$ rpki-client -vvf rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft File: H_jK4i0tckq70cLRJft9t7T4Sv8.mft (raw, json) Hash identifier: mEe+XuXrZRKBJKoGHYkhPC7gODCnzGB22RzVzJgwS48= Subject key identifier: D3:AF:BA:E0:F8:13:BC:67:6F:7D:68:E6:0E:F1:37:E2:F9:43:9F:20 Authority key identifier: 1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF Certificate issuer: /CN=A915670F/serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft Manifest number: 3A Signing time: Mon 11 May 2026 08:43:03 +0000 Manifest this update: Mon 11 May 2026 08:43:02 +0000 Manifest next update: Mon 18 May 2026 08:43:02 +0000 Files and hashes: 1: H_jK4i0tckq70cLRJft9t7T4Sv8.crl (hash: 5xg/yENtQc8Huw4NlVyTBaUCZ46E3787v7fN+Pm4tgc=) 2: E342A7D0F9D911F0908C8513676F56BC.roa (hash: rFk76m5fW9CYOpE5VZsRNzUgbtpqshwPbQBMeshiV/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915670F, serialNumber=1FF8CAE22D2D724ABBD1C2D125FB7DB7B4F84AFF Validity Not Before: May 11 08:43:02 2026 GMT Not After : May 18 08:43:02 2026 GMT Subject: CN=6a019696-4b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:c4:5b:aa:34:7f:de:71:55:dc:33:4f:0c: 57:57:77:4b:9d:d3:e0:91:37:88:1f:5f:39:9d:41: 3b:eb:11:6d:16:a4:c6:40:22:90:a5:fe:62:e7:b7: 91:4f:72:f6:b7:b5:00:9b:3a:b4:f2:b3:35:cf:ee: c1:51:04:c9:5c:ee:34:00:96:e5:fb:5a:7f:65:9d: ea:7d:5b:bd:92:83:af:53:db:9e:d2:a0:40:a8:94: 7b:a0:25:bc:4a:59:8c:ea:c5:4c:38:ad:bb:57:01: c1:52:d7:e2:ac:5f:b8:09:97:ea:a2:b9:1f:bb:f5: c4:e4:40:12:f2:c0:14:de:5b:8a:14:47:f4:75:3c: 16:06:c9:b1:4c:68:0e:2d:da:69:96:ae:fa:93:64: f5:c5:6a:a8:98:b5:84:34:a4:d9:1d:4d:87:f5:fe: 7b:0f:97:64:c5:1d:0d:fd:af:92:36:90:b9:fc:a3: f3:00:da:54:ac:db:33:19:08:fd:a0:fc:89:70:f1: d8:4d:0f:aa:21:d5:aa:3a:6f:17:81:5b:7a:d0:72: 49:39:8a:78:7f:ab:6b:cf:d0:e1:c7:f9:50:3d:d3: d4:0c:bd:12:0e:29:57:0c:5d:a2:73:ac:02:56:48: 4b:4b:c3:08:04:ed:92:06:d0:73:2c:20:e6:20:40: be:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AF:BA:E0:F8:13:BC:67:6F:7D:68:E6:0E:F1:37:E2:F9:43:9F:20 X509v3 Authority Key Identifier: keyid:1F:F8:CA:E2:2D:2D:72:4A:BB:D1:C2:D1:25:FB:7D:B7:B4:F8:4A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_jK4i0tckq70cLRJft9t7T4Sv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915670F/F6EB324EF9D811F0B7A3964B666F56BC/H_jK4i0tckq70cLRJft9t7T4Sv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e1:7c:80:b6:f8:8e:fc:2c:c7:9a:2d:6c:b2:d6:55:f7:e0: 