$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft File: l3a_sejqihq8j4z9b2Yic23YyjQ.mft (raw, json) Hash identifier: m7vypYrP9Ck4L9IwjsTJgkV6vjJHJE45F7vACt/mCcA= Subject key identifier: CD:D9:4E:DC:30:52:3B:F8:6C:E5:0F:B9:88:39:8D:4B:B0:7D:BC:92 Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Certificate serial: 0D42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft Manifest number: 0D11 Signing time: Tue 12 May 2026 18:23:27 +0000 Manifest this update: Tue 12 May 2026 18:23:27 +0000 Manifest next update: Tue 19 May 2026 18:23:27 +0000 Files and hashes: 1: l3a_sejqihq8j4z9b2Yic23YyjQ.crl (hash: Hlq4SjZL8LzNqUrpUItHIYqG8j5r2JAXlFtXmupVyM4=) 2: 64A2C96E919E11EEA5241125C4F9AE02.roa (hash: 8PpRKr88j1UQz0on0wf3wxEYqhe8qTzmSyhtAroOiwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3394 (0xd42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91616DC, serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34 Validity Not Before: May 12 18:23:27 2026 GMT Not After : May 19 18:23:27 2026 GMT Subject: CN=6a03701f-a368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:ac:f9:e7:68:1c:38:f9:fa:e3:35:4d:c6: 95:1c:13:0e:87:50:d2:ed:11:f7:d3:9a:cb:9d:12: 51:7d:b7:a6:6c:1e:da:6a:37:0e:22:13:e4:7b:f0: 1d:36:68:d7:06:f7:72:59:2b:c7:74:49:de:2f:f6: dc:9d:2f:6a:6c:e2:12:2d:b9:c5:df:c9:ca:2e:be: 4a:7a:27:b2:f6:8d:44:ff:a7:ae:cb:ae:e4:73:a6: 26:cf:6a:9e:96:ac:4f:3e:2c:ff:00:92:12:e2:15: 41:b3:fa:03:40:6e:f1:34:0d:01:f0:52:58:63:a1: da:35:f3:a2:4e:be:13:e3:63:4a:a7:53:f3:48:78: 18:80:de:35:51:f4:08:29:02:f7:7c:a9:b8:95:c3: da:b4:31:42:18:fe:e6:31:d6:43:d6:c2:46:56:50: 6a:17:5d:ba:d1:3d:2d:e4:72:f0:64:2d:68:74:a8: 63:9e:96:1d:33:0d:11:30:1d:af:0a:00:7c:ca:08: 6d:ab:0f:f9:b1:dc:8d:a4:25:18:04:5b:89:94:de: 34:4c:3d:10:fc:34:00:0d:bf:bd:e5:ea:2c:04:bb: de:07:7b:69:1a:06:f4:a8:eb:d3:7c:6c:51:60:1b: 51:0a:e2:c7:1b:51:19:c3:41:87:cf:47:74:70:10: 69:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D9:4E:DC:30:52:3B:F8:6C:E5:0F:B9:88:39:8D:4B:B0:7D:BC:92 X509v3 Authority Key Identifier: keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:83:e4:35:55:46:84:e3:ef:a0:7f:ae:26:1e:38:a3:2c:6f: f7:04:e5:4f:5e:d6:4d:50:2c:be:ae:25:97:e1:8b:5f:20:d5: 96:c1:01:6a:88:92:e6:5c:f6:5d:89:7e:41:1f:5c:cf:99:8a: 77:4b:5f:37:ba:71:9b:4f:ba:85:1c:d4:fa:d9:cd:f4:95:1e: 30:42:98:de:3b:6e:b7:54:e8:12:1d:36:1f:ad:98:da:bd:e0: 12:18:3a:5f:95:b2:ad:d3:9b:10:01:fd:9c:5e:83:45:2b:19: 7b:6d:58:f5:87:e3:2a:e2:22:2f:d9:56:b0:26:3a:35:18:ce: 17:11:91:ba:4c:4b:03:d8:7a:53:0e:89:c6:4c:fc:d4:35:64: 25:13:f7:6d:a8:e7:fb:93:af:58:dd:c8:ef:8e:82:06:2f:32: 14:69:64:2f:92:d4:82:d6:67:00:29:d0:6b:40:4b:a1:d4:0a: 26:0c:5d:23:b3:78:32:03:1d:61:08:88:b5:77:69:f2:94:1c: c7:64:cc:78:a8:cb:5f:5a:b1:38:87:09:7c:d3:b6:09:ab:e9: 63:33:6f:5c:bc:e5:d2:cd:9b:b6:3b:a9:ce:18:45:a6:ac:47: 39:99:47:b0:5c:f4:e6:a4:8b:0d:17:36:ab:55:be:86:b3:03: 50:69:dc:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE2REMxMTAvBgNVBAUTKDk3NzZCRkIxRThFQThBMUFCQzhGOENGRDZGNjYyMjcz NkREOENBMzQwHhcNMjYwNTEyMTgyMzI3WhcNMjYwNTE5MTgyMzI3WjAYMRYwFAYD VQQDEw02YTAzNzAxZi1hMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZCs+edoHDj5+uM1TcaVHBMOh1DS7RH305rLnRJRfbembB7aajcOIhPke/Ad NmjXBvdyWSvHdEneL/bcnS9qbOISLbnF38nKLr5Keiey9o1E/6euy67kc6Ymz2qe lqxPPiz/AJIS4hVBs/oDQG7xNA0B8FJYY6HaNfOiTr4T42NKp1PzSHgYgN41UfQI KQL3fKm4lcPatDFCGP7mMdZD1sJGVlBqF1260T0t5HLwZC1odKhjnpYdMw0RMB2v CgB8yghtqw/5sdyNpCUYBFuJlN40TD0Q/DQADb+95eosBLveB3tpGgb0qOvTfGxR YBtRCuLHG1EZw0GHz0d0cBBpJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3ZTtww Ujv4bOUPuYg5jUuwfbySMB8GA1UdIwQYMBaAFJd2v7Ho6ooavI+M/W9mInNt2Mo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTZEQy80NEE3RTVFODA5 NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlocThqNHo5YjJZaWMyM1l5 alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wzYV9zZWpxaWhxOGo0ejliMllpYzIzWXlqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTZEQy80NEE3RTVFODA5NUYxMUVBQTI4MTY4MURDNEY5QUUwMi9sM2Ffc2VqcWlo cThqNHo5YjJZaWMyM1l5alEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0YPkNVVGhOPvoH+uJh44oyxv9wTlT17WTVAsvq4ll+GLXyDVlsEBaoiS5lz2 XYl+QR9cz5mKd0tfN7pxm0+6hRzU+tnN9JUeMEKY3jtut1ToEh02H62Y2r3gEhg6 X5WyrdObEAH9nF6DRSsZe21Y9YfjKuIiL9lWsCY6NRjOFxGRukxLA9h6Uw6Jxkz8 1DVkJRP3bajn+5OvWN3I746CBi8yFGlkL5LUgtZnACnQa0BLodQKJgxdI7N4MgMd YQiItXdp8pQcx2TMeKjLX1qxOIcJfNO2CavpYzNvXLzl0s2btjupzhhFpqxHOZlH sFz05qSLDRc2q1W+hrMDUGncYw== -----END CERTIFICATE-----Generated at Wed May 13 14:38:37 2026 by rpki-client