$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json) Hash identifier: Ea0fXkM6V2XZSHfaVMrxEWta+Q9GMIEAaN7n8ruBXR8= Subject key identifier: 3A:CA:26:52:B5:C9:1D:4D:1E:98:70:91:7C:1E:89:07:D4:25:C5:DB Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft Manifest number: FC Signing time: Tue 07 Jul 2026 07:22:28 +0000 Manifest this update: Tue 07 Jul 2026 07:22:28 +0000 Manifest next update: Tue 14 Jul 2026 07:22:28 +0000 Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: adniiag6CKSWIVzWjJGMAqDZCkX90KhSTWKkEkGCDxU=) 2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 07:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Validity Not Before: Jul 7 07:22:28 2026 GMT Not After : Jul 14 07:22:28 2026 GMT Subject: CN=6a4ca934-702c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:31:f1:a7:1a:1d:ca:07:17:f6:33:d9:ea: 1f:42:a8:e5:35:50:f5:29:fa:de:ce:c4:17:ba:79: c4:3d:62:6a:f7:cc:92:c3:53:1a:74:a3:3a:37:0f: 14:f5:5f:8d:14:5f:06:78:c5:be:58:ea:b5:bf:ab: cb:87:57:40:1a:59:3b:cb:8d:ff:a6:99:2c:1b:b7: 74:ff:57:f0:f0:93:38:35:ab:f8:3a:ed:13:14:e7: 8e:96:07:9e:3c:ca:b7:f2:a9:aa:c8:9a:d9:95:8a: 0e:a3:08:19:4f:df:51:a1:ca:b2:d7:f4:76:c6:3b: 96:31:5d:57:72:43:37:a8:15:6f:8c:0c:ac:af:1e: ca:6c:5c:47:87:bb:66:25:a3:cd:f4:6d:c9:d6:0f: f8:fb:60:c5:de:42:04:f8:3f:b1:2d:ef:7e:23:bf: 73:e7:1e:ce:25:30:a5:86:95:0f:0a:19:55:c5:85: d0:67:7b:98:8a:b7:a8:f5:5d:51:81:86:a0:e0:19: 7b:0e:6e:45:5d:b7:ed:99:5d:68:20:8d:af:2e:34: c0:f3:39:06:b2:2c:d0:6d:2e:d6:bf:01:31:cc:99: 11:52:2b:0d:7c:a8:ef:27:2f:73:ed:96:92:30:e1: f2:3f:e6:bf:a4:95:de:b5:12:93:77:bd:55:06:c5: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:CA:26:52:B5:C9:1D:4D:1E:98:70:91:7C:1E:89:07:D4:25:C5:DB X509v3 Authority Key Identifier: keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:75:a6:06:f9:a5:76:36:fc:0d:a4:84:77:43:39:bc:3c:89: a0:d0:8f:cf:39:d5:f2:eb:4e:31:44:60:53:22:78:96:fa:6a: 35:ab:12:34:51:d3:15:89:d3:af:2c:bf:23:71:a0:5e:67:b5: 37:dd:87:a5:9b:2a:fd:58:46:de:95:78:14:da:df:01:89:07: 3d:5a:54:e1:c0:80:e6:d7:43:9a:94:f7:83:fa:a9:91:d5:19: bc:6d:63:3b:ef:07:41:9d:ca:e0:98:c1:80:32:ca:19:ca:15: cc:af:52:24:f3:35:bf:b1:bd:0a:01:28:8f:cf:b5:02:3f:2a: d2:d6:26:38:c4:ad:12:40:c9:9b:bc:fe:60:2d:8b:54:03:e8: 5d:d4:a8:d1:f4:2f:5e:19:0c:65:50:55:8e:ea:73:52:5c:a9: 3f:cb:89:72:7f:b2:79:c6:ff:2f:a9:77:81:e6:f1:3b:b5:21: 79:c7:e1:2c:af:d3:3c:c1:92:4c:c3:f9:9c:91:45:ac:7d:0a: 59:b4:68:aa:9d:03:37:b9:75:64:ff:61:d2:25:a2:01:ee:d1: d4:05:16:a3:e9:f4:02:14:de:cc:67:17:4e:fd:b4:9f:00:d5: a0:5e:ca:6b:8c:40:67:31:6c:11:c4:32:df:1d:c0:10:5c:b4: fe:00:f6:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDlGN0I0MkVGMThEMzQyRkRENTZBOUZEQzVGM0Q4MDFF MkQyQzFBQjcwHhcNMjYwNzA3MDcyMjI4WhcNMjYwNzE0MDcyMjI4WjAYMRYwFAYD VQQDEw02YTRjYTkzNC03MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR8x8acaHcoHF/Yz2eofQqjlNVD1KfrezsQXunnEPWJq98ySw1MadKM6Nw8U 9V+NFF8GeMW+WOq1v6vLh1dAGlk7y43/ppksG7d0/1fw8JM4Nav4Ou0TFOeOlgee PMq38qmqyJrZlYoOowgZT99Rocqy1/R2xjuWMV1XckM3qBVvjAysrx7KbFxHh7tm JaPN9G3J1g/4+2DF3kIE+D+xLe9+I79z5x7OJTClhpUPChlVxYXQZ3uYireo9V1R gYag4Bl7Dm5FXbftmV1oII2vLjTA8zkGsizQbS7WvwExzJkRUisNfKjvJy9z7ZaS MOHyP+a/pJXetRKTd71VBsW3DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrKJlK1 yR1NHphwkXweiQfUJcXbMB8GA1UdIwQYMBaAFJ97Qu8Y00L91Wqf3F89gB4tLBq3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8wNjFBQUI1MkZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2M1ZhcF9jWHoyQUhpMHNH cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODI4Mi8wNjFBQUI1MkZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2 M1ZhcF9jWHoyQUhpMHNHcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhHWmBvmldjb8DaSEd0M5vDyJoNCPzznV8utOMURgUyJ4lvpqNasSNFHTFYnT ryy/I3GgXme1N92HpZsq/VhG3pV4FNrfAYkHPVpU4cCA5tdDmpT3g/qpkdUZvG1j O+8HQZ3K4JjBgDLKGcoVzK9SJPM1v7G9CgEoj8+1Aj8q0tYmOMStEkDJm7z+YC2L VAPoXdSo0fQvXhkMZVBVjupzUlypP8uJcn+yecb/L6l3gebxO7UhecfhLK/TPMGS TMP5nJFFrH0KWbRoqp0DN7l1ZP9h0iWiAe7R1AUWo+n0AhTezGcXTv20nwDVoF7K a4xAZzFsEcQy3x3AEFy0/gD2FQ== -----END CERTIFICATE-----Generated at Tue Jul 7 16:52:16 2026 by rpki-client