19:09:76:4e:37:55:97:5e:63:25:7b:5d:13:28:cb:16:12:10: c4:a4:8a:d3:e2:e1:81:64:bf:fc:12:4a:6d:f7:6b:b6:14:70: ae:b9:27:20:e8:b1:c6:5f:4f:22:73:ce:a1:44:a3:d4:31:2a: 59:1f:04:c9:4e:d2:9a:8d:d3:ab:e4:7c:f0:69:ea:7f:85:da: ba:42:e9:90:22:1c:8d:63:88:5d:3c:dd:76:dc:04:ca:73:93: 01:f7:49:cb:17:f0:9e:cb:d6:ca:a0:51:b6:90:51:df:59:b0: 4e:d6:6b:20:a4:92:12:f1:fa:6e:75:fe:2b:6f:7e:5e:10:01: a5:2a:9c:29:cf:08:25:43:11:4b:f2:29:b4:be:b3:72:9e:ed: 2f:4d:24:e5:54:ce:19:38:8a:61:cb:b7:62:41:11:24:c0:09: 97:c2:4f:df:15:5c:a2:1f:30:d8:32:90:11:dd:5c:61:15:fd: ba:12:ef:d7:85:ea:27:3c:d6:f4:5f:2e:be:92:b2:b6:93:28: 36:f1:2b:46:07:a4:82:2a:ae:b2:35:fe:5f:12:67:bb:cd:1a: f7:88:46:a8:5b:e9:da:80:92:88:b2:88:f0:ff:b3:2c:ee:1d: 48:b0:c3:d0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjcwRjExMC8GA1UEBRMoMUZGOENBRTIyRDJENzI0QUJCRDFDMkQxMjVGQjdEQjdC NEY4NEFGRjAeFw0yNjA1MTEwODQzMDJaFw0yNjA1MTgwODQzMDJaMBgxFjAUBgNV BAMTDTZhMDE5Njk2LTRiMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMU8RbqjR/3nFV3DNPDFdXd0ud0+CRN4gfXzmdQTvrEW0WpMZAIpCl/mLnt5FP cva3tQCbOrTyszXP7sFRBMlc7jQAluX7Wn9lnep9W72Sg69T257SoEColHugJbxK WYzqxUw4rbtXAcFS1+KsX7gJl+qiuR+79cTkQBLywBTeW4oUR/R1PBYGybFMaA4t 2mmWrvqTZPXFaqiYtYQ0pNkdTYf1/nsPl2TFHQ39r5I2kLn8o/MA2lSs2zMZCP2g /Ilw8dhND6oh1ao6bxeBW3rQckk5inh/q2vP0OHH+VA909QMvRIOKVcMXaJzrAJW SEtLwwgE7ZIG0HMsIOYgQL4/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU06+64PgT vGdvfWjmDvE34vlDnyAwHwYDVR0jBBgwFoAUH/jK4i0tckq70cLRJft9t7T4Sv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NzBGL0Y2RUIzMjRFRjlE ODExRjBCN0EzOTY0QjY2NkY1NkJDL0hfaks0aTB0Y2txNzBjTFJKZnQ5dDdUNFN2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSF9qSzRpMHRja3E3MGNMUkpmdDl0N1Q0U3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NzBGL0Y2RUIzMjRFRjlEODExRjBCN0EzOTY0QjY2NkY1NkJDL0hfaks0aTB0Y2tx NzBjTFJKZnQ5dDdUNFN2OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBb4XyAtviO/CzHmi1sstZV9+AZCXZON1WXXmMle10TKMsWEhDEpIrT4uGBZL/8 Ekpt92u2FHCuuScg6LHGX08ic86hRKPUMSpZHwTJTtKajdOr5Hzwaep/hdq6QumQ IhyNY4hdPN123ATKc5MB90nLF/Cey9bKoFG2kFHfWbBO1msgpJIS8fpudf4rb35e EAGlKpwpzwglQxFL8im0vrNynu0vTSTlVM4ZOIphy7diQREkwAmXwk/fFVyiHzDY MpAR3VxhFf26Eu/XheonPNb0Xy6+krK2kyg28StGB6SCKq6yNf5fEme7zRr3iEao W+nagJKIsojw/7Ms7h1IsMPQ -----END CERTIFICATE-----Generated at Wed May 13 08:05:38 2026 by rpki-client