$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: mJUpD8hMsRlD587YLh/9QhnF5Nm6uBbT41+aKk3adGw= Subject key identifier: 67:D2:13:C9:98:73:35:50:E5:5E:FD:F4:74:1D:E3:B2:D9:5B:B6:F4 Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 31 Signing time: Mon 11 May 2026 08:53:24 +0000 Manifest this update: Mon 11 May 2026 08:53:23 +0000 Manifest next update: Mon 18 May 2026 08:53:23 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: qhGxHKf5S7LurABF3GXWS1uy2uJOvLepkazjvLa7HRY=) 2: 604F4E3C0D6611F1AAA528DE1B3D8C67.roa (hash: zn+Y2EzBvu1Td2sgtLKQfgs/gBSjMOZeXn2CBE9VYms=) 3: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: May 11 08:53:23 2026 GMT Not After : May 18 08:53:23 2026 GMT Subject: CN=6a019904-3af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:bd:4c:45:06:87:0f:f2:6b:81:2c:c9:71: 9d:e6:06:5d:ae:82:2c:58:78:2e:c6:33:14:8a:c4: c6:0c:c1:a6:0f:ed:75:37:8a:d0:22:db:fc:a1:96: 47:64:c4:b4:db:70:06:e1:27:b7:f1:37:0c:b5:57: 43:e4:4f:16:3b:cf:ee:50:04:08:9a:e1:d2:c6:a6: 1c:ab:ee:6a:21:44:ff:ca:31:2c:7d:c9:07:71:53: c7:7e:45:3d:42:e6:b1:3a:85:cc:3c:d0:ba:f0:d0: 9c:b3:b7:1b:2e:83:e3:56:3c:de:57:f6:c0:90:31: be:4f:41:da:ed:b8:4f:69:15:20:3a:1a:2d:d7:d9: 10:20:6b:40:a8:68:99:91:3a:7c:e1:b8:d8:ab:d8: 83:5b:29:2c:26:63:fd:db:e0:9d:97:1d:7b:50:78: 09:83:20:98:42:d5:ba:29:81:d2:db:a5:13:a4:12: 19:a7:2f:ef:5c:56:e1:fc:19:08:14:2e:3d:08:bb: a7:f7:bc:42:94:59:9b:62:2a:55:27:ae:fa:17:20: cc:8a:9b:f2:91:77:29:5f:c9:72:26:45:90:6b:2a: a3:03:16:6a:0e:b6:3a:22:cc:f6:c3:64:5e:05:22: 06:e5:2b:4b:f4:5a:12:dc:47:1f:4d:fe:56:4d:02: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:13:C9:98:73:35:50:E5:5E:FD:F4:74:1D:E3:B2:D9:5B:B6:F4 X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:06:db:fa:e8:f8:43:86:b2:ff:68:81:36:f6:a6:ab:87:71: 6c:0b:91:ba:bc:61:54:bf:8a:cf:9a:bc:f4:a9:77:47:bd:79: 62:d7:d9:bc:d5:42:7f:85:c5:4f:c2:cb:63:92:06:2f:49:97: ab:c8:93:d3:d2:71:88:66:bb:22:26:5b:4f:e0:72:f6:10:a6: 96:5e:34:9d:1f:d6:28:d1:e5:7d:a1:d0:5d:73:69:7e:47:39: 1c:62:b1:f2:1b:b2:be:ee:80:f6:50:43:2d:7a:f2:e2:17:6f: 45:89:12:ea:f8:ff:db:92:3d:6c:06:dc:56:f4:09:23:48:0a: 4a:59:d8:6d:c5:f3:35:2d:89:55:e1:d4:04:56:f9:ce:57:46: 74:f2:f4:ac:3c:1b:3a:0b:a9:54:a4:27:8e:33:d1:0d:e4:37: 31:39:74:d1:1f:c7:ee:44:c0:50:11:d0:67:6f:b7:ca:7d:30: 35:fc:bc:fd:b7:bb:cb:11:76:8a:e2:c9:ea:74:aa:31:6e:31: 48:be:f0:86:90:98:df:2a:33:c3:b2:d5:28:13:8d:e3:16:57: 3b:db:aa:9b:2f:d4:16:85:af:ac:79:56:8c:3c:51:4c:11:45: a7:e6:29:15:7a:94:80:2a:52:b9:47:25:a6:14:97:86:12:0e: 98:8a:9b:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD OUNGOUNDMjAeFw0yNjA1MTEwODUzMjNaFw0yNjA1MTgwODUzMjNaMBgxFjAUBgNV BAMTDTZhMDE5OTA0LTNhZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRzb1MRQaHD/JrgSzJcZ3mBl2ugixYeC7GMxSKxMYMwaYP7XU3itAi2/yhlkdk xLTbcAbhJ7fxNwy1V0PkTxY7z+5QBAia4dLGphyr7mohRP/KMSx9yQdxU8d+RT1C 5rE6hcw80Lrw0Jyztxsug+NWPN5X9sCQMb5PQdrtuE9pFSA6Gi3X2RAga0CoaJmR OnzhuNir2INbKSwmY/3b4J2XHXtQeAmDIJhC1bopgdLbpROkEhmnL+9cVuH8GQgU Lj0Iu6f3vEKUWZtiKlUnrvoXIMyKm/KRdylfyXImRZBrKqMDFmoOtjoizPbDZF4F IgblK0v0WhLcRx9N/lZNAu83AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZ9ITyZhz NVDlXv30dB3jstlbtvQwHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3 QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MzE0LzM2NTk3NEM2MDk3QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVu SWFTY3lDaTZkdThuUG5NSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMBtv66PhDhrL/aIE29qarh3FsC5G6vGFUv4rPmrz0qXdHvXli19m81UJ/hcVP wstjkgYvSZeryJPT0nGIZrsiJltP4HL2EKaWXjSdH9Yo0eV9odBdc2l+RzkcYrHy G7K+7oD2UEMtevLiF29FiRLq+P/bkj1sBtxW9AkjSApKWdhtxfM1LYlV4dQEVvnO V0Z08vSsPBs6C6lUpCeOM9EN5DcxOXTRH8fuRMBQEdBnb7fKfTA1/Lz9t7vLEXaK 4snqdKoxbjFIvvCGkJjfKjPDstUoE43jFlc726qbL9QWha+seVaMPFFMEUWn5ikV epSAKlK5RyWmFJeGEg6YipsU -----END CERTIFICATE-----Generated at Wed May 13 07:47:03 2026 by rpki-client