$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft File: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft (raw, json) Hash identifier: fXZAL9v8hmZZQz8wkl+ciVCNmhgVAxVCUCQhclG01G8= Subject key identifier: 97:63:66:EB:91:F2:41:D1:9A:9A:B5:D2:E3:38:47:72:B5:FF:DB:99 Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft Manifest number: 0B90 Signing time: Tue 12 May 2026 19:37:16 +0000 Manifest this update: Tue 12 May 2026 19:37:15 +0000 Manifest next update: Tue 19 May 2026 19:37:15 +0000 Files and hashes: 1: 3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl (hash: PHjkpSebdpzqyhqovTdoS049EhI4INls9NMlTSZvKLg=) 2: 93E4B52CE43E11EF91571D16C4F9AE02.roa (hash: 3k/MD9slc9k5QTtKaX1WS6uhMpxTNBjACucfwOuP+Og=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0 Validity Not Before: May 12 19:37:15 2026 GMT Not After : May 19 19:37:15 2026 GMT Subject: CN=6a03816c-5890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:3a:19:f3:10:76:45:58:8f:cd:04:0f:bb: 3d:ef:ac:0c:2a:17:e0:28:45:3f:96:1b:33:ab:4e: e7:a6:6e:2a:b3:83:62:3d:97:76:83:f8:3e:cf:6e: fe:c4:0f:17:9c:60:28:f1:34:24:9f:6e:77:d7:e9: ce:c4:80:71:1b:c2:52:5e:c6:4b:b9:ca:18:e3:38: 12:c8:f8:e2:79:1b:88:7c:a7:36:4d:5e:73:20:32: 60:49:fa:32:54:fe:74:e6:6e:a4:b3:d2:21:01:08: d8:0c:15:7c:94:ec:97:2c:10:1f:7d:f4:f3:b2:41: af:6c:a8:1f:05:53:10:d4:7e:12:51:f8:2a:1c:8c: 38:f7:69:1e:74:5f:68:70:41:cf:d9:50:e2:88:75: 03:f8:fa:5a:e5:1b:66:88:92:bc:5d:e7:f4:b6:3e: 96:70:07:db:51:1d:08:00:59:7e:ee:f9:a6:d2:ab: e0:70:05:dd:88:fa:01:1d:7e:00:84:a3:98:41:bf: 9b:f1:62:11:0b:37:53:51:61:5d:e7:ed:ea:94:5e: 17:65:ba:1c:6d:8e:03:b4:94:17:c5:51:45:29:8c: 12:fa:92:b7:c0:cf:7b:ed:3a:94:84:8f:3f:a0:2a: d5:73:1d:53:4c:ce:b0:f7:e1:27:16:74:c5:48:a0: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:66:EB:91:F2:41:D1:9A:9A:B5:D2:E3:38:47:72:B5:FF:DB:99 X509v3 Authority Key Identifier: keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:72:c7:f4:84:9c:1d:be:43:66:30:84:f6:17:03:e5:8d:7f: e2:b7:d8:f4:4e:5d:3e:50:be:7a:50:f3:4f:8c:8b:2a:bf:65: 84:b8:02:ab:51:4a:f5:84:86:56:bb:fd:d3:10:15:16:03:2b: 4f:45:9d:33:b7:27:7f:11:c2:e5:84:2e:08:5b:57:b8:32:b2: 44:35:81:2c:34:b0:6a:3c:45:9c:56:08:9b:fd:e0:5a:4c:c6: 9b:1f:80:06:76:5e:2c:44:1a:4c:ed:72:eb:0f:e9:fa:b7:bd: 4c:47:d9:53:66:98:b3:13:cf:3e:c2:da:92:7b:05:0a:93:e2: f5:0a:46:4d:57:e4:59:3d:eb:6d:f3:d0:15:89:1a:68:be:24: 22:02:d7:71:ae:6f:97:54:bd:a3:d6:c8:38:f2:5e:aa:53:50: 8a:2b:cb:11:95:e7:ab:35:4a:d1:12:e0:42:53:05:94:fa:bc: f5:a9:34:26:fe:f0:b6:c9:1a:8b:80:1c:10:f0:2f:c2:51:55: 72:e6:6d:c9:60:cb:0c:8c:29:88:cb:45:59:85:7d:b1:24:2e: 65:ca:e7:ea:12:65:18:80:b3:1c:e9:f4:39:9e:71:d7:42:35: 47:37:ca:cb:b7:16:42:d1:35:85:35:e7:26:8b:d4:cd:99:b7: fc:ba:02:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYxQzkxMTAvBgNVBAUTKERFNENFOTYwQTM5MzBBQjRDMjI3RkNFOEY4NTdDMDg0 MTk3RjA4RDAwHhcNMjYwNTEyMTkzNzE1WhcNMjYwNTE5MTkzNzE1WjAYMRYwFAYD VQQDEw02YTAzODE2Yy01ODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fA6GfMQdkVYj80ED7s976wMKhfgKEU/lhszq07npm4qs4NiPZd2g/g+z27+ xA8XnGAo8TQkn2531+nOxIBxG8JSXsZLucoY4zgSyPjieRuIfKc2TV5zIDJgSfoy VP505m6ks9IhAQjYDBV8lOyXLBAfffTzskGvbKgfBVMQ1H4SUfgqHIw492kedF9o cEHP2VDiiHUD+Ppa5RtmiJK8Xef0tj6WcAfbUR0IAFl+7vmm0qvgcAXdiPoBHX4A hKOYQb+b8WIRCzdTUWFd5+3qlF4XZbocbY4DtJQXxVFFKYwS+pK3wM977TqUhI8/ oCrVcx1TTM6w9+EnFnTFSKD7IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdjZuuR 8kHRmpq10uM4R3K1/9uZMB8GA1UdIwQYMBaAFN5M6WCjkwq0wif86PhXwIQZfwjQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjFDOS82QTU3QUI4QzdG OTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENyVENKX3pvLUZmQWhCbF9D TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNrenBZS09UQ3JUQ0pfem8tRmZBaEJsX0NOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjFDOS82QTU3QUI4QzdGOTUxMUVBQjBFRDg1MzdDNEY5QUUwMi8za3pwWUtPVENy VENKX3pvLUZmQWhCbF9DTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnLH9IScHb5DZjCE9hcD5Y1/4rfY9E5dPlC+elDzT4yLKr9lhLgCq1FK9YSG Vrv90xAVFgMrT0WdM7cnfxHC5YQuCFtXuDKyRDWBLDSwajxFnFYIm/3gWkzGmx+A BnZeLEQaTO1y6w/p+re9TEfZU2aYsxPPPsLaknsFCpPi9QpGTVfkWT3rbfPQFYka aL4kIgLXca5vl1S9o9bIOPJeqlNQiivLEZXnqzVK0RLgQlMFlPq89ak0Jv7wtska i4AcEPAvwlFVcuZtyWDLDIwpiMtFWYV9sSQuZcrn6hJlGICzHOn0OZ5x10I1RzfK y7cWQtE1hTXnJovUzZm3/LoC6g== -----END CERTIFICATE-----Generated at Wed May 13 05:13:24 2026 by rpki-client