$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft File: u3-5V71tGEoIkjFpTPg4nbaI_lM.mft (raw, json) Hash identifier: tm21DvadjqbEm9vyt75yw415nheTN9YIEmspYu0fXJ4= Subject key identifier: 67:A6:52:98:E9:6E:77:85:56:61:CC:85:0C:DB:2E:8D:72:C8:87:CD Authority key identifier: BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 Certificate issuer: /CN=A91F39A9/serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft Manifest number: 052A Signing time: Tue 21 Jul 2026 00:22:32 +0000 Manifest this update: Tue 21 Jul 2026 00:22:31 +0000 Manifest next update: Tue 28 Jul 2026 00:22:31 +0000 Files and hashes: 1: u3-5V71tGEoIkjFpTPg4nbaI_lM.crl (hash: 7z8eP+hy/z7W4zgYQIT5d4lvlOQwxyPuE80D2kNrNWQ=) 2: 12702794577711ECB7FD0C6FC4F9AE02.roa (hash: eFNp4aobXGIYGnDarPOL+A4RcUOAoScq1t8b/UbPq6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39A9, serialNumber=BB7FB957BD6D184A089231694CF8389DB688FE53 Validity Not Before: Jul 21 00:22:31 2026 GMT Not After : Jul 28 00:22:31 2026 GMT Subject: CN=6a5ebbc7-eac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:52:07:1d:fd:8a:ba:bd:75:b7:b3:a0:d8: c2:b9:3f:82:46:c1:88:93:f1:bc:12:4f:6c:23:5d: 96:d3:0e:fa:e7:06:bd:b3:3f:cf:02:ce:a5:6a:95: 51:41:3f:68:f5:04:54:19:6a:e0:ed:8e:7f:bf:c1: 77:55:c0:3b:0b:ad:15:e3:65:3b:5f:22:82:b4:0a: c2:05:48:50:c8:4b:9f:76:83:13:75:cb:ac:ec:e6: ec:f3:9b:b8:3d:8e:3b:aa:e2:ab:ab:e8:54:bf:26: b3:89:f8:3d:d9:9e:74:e4:7c:08:a5:8b:61:96:29: be:c6:7a:f5:1a:15:1e:8a:49:d2:1b:e1:5d:fc:20: 5b:05:ad:2f:55:42:83:96:86:7e:1b:11:7e:0e:2f: 7d:40:72:d9:87:e9:ef:25:5e:91:94:16:fc:26:f5: 73:e4:68:bb:54:8e:64:43:94:dc:7f:71:8c:e5:c7: 6c:00:20:c8:32:a6:d6:69:5c:a0:fe:d2:8a:fc:4c: d5:14:3b:6f:d6:b0:3f:58:e1:b2:5b:91:b1:e1:56: 1e:24:4d:60:c0:d1:2a:12:40:ba:b6:39:61:f7:2b: 23:f4:36:8a:16:65:ed:c7:a0:98:50:78:d5:c2:63: c1:17:c4:1e:ed:8f:07:e2:61:37:e5:88:e9:15:f6: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A6:52:98:E9:6E:77:85:56:61:CC:85:0C:DB:2E:8D:72:C8:87:CD X509v3 Authority Key Identifier: keyid:BB:7F:B9:57:BD:6D:18:4A:08:92:31:69:4C:F8:38:9D:B6:88:FE:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3-5V71tGEoIkjFpTPg4nbaI_lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39A9/525486B8566211ECB8EC7331C4F9AE02/u3-5V71tGEoIkjFpTPg4nbaI_lM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:53:e3:c3:ec:f5:3f:7b:2d:c9:1c:11:97:16:f6:c2:de:47: 