$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: SC5nq7madRoHs/BX2+tv53Z55WdmSrfyz93vi6oJC9o= Subject key identifier: 44:63:1B:F5:9E:5C:69:C4:3D:63:C1:1A:79:77:D3:7E:CB:43:65:4C Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0CFE Signing time: Tue 12 May 2026 18:13:34 +0000 Manifest this update: Tue 12 May 2026 18:13:34 +0000 Manifest next update: Tue 19 May 2026 18:13:34 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: GT3iBQSw33GMQK40oicP2b8rpWKPi3i9S3rmKfzqjmU=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: May 12 18:13:34 2026 GMT Not After : May 19 18:13:34 2026 GMT Subject: CN=6a036dce-cfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:34:8e:82:65:33:15:0c:ad:de:12:d6:a1: 86:32:c2:4d:16:f0:35:81:83:c2:a1:a6:84:af:1d: e8:67:1a:7d:cd:30:68:9a:9e:54:92:11:2c:e9:fb: b8:9c:41:3a:e5:dc:6e:c7:6d:6e:81:d9:a1:fe:9e: 90:c5:be:f8:d4:f7:ab:57:2c:1e:80:93:b2:aa:f4: a1:85:48:9c:82:b1:5d:f8:c8:4c:a3:10:f8:b2:ce: 6e:a8:41:41:15:ab:7e:a0:17:e9:1b:49:a3:cf:f9: 8b:8c:91:a0:0d:4f:b2:24:ba:e7:b3:36:89:99:ac: 6f:74:52:55:b6:52:cb:fb:7c:6a:61:f5:46:bf:fc: c2:3d:4d:66:1a:9e:ba:22:37:78:78:eb:73:30:01: 61:cf:1b:52:f6:9b:03:d2:12:7d:f2:49:a8:b0:cd: f1:53:80:85:e9:5e:5d:0f:0f:7a:76:b1:9b:57:8d: 44:4d:bd:d9:36:24:7c:7e:c8:cb:d6:98:36:4e:ba: 22:68:11:6c:74:d1:62:6e:3b:1f:74:1e:75:0e:06: a1:ae:33:7a:b6:00:ca:4e:f4:8a:b1:5c:1b:ac:0c: d6:09:ac:a5:c6:6f:18:20:c4:f9:fe:44:4d:dd:e1: 9e:b7:77:f5:d8:a6:58:02:e5:66:41:6f:24:89:da: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:63:1B:F5:9E:5C:69:C4:3D:63:C1:1A:79:77:D3:7E:CB:43:65:4C X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bf:52:1f:c3:3f:83:f6:b6:b8:7f:7a:94:42:d7:93:f2:3c: c2:4d:b6:c0:cb:ac:76:d1:ee:9d:4d:e2:47:e5:d0:fc:b1:c0: 1f:a3:fc:20:32:54:c6:6c:88:b0:89:5c:96:a5:45:f5:33:93: db:12:c8:04:5b:57:42:35:f1:e3:95:b7:65:03:50:a7:58:6f: b6:b6:8b:40:24:9e:db:10:77:bf:ef:e1:0e:61:57:45:bc:29: 63:d9:51:59:fe:1d:8f:52:c3:f6:c1:f4:fb:57:ce:4a:9a:02: 1d:80:b9:f8:8a:de:f4:db:f6:3b:37:9c:af:e6:62:77:80:93: 27:61:91:37:08:c0:ce:c0:0b:64:57:6a:71:9a:6d:1d:b5:c7: c0:1d:0b:cc:fa:1d:7f:f3:3c:05:7e:74:6c:d2:7a:94:a6:47: b8:a0:ed:9a:f9:ff:b8:a0:e1:7b:98:23:c9:fa:88:c1:ea:52: 3b:74:fa:56:ee:08:fa:ee:39:fa:f3:44:0a:6d:cf:dc:3e:34: b8:ac:c9:b1:75:c2:17:b9:d0:b4:95:07:32:5b:34:e1:ed:71: fe:68:fb:1a:43:e9:b3:dc:c8:bd:ce:75:7f:bb:a7:d7:75:d4: 13:1c:fb:91:1a:cd:38:f1:60:1e:a2:e4:ca:88:87:a9:2b:89: 55:be:68:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjYwNTEyMTgxMzM0WhcNMjYwNTE5MTgxMzM0WjAYMRYwFAYD VQQDEw02YTAzNmRjZS1jZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBE0joJlMxUMrd4S1qGGMsJNFvA1gYPCoaaErx3oZxp9zTBomp5UkhEs6fu4 nEE65dxux21ugdmh/p6Qxb741PerVywegJOyqvShhUicgrFd+MhMoxD4ss5uqEFB Fat+oBfpG0mjz/mLjJGgDU+yJLrnszaJmaxvdFJVtlLL+3xqYfVGv/zCPU1mGp66 Ijd4eOtzMAFhzxtS9psD0hJ98kmosM3xU4CF6V5dDw96drGbV41ETb3ZNiR8fsjL 1pg2TroiaBFsdNFibjsfdB51DgahrjN6tgDKTvSKsVwbrAzWCaylxm8YIMT5/kRN 3eGet3f12KZYAuVmQW8kidp/+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERjG/We XGnEPWPBGnl3037LQ2VMMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHb9SH8M/g/a2uH96lELXk/I8wk22wMusdtHunU3iR+XQ/LHAH6P8IDJUxmyI sIlclqVF9TOT2xLIBFtXQjXx45W3ZQNQp1hvtraLQCSe2xB3v+/hDmFXRbwpY9lR Wf4dj1LD9sH0+1fOSpoCHYC5+Ire9Nv2Ozecr+Zid4CTJ2GRNwjAzsALZFdqcZpt HbXHwB0LzPodf/M8BX50bNJ6lKZHuKDtmvn/uKDhe5gjyfqIwepSO3T6Vu4I+u45 +vNECm3P3D40uKzJsXXCF7nQtJUHMls04e1x/mj7GkPps9zIvc51f7un13XUExz7 kRrNOPFgHqLkyoiHqSuJVb5obA== -----END CERTIFICATE-----Generated at Wed May 13 07:32:33 2026 by rpki-client