$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: Tl9THyhdA+87wUOrWP4A5XzknBEzDeJdSto3nCCXh4o= Subject key identifier: F5:26:11:41:92:B2:85:1F:1D:4F:6D:48:DC:5C:FE:4E:38:E1:E9:E3 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 3547 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 3540 Signing time: Tue 12 May 2026 14:50:52 +0000 Manifest this update: Tue 12 May 2026 14:50:51 +0000 Manifest next update: Tue 19 May 2026 14:50:51 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: MCeatMVswW3/cB+pwcLB6LG0pTo+13DPNES2M4oiTDk=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: Cs9JKjCuX2CcXJQrUV7cbcqrEj31WEsSJAImJkXjuRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13639 (0x3547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: May 12 14:50:51 2026 GMT Not After : May 19 14:50:51 2026 GMT Subject: CN=6a033e4b-462a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:8d:9b:44:01:38:aa:53:b4:f9:63:10:71: 6d:89:fa:10:42:0c:d5:dd:ed:60:b4:65:88:95:6a: d5:45:51:94:42:2e:32:78:4d:8b:8a:60:01:35:66: 88:33:3d:18:5e:71:5d:fb:a9:a0:8c:4f:f6:2c:94: a9:63:69:4a:3d:2d:07:a3:77:ed:d6:30:15:71:40: b6:f8:8f:44:2e:e7:55:05:bf:f0:63:aa:19:5e:a2: 01:72:51:5c:fe:21:8d:2a:0c:c4:e0:91:ac:8c:ad: 42:e2:8e:c6:77:0f:84:7a:06:f8:80:65:6d:ab:db: 82:b4:d3:c9:37:c0:9d:27:28:7b:24:cf:fd:39:46: f6:ef:a9:be:6d:2f:17:76:e8:b1:5a:19:28:dd:a7: a2:95:e8:20:20:1a:bf:00:89:86:da:5a:f9:0c:0e: 0a:c6:9d:fc:d0:de:17:89:ec:71:33:61:96:bf:37: 6d:38:8b:cb:10:e0:85:06:09:46:68:fd:63:7c:79: 89:b7:a8:c8:74:9c:a0:b5:c5:d3:3e:65:7e:a5:54: 6b:81:0c:3d:4f:8c:9b:8f:ab:49:a1:62:d3:42:94: 5a:29:0d:3c:6b:23:17:cb:8b:30:2e:57:a2:30:d3: f1:0d:45:a9:cb:c5:33:9e:3e:f3:3e:a5:d5:89:b4: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:26:11:41:92:B2:85:1F:1D:4F:6D:48:DC:5C:FE:4E:38:E1:E9:E3 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:06:8c:13:68:fd:51:87:a8:ed:c4:f7:8b:b5:52:ec:05:36: f8:d2:f9:82:9e:5e:c8:6a:10:0d:90:8b:43:80:e4:e9:b0:39: a9:29:7b:c2:ac:c1:9e:51:8d:14:d7:37:bb:98:2d:ab:80:f3: 10:4c:6f:9e:2e:07:08:2e:68:84:f7:b0:4d:50:62:86:77:77: 41:42:92:6e:36:6d:a2:17:a4:4a:29:c8:95:fd:8d:ed:cd:a8: 4f:ad:19:f0:9f:b6:8b:f4:ab:29:75:ea:0f:d6:6c:ee:b1:8c: 3c:99:f8:7d:d1:83:a7:33:9d:fd:84:34:0e:71:15:92:ac:0d: a6:86:97:24:f9:70:3e:c4:65:6f:1f:8d:e6:01:9d:2d:38:e9: 7a:ee:de:52:1f:78:3c:cc:c2:38:b0:eb:0d:d0:bd:c8:03:7b: a4:12:3f:59:69:c3:d9:b5:0b:31:cd:88:6d:f3:42:54:3b:dc: 75:06:b0:0b:88:61:3d:e0:59:16:a1:1a:e7:ed:f7:44:28:4d: 6b:bd:09:c9:3f:ea:ef:73:14:25:b2:de:7f:a0:1f:ee:6f:f8: 4d:de:90:aa:84:65:b2:c8:84:7c:78:55:97:c9:78:8c:67:c6: b0:27:17:33:e9:f3:09:88:de:35:1d:88:26:4b:18:40:5a:eb: ee:a1:9e:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjYwNTEyMTQ1MDUxWhcNMjYwNTE5MTQ1MDUxWjAYMRYwFAYD VQQDEw02YTAzM2U0Yi00NjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOGNm0QBOKpTtPljEHFtifoQQgzV3e1gtGWIlWrVRVGUQi4yeE2LimABNWaI Mz0YXnFd+6mgjE/2LJSpY2lKPS0Ho3ft1jAVcUC2+I9ELudVBb/wY6oZXqIBclFc /iGNKgzE4JGsjK1C4o7Gdw+Eegb4gGVtq9uCtNPJN8CdJyh7JM/9OUb276m+bS8X duixWhko3aeileggIBq/AImG2lr5DA4Kxp380N4XiexxM2GWvzdtOIvLEOCFBglG aP1jfHmJt6jIdJygtcXTPmV+pVRrgQw9T4ybj6tJoWLTQpRaKQ08ayMXy4swLlei MNPxDUWpy8Uznj7zPqXVibRSrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUmEUGS soUfHU9tSNxc/k444enjMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmQaME2j9UYeo7cT3i7VS7AU2+NL5gp5eyGoQDZCLQ4Dk6bA5qSl7wqzBnlGN FNc3u5gtq4DzEExvni4HCC5ohPewTVBihnd3QUKSbjZtohekSinIlf2N7c2oT60Z 8J+2i/SrKXXqD9Zs7rGMPJn4fdGDpzOd/YQ0DnEVkqwNpoaXJPlwPsRlbx+N5gGd LTjpeu7eUh94PMzCOLDrDdC9yAN7pBI/WWnD2bULMc2IbfNCVDvcdQawC4hhPeBZ FqEa5+33RChNa70JyT/q73MUJbLef6Af7m/4Td6QqoRlssiEfHhVl8l4jGfGsCcX M+nzCYjeNR2IJksYQFrr7qGebg== -----END CERTIFICATE-----Generated at Wed May 13 02:42:44 2026 by rpki-client