$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: qtgA1Wooq5HCkdL4WI+vbW9nvp7J+ZBo7v3rKWrHTNc= Subject key identifier: 3C:BD:71:7E:F3:A6:13:DD:99:8A:DA:84:6F:95:1A:42:42:D7:22:33 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 0134 Signing time: Wed 13 May 2026 05:33:40 +0000 Manifest this update: Wed 13 May 2026 05:33:40 +0000 Manifest next update: Wed 20 May 2026 05:33:40 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: QDqANVjfIfZSb5m3gr0l5GkTWMhMqH9iZVsF3McJ3uY=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 3r7oWvZZSCAzRuaEEZfRdRU+m7LuuIxoldkPQaUgKhQ=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: cb0xCHL1dV5N7XyIruiC/PJxxp8M1xlcJSMtvdRnQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: May 13 05:33:40 2026 GMT Not After : May 20 05:33:40 2026 GMT Subject: CN=6a040d34-e875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bb:79:8a:78:c1:c6:2a:0c:ee:8b:ed:4b:02: 69:c1:8a:20:9f:d9:62:bc:6e:a7:8e:e9:fb:60:81: 55:19:83:93:41:f1:f7:c4:f0:78:c3:5d:19:f7:ad: ff:b2:e9:ee:06:b8:82:a1:f1:dd:15:e0:fc:5b:44: 5d:d0:bd:d5:ae:90:d6:e9:f2:29:47:37:ae:5e:15: c5:da:36:c7:0c:53:4b:05:91:2f:15:77:01:d2:f9: 86:1a:86:15:56:da:96:2b:54:ef:c2:d0:fe:a4:aa: 5f:f2:5e:ba:71:80:04:b3:ce:70:bc:10:66:66:53: 1e:f0:a8:b8:ad:86:99:b8:e7:72:12:ad:3e:de:0f: b2:4f:1e:c6:f6:10:8c:fe:29:c2:7b:96:5b:2e:3f: 70:b1:38:57:5c:bd:72:80:27:5a:9e:9a:dd:fb:34: 7e:47:19:d7:a7:57:9f:56:83:b2:33:88:f6:95:e9: 37:f0:17:47:24:3f:4b:a1:a2:b2:cc:30:c4:b5:86: ec:75:bb:63:53:ce:80:be:fe:c1:76:c9:61:2c:2b: 19:61:38:c5:42:0b:e9:92:56:36:b3:4a:7f:42:7d: f4:78:86:2a:6c:63:ad:11:53:f6:87:eb:c3:b1:5a: 21:55:00:30:34:16:82:c4:bb:62:c7:d1:5c:ba:d6: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:BD:71:7E:F3:A6:13:DD:99:8A:DA:84:6F:95:1A:42:42:D7:22:33 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:cb:e7:52:12:cf:0f:5e:10:48:1d:67:ff:85:a1:3d:94:d0: f9:64:7f:45:65:67:7d:d1:f7:6f:38:01:61:c8:39:10:10:b0: 45:82:c7:6f:cc:08:90:bd:a8:bf:e8:c6:d2:2d:4d:ac:01:43: 1e:1e:08:1c:93:24:1d:51:60:88:9a:b2:3c:ca:6c:58:7d:07: e6:22:93:88:46:92:99:16:bb:51:b9:2d:ab:42:de:97:a7:b3: 33:e2:cf:70:ac:90:10:e7:dd:d5:f7:b7:9b:4a:c3:a7:c1:59: 90:35:30:15:41:0c:87:55:92:2a:b4:8a:62:e2:c8:52:29:5d: 0f:cb:89:4d:ef:27:8e:bb:78:a5:9b:9c:f1:ce:c4:b1:6c:bd: d2:4d:24:3d:7b:b4:0c:d3:1e:31:6b:33:02:9b:0a:0d:8a:d7: 5e:c4:65:31:ed:a0:26:37:cf:39:45:17:c1:72:32:c6:b5:b0: 27:dc:d8:61:58:82:3e:a8:e6:39:de:51:8b:fa:b3:d3:21:a3: c9:8f:43:d3:15:47:95:39:bc:34:52:c2:02:35:73:b9:5a:75: bb:a6:c5:06:82:fd:dc:26:eb:01:e1:08:eb:4e:2c:68:dd:91: 8e:55:f9:45:29:13:d3:61:5f:f6:69:59:7b:0c:c8:56:b7:9c: db:cb:4e:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYwNTEzMDUzMzQwWhcNMjYwNTIwMDUzMzQwWjAYMRYwFAYD VQQDEw02YTA0MGQzNC1lODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLt5injBxioM7ovtSwJpwYogn9livG6njun7YIFVGYOTQfH3xPB4w10Z963/ sunuBriCofHdFeD8W0Rd0L3VrpDW6fIpRzeuXhXF2jbHDFNLBZEvFXcB0vmGGoYV VtqWK1TvwtD+pKpf8l66cYAEs85wvBBmZlMe8Ki4rYaZuOdyEq0+3g+yTx7G9hCM /inCe5ZbLj9wsThXXL1ygCdanprd+zR+RxnXp1efVoOyM4j2lek38BdHJD9LoaKy zDDEtYbsdbtjU86Avv7BdslhLCsZYTjFQgvpklY2s0p/Qn30eIYqbGOtEVP2h+vD sVohVQAwNBaCxLtix9FcutbW7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDy9cX7z phPdmYrahG+VGkJC1yIzMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQMvnUhLPD14QSB1n/4WhPZTQ+WR/RWVnfdH3bzgBYcg5EBCwRYLHb8wIkL2o v+jG0i1NrAFDHh4IHJMkHVFgiJqyPMpsWH0H5iKTiEaSmRa7Ubktq0Lel6ezM+LP cKyQEOfd1fe3m0rDp8FZkDUwFUEMh1WSKrSKYuLIUildD8uJTe8njrt4pZuc8c7E sWy90k0kPXu0DNMeMWszApsKDYrXXsRlMe2gJjfPOUUXwXIyxrWwJ9zYYViCPqjm Od5Ri/qz0yGjyY9D0xVHlTm8NFLCAjVzuVp1u6bFBoL93CbrAeEI604saN2RjlX5 RSkT02Ff9mlZewzIVrec28tOOQ== -----END CERTIFICATE-----Generated at Wed May 13 08:13:14 2026 by rpki-client