$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: rVSNtrSfzI+fpAssKcBhtFFJfn/bTFQWNS19mKHRSBw= Subject key identifier: E2:ED:11:DA:35:DF:BF:4C:28:AB:92:C4:E4:5B:BC:AC:1C:E3:67:7E Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: 010E Signing time: Mon 11 May 2026 06:08:09 +0000 Manifest this update: Mon 11 May 2026 06:08:09 +0000 Manifest next update: Mon 18 May 2026 06:08:09 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: GkevsRaRmbz3cjKgRyICHCpRou4pQQKPogTUekAMNys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: May 11 06:08:09 2026 GMT Not After : May 18 06:08:09 2026 GMT Subject: CN=6a017249-8eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:28:26:f1:63:52:9f:61:0b:24:89:4a:4b: f4:73:17:4f:7c:59:54:89:09:da:6b:ba:88:66:67: 56:bd:6d:cc:df:ea:9c:ac:61:5f:2c:40:dd:0c:04: 39:75:17:c4:23:dd:42:d1:51:b4:c2:36:68:10:d9: 5e:3d:f6:48:ab:de:cd:bf:49:d1:f4:a1:0a:fb:07: db:90:1c:a2:f2:15:9c:fb:58:9c:db:33:a4:05:38: ab:2a:da:c1:79:9d:36:51:8b:46:f0:87:d7:bc:2f: 5b:7f:1a:d1:de:5d:b3:58:82:33:eb:23:39:ca:9e: 20:71:95:5b:cc:47:c3:3f:35:0a:44:eb:53:15:44: 15:eb:fe:80:01:db:ca:e4:8d:c6:02:27:d9:e4:60: d6:20:53:ad:53:af:10:18:53:34:33:b1:da:ba:75: 1f:00:db:6c:da:51:4c:86:c5:0e:77:d0:27:a3:cd: ad:dd:5a:1a:6c:ff:47:a4:f5:12:2c:65:30:40:fe: f5:14:ff:75:6d:01:52:38:80:46:bb:ea:91:84:7f: e3:02:bd:d4:fc:d8:a5:21:94:f1:29:b0:c4:74:b6: 33:c2:c3:70:14:fa:a9:c7:31:9d:7e:00:0f:0a:4b: 6a:72:88:3e:fa:ec:a8:58:4c:ff:5c:77:5f:b7:3e: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:ED:11:DA:35:DF:BF:4C:28:AB:92:C4:E4:5B:BC:AC:1C:E3:67:7E X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ab:4b:82:e6:07:fb:ba:14:9f:8b:cd:a7:44:78:53:0a:2f: 54:45:67:b9:e4:2f:c1:91:ea:49:16:93:74:af:eb:2b:d3:70: a4:36:92:4b:96:90:bb:14:65:e3:bd:25:16:c5:6d:73:48:ed: 1f:ea:69:eb:50:12:48:38:ea:b4:a5:13:a4:c9:56:65:ef:a6: b2:d1:85:ff:3b:67:bc:25:e1:15:b7:dd:81:ee:0c:69:86:ca: 26:a1:db:b0:ae:1d:08:10:28:73:f6:95:03:bb:73:5c:1a:3f: 76:87:c4:b3:8a:42:e0:a9:cb:e5:07:85:a4:96:95:d9:ca:f0: 90:aa:ae:bd:91:99:bc:3e:38:34:d8:3e:70:e9:76:3a:50:04: 9b:87:f5:15:fc:91:d5:a1:a7:d3:14:1e:03:59:b1:0e:64:f0: bd:f9:51:4f:31:b5:52:bd:1b:b5:24:f9:25:05:8d:61:ab:08: 7a:98:a0:2b:3b:2a:3f:14:9e:f3:47:e1:48:cb:e1:eb:5d:22: d8:de:95:ec:c9:7b:4c:e8:55:f8:7a:c6:4d:19:20:5d:f6:a5: aa:7d:1e:62:fa:4a:9b:bf:21:ec:07:fe:f4:56:96:84:e3:c1: b9:60:a9:81:fc:ec:cf:a0:52:3c:ae:ff:a2:04:c4:71:07:e6: 74:3f:88:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKERDMTEzMEQ4NjE2QkFCQzZDRTA4OEY1RjIwRTY5NzE5 QTk5QzMyQkIwHhcNMjYwNTExMDYwODA5WhcNMjYwNTE4MDYwODA5WjAYMRYwFAYD VQQDEw02YTAxNzI0OS04ZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv30oJvFjUp9hCySJSkv0cxdPfFlUiQnaa7qIZmdWvW3M3+qcrGFfLEDdDAQ5 dRfEI91C0VG0wjZoENlePfZIq97Nv0nR9KEK+wfbkByi8hWc+1ic2zOkBTirKtrB eZ02UYtG8IfXvC9bfxrR3l2zWIIz6yM5yp4gcZVbzEfDPzUKROtTFUQV6/6AAdvK 5I3GAifZ5GDWIFOtU68QGFM0M7HaunUfANts2lFMhsUOd9Ano82t3VoabP9HpPUS LGUwQP71FP91bQFSOIBGu+qRhH/jAr3U/NilIZTxKbDEdLYzwsNwFPqpxzGdfgAP Cktqcog++uyoWEz/XHdftz47iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLtEdo1 379MKKuSxORbvKwc42d+MB8GA1UdIwQYMBaAFNwRMNhha6vGzgiPXyDmlxmpnDK7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS8wODlCQzRFNkI2 MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4Yk9DSTlmSU9hWEdhbWNN cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS8wODlCQzRFNkI2MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4 Yk9DSTlmSU9hWEdhbWNNcnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh6tLguYH+7oUn4vNp0R4UwovVEVnueQvwZHqSRaTdK/rK9NwpDaSS5aQuxRl 470lFsVtc0jtH+pp61ASSDjqtKUTpMlWZe+mstGF/ztnvCXhFbfdge4MaYbKJqHb sK4dCBAoc/aVA7tzXBo/dofEs4pC4KnL5QeFpJaV2crwkKquvZGZvD44NNg+cOl2 OlAEm4f1FfyR1aGn0xQeA1mxDmTwvflRTzG1Ur0btST5JQWNYasIepigKzsqPxSe 80fhSMvh610i2N6V7Ml7TOhV+HrGTRkgXfalqn0eYvpKm78h7Af+9FaWhOPBuWCp gfzsz6BSPK7/ogTEcQfmdD+Iwg== -----END CERTIFICATE-----Generated at Tue May 12 22:15:08 2026 by rpki-client