$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: sarV4QMpD7gDcr7lGeMv9NZTsf8XPQxfM1fqgvbP7kE= Subject key identifier: D7:4E:66:6E:60:36:8D:9F:F6:CD:5C:71:C6:C6:69:74:5A:13:47:76 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 015E Signing time: Wed 05 Aug 2026 06:21:37 +0000 Manifest this update: Wed 05 Aug 2026 06:21:37 +0000 Manifest next update: Wed 12 Aug 2026 06:21:37 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: Ck9p7YMCyzwAyRdsEwN60Hu5GUCOqj7wi+BSMigiU1E=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 06:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Aug 5 06:21:37 2026 GMT Not After : Aug 12 06:21:37 2026 GMT Subject: CN=6a72d671-6293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:9d:95:be:31:ed:9d:74:c7:27:f7:6a:0f: bc:17:c9:4c:d9:ad:be:5d:fc:06:1b:67:c1:57:04: c0:5b:2a:73:1e:3e:7e:82:9a:71:72:8b:9b:0f:d4: 56:41:9d:55:80:2c:5e:9d:f2:81:34:34:ba:59:56: fa:d8:b3:83:ed:02:91:fb:59:9b:c7:70:ab:98:2a: 0f:71:23:ae:91:ab:57:bb:74:e9:9c:ea:eb:7e:8c: 85:d6:41:7d:59:9a:3d:1e:6c:d1:dd:c9:93:98:5d: 84:89:8a:cc:00:e0:58:63:34:ad:e1:b3:8e:59:3a: 59:7a:de:dd:e9:b6:14:1d:e8:71:7b:41:7c:14:71: 5f:dc:da:09:0d:4b:ae:6e:8f:82:0d:90:4e:29:25: df:16:8a:7a:71:9b:bc:c0:d2:6d:78:c4:56:96:69: 1e:a6:be:b2:1a:e8:b5:ab:a5:3f:46:c6:bf:09:e9: 39:c4:5e:c1:51:37:8c:42:60:1a:c1:92:fa:a7:07: 2f:c8:33:8f:0b:23:ab:5a:fa:45:dd:44:52:83:b8: 34:91:c3:1f:19:47:06:3d:00:5d:1e:ca:25:68:b3: 10:84:24:ec:91:cc:84:05:88:27:33:bf:0a:63:db: 6e:ff:0f:c9:32:60:32:5b:4d:a6:8a:b4:d8:44:aa: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4E:66:6E:60:36:8D:9F:F6:CD:5C:71:C6:C6:69:74:5A:13:47:76 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:56:d7:4a:65:34:0f:fd:1c:5a:8e:31:81:4c:dc:31:47:ce: 18:66:83:52:bb:d7:7c:34:ae:f8:a5:a6:71:13:36:ae:57:e8: 72:e3:0e:3b:89:16:ef:0e:3c:2c:c6:86:72:13:41:06:52:f2: 28:f9:95:82:17:82:a0:e6:98:0f:5f:99:59:72:c0:22:7b:74: f8:bb:a9:68:52:f8:c9:62:68:bb:35:a8:61:17:3f:c3:e3:f6: 88:17:e0:0a:8b:64:21:db:e8:f1:f1:a2:47:0d:3f:aa:e7:8e: 7d:75:41:ef:1b:35:82:73:db:5f:25:a0:11:e5:ec:ac:2d:6d: c3:1b:44:18:2f:52:cf:70:76:21:e0:b5:6d:80:ba:28:72:dd: 2f:46:2a:a2:42:92:dd:79:60:6e:94:32:b1:76:b2:fe:c8:75: a3:f2:ed:43:69:a6:75:2d:32:85:87:00:2b:6a:9e:86:4d:06: b5:79:e4:fe:97:f4:e8:27:7a:15:b4:0c:d7:06:aa:ab:82:67: 27:b0:f4:fb:c0:37:6f:bf:a3:5e:a8:bb:11:6c:91:f8:5a:5f: e3:63:b5:a3:96:ce:99:c6:a6:e6:d7:3d:43:9f:02:17:f7:4d: 5c:26:62:1d:35:25:7e:87:05:97:51:db:02:71:aa:e7:36:14: 77:5c:37:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjYwODA1MDYyMTM3WhcNMjYwODEyMDYyMTM3WjAYMRYwFAYD VQQDEw02YTcyZDY3MS02MjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztydlb4x7Z10xyf3ag+8F8lM2a2+XfwGG2fBVwTAWypzHj5+gppxcoubD9RW QZ1VgCxenfKBNDS6WVb62LOD7QKR+1mbx3CrmCoPcSOukatXu3TpnOrrfoyF1kF9 WZo9HmzR3cmTmF2EiYrMAOBYYzSt4bOOWTpZet7d6bYUHehxe0F8FHFf3NoJDUuu bo+CDZBOKSXfFop6cZu8wNJteMRWlmkepr6yGui1q6U/Rsa/Cek5xF7BUTeMQmAa wZL6pwcvyDOPCyOrWvpF3URSg7g0kcMfGUcGPQBdHsolaLMQhCTskcyEBYgnM78K Y9tu/w/JMmAyW02mirTYRKoFmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdOZm5g No2f9s1cccbGaXRaE0d2MB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAclbXSmU0D/0cWo4xgUzcMUfOGGaDUrvXfDSu+KWmcRM2rlfocuMOO4kW7w48 LMaGchNBBlLyKPmVgheCoOaYD1+ZWXLAInt0+LupaFL4yWJouzWoYRc/w+P2iBfg CotkIdvo8fGiRw0/queOfXVB7xs1gnPbXyWgEeXsrC1twxtEGC9Sz3B2IeC1bYC6 KHLdL0YqokKS3XlgbpQysXay/sh1o/LtQ2mmdS0yhYcAK2qehk0GtXnk/pf06Cd6 FbQM1waqq4JnJ7D0+8A3b7+jXqi7EWyR+Fpf42O1o5bOmcam5tc9Q58CF/dNXCZi HTUlfocFl1HbAnGq5zYUd1w3uA== -----END CERTIFICATE-----Generated at Wed Aug 5 22:15:21 2026 by rpki-client