$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: mRM3eS1OG57zOGPkRRBWHnIY/T1C+eU7+gwfhS+Fa1c= Subject key identifier: 04:6C:1C:34:9C:6C:03:D6:E4:34:EB:68:ED:C1:E5:E4:2A:D4:99:FE Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 113D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 1A87 Signing time: Tue 12 May 2026 17:16:17 +0000 Manifest this update: Tue 12 May 2026 17:16:17 +0000 Manifest next update: Tue 19 May 2026 17:16:17 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: WSlZEGkJyKFLj7A+hDdi9b+nWw7geRQIj4FEL6yx6/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4413 (0x113d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: May 12 17:16:17 2026 GMT Not After : May 19 17:16:17 2026 GMT Subject: CN=6a036061-9d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:50:b9:9b:a1:3a:74:b9:1c:ef:f2:fa:c8:84: 53:88:bf:21:bd:d0:16:10:cd:43:ba:58:47:39:ff: 03:95:fe:bf:04:a4:3f:f7:d8:ba:68:cb:76:7e:f5: 04:8d:91:43:df:41:08:ce:d7:7f:37:54:a4:8f:5e: 39:9e:5a:86:03:33:ee:86:c9:00:51:6e:62:8a:fb: 1b:f4:c1:30:46:38:5e:7b:5d:3e:7e:e6:02:c3:8d: 21:13:dc:42:8f:92:a1:ad:84:fc:96:48:68:62:71: 8e:2f:0c:02:10:06:64:c2:22:a4:ab:8c:3a:cf:9b: c6:00:0a:70:ff:41:9e:79:8a:91:2a:56:5f:ea:37: 32:fd:ae:b2:9f:14:a1:65:f2:44:da:c9:2d:d3:49: ff:2e:ee:b6:de:af:7b:3a:16:0f:64:d2:b8:e4:3e: 06:de:4a:6c:99:41:c4:c3:53:39:91:11:f0:24:cc: 69:5d:09:5e:96:c8:b8:41:ff:b7:44:d3:6b:b1:7b: 34:09:82:3b:6e:11:44:62:f0:db:bd:8b:ca:8e:e8: 78:d4:89:96:ac:be:20:d5:34:bc:e0:82:b2:1b:a5: 42:2b:f0:b1:71:78:ae:13:a1:5a:e0:cb:31:5e:5f: 93:b4:ce:fd:b9:29:db:1d:f5:38:d9:3b:38:39:76: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6C:1C:34:9C:6C:03:D6:E4:34:EB:68:ED:C1:E5:E4:2A:D4:99:FE X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:70:db:c1:d6:e9:f2:14:c9:63:4f:ed:8f:01:06:32:ae:1a: d0:86:1a:72:74:08:89:db:48:23:5a:b0:77:24:d1:5a:af:09: 63:a5:a9:ab:58:bd:90:63:a2:e2:74:b8:9b:ed:65:0b:5b:a0: c5:86:42:6a:d7:87:ac:ed:b7:32:a7:85:b1:1b:c6:b7:99:82: 56:9a:86:cf:9b:94:dd:c3:c7:0a:8e:77:bc:9f:b8:75:06:27: 2c:7e:52:04:dd:73:ad:79:2f:d2:4c:78:70:4c:f1:13:74:11: 97:c2:01:1c:46:9e:15:32:85:f4:a1:b4:16:0a:63:3a:e5:f6: e2:cc:94:02:c1:2c:dc:e6:b9:21:fe:2d:6a:16:84:2b:d9:10: 89:63:a8:0c:6f:74:78:39:18:c6:30:71:94:65:05:35:8e:16: 49:5c:f2:f3:30:22:2d:73:71:80:5d:08:6a:82:01:9c:77:41: cf:7d:45:6f:8d:f1:04:bb:b7:d2:1a:c2:fd:28:da:48:ab:81: 0c:5e:d0:15:6d:54:f7:3a:32:e7:68:0e:fd:fe:8f:fc:82:03: e7:8b:67:09:41:d0:5a:a3:24:96:b4:a5:1b:4b:6f:c9:21:78: 3c:c5:e1:b1:8e:75:ee:72:85:dd:ce:d8:19:c1:f1:db:36:d9: d3:cb:9b:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICET0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjYwNTEyMTcxNjE3WhcNMjYwNTE5MTcxNjE3WjAYMRYwFAYD VQQDEw02YTAzNjA2MS05ZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolC5m6E6dLkc7/L6yIRTiL8hvdAWEM1DulhHOf8Dlf6/BKQ/99i6aMt2fvUE jZFD30EIztd/N1Skj145nlqGAzPuhskAUW5iivsb9MEwRjhee10+fuYCw40hE9xC j5KhrYT8lkhoYnGOLwwCEAZkwiKkq4w6z5vGAApw/0GeeYqRKlZf6jcy/a6ynxSh ZfJE2skt00n/Lu623q97OhYPZNK45D4G3kpsmUHEw1M5kRHwJMxpXQlelsi4Qf+3 RNNrsXs0CYI7bhFEYvDbvYvKjuh41ImWrL4g1TS84IKyG6VCK/CxcXiuE6Fa4Msx Xl+TtM79uSnbHfU42Ts4OXbDlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARsHDSc bAPW5DTraO3B5eQq1Jn+MB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE3Dbwdbp8hTJY0/tjwEGMq4a0IYacnQIidtII1qwdyTRWq8JY6Wpq1i9kGOi 4nS4m+1lC1ugxYZCateHrO23MqeFsRvGt5mCVpqGz5uU3cPHCo53vJ+4dQYnLH5S BN1zrXkv0kx4cEzxE3QRl8IBHEaeFTKF9KG0FgpjOuX24syUAsEs3Oa5If4tahaE K9kQiWOoDG90eDkYxjBxlGUFNY4WSVzy8zAiLXNxgF0IaoIBnHdBz31Fb43xBLu3 0hrC/SjaSKuBDF7QFW1U9zoy52gO/f6P/IID54tnCUHQWqMklrSlG0tvySF4PMXh sY517nKF3c7YGcHx2zbZ08ubJg== -----END CERTIFICATE-----Generated at Wed May 13 05:42:00 2026 by rpki-client