$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft File: 3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json) Hash identifier: gUuxxTd4Mupbx/uC4S+66I5NpSd8s9JydRtJYkvCoQw= Subject key identifier: 25:C8:38:A8:CC:74:C8:C5:6C:0E:12:BE:A8:AB:DA:AA:8C:9D:A3:A3 Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA Certificate issuer: /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft Manifest number: 01A5 Signing time: Mon 11 May 2026 04:13:10 +0000 Manifest this update: Mon 11 May 2026 04:13:09 +0000 Manifest next update: Mon 18 May 2026 04:13:09 +0000 Files and hashes: 1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: 6Xkbco/9CLxkgpvSqnp8uWeJCAwLPKR1dHRa5CDz7No=) 2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: 7DlAURl7K2EyYXCsMTrF23T5auNxyW4sqWbcdHgz/XE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA Validity Not Before: May 11 04:13:09 2026 GMT Not After : May 18 04:13:09 2026 GMT Subject: CN=6a015756-4590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:62:bc:4b:bd:24:23:58:a5:eb:03:fb:b7: 48:a2:bf:ff:01:78:b9:3c:f3:78:60:b6:68:1d:7d: ac:bf:b5:81:fb:64:25:42:0b:fe:d9:b3:8f:71:97: 13:e1:6d:53:58:0a:fb:c8:11:8e:60:90:26:fa:5e: 75:f8:fc:a2:e8:94:4c:19:7f:26:ae:f8:28:77:20: 6b:63:a8:85:4a:33:1a:4e:38:b2:92:e9:76:ce:bb: 5e:61:f4:eb:51:78:32:b9:ea:ce:91:85:0d:9c:e3: bb:fc:3f:5a:6a:f9:34:d1:8d:a5:33:12:be:a2:40: bb:fd:64:5d:a5:72:40:36:05:0f:e3:8d:c9:dc:60: d6:65:7d:93:64:cc:61:b5:71:39:09:f6:42:81:8d: 23:e8:26:bc:6c:a2:1c:c7:fa:d1:af:b5:71:51:2c: 26:d8:f3:f8:13:ea:d7:97:70:b2:ba:99:26:61:64: e8:e6:f4:1a:3f:6b:d6:8a:11:6e:0b:2c:8b:a7:3d: ca:73:79:09:c5:85:8e:23:9b:be:5c:2d:6e:9b:3a: b6:a5:f0:10:52:7b:74:0b:d8:50:cf:60:4c:17:ab: d0:17:42:07:2e:52:9c:9b:04:a3:84:91:eb:16:8e: 92:df:47:1a:60:7c:d1:d0:c0:9f:24:17:af:a6:41: 90:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C8:38:A8:CC:74:C8:C5:6C:0E:12:BE:A8:AB:DA:AA:8C:9D:A3:A3 X509v3 Authority Key Identifier: keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:75:97:f2:91:f9:18:a9:c5:96:73:b3:20:8e:20:20:82:88: 47:fe:16:71:b4:84:dd:b1:24:e1:61:57:40:81:e7:f7:db:49: 93:2c:ee:4f:8a:c0:df:b1:a5:d5:e7:f1:cd:66:f3:23:ab:81: 4f:88:61:a2:e9:eb:f8:80:8a:76:db:53:77:71:f9:30:a6:55: 22:45:8e:d7:72:8c:be:23:e5:d8:93:27:41:33:97:da:40:06: 1a:7f:a0:ad:e5:23:62:0c:31:c1:ff:0e:c0:f4:24:f9:53:7b: 2f:10:6e:04:08:e0:ff:3c:94:fa:af:f4:e4:1c:f3:3e:92:64: 4b:01:de:88:36:44:51:52:ce:a0:d5:58:bf:c3:bb:03:68:78: a4:84:a5:1c:25:a0:6f:0b:f1:ae:d2:2d:34:43:fd:af:71:50: 26:6c:85:86:c2:c4:ce:a9:9e:ef:dd:a0:81:92:37:f6:ba:83: cb:c4:2e:e3:12:60:f2:d2:64:69:e2:92:08:48:f1:90:fa:69: 06:e2:27:d0:d7:2d:72:39:8c:dd:bb:62:80:49:56:b0:be:ea: 25:57:29:ab:fc:b4:4f:02:af:2b:d0:d8:d0:cd:a2:55:7d:98: 58:36:56:0a:3a:9d:c8:26:a8:82:5f:26:12:6f:4e:94:44:8e: a4:aa:ab:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0QkUxMTAvBgNVBAUTKEREMzZFNDVDNzFEM0Q5MkIzQ0QxQTcyRDVGNUFCMzI1 QjM0NkFEQ0EwHhcNMjYwNTExMDQxMzA5WhcNMjYwNTE4MDQxMzA5WjAYMRYwFAYD VQQDEw02YTAxNTc1Ni00NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnrtivEu9JCNYpesD+7dIor//AXi5PPN4YLZoHX2sv7WB+2QlQgv+2bOPcZcT 4W1TWAr7yBGOYJAm+l51+Pyi6JRMGX8mrvgodyBrY6iFSjMaTjiykul2zrteYfTr UXgyuerOkYUNnOO7/D9aavk00Y2lMxK+okC7/WRdpXJANgUP443J3GDWZX2TZMxh tXE5CfZCgY0j6Ca8bKIcx/rRr7VxUSwm2PP4E+rXl3CyupkmYWTo5vQaP2vWihFu CyyLpz3Kc3kJxYWOI5u+XC1umzq2pfAQUnt0C9hQz2BMF6vQF0IHLlKcmwSjhJHr Fo6S30caYHzR0MCfJBevpkGQbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCXIOKjM dMjFbA4Svqir2qqMnaOjMB8GA1UdIwQYMBaAFN025Fxx09krPNGnLV9asyWzRq3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjRCRS83OEJEMzIyNEND RjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJTczgwYWN0WDFxekpiTkdy Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNUYmtYSEhUMlNzODBhY3RYMXF6SmJOR3Jjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjRCRS83OEJEMzIyNENDRjcxMUVFOUU4OUQ2N0FDNEY5QUUwMi8zVGJrWEhIVDJT czgwYWN0WDFxekpiTkdyY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIHWX8pH5GKnFlnOzII4gIIKIR/4WcbSE3bEk4WFXQIHn99tJkyzuT4rA37Gl 1efxzWbzI6uBT4hhounr+ICKdttTd3H5MKZVIkWO13KMviPl2JMnQTOX2kAGGn+g reUjYgwxwf8OwPQk+VN7LxBuBAjg/zyU+q/05BzzPpJkSwHeiDZEUVLOoNVYv8O7 A2h4pISlHCWgbwvxrtItNEP9r3FQJmyFhsLEzqme792ggZI39rqDy8Qu4xJg8tJk aeKSCEjxkPppBuIn0NctcjmM3btigElWsL7qJVcpq/y0TwKvK9DY0M2iVX2YWDZW CjqdyCaogl8mEm9OlESOpKqrVQ== -----END CERTIFICATE-----Generated at Wed May 13 02:25:14 2026 by rpki-client