$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: R8gSj6RmFqwOjZ2bMJudcGg5Q6FVewsd9cJh4Ivo80E= Subject key identifier: 55:D2:6A:F0:5E:B4:45:AC:84:8F:60:EE:EB:44:AC:E8:3A:15:5D:27 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 01B7 Signing time: Tue 21 Jul 2026 05:19:59 +0000 Manifest this update: Tue 21 Jul 2026 05:19:59 +0000 Manifest next update: Tue 28 Jul 2026 05:19:59 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: amssEE/9rdYrq2F2FdVYKvFLyCKpwxSL1MNvJwi5574=) 2: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=) 3: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=) 4: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Jul 21 05:19:59 2026 GMT Not After : Jul 28 05:19:59 2026 GMT Subject: CN=6a5f017f-9f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:8a:11:0f:c7:99:48:f0:64:6f:06:cf:09: 6b:d5:e2:74:39:7a:87:fc:ee:a3:09:5b:0e:a3:51: b4:ad:38:ab:36:a1:f1:da:6b:a4:f2:10:4a:d6:ae: 98:f8:c2:e6:d5:08:95:4d:30:a0:12:34:8c:a3:0c: 79:f2:c1:26:2b:a9:d6:91:17:4a:36:b8:6a:31:27: 17:10:36:0f:d0:af:fa:07:52:40:86:02:ac:66:d1: 16:2e:8d:4e:89:2c:cd:be:95:67:68:d4:8d:51:4b: a4:c5:62:c5:b7:44:59:51:b6:df:12:ac:af:87:9d: d0:61:d6:ce:64:af:e6:69:20:41:df:45:fa:1a:7f: 4d:5b:75:d2:a4:89:4a:4b:fc:53:ad:4a:c5:11:64: 7c:37:53:a3:62:23:4a:ff:0b:d3:94:75:a4:8f:a3: 1c:05:96:d4:9b:4c:03:a3:36:3b:35:8e:fc:70:7e: 97:8d:b0:14:e6:2a:1d:ca:37:e9:15:67:56:7f:77: f3:9b:51:ec:4b:82:5f:fa:7f:f9:9b:46:a7:6f:d8: e9:53:07:e6:c4:39:6f:1c:b3:82:b3:4b:86:58:53: d9:8a:6b:6b:ff:fa:1c:69:8a:93:57:02:2b:9c:fe: 81:8a:fb:07:0a:1a:01:18:16:ba:2b:24:d0:d9:8e: 4d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D2:6A:F0:5E:B4:45:AC:84:8F:60:EE:EB:44:AC:E8:3A:15:5D:27 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:96:12:85:ac:9d:71:c2:5a:a1:ec:9d:b9:ab:1b:f5:b8:95: 44:8e:a5:4a:e3:07:89:24:02:bc:b2:e2:35:9a:85:c0:c1:24: 6a:ae:bb:82:1f:51:66:3a:28:6f:9f:5c:2a:a1:18:69:a3:c1: c3:ba:94:0b:90:7b:0a:a2:c1:ba:b2:34:b2:b2:f7:d1:34:e9: c4:cd:b6:81:66:6e:e0:ad:1a:1a:bc:6f:e9:23:51:81:8f:f9: d9:18:3d:81:ff:23:3a:d3:4c:7f:8f:ef:2f:e2:c6:cc:26:d8: 0d:4c:87:08:2b:59:1e:02:aa:fe:12:b3:16:04:64:a6:c3:79: ab:e8:17:a7:34:f6:09:c6:e0:43:bd:d2:cc:e8:79:30:a6:bc: ab:99:dd:5d:79:ed:c1:04:72:07:37:79:3a:1f:b6:0d:23:7f: 05:91:c8:97:cd:2a:f3:48:4e:5d:ac:47:25:93:87:70:52:d2: 89:8e:9a:dc:0f:09:89:8f:3f:73:7c:15:08:33:39:53:3a:0d: e8:c3:1d:6f:ca:48:a0:ca:65:5c:49:55:2e:00:50:b5:e3:a0: 12:98:30:04:7b:3d:d7:ba:40:53:cc:87:6c:b4:64:17:12:87: 22:bd:a4:f7:f7:ff:30:2b:26:6b:18:32:c1:68:69:00:67:b2: af:f1:00:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjYwNzIxMDUxOTU5WhcNMjYwNzI4MDUxOTU5WjAYMRYwFAYD VQQDEw02YTVmMDE3Zi05ZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAiKEQ/HmUjwZG8Gzwlr1eJ0OXqH/O6jCVsOo1G0rTirNqHx2muk8hBK1q6Y +MLm1QiVTTCgEjSMowx58sEmK6nWkRdKNrhqMScXEDYP0K/6B1JAhgKsZtEWLo1O iSzNvpVnaNSNUUukxWLFt0RZUbbfEqyvh53QYdbOZK/maSBB30X6Gn9NW3XSpIlK S/xTrUrFEWR8N1OjYiNK/wvTlHWkj6McBZbUm0wDozY7NY78cH6XjbAU5iodyjfp FWdWf3fzm1HsS4Jf+n/5m0anb9jpUwfmxDlvHLOCs0uGWFPZimtr//ocaYqTVwIr nP6BivsHChoBGBa6KyTQ2Y5N0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXSavBe tEWshI9g7utErOg6FV0nMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqJYShaydccJaoeyduasb9biVRI6lSuMHiSQCvLLiNZqFwMEkaq67gh9RZjoo b59cKqEYaaPBw7qUC5B7CqLBurI0srL30TTpxM22gWZu4K0aGrxv6SNRgY/52Rg9 gf8jOtNMf4/vL+LGzCbYDUyHCCtZHgKq/hKzFgRkpsN5q+gXpzT2CcbgQ73SzOh5 MKa8q5ndXXntwQRyBzd5Oh+2DSN/BZHIl80q80hOXaxHJZOHcFLSiY6a3A8JiY8/ c3wVCDM5UzoN6MMdb8pIoMplXElVLgBQteOgEpgwBHs917pAU8yHbLRkFxKHIr2k 9/f/MCsmaxgywWhpAGeyr/EA7g== -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:29 2026 by rpki-client