$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: Ps89I00mQzX4TTAYLIDA7eXYa/SrM/YuvMh1wAuaHaI= Subject key identifier: 4E:9A:C0:58:9D:13:E1:FA:67:DA:AB:66:3B:5A:F0:6D:C6:57:9F:90 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 0409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 03FE Signing time: Wed 13 May 2026 00:35:24 +0000 Manifest this update: Wed 13 May 2026 00:35:24 +0000 Manifest next update: Wed 20 May 2026 00:35:24 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: 6YNrp8buHXvUVzIkR2cpf2EPrQdB6NjYQiym63yQ0d4=) 2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: bbFe9zajQ0g2zhaT+BLjCcFN40wGnYAdz85LZxbirZ8=) 3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: YoChpX9w4FCCtAPtS4tdDvkJcAqQRe8NPjFDFUXSQH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: May 13 00:35:24 2026 GMT Not After : May 20 00:35:24 2026 GMT Subject: CN=6a03c74c-1e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:0c:d9:73:16:03:79:b6:e9:cf:c3:29:55: 3c:3b:e0:02:6b:78:85:6e:1e:69:ca:b0:cd:ad:34: 26:d7:20:e7:49:30:92:b8:9f:e8:ae:38:9c:03:87: 70:0a:05:56:36:d5:6b:88:9c:3a:c4:14:d3:9d:2b: 9d:e2:88:74:58:9f:09:41:24:e6:97:d1:3e:f5:6b: 51:11:ae:e5:4c:89:1d:de:b1:01:63:c5:8d:3d:64: 2f:4d:b9:06:87:95:b0:f8:ab:8b:b9:dd:03:3c:8a: de:70:9d:fb:12:f4:da:49:79:81:84:f8:34:8d:cd: 97:f6:0d:1d:8f:07:9c:88:9e:64:d3:7e:91:09:d1: b9:c7:74:79:06:87:0d:61:04:62:d3:57:f0:11:90: a6:23:a9:53:c9:96:13:0d:bf:0d:04:1a:29:34:6c: 7c:e6:08:a1:e9:54:9e:bf:01:95:7b:5f:24:94:ac: c2:40:8e:c0:a1:05:67:18:41:9b:99:cc:0e:1a:59: 3d:a3:64:35:fb:77:b1:da:2e:66:42:4e:a4:cd:4b: 7a:7a:99:eb:a8:19:f1:54:e4:a1:71:28:a6:b9:5c: cb:2a:52:ea:e2:d6:6b:0e:99:cc:1e:b3:33:83:5c: ec:24:25:58:d5:ef:d3:99:99:bc:4c:6b:11:10:9f: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9A:C0:58:9D:13:E1:FA:67:DA:AB:66:3B:5A:F0:6D:C6:57:9F:90 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:91:25:0d:25:0d:58:a1:d8:2b:37:c8:04:f1:f1:ff:09:a6: cd:37:61:de:10:ec:c3:3e:a1:af:06:43:b6:b7:fd:64:98:4d: 3b:80:79:e8:2a:a0:dd:6a:4b:ba:c3:ef:92:83:18:ec:10:4b: 70:57:9b:34:3d:6e:4b:19:f0:cd:6e:e4:aa:1a:6a:7e:88:83: cb:c2:b0:a4:6d:b9:66:d9:9a:97:96:f8:6a:c2:2d:2e:28:ca: ff:45:ad:48:9b:b1:f7:ed:df:24:60:e0:48:06:8e:f6:32:bc: 5d:d5:40:44:57:de:c0:6a:d0:c0:ed:b5:a5:fb:1a:d6:a0:22: 9b:08:11:2e:0a:27:2b:84:f1:92:93:98:61:66:69:1d:9a:40: 58:07:49:f8:0b:58:80:2d:95:0e:a0:ab:e4:78:a6:00:d0:72: ec:58:35:05:9f:f6:02:a4:74:13:da:e8:bf:cd:21:17:fd:dd: b9:03:40:90:17:1d:7a:3a:e2:32:4d:2a:90:d6:03:17:04:99: 04:60:08:12:1b:6c:ad:7a:64:b8:98:dd:86:e4:7f:2d:fa:3d: a5:72:86:7c:81:df:8b:18:89:1a:82:2c:5f:d9:3f:75:1b:af: f0:78:db:42:bb:37:c8:18:b3:c3:87:b6:bc:35:16:b2:69:19: c8:b3:19:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwNTEzMDAzNTI0WhcNMjYwNTIwMDAzNTI0WjAYMRYwFAYD VQQDEw02YTAzYzc0Yy0xZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDsM2XMWA3m26c/DKVU8O+ACa3iFbh5pyrDNrTQm1yDnSTCSuJ/orjicA4dw CgVWNtVriJw6xBTTnSud4oh0WJ8JQSTml9E+9WtREa7lTIkd3rEBY8WNPWQvTbkG h5Ww+KuLud0DPIrecJ37EvTaSXmBhPg0jc2X9g0djweciJ5k036RCdG5x3R5BocN YQRi01fwEZCmI6lTyZYTDb8NBBopNGx85gih6VSevwGVe18klKzCQI7AoQVnGEGb mcwOGlk9o2Q1+3ex2i5mQk6kzUt6epnrqBnxVOShcSimuVzLKlLq4tZrDpnMHrMz g1zsJCVY1e/TmZm8TGsREJ9g1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE6awFid E+H6Z9qrZjta8G3GV5+QMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIZElDSUNWKHYKzfIBPHx/wmmzTdh3hDswz6hrwZDtrf9ZJhNO4B56Cqg3WpL usPvkoMY7BBLcFebND1uSxnwzW7kqhpqfoiDy8KwpG25Ztmal5b4asItLijK/0Wt SJux9+3fJGDgSAaO9jK8XdVARFfewGrQwO21pfsa1qAimwgRLgonK4TxkpOYYWZp HZpAWAdJ+AtYgC2VDqCr5HimANBy7Fg1BZ/2AqR0E9rov80hF/3duQNAkBcdejri Mk0qkNYDFwSZBGAIEhtsrXpkuJjdhuR/Lfo9pXKGfIHfixiJGoIsX9k/dRuv8Hjb Qrs3yBizw4e2vDUWsmkZyLMZOg== -----END CERTIFICATE-----Generated at Wed May 13 05:30:37 2026 by rpki-client