$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft File: pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json) Hash identifier: UaiP5blvSuj4R2igrNkphFj8QkyKdy/xu8PWuRoY8WM= Subject key identifier: 79:A1:1F:9E:C8:A3:E5:3F:4E:8F:C2:7C:5B:D5:1D:3D:C4:79:11:41 Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Certificate serial: 354E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft Manifest number: 353D Signing time: Tue 12 May 2026 15:12:54 +0000 Manifest this update: Tue 12 May 2026 15:12:54 +0000 Manifest next update: Tue 19 May 2026 15:12:54 +0000 Files and hashes: 1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: Z658nvbzFRC9GaLnqVXGlP4M26ylG08XTlaEGdJVe3k=) 2: DE670A60679D11EEAFBA0A5DC4F9AE02.roa (hash: S+2nZ/LwiFl9lCGr/q1pgYuQMM2ksAuYCF9P9dTV9cI=) 3: 41623A12778111ED8F236A62C4F9AE02.roa (hash: oWvONdzVtdNZzN0GXwvLtJk1cQSVlxMNqPZEYE5ztwk=) 4: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13646 (0x354e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Validity Not Before: May 12 15:12:54 2026 GMT Not After : May 19 15:12:54 2026 GMT Subject: CN=6a034376-0a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:66:35:3e:3f:a7:3a:e9:a6:b4:a4:b0:e9: 5d:dc:5c:ca:10:13:28:e5:47:d1:f8:73:64:88:ff: 2c:fb:c6:13:04:f7:70:9a:6e:a5:91:ac:05:ae:10: 16:ec:67:7e:7c:a6:8d:42:b5:1d:7f:d7:d0:b1:45: cc:9b:fc:70:25:a3:19:21:6d:71:04:fb:87:fd:bd: a0:6e:f9:9a:02:66:cf:c8:d1:c8:b4:f6:b9:6b:7d: 85:ba:77:f9:a5:ae:f3:f0:90:9e:05:33:da:9a:6b: 40:64:9f:43:0e:5d:cf:d8:02:3b:6d:f5:2f:d9:db: 0b:2a:74:47:43:0b:ca:76:8c:5c:42:7f:6b:24:6d: 67:78:17:f9:9c:24:9f:a0:99:ec:ca:00:c8:a5:fa: 6b:d1:e6:ba:13:5d:23:82:7e:27:e6:82:35:56:cd: 0c:e0:73:26:c2:90:57:0d:6f:b4:56:6b:72:6b:e0: 80:3f:da:6f:f1:85:bf:c6:0d:60:34:51:92:79:c8: 8c:2c:ee:aa:d4:7c:e3:1e:31:6a:33:36:00:94:11: a2:cf:9a:c8:c1:69:5e:dd:5c:e5:ec:6a:36:c8:2f: e3:1d:35:cf:b8:66:9d:56:3d:bb:90:76:07:3d:4f: b8:2a:58:9a:b1:3d:74:67:0f:67:88:e2:1c:de:7b: 9d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A1:1F:9E:C8:A3:E5:3F:4E:8F:C2:7C:5B:D5:1D:3D:C4:79:11:41 X509v3 Authority Key Identifier: keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:26:fb:f2:83:31:60:e7:68:34:1f:45:1e:09:00:71:6f:d9: e6:3a:50:76:89:b5:bd:05:67:df:af:3d:cd:05:c6:25:d8:e6: 91:d9:d8:d2:b8:ed:47:43:65:7e:22:0e:e9:64:4e:fb:a4:f3: a6:82:8e:f7:4a:10:79:1c:32:1a:c2:62:af:7b:fa:e1:d8:40: fd:dc:44:7e:c5:6f:3f:79:5b:c9:f3:50:5c:e1:2c:40:9d:be: 52:8e:bf:01:fa:f7:34:af:79:9f:fd:60:3b:ee:8a:88:38:6f: 81:b7:83:f9:2c:d1:45:f0:d4:af:8a:f9:d4:4f:b5:c6:7d:44: f6:e1:e5:8a:aa:49:c7:94:dd:fb:2e:8f:07:85:cb:98:6f:45: 06:fb:08:37:f4:c4:6a:c0:8d:3e:da:d6:8e:b5:b6:42:39:d7: d7:87:ce:73:90:e5:ef:ea:c5:db:95:ff:85:b8:e4:c4:86:f7: 50:8d:24:2d:c4:f1:eb:ce:41:fa:c9:df:26:cb:ab:18:53:5f: c3:2c:ba:95:7c:73:55:56:12:34:94:77:9e:87:a3:00:c6:70: 46:29:06:53:2d:5e:a6:92:05:41:12:f3:4a:79:0b:0b:9d:ae: 0c:f9:cf:75:91:09:3d:dd:f0:07:a4:14:fa:0f:58:b6:87:4b: 54:7f:d3:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NTMxMTAvBgNVBAUTKEE2NkREMDEwREEyNERGOEFFMTcwNkJEOTA4Q0JBNDNC RDEzODk2MzEwHhcNMjYwNTEyMTUxMjU0WhcNMjYwNTE5MTUxMjU0WjAYMRYwFAYD VQQDEw02YTAzNDM3Ni0wYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WhmNT4/pzrpprSksOld3FzKEBMo5UfR+HNkiP8s+8YTBPdwmm6lkawFrhAW 7Gd+fKaNQrUdf9fQsUXMm/xwJaMZIW1xBPuH/b2gbvmaAmbPyNHItPa5a32Funf5 pa7z8JCeBTPammtAZJ9DDl3P2AI7bfUv2dsLKnRHQwvKdoxcQn9rJG1neBf5nCSf oJnsygDIpfpr0ea6E10jgn4n5oI1Vs0M4HMmwpBXDW+0Vmtya+CAP9pv8YW/xg1g NFGSeciMLO6q1HzjHjFqMzYAlBGiz5rIwWle3Vzl7Go2yC/jHTXPuGadVj27kHYH PU+4KliasT10Zw9niOIc3nudfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmhH57I o+U/To/CfFvVHT3EeRFBMB8GA1UdIwQYMBaAFKZt0BDaJN+K4XBr2QjLpDvROJYx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc1My84MDUxNDU5MDFE QTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0cmhjR3ZaQ011a085RTRs akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BtM1FFTm9rMzRyaGNHdlpDTXVrTzlFNGxqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc1My84MDUxNDU5MDFEQTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0 cmhjR3ZaQ011a085RTRsakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqyb78oMxYOdoNB9FHgkAcW/Z5jpQdom1vQVn3689zQXGJdjmkdnY0rjtR0Nl fiIO6WRO+6TzpoKO90oQeRwyGsJir3v64dhA/dxEfsVvP3lbyfNQXOEsQJ2+Uo6/ Afr3NK95n/1gO+6KiDhvgbeD+SzRRfDUr4r51E+1xn1E9uHliqpJx5Td+y6PB4XL mG9FBvsIN/TEasCNPtrWjrW2QjnX14fOc5Dl7+rF25X/hbjkxIb3UI0kLcTx685B +snfJsurGFNfwyy6lXxzVVYSNJR3noejAMZwRikGUy1eppIFQRLzSnkLC52uDPnP dZEJPd3wB6QU+g9YtodLVH/Tzg== -----END CERTIFICATE-----Generated at Wed May 13 07:48:36 2026 by rpki-client