$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft File: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json) Hash identifier: 19FLbJ3Vkuit736O7D9fN9hNIniodZ2slHDwOuxiB8M= Subject key identifier: 2E:20:3A:41:9A:71:68:46:93:35:16:18:5D:09:F4:84:97:FD:81:74 Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Certificate serial: 02B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft Manifest number: 02AA Signing time: Wed 13 May 2026 01:38:23 +0000 Manifest this update: Wed 13 May 2026 01:38:23 +0000 Manifest next update: Wed 20 May 2026 01:38:23 +0000 Files and hashes: 1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: qQtZo6bJgmP9xIAqyQMeuykDfpwDZ4Zl58e4BrGmwUM=) 2: 0CDAA8EEE86611EFA5152A24C4F9AE02.roa (hash: Z52mVJSz988Jd9hitOllyu60oqioAYARpSvRGcwNtnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 693 (0x2b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Validity Not Before: May 13 01:38:23 2026 GMT Not After : May 20 01:38:23 2026 GMT Subject: CN=6a03d60f-2998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a2:6c:11:c5:f4:61:4f:2f:12:ec:a6:30:fc: a4:b5:e4:52:a3:21:ce:85:40:23:66:19:66:8a:e2: f9:90:06:5b:63:2b:9b:c9:f0:5e:09:2d:7f:9e:78: e3:87:6a:e7:82:69:91:70:a0:d1:4f:49:80:4e:ea: dd:6f:30:5d:83:7b:0e:f8:4a:9b:0b:b3:e2:0c:43: 81:bd:04:d4:c4:cc:13:8b:47:46:80:31:4a:3f:b5: e6:f9:aa:d0:df:2a:5e:e6:db:aa:25:b9:d8:b0:0e: ef:52:46:81:c6:7d:83:60:34:74:b2:17:ff:5e:ee: bb:c2:13:29:6f:f3:f1:68:c7:10:16:1b:21:01:f8: 6d:bb:55:e9:4a:82:23:5a:94:24:55:24:1c:31:36: 02:3c:ca:27:cf:60:36:84:a3:d6:0f:75:ae:a4:26: 09:24:e8:97:c7:9d:54:18:eb:d1:a5:22:e0:f0:a8: 46:49:da:cf:08:d2:17:3e:b5:28:80:d6:4c:97:49: 5b:86:7f:08:58:84:46:0d:9a:57:f3:5e:b5:dc:c5: a3:52:6b:01:a4:b0:a2:99:dc:89:92:16:aa:73:05: 94:c5:1e:cc:e2:82:b8:17:a6:dd:e7:7b:83:2e:e9: e8:24:20:59:e2:f2:20:63:0f:57:c7:e8:91:e1:52: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:20:3A:41:9A:71:68:46:93:35:16:18:5D:09:F4:84:97:FD:81:74 X509v3 Authority Key Identifier: keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6c:ac:3b:bb:16:1d:30:46:86:b2:f7:e4:68:db:c7:f0:fe: 7b:a4:5e:44:c4:95:d8:a7:ed:a2:9f:8c:f0:60:a6:1e:b8:92: 75:aa:82:9a:57:d8:ee:4f:1f:72:bf:22:58:0a:af:71:42:39: b2:e3:e2:0d:d2:ab:22:21:0a:7b:c6:94:e0:31:a0:08:fe:67: e2:de:ee:f0:16:48:23:e3:32:19:20:61:45:73:ab:fc:23:d9: f6:c7:6f:6c:e8:e5:3d:eb:56:df:f3:b5:2f:fd:99:35:2a:3c: c2:75:e5:7a:dd:79:aa:84:04:8e:60:f4:0f:e1:da:96:4d:d1: 9f:61:04:ac:f5:0d:49:26:5c:fe:6f:a4:c5:20:7f:92:80:fd: 37:c1:19:8a:75:39:d0:05:ad:91:8d:f7:0a:97:44:79:c2:6a: cf:2b:9e:f4:7e:d4:05:e5:c6:7a:db:51:84:ad:54:6c:2f:42: af:52:a1:93:33:ff:ed:c5:80:61:a3:c9:c9:88:01:c3:5b:c2: 6f:f3:88:01:d9:b3:f2:9a:20:be:ed:9d:e7:42:57:2f:e2:4a: 47:df:da:cf:61:1d:be:a8:ed:a1:53:ce:25:1d:6b:32:e9:70: a3:71:09:18:cd:35:e5:53:c3:9a:f9:99:d2:18:80:30:48:6b: d1:d1:c5:16 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2OUUxMTAvBgNVBAUTKERDQjgzOTMxOUZENTJFQUQ5RkNCOTc3ODI5ODRGRDFG RDQ0OTJDMTcwHhcNMjYwNTEzMDEzODIzWhcNMjYwNTIwMDEzODIzWjAYMRYwFAYD VQQDEw02YTAzZDYwZi0yOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KJsEcX0YU8vEuymMPykteRSoyHOhUAjZhlmiuL5kAZbYyubyfBeCS1/nnjj h2rngmmRcKDRT0mATurdbzBdg3sO+EqbC7PiDEOBvQTUxMwTi0dGgDFKP7Xm+arQ 3ype5tuqJbnYsA7vUkaBxn2DYDR0shf/Xu67whMpb/PxaMcQFhshAfhtu1XpSoIj WpQkVSQcMTYCPMonz2A2hKPWD3WupCYJJOiXx51UGOvRpSLg8KhGSdrPCNIXPrUo gNZMl0lbhn8IWIRGDZpX81613MWjUmsBpLCimdyJkhaqcwWUxR7M4oK4F6bd53uD LunoJCBZ4vIgYw9Xx+iR4VLscQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4gOkGa cWhGkzUWGF0J9ISX/YF0MB8GA1UdIwQYMBaAFNy4OTGf1S6tn8uXeCmE/R/USSwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTY5RS8yNTI1QzdDODRE MjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxxMmZ5NWQ0S1lUOUg5UkpM QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMZzVNWl9WTHEyZnk1ZDRLWVQ5SDlSSkxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTY5RS8yNTI1QzdDODREMjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxx MmZ5NWQ0S1lUOUg5UkpMQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnGysO7sWHTBGhrL35Gjbx/D+e6ReRMSV2Kftop+M8GCmHriSdaqCmlfY7k8f cr8iWAqvcUI5suPiDdKrIiEKe8aU4DGgCP5n4t7u8BZII+MyGSBhRXOr/CPZ9sdv bOjlPetW3/O1L/2ZNSo8wnXlet15qoQEjmD0D+Halk3Rn2EErPUNSSZc/m+kxSB/ koD9N8EZinU50AWtkY33CpdEecJqzyue9H7UBeXGettRhK1UbC9Cr1KhkzP/7cWA YaPJyYgBw1vCb/OIAdmz8pogvu2d50JXL+JKR9/az2EdvqjtoVPOJR1rMulwo3EJ GM015VPDmvmZ0hiAMEhr0dHFFg== -----END CERTIFICATE-----Generated at Wed May 13 10:51:36 2026 by rpki-client