$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: NzoOKc5bFfWzze3r9ETX8XMiR0b9lBiqy1FO4CGr3J0= Subject key identifier: 7D:2A:E4:3B:02:F3:4B:16:CA:A3:71:CD:64:F6:B0:9A:FD:56:0A:91 Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0CA1 Signing time: Tue 12 May 2026 18:35:20 +0000 Manifest this update: Tue 12 May 2026 18:35:20 +0000 Manifest next update: Tue 19 May 2026 18:35:20 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: rLX7P6XeZSEAzyWAE5CltYhS0P2DwAavDThc2YcCzHQ=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: jtNA4DSxailzGixhCLBv/XtkHLhwf6qcSCB3BjEuN/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: May 12 18:35:20 2026 GMT Not After : May 19 18:35:20 2026 GMT Subject: CN=6a0372e8-c718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:4d:1f:f2:84:94:79:9c:67:5a:86:27:6b: 71:db:d9:e0:b4:ce:c9:b8:16:da:bd:78:e4:52:14: 32:90:25:24:17:71:5b:43:7a:53:86:97:e9:7e:09: 03:c2:ef:6d:87:d9:9a:b7:7e:79:0b:c7:35:dc:b7: bd:64:c9:23:8c:c8:5d:f3:4b:39:ae:61:7f:8d:14: f2:0a:61:af:9e:dd:cc:86:f1:15:83:52:fd:58:b4: 0d:f5:b8:84:7a:40:85:61:df:68:96:bb:be:fb:74: 9c:48:7a:b0:9b:a5:d9:38:b6:24:45:f2:a8:8b:02: 68:cf:13:03:9b:39:93:4a:51:bd:19:35:d8:38:2e: 83:91:ae:bf:fb:a2:28:c7:f0:f2:4a:50:a3:14:8d: dd:ff:e2:ba:34:bf:5b:1a:bf:e2:a0:df:5a:d2:94: 62:b9:5e:44:35:00:dc:ad:be:30:3c:9f:ae:9a:32: 56:ff:11:58:bc:5c:85:3c:69:7d:a0:a1:71:f4:f8: 98:f3:5d:85:39:61:a9:aa:8c:b1:95:2e:56:21:9a: 67:f8:b0:ab:3d:66:e6:bb:19:41:1a:cb:4d:34:ea: 9f:c5:a0:1f:9a:ac:f2:fe:66:d2:59:47:36:fa:ce: 5e:76:55:0b:4f:5e:e6:90:04:f1:ab:a2:9d:b5:23: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2A:E4:3B:02:F3:4B:16:CA:A3:71:CD:64:F6:B0:9A:FD:56:0A:91 X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1a:8f:46:3e:d5:c4:d3:c3:6a:ff:bc:8f:95:94:dc:ec:5b: d8:99:5a:37:4f:72:e3:b1:d9:d5:99:e8:58:d9:08:b6:84:38: 67:a5:8c:ca:82:eb:08:33:d6:4d:24:65:83:6c:9c:b9:74:3c: f1:cb:95:c9:6a:80:09:cf:c1:3b:ac:b4:4e:4f:b5:47:92:bc: a9:ec:0b:7e:a9:2e:ae:c4:2e:a7:67:a9:c4:3a:51:18:0c:09: 95:cf:32:66:d5:a9:29:18:6e:a8:88:b1:ab:82:f2:29:e1:62: 11:1d:84:f9:02:72:d3:a5:9b:6f:8c:7d:ff:2f:b3:6f:fa:24: 51:e2:19:e8:1f:2d:99:91:a3:dc:72:91:e9:c7:b1:40:d5:2b: 0c:17:16:39:09:9c:d2:95:fa:68:9e:3d:80:9d:fa:31:08:f8: a0:4c:2e:96:3b:80:2e:2a:14:9d:cc:59:8a:a1:44:50:86:54: 85:25:ac:c3:3d:7b:0b:02:d9:fd:20:79:67:21:cb:c4:6d:6d: f3:47:39:ba:6a:52:2e:97:d9:88:47:00:a9:a5:8f:e9:07:c5: 03:af:78:f9:68:ae:95:e1:6b:9d:33:87:0c:a6:41:9f:81:28: fa:04:27:84:2a:84:8c:a3:fe:37:f6:d2:52:68:45:3c:14:93: 7e:65:53:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjYwNTEyMTgzNTIwWhcNMjYwNTE5MTgzNTIwWjAYMRYwFAYD VQQDEw02YTAzNzJlOC1jNzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lBNH/KElHmcZ1qGJ2tx29ngtM7JuBbavXjkUhQykCUkF3FbQ3pThpfpfgkD wu9th9mat355C8c13Le9ZMkjjMhd80s5rmF/jRTyCmGvnt3MhvEVg1L9WLQN9biE ekCFYd9olru++3ScSHqwm6XZOLYkRfKoiwJozxMDmzmTSlG9GTXYOC6Dka6/+6Io x/DySlCjFI3d/+K6NL9bGr/ioN9a0pRiuV5ENQDcrb4wPJ+umjJW/xFYvFyFPGl9 oKFx9PiY812FOWGpqoyxlS5WIZpn+LCrPWbmuxlBGstNNOqfxaAfmqzy/mbSWUc2 +s5edlULT17mkATxq6KdtSO7IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0q5DsC 80sWyqNxzWT2sJr9VgqRMB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYBqPRj7VxNPDav+8j5WU3Oxb2JlaN09y47HZ1ZnoWNkItoQ4Z6WMyoLrCDPW TSRlg2ycuXQ88cuVyWqACc/BO6y0Tk+1R5K8qewLfqkursQup2epxDpRGAwJlc8y ZtWpKRhuqIixq4LyKeFiER2E+QJy06Wbb4x9/y+zb/okUeIZ6B8tmZGj3HKR6cex QNUrDBcWOQmc0pX6aJ49gJ36MQj4oEwuljuALioUncxZiqFEUIZUhSWswz17CwLZ /SB5ZyHLxG1t80c5umpSLpfZiEcAqaWP6QfFA694+WiuleFrnTOHDKZBn4Eo+gQn hCqEjKP+N/bSUmhFPBSTfmVTDQ== -----END CERTIFICATE-----Generated at Wed May 13 10:41:59 2026 by rpki-client