$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: 5zFvC+TESEofr7DVQd4r40HB5sYNio83x7OZwBuojj0= Subject key identifier: F0:76:78:74:A3:F6:C6:6E:D7:C4:4A:64:F8:64:E7:96:B9:25:A6:91 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 0244 Signing time: Mon 27 Jul 2026 04:02:09 +0000 Manifest this update: Mon 27 Jul 2026 04:02:08 +0000 Manifest next update: Mon 03 Aug 2026 04:02:08 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: 2nSXPSdjLLT5eVc9SfnX/ncL1HiHlf/vCC1W+eJ5PfE=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: GIPpL/Qhb4Qtf8Jweh0Fb+71Qryjl3QLZMDyDcTBZeo=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: mp6UKxB2b1zXxB5aLbTsGKHkEwH64+Ff1FghIf0l4Tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Jul 27 04:02:08 2026 GMT Not After : Aug 3 04:02:08 2026 GMT Subject: CN=6a66d840-2af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:92:33:24:6f:40:a6:f5:fa:74:e7:58:0b: 12:61:a1:3a:78:ba:65:7d:05:bf:a5:2a:56:64:a2: 0f:38:45:c1:81:d7:59:e0:a6:23:f3:c3:d1:10:83: be:44:2b:1a:7b:b6:05:ed:d3:fa:0e:87:df:27:2f: 7a:78:9b:5d:45:ec:53:77:eb:1e:a8:39:31:4a:ff: 60:f2:7c:43:10:b3:36:a8:69:b6:79:48:e2:1c:7d: 4d:56:15:8e:22:98:43:9d:af:24:59:aa:ed:3c:05: 4d:d2:bd:6f:69:77:d1:2a:2f:79:86:7f:e9:a3:37: be:c3:c2:aa:95:79:7e:fd:5c:cf:d9:f0:de:7f:ce: 5a:33:2b:45:be:9d:7a:de:89:1a:77:2c:2d:57:94: aa:6f:31:24:49:66:25:05:bf:cb:0b:d8:cf:55:7a: 65:78:c4:75:0b:f5:33:80:56:3e:4b:09:db:48:e0: 84:1c:6d:59:a3:a1:3b:e3:64:ca:08:f4:9e:7b:a3: 7b:29:31:c7:5f:c0:66:51:0e:ea:38:3b:02:f7:43: e2:bb:e2:b1:23:3a:e2:af:4f:82:99:dd:46:70:f2: 4c:6a:dc:91:4e:dc:ea:28:2e:5b:b2:d8:72:ea:53: f8:90:c1:91:8f:48:6b:8a:e9:53:c9:0c:c6:9d:3e: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:76:78:74:A3:F6:C6:6E:D7:C4:4A:64:F8:64:E7:96:B9:25:A6:91 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d4:bb:8a:dd:5f:75:f5:dd:ee:d8:04:cc:f4:c2:e1:e2:15: f9:0b:7b:95:a1:af:6b:b0:7f:1f:f5:72:93:74:bf:19:ac:90: 94:39:db:4a:1f:71:7f:b1:10:51:94:a3:b2:6d:ea:a9:74:fc: 2c:d7:fc:b5:01:5f:77:ef:f0:41:a1:28:55:8f:72:5f:28:cf: e6:4b:d5:3f:f6:88:87:6a:df:a6:7b:4d:69:05:68:17:f1:1b: c6:fb:1b:08:30:76:89:5a:8e:ba:0c:cb:19:29:56:1c:12:4a: 64:11:96:98:40:8f:7f:12:f1:a9:49:a2:ac:45:59:ae:c3:9e: d9:eb:2b:89:26:79:5c:63:55:22:6b:0a:39:cd:09:2f:a1:cd: 5d:bd:1f:2d:ae:9c:63:d5:01:17:34:6b:fb:5d:a2:b8:9a:09: 10:97:01:67:71:86:53:a8:fc:ad:d6:a7:12:39:15:02:8d:b6: 19:e5:ff:97:91:40:ad:8c:01:d0:f0:2e:d4:ee:e1:89:29:52: 40:4e:34:38:b3:d9:c5:27:a9:54:71:57:a1:6b:12:36:82:19: 0c:5b:fd:2b:00:49:b6:49:18:12:e5:e5:69:2d:c7:f1:63:62: 1a:bc:b8:18:f9:ab:75:7e:b0:0a:20:2b:1d:86:aa:98:31:59: 7d:0c:de:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjYwNzI3MDQwMjA4WhcNMjYwODAzMDQwMjA4WjAYMRYwFAYD VQQDEw02YTY2ZDg0MC0yYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0N+SMyRvQKb1+nTnWAsSYaE6eLplfQW/pSpWZKIPOEXBgddZ4KYj88PREIO+ RCsae7YF7dP6DoffJy96eJtdRexTd+seqDkxSv9g8nxDELM2qGm2eUjiHH1NVhWO IphDna8kWartPAVN0r1vaXfRKi95hn/poze+w8KqlXl+/VzP2fDef85aMytFvp16 3okadywtV5SqbzEkSWYlBb/LC9jPVXpleMR1C/UzgFY+SwnbSOCEHG1Zo6E742TK CPSee6N7KTHHX8BmUQ7qODsC90Piu+KxIzrir0+Cmd1GcPJMatyRTtzqKC5bsthy 6lP4kMGRj0hriulTyQzGnT4+0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPB2eHSj 9sZu18RKZPhk55a5JaaRMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoNS7it1fdfXd7tgEzPTC4eIV+Qt7laGva7B/H/Vyk3S/GayQlDnbSh9xf7EQ UZSjsm3qqXT8LNf8tQFfd+/wQaEoVY9yXyjP5kvVP/aIh2rfpntNaQVoF/Ebxvsb CDB2iVqOugzLGSlWHBJKZBGWmECPfxLxqUmirEVZrsOe2esriSZ5XGNVImsKOc0J L6HNXb0fLa6cY9UBFzRr+12iuJoJEJcBZ3GGU6j8rdanEjkVAo22GeX/l5FArYwB 0PAu1O7hiSlSQE40OLPZxSepVHFXoWsSNoIZDFv9KwBJtkkYEuXlaS3H8WNiGry4 GPmrdX6wCiArHYaqmDFZfQze/w== -----END CERTIFICATE-----Generated at Mon Jul 27 23:27:05 2026 by rpki-client