$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json) Hash identifier: xEAnFeaOpvjI0blVUDo7mNtjLmuinp9Vpchnm0JL7CQ= Subject key identifier: 01:E8:43:5F:B8:38:CB:61:E8:0B:08:EC:84:75:26:A9:72:70:B3:FE Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 Certificate issuer: /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft Manifest number: 1D Signing time: Mon 11 May 2026 09:05:25 +0000 Manifest this update: Mon 11 May 2026 09:05:25 +0000 Manifest next update: Mon 18 May 2026 09:05:25 +0000 Files and hashes: 1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: BhB0NdaAziWh8Qqp5JLaZb5lo8YeZA4OodioHInkHHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Validity Not Before: May 11 09:05:25 2026 GMT Not After : May 18 09:05:25 2026 GMT Subject: CN=6a019bd5-fd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:e3:ac:e3:62:d1:4a:b3:8b:8c:74:01:5a: 4c:01:46:72:7f:1f:88:60:f1:02:3f:19:1b:e0:f8: f1:1e:33:9e:f8:6b:12:71:cb:49:a5:f6:8e:9f:1f: 69:c3:18:d5:d8:88:71:d4:c3:90:73:8a:e4:f0:4d: 58:11:69:32:32:43:7b:1a:44:2d:98:ec:d6:8a:3a: f6:51:30:a2:a3:7c:66:9e:9e:7d:75:c8:45:f9:ee: 72:1a:94:3f:06:0c:58:55:aa:9a:9f:05:58:ec:02: 29:fa:eb:9d:8e:06:d3:59:7a:e0:e9:08:83:03:60: bf:8c:26:1f:fb:d3:00:fb:7c:4f:aa:0f:14:cf:fc: f9:6e:3b:d1:02:ef:39:3b:82:e2:b3:b0:bb:fb:c5: f0:83:97:ee:bf:9d:5f:05:1b:cd:00:08:ad:bb:5b: d2:0f:a4:06:29:c0:a7:55:52:15:04:76:de:73:aa: f9:33:c5:7d:5b:f8:93:eb:d5:89:1b:f5:a6:c6:75: 50:1e:49:5a:5f:35:44:e4:42:71:58:12:8d:a8:1f: 13:aa:71:fd:34:12:d8:a4:ef:21:27:22:0b:f2:f9: 22:db:83:f0:8b:ec:bc:3c:0d:c4:c7:b2:1b:0d:16: 23:47:b5:23:20:8b:1d:12:81:7b:3b:34:e0:29:f2: 02:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E8:43:5F:B8:38:CB:61:E8:0B:08:EC:84:75:26:A9:72:70:B3:FE X509v3 Authority Key Identifier: keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fc:a9:1a:02:f0:e4:5a:5a:76:8e:48:8a:6a:7b:c5:6b:64: d6:05:44:29:0c:7b:64:95:8b:57:6f:97:76:48:15:15:43:a3: 1c:91:6e:ce:15:22:8c:4e:9c:af:78:7a:8d:2d:37:27:22:11: 3f:f7:2c:5a:2a:15:33:78:ec:db:98:ef:ad:13:72:be:a2:17: 9c:75:64:f3:6d:be:ea:46:db:ef:a0:62:58:b8:7b:5c:b4:36: bc:6a:1c:fc:09:9e:72:e6:b3:83:50:2d:54:da:f8:33:06:1a: 61:be:94:67:e5:d1:04:2f:cf:03:b1:7b:43:29:52:f0:47:1e: e6:41:bb:d4:cf:6b:85:c3:f1:5a:9d:81:bf:8a:45:cd:d6:cf: e7:a3:4c:e3:ce:8a:e1:b9:55:ff:45:ce:be:4b:ca:e9:53:f5: 6a:10:38:f7:4d:fc:b8:0b:21:ba:c3:c0:f1:56:f3:ac:bf:95: dd:c2:35:73:e9:50:cb:dd:ab:1b:74:9f:d8:d4:b0:0d:e2:4c: b1:15:76:01:b6:98:f2:77:19:27:9e:68:18:11:76:2d:80:5c: 02:88:02:07:77:2c:13:12:86:fc:d6:61:69:8a:24:d9:b4:f6: 36:cd:65:9b:b1:da:d2:e8:c2:b2:f9:06:32:1e:8b:75:12:ec: 64:3d:65:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkExMDExMC8GA1UEBRMoRERBRUFBNTM0MDJCNzBBOTRGNzM3QzFCMEQ1RDk1MDFG ODI5RjAzOTAeFw0yNjA1MTEwOTA1MjVaFw0yNjA1MTgwOTA1MjVaMBgxFjAUBgNV BAMTDTZhMDE5YmQ1LWZkNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH7OOs42LRSrOLjHQBWkwBRnJ/H4hg8QI/GRvg+PEeM574axJxy0ml9o6fH2nD GNXYiHHUw5BziuTwTVgRaTIyQ3saRC2Y7NaKOvZRMKKjfGaenn11yEX57nIalD8G DFhVqpqfBVjsAin6652OBtNZeuDpCIMDYL+MJh/70wD7fE+qDxTP/PluO9EC7zk7 guKzsLv7xfCDl+6/nV8FG80ACK27W9IPpAYpwKdVUhUEdt5zqvkzxX1b+JPr1Ykb 9abGdVAeSVpfNUTkQnFYEo2oHxOqcf00Etik7yEnIgvy+SLbg/CL7Lw8DcTHshsN FiNHtSMgix0SgXs7NOAp8gL/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAehDX7g4 y2HoCwjshHUmqXJws/4wHwYDVR0jBBgwFoAU3a6qU0ArcKlPc3wbDV2VAfgp8Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0U4MzMyNUVBMjMy QzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0tsUGMzd2JEVjJWQWZncDhE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2E2cVUwQXJjS2xQYzN3YkRWMlZBZmdwOERrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QTEwL0U4MzMyNUVBMjMyQzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0ts UGMzd2JEVjJWQWZncDhEay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAk/KkaAvDkWlp2jkiKanvFa2TWBUQpDHtklYtXb5d2SBUVQ6MckW7OFSKMTpyv eHqNLTcnIhE/9yxaKhUzeOzbmO+tE3K+ohecdWTzbb7qRtvvoGJYuHtctDa8ahz8 CZ5y5rODUC1U2vgzBhphvpRn5dEEL88DsXtDKVLwRx7mQbvUz2uFw/FanYG/ikXN 1s/no0zjzorhuVX/Rc6+S8rpU/VqEDj3Tfy4CyG6w8DxVvOsv5XdwjVz6VDL3asb dJ/Y1LAN4kyxFXYBtpjydxknnmgYEXYtgFwCiAIHdywTEob81mFpiiTZtPY2zWWb sdrS6MKy+QYyHot1EuxkPWWo -----END CERTIFICATE-----Generated at Wed May 13 07:48:57 2026 by rpki-client