$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: vkGRzFaqsfqzWkuQb3aSkjFt+2L9PSBh2ALJ+oBugKU= Subject key identifier: 1C:6F:2C:9F:EE:C3:B0:76:A2:F3:44:B3:55:1F:A6:45:13:67:5A:40 Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 3545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 353F Signing time: Tue 12 May 2026 14:51:46 +0000 Manifest this update: Tue 12 May 2026 14:51:45 +0000 Manifest next update: Tue 19 May 2026 14:51:45 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: Za8Rz9NNVXyXvX8nbzcEP6SZDiT+SQSupWBADQbeijo=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: nLdLNd1FqbqzPBvmomvzxR8c2GOexrERlWPqFeDBvG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13637 (0x3545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: May 12 14:51:45 2026 GMT Not After : May 19 14:51:45 2026 GMT Subject: CN=6a033e81-3916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:81:1f:9a:7d:19:90:0c:bd:24:db:de:9d: 13:a3:a6:65:de:19:50:fe:fc:43:d3:52:6e:fc:86: 5e:fd:9c:54:f7:43:f8:67:73:4a:ec:00:25:75:76: 67:08:db:fb:62:5a:77:d2:f2:b9:f9:f6:bb:dc:69: 4b:f0:8e:90:76:c0:89:30:61:6e:b5:eb:67:ba:82: 1c:7b:8e:68:79:72:29:e5:3c:eb:21:d3:c5:b3:b1: fa:57:3e:18:b0:4e:e6:13:39:3e:d5:cd:7d:96:79: 55:7f:9f:39:57:cc:11:7b:3f:ab:7c:b0:b1:a4:88: ce:fb:5f:20:17:3a:24:52:ec:e6:a7:70:d4:1a:11: 9f:c4:17:34:db:1d:74:d6:a8:44:21:99:8c:8c:b1: cd:b6:13:d8:56:92:13:f5:b8:38:db:6f:3b:9d:1b: 85:f1:4b:28:2c:02:2c:a6:7e:95:74:65:5e:ea:f0: 9a:24:0f:31:b3:f5:7f:cf:00:26:26:ce:70:c1:e7: ec:c3:f1:aa:ca:4f:d7:06:7a:ea:7b:3e:1b:a1:56: a2:5b:c4:f9:f2:11:c9:c3:1b:f7:99:2f:d6:43:39: db:6e:35:f6:5d:62:7c:af:ba:01:5a:ed:db:df:bf: f0:36:a4:63:38:26:16:c9:73:01:5e:60:5b:d2:62: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:2C:9F:EE:C3:B0:76:A2:F3:44:B3:55:1F:A6:45:13:67:5A:40 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d8:28:de:38:9e:f4:8f:57:b0:66:e0:6a:b5:5d:7c:18:c8: 5b:fc:29:2b:41:55:5f:7a:b7:bf:1d:e3:66:3b:b7:61:67:68: 02:35:0a:37:0b:77:a5:a0:65:76:98:76:38:f1:23:62:e8:4d: 2f:b6:6e:05:35:14:0a:c6:66:fa:09:24:eb:12:3b:bb:e2:6a: 1a:a5:63:5e:71:b8:f5:ef:8d:61:c0:0e:09:8c:81:76:91:91: b5:64:e4:19:9f:1f:56:64:ff:62:42:1f:d8:db:76:82:8a:48: 8c:63:c0:2f:bb:a0:0c:c1:d3:f1:96:8f:9f:33:f6:c4:e1:15: 31:85:54:8c:5c:55:f3:b2:47:8b:c1:ba:b2:c9:92:d5:c1:a5: d0:92:51:cd:8c:93:9f:53:21:2c:46:03:d8:02:26:a4:6d:f5: 5d:b3:66:b8:84:4c:e7:7c:4b:54:3a:96:55:d5:89:40:1b:c7: f4:36:8c:ef:eb:58:aa:1e:5c:d9:35:80:be:47:95:99:84:5f: b8:5c:03:cb:a3:cd:15:63:d9:9b:6e:b3:80:8d:0a:02:ea:77: d1:cf:8f:0b:77:8b:1f:0b:2c:34:53:b0:be:8f:07:97:d2:eb: 7d:93:e1:dc:07:09:e3:f1:5a:56:f6:c3:f9:2f:65:25:8f:55: 08:7a:b2:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjYwNTEyMTQ1MTQ1WhcNMjYwNTE5MTQ1MTQ1WjAYMRYwFAYD VQQDEw02YTAzM2U4MS0zOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN2BH5p9GZAMvSTb3p0To6Zl3hlQ/vxD01Ju/IZe/ZxU90P4Z3NK7AAldXZn CNv7Ylp30vK5+fa73GlL8I6QdsCJMGFutetnuoIce45oeXIp5TzrIdPFs7H6Vz4Y sE7mEzk+1c19lnlVf585V8wRez+rfLCxpIjO+18gFzokUuzmp3DUGhGfxBc02x10 1qhEIZmMjLHNthPYVpIT9bg42287nRuF8UsoLAIspn6VdGVe6vCaJA8xs/V/zwAm Js5wwefsw/Gqyk/XBnrqez4boVaiW8T58hHJwxv3mS/WQznbbjX2XWJ8r7oBWu3b 37/wNqRjOCYWyXMBXmBb0mKltQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxvLJ/u w7B2ovNEs1UfpkUTZ1pAMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVNgo3jie9I9XsGbgarVdfBjIW/wpK0FVX3q3vx3jZju3YWdoAjUKNwt3paBl dph2OPEjYuhNL7ZuBTUUCsZm+gkk6xI7u+JqGqVjXnG49e+NYcAOCYyBdpGRtWTk GZ8fVmT/YkIf2Nt2gopIjGPAL7ugDMHT8ZaPnzP2xOEVMYVUjFxV87JHi8G6ssmS 1cGl0JJRzYyTn1MhLEYD2AImpG31XbNmuIRM53xLVDqWVdWJQBvH9DaM7+tYqh5c 2TWAvkeVmYRfuFwDy6PNFWPZm26zgI0KAup30c+PC3eLHwssNFOwvo8Hl9LrfZPh 3AcJ4/FaVvbD+S9lJY9VCHqy6w== -----END CERTIFICATE-----Generated at Wed May 13 12:35:34 2026 by rpki-client