$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: RBWJraNBjhKZgccx+Qf++5t7eq/ggiMdi7JJ96Nk3ms= Subject key identifier: 04:35:1B:03:C9:3A:2D:E4:37:75:52:DE:C6:2E:AA:C2:10:2C:72:B8 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D52 Signing time: Tue 12 May 2026 15:31:16 +0000 Manifest this update: Tue 12 May 2026 15:31:16 +0000 Manifest next update: Tue 19 May 2026 15:31:16 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: 1rtUxLS5Yw6bjzwSlwE7Gxt8/vlfwAZGJ73NRtdekp4=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: 9I/UF8wVS9sTnXr5fHjV7Fm4AlFC8LAa0hnWMtmsfp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11630 (0x2d6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: May 12 15:31:16 2026 GMT Not After : May 19 15:31:16 2026 GMT Subject: CN=6a0347c4-8d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:a0:5b:5f:0b:45:c1:e9:4d:cb:84:1d:dd: b8:98:bd:5b:ad:74:8a:e5:51:db:d8:e7:a1:0d:74: 5c:af:57:0a:7a:73:88:14:1d:0e:61:ef:27:d0:d7: a7:22:c7:3e:cb:75:51:76:e2:d1:4b:51:10:18:d8: 47:26:50:05:ff:b5:4c:65:ab:6c:c8:5a:ec:36:ff: c6:bf:b4:e1:7a:c7:15:b3:f9:f5:ee:9c:a5:a7:d8: 4d:58:c6:70:43:22:e3:a4:d3:e9:06:4c:b5:48:30: 31:11:7a:60:30:61:e8:ae:de:98:01:f6:b7:27:46: 9a:ec:bb:b8:01:86:96:92:0c:27:8f:64:71:e4:0f: 1f:65:05:f9:41:dc:f8:c4:01:23:bf:f8:a6:c8:88: d9:0b:15:2c:65:37:2a:22:05:0d:34:3f:1c:dd:82: 77:be:da:7c:aa:29:de:47:f2:d7:4a:f5:38:d3:65: bc:7c:a7:16:e5:88:98:0f:22:fa:f5:3e:60:3f:96: 4b:e4:fb:24:2c:78:3c:01:e2:4c:33:e0:45:23:03: aa:55:2b:b6:9e:d9:bd:a7:e7:5f:48:bd:c0:cd:b1: 29:f9:23:8c:b8:b5:12:c6:72:ef:09:1b:82:dc:0d: f9:b0:0f:88:73:4f:16:df:30:25:41:30:48:11:94: 72:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:1B:03:C9:3A:2D:E4:37:75:52:DE:C6:2E:AA:C2:10:2C:72:B8 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:cd:09:01:b7:d1:7a:ab:97:90:02:cd:95:77:28:ae:7e:5b: 47:3f:e8:4e:3e:ec:b6:fc:b5:21:3b:d3:95:72:50:1c:df:ee: 66:79:5d:71:f9:ae:cb:95:e6:35:16:49:49:03:20:1a:7b:45: 18:85:8f:f4:ae:cb:55:d2:8d:f1:6f:ad:07:70:d1:59:30:e4: 2c:fd:1f:fe:7b:23:50:dd:ec:4b:24:90:58:67:8e:1d:55:3e: f9:85:0c:24:3d:14:9d:31:aa:45:a1:82:7a:78:9a:5e:41:d8: 52:2b:86:eb:17:0f:da:29:22:eb:4a:07:e7:52:24:70:4a:73: ee:5a:6a:67:d6:ec:aa:60:ed:5b:0a:c2:7b:66:9d:ec:40:14: 87:1a:33:e5:83:5f:30:6f:25:3c:07:2f:fc:a0:87:48:99:3c: fb:ca:89:58:93:21:cd:3a:8b:b3:cb:0b:e0:b4:d7:4a:02:59: 6c:e0:c7:fb:4f:24:a2:8f:7c:10:a1:22:6b:a7:a4:67:71:08: 17:2d:7d:9f:5a:7c:1d:ed:52:2f:80:10:af:1f:a9:3c:db:6e: 2a:98:03:58:53:47:ae:36:c9:e0:a2:75:ea:2b:3a:78:cb:09: fe:06:1f:12:67:65:47:e6:b0:ed:8c:55:ef:77:e6:41:1a:54: 1b:dd:56:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNTEyMTUzMTE2WhcNMjYwNTE5MTUzMTE2WjAYMRYwFAYD VQQDEw02YTAzNDdjNC04ZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeSgW18LRcHpTcuEHd24mL1brXSK5VHb2OehDXRcr1cKenOIFB0OYe8n0Nen Isc+y3VRduLRS1EQGNhHJlAF/7VMZatsyFrsNv/Gv7ThescVs/n17pylp9hNWMZw QyLjpNPpBky1SDAxEXpgMGHort6YAfa3J0aa7Lu4AYaWkgwnj2Rx5A8fZQX5Qdz4 xAEjv/imyIjZCxUsZTcqIgUNND8c3YJ3vtp8qineR/LXSvU402W8fKcW5YiYDyL6 9T5gP5ZL5PskLHg8AeJMM+BFIwOqVSu2ntm9p+dfSL3AzbEp+SOMuLUSxnLvCRuC 3A35sA+Ic08W3zAlQTBIEZRyLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQ1GwPJ Oi3kN3VS3sYuqsIQLHK4MB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkc0JAbfRequXkALNlXcorn5bRz/oTj7stvy1ITvTlXJQHN/uZnldcfmuy5Xm NRZJSQMgGntFGIWP9K7LVdKN8W+tB3DRWTDkLP0f/nsjUN3sSySQWGeOHVU++YUM JD0UnTGqRaGCeniaXkHYUiuG6xcP2iki60oH51IkcEpz7lpqZ9bsqmDtWwrCe2ad 7EAUhxoz5YNfMG8lPAcv/KCHSJk8+8qJWJMhzTqLs8sL4LTXSgJZbODH+08koo98 EKEia6ekZ3EIFy19n1p8He1SL4AQrx+pPNtuKpgDWFNHrjbJ4KJ16is6eMsJ/gYf EmdlR+aw7YxV73fmQRpUG91WLw== -----END CERTIFICATE-----Generated at Wed May 13 15:25:36 2026 by rpki-client