:c4:42:4a:d7:9c:1f:a6:bb: 2e:2d:00:3d:61:be:08:94:32:8a:1a:04:1f:73:c1:8d:d1:f6: 0a:b0:99:46:a7:5b:95:d7:ad:62:8f:ff:0d:8c:76:3b:3e:1f: c6:ca:58:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjA3MjEwOTUzMjJaFw0yNjA3MjgwOTUzMjJaMBgxFjAUBgNV BAMTDTZhNWY0MTkyLTE2NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHKgKqH4nbxTfBmx5bHVOIwzesQMwSrwsknWGrCEkDOv7OouQtB4Rek+U+fqA5 GcPtohzbBr5RALd6zP7qIpHLd4MQ7vgqWzsPjuxUhrA5l05OKUedTGTP7gUOP1Ai TobmCskffGE+9FlkB/mzd5p4q+5KkeSdBVKtOAgpHkUd8K2+7GuXAoHVLuJDx8sm r79ttn/jHGYlBueD0K+WEjpeYUqv0dO+WNu4ei89YRbCSsU3DVzbwprpGt0bcwHD RFSE1jkrO5k18kN8Y00DnRzF2wpAO/Re5lbTcUnBtV9+3GAJ5U+CfBCPLxy4zhpX KDdWx5rVS56FSceFRqtLLJeBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqWNV33Ox 1SY9V17umvN51WB5mdgwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYEKG9Z3hKgchzu1Xgo0HE+PJ5Qtq6cxtPzkS7zcP0H2c0z42zn1LDS23DLdil BY5Lj/dPcsRWv8YybLkbz8aBO7UIFUgy/N5EqBNwgd4IjD3n0/EwU9Dt8w1H2EoM 0sLIOWt4FVzjMjsxtvbPsTdF+VB7vJB6f8Zn/LsPglUHqT8ha+yIVcWTvUKdoxQa p6XXDyvsId7U2w4Yfmj/8Rrkw8t4dkTXzDbiyqcQAFZ5xgHkY+9yv+SntfJTmxRl DwLKXQItrF05AZpDpBfMNDckxEJK15wfprsuLQA9Yb4IlDKKGgQfc8GN0fYKsJlG p1uV161ij/8NjHY7Ph/Gylg5 -----END CERTIFICATE-----Generated at Tue Jul 21 20:34:07 2026 by rpki-client