$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json) Hash identifier: dnuE+ZvSHNYBVCKYeyEnZ3qjOoC5F0eyxuoBgV5gDjs= Subject key identifier: 21:2C:35:58:03:09:F1:A4:9E:F4:CD:B0:5A:CD:C5:B2:42:3F:85:9F Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9 Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft Manifest number: 2B Signing time: Mon 11 May 2026 08:29:19 +0000 Manifest this update: Mon 11 May 2026 08:29:19 +0000 Manifest next update: Mon 18 May 2026 08:29:19 +0000 Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: Rs0hBwc7/MT6jPARQ5GYn/nq2TbTt0KxNqOF1Qob8AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9 Validity Not Before: May 11 08:29:19 2026 GMT Not After : May 18 08:29:19 2026 GMT Subject: CN=6a01935f-c5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:9e:67:a7:87:4a:76:8b:6c:ff:8f:cd:2b: 6d:75:67:f1:fd:5a:9b:3e:69:f8:06:53:47:cd:09: 7e:d1:e1:a4:b8:d4:31:5c:dd:4a:ee:35:c7:10:11: d0:c0:ff:60:b5:a7:f9:70:e1:09:a0:fa:fe:2c:c4: 51:ea:2b:cb:5f:df:1d:1e:fb:2a:de:5e:51:37:03: 62:a0:cb:93:99:a6:95:7c:58:cb:16:32:dc:71:88: c7:82:4d:29:76:9a:59:ca:36:c0:bf:d2:da:ae:9e: d6:60:7b:56:8a:19:7f:43:0c:10:3a:90:d8:31:ce: 7b:bf:f4:7b:e3:18:96:7f:41:d9:99:eb:05:a1:bd: ee:fd:08:f2:54:bf:d4:4a:16:89:a6:f8:5b:12:14: bd:81:97:77:c2:17:df:f1:02:2f:71:8b:79:9a:a9: a6:96:9f:f9:01:b3:9c:b3:78:b8:b0:43:d7:b4:22: d1:d9:a2:0c:cd:d8:10:d2:c6:12:14:34:53:48:38: 6a:26:b5:c4:8f:c8:c7:a2:5e:33:72:75:3d:e6:72: 08:a1:57:2e:eb:05:22:84:f5:26:52:7f:16:94:3d: 1f:a9:7b:98:31:ae:2d:2f:69:bc:46:87:62:3b:8c: 50:ec:af:a5:41:8a:77:37:f6:c0:4e:ee:75:a6:6f: cf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2C:35:58:03:09:F1:A4:9E:F4:CD:B0:5A:CD:C5:B2:42:3F:85:9F X509v3 Authority Key Identifier: keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:23:7e:47:51:4f:0d:d8:2b:38:47:f6:b5:72:de:9e:8c:59: 09:ec:45:fa:a3:47:07:6e:68:f8:a2:bf:e0:52:69:00:d3:53: 9d:ef:26:95:fa:17:23:e5:57:34:63:52:37:a9:e9:ac:4d:11: eb:44:c5:8d:67:89:c8:c0:43:d6:a9:df:7d:b5:3e:ba:30:c3: 9a:9f:a2:9b:e8:05:cf:06:fc:fd:b7:64:57:a6:8d:61:46:99: 4f:74:3b:f4:4c:51:ac:9a:62:fc:28:d0:e7:99:36:a9:95:75: ec:0b:d0:51:17:b3:46:4a:ea:5d:01:5d:00:cb:59:fe:f8:b4: 6e:b2:2e:6f:c9:be:54:d0:a9:8a:ea:9d:34:f3:44:3a:63:53: 87:93:8f:e0:a2:3e:f1:ce:29:01:02:ec:a7:68:08:13:ab:cf: 85:81:cb:31:db:50:18:6c:54:5a:8a:15:fe:e4:38:aa:05:c2: a7:c2:42:a6:08:a0:1d:80:c0:e0:60:00:ae:56:f7:4d:69:5c: 0b:c2:4c:1f:3e:3f:ce:7e:c3:fd:f4:81:4f:d6:f8:0a:15:67: c1:c2:c0:48:db:c5:76:64:7d:8e:36:18:7d:cd:ee:42:9e:20: 6c:ed:f3:5d:5f:46:51:05:33:40:75:c5:b0:8c:29:be:cc:bc: 88:8c:4e:d4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoNkI3RkM1RTVCM0JGMUFCQTVBRTI1REEzOEY1NEI5NkNF NjI1N0RCOTAeFw0yNjA1MTEwODI5MTlaFw0yNjA1MTgwODI5MTlaMBgxFjAUBgNV BAMTDTZhMDE5MzVmLWM1ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkKp5np4dKdots/4/NK211Z/H9Wps+afgGU0fNCX7R4aS41DFc3UruNccQEdDA /2C1p/lw4Qmg+v4sxFHqK8tf3x0e+yreXlE3A2Kgy5OZppV8WMsWMtxxiMeCTSl2 mlnKNsC/0tquntZge1aKGX9DDBA6kNgxznu/9HvjGJZ/QdmZ6wWhve79CPJUv9RK Fomm+FsSFL2Bl3fCF9/xAi9xi3maqaaWn/kBs5yzeLiwQ9e0ItHZogzN2BDSxhIU NFNIOGomtcSPyMeiXjNydT3mcgihVy7rBSKE9SZSfxaUPR+pe5gxri0vabxGh2I7 jFDsr6VBinc39sBO7nWmb8+VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUISw1WAMJ 8aSe9M2wWs3FskI/hZ8wHwYDVR0jBBgwFoAUa3/F5bO/Grpa4l2jj1S5bOYlfbkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzQ4NTAzMkUyMEQ2 MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3JwYTRsMmpqMVM1Yk9ZbGZi ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYTNfRjViT19HcnBhNGwyamoxUzViT1lsZmJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzQ4NTAzMkUyMEQ2MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3Jw YTRsMmpqMVM1Yk9ZbGZiay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEI35HUU8N2Cs4R/a1ct6ejFkJ7EX6o0cHbmj4or/gUmkA01Od7yaV+hcj5Vc0 Y1I3qemsTRHrRMWNZ4nIwEPWqd99tT66MMOan6Kb6AXPBvz9t2RXpo1hRplPdDv0 TFGsmmL8KNDnmTaplXXsC9BRF7NGSupdAV0Ay1n++LRusi5vyb5U0KmK6p0080Q6 Y1OHk4/goj7xzikBAuynaAgTq8+Fgcsx21AYbFRaihX+5DiqBcKnwkKmCKAdgMDg YACuVvdNaVwLwkwfPj/OfsP99IFP1vgKFWfBwsBI28V2ZH2ONhh9ze5CniBs7fNd X0ZRBTNAdcWwjCm+zLyIjE7U -----END CERTIFICATE-----Generated at Wed May 13 01:34:17 2026 by rpki-client