20:54:a2:d3:9d:5c:38:31:5e:a5:9f:89:34:e4:51:35:4e:d3: 40:aa:d4:c2:f3:66:e8:85:23:51:28:0e:da:0b:76:e3:dd:f7: 61:43:e0:cf:c5:a1:68:3f:d5:f1:08:bf:05:6b:df:f3:bd:17: 5b:ae:a9:c9:91:a5:84:84:72:40:2c:68:87:ad:1e:0e:1b:6a: e1:3f:3a:41:f8:57:25:84:4e:8c:59:49:e2:12:44:72:ed:ce: 3e:df:f1:27:90:00:78:dd:08:3e:1e:f2:f0:d5:5e:07:97:10: 25:ac:f5:01:55:ca:aa:e9:b0:19:4d:14:f9:f9:54:ba:68:da: 94:ba:76:4b:80:77:71:aa:9e:4c:15:a1:e9:a6:cf:6f:44:7f: 22:12:24:e5:02:ed:3f:e0:62:80:9f:4d:1f:ef:f6:d6:a0:80: ab:0a:b5:7f:13:7e:44:28:73:47:cc:33:2e:36:d5:10:41:83: 15:23:2e:60:38:0a:12:94:5a:b8:9b:14:74:b4:b1:69:b1:5b: 93:21:d7:e5:79:63:3e:de:8a:ea:35:68:d4:7d:ca:57:0e:35: 34:93:72:65:4d:b2:8f:c6:15:3f:20:ba:31:f0:44:11:d5:bc: df:23:7f:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5QTkxMTAvBgNVBAUTKEJCN0ZCOTU3QkQ2RDE4NEEwODkyMzE2OTRDRjgzODlE QjY4OEZFNTMwHhcNMjYwNzIxMDAyMjMxWhcNMjYwNzI4MDAyMjMxWjAYMRYwFAYD VQQDEw02YTVlYmJjNy1lYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/VSBx39irq9dbezoNjCuT+CRsGIk/G8Ek9sI12W0w765wa9sz/PAs6lapVR QT9o9QRUGWrg7Y5/v8F3VcA7C60V42U7XyKCtArCBUhQyEufdoMTdcus7Obs85u4 PY47quKrq+hUvyazifg92Z505HwIpYthlim+xnr1GhUeiknSG+Fd/CBbBa0vVUKD loZ+GxF+Di99QHLZh+nvJV6RlBb8JvVz5Gi7VI5kQ5Tcf3GM5cdsACDIMqbWaVyg /tKK/EzVFDtv1rA/WOGyW5Gx4VYeJE1gwNEqEkC6tjlh9ysj9DaKFmXtx6CYUHjV wmPBF8Qe7Y8H4mE35YjpFfZY9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGemUpjp bneFVmHMhQzbLo1yyIfNMB8GA1UdIwQYMBaAFLt/uVe9bRhKCJIxaUz4OJ22iP5T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlBOS81MjU0ODZCODU2 NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdFb0lrakZwVFBnNG5iYUlf bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzLTVWNzF0R0VvSWtqRnBUUGc0bmJhSV9sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlBOS81MjU0ODZCODU2NjIxMUVDQjhFQzczMzFDNEY5QUUwMi91My01VjcxdEdF b0lrakZwVFBnNG5iYUlfbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADlPjw+z1P3styRwRlxb2wt5HIFSi051cODFepZ+JNORRNU7TQKrUwvNm6IUj USgO2gt24933YUPgz8WhaD/V8Qi/BWvf870XW66pyZGlhIRyQCxoh60eDhtq4T86 QfhXJYROjFlJ4hJEcu3OPt/xJ5AAeN0IPh7y8NVeB5cQJaz1AVXKqumwGU0U+flU umjalLp2S4B3caqeTBWh6abPb0R/IhIk5QLtP+BigJ9NH+/21qCAqwq1fxN+RChz R8wzLjbVEEGDFSMuYDgKEpRauJsUdLSxabFbkyHX5XljPt6K6jVo1H3KVw41NJNy ZU2yj8YVPyC6MfBEEdW83yN/+g== -----END CERTIFICATE-----Generated at Tue Jul 21 22:16:41 2026 by rpki-client