$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: 4X6gq7R9X6m6W0FTKe1iqcMoojGyqqlXPc66HfH75qA= Subject key identifier: 8D:EE:A7:CC:C1:94:32:C2:7D:72:46:40:53:EE:E7:3E:3B:52:A0:2C Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 021F Signing time: Mon 11 May 2026 02:50:28 +0000 Manifest this update: Mon 11 May 2026 02:50:27 +0000 Manifest next update: Mon 18 May 2026 02:50:27 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: KbdT6X29t3C5apl0vyHQ43iTjb/mYYYPCv3Z4wdK4Zk=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: May 11 02:50:27 2026 GMT Not After : May 18 02:50:27 2026 GMT Subject: CN=6a0143f4-40e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:66:c0:df:fd:16:cb:b3:8e:4c:06:d4:81: a9:08:d6:df:b8:2a:9e:76:dc:e1:e5:70:20:10:95: 1e:d5:a3:b6:80:31:6c:be:a7:5a:dd:59:d7:49:da: 18:12:a6:cc:d2:0a:29:9b:0a:35:d6:ee:2a:75:ac: 7d:d5:78:9e:06:61:72:43:33:b6:c0:f3:1b:d8:25: 5e:20:e0:bc:b8:f6:18:45:fa:25:d8:58:40:c9:e2: ff:6d:bc:1d:4f:23:ec:ff:88:36:12:9f:1e:b4:bb: 20:92:db:2d:8a:15:e5:16:4a:35:e5:bc:d1:18:02: e3:73:61:12:ad:4d:aa:24:e4:8e:00:1f:67:09:d9: f9:a7:cb:90:32:64:01:bc:47:7d:15:cf:63:3b:d3: 88:fe:98:f2:a1:f1:ee:ad:55:e3:96:1c:ed:9b:d6: 4d:9f:61:bb:91:85:cd:68:34:71:53:18:9b:3a:c3: 1e:d8:d4:f2:6a:cb:26:9f:c6:5f:73:4a:15:96:01: be:36:df:50:c1:c9:97:1a:3f:ba:d6:bf:83:c7:f6: 3d:67:93:6b:3d:60:19:9f:5e:23:28:82:ac:f8:c4: 91:fe:a3:09:e9:40:e4:9d:c3:74:4a:5d:68:01:8e: 48:6d:8a:24:0f:79:30:2f:0b:56:32:fc:49:e1:ea: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EE:A7:CC:C1:94:32:C2:7D:72:46:40:53:EE:E7:3E:3B:52:A0:2C X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:72:9d:e4:37:22:9c:f1:02:2b:f7:06:36:8f:36:8a:a6:74: a5:c6:6a:df:81:94:22:86:ef:48:98:81:53:aa:6f:02:c7:cd: f2:72:5b:1a:ef:fb:ca:2b:00:dc:59:a7:c5:52:c8:0a:a4:de: 70:60:ba:70:02:68:43:53:7a:69:88:c3:6d:6a:54:8d:d0:3e: 67:60:2f:ee:62:e5:6b:2b:1c:4c:3d:82:50:e7:25:0d:e9:9e: c0:bf:48:e3:30:8e:c3:cc:68:3a:41:e2:94:8a:f1:d9:04:15: 5f:df:f7:33:f6:e1:44:23:f8:96:57:01:24:e7:31:c5:95:66: b1:7c:6c:98:ec:99:51:64:0c:57:58:d9:ed:fc:ae:35:83:95: 55:48:38:3e:ba:09:c0:b9:4f:9f:9c:45:94:c0:ec:ea:42:11: 82:a1:ce:61:7d:71:eb:a3:3b:5a:26:aa:f1:90:cd:bb:61:96: a5:f7:04:43:a3:71:f7:2b:c9:b7:bf:5e:28:98:b3:55:66:19: 5f:63:b1:cd:7a:ab:3d:e1:60:94:bc:bf:7f:89:ab:27:e4:14: 15:01:85:b7:b9:ea:b3:3a:8a:7d:78:17:b4:b1:ed:8c:18:f0: bb:a2:40:99:07:70:01:94:39:ea:7a:b6:f2:79:41:8c:00:f2: c7:77:10:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwNTExMDI1MDI3WhcNMjYwNTE4MDI1MDI3WjAYMRYwFAYD VQQDEw02YTAxNDNmNC00MGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhVmwN/9FsuzjkwG1IGpCNbfuCqedtzh5XAgEJUe1aO2gDFsvqda3VnXSdoY EqbM0gopmwo11u4qdax91XieBmFyQzO2wPMb2CVeIOC8uPYYRfol2FhAyeL/bbwd TyPs/4g2Ep8etLsgktstihXlFko15bzRGALjc2ESrU2qJOSOAB9nCdn5p8uQMmQB vEd9Fc9jO9OI/pjyofHurVXjlhztm9ZNn2G7kYXNaDRxUxibOsMe2NTyassmn8Zf c0oVlgG+Nt9QwcmXGj+61r+Dx/Y9Z5NrPWAZn14jKIKs+MSR/qMJ6UDkncN0Sl1o AY5IbYokD3kwLwtWMvxJ4eo1mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3up8zB lDLCfXJGQFPu5z47UqAsMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdXKd5DcinPECK/cGNo82iqZ0pcZq34GUIobvSJiBU6pvAsfN8nJbGu/7yisA 3FmnxVLICqTecGC6cAJoQ1N6aYjDbWpUjdA+Z2Av7mLlayscTD2CUOclDemewL9I 4zCOw8xoOkHilIrx2QQVX9/3M/bhRCP4llcBJOcxxZVmsXxsmOyZUWQMV1jZ7fyu NYOVVUg4ProJwLlPn5xFlMDs6kIRgqHOYX1x66M7Wiaq8ZDNu2GWpfcEQ6Nx9yvJ t79eKJizVWYZX2OxzXqrPeFglLy/f4mrJ+QUFQGFt7nqszqKfXgXtLHtjBjwu6JA mQdwAZQ56nq28nlBjADyx3cQFQ== -----END CERTIFICATE-----Generated at Wed May 13 05:32:05 2026 by rpki-client