$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: 5qZlfcYErpbzuIvXQJxUqUeGWyjiQmuWoDdhVX6Dg1g= Subject key identifier: ED:5B:CF:8E:9A:44:1D:6E:4E:BD:D3:1A:7A:2B:0A:A0:89:4C:EF:E6 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0AED Signing time: Tue 12 May 2026 19:26:50 +0000 Manifest this update: Tue 12 May 2026 19:26:50 +0000 Manifest next update: Tue 19 May 2026 19:26:50 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: Mt/63vsFBZ7tO7n4IGpat9LYaXoApXJz9CELoaE2y1s=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: May 12 19:26:50 2026 GMT Not After : May 19 19:26:50 2026 GMT Subject: CN=6a037efa-c1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:26:2b:8a:d5:71:2a:91:72:bb:4a:47:de: 1f:e7:cd:b0:42:b8:e6:1f:82:34:af:9d:0d:2a:14: d7:e4:b6:54:fc:d4:bc:13:4d:5b:e4:94:69:39:d1: e6:be:cd:60:56:11:6f:c1:c4:39:54:54:66:7b:61: 50:cd:5b:5a:f5:bd:8e:0c:c8:e8:d5:4c:d0:d5:d1: a4:d1:5b:ea:f4:ee:a3:e1:75:c6:33:9c:cc:d4:8a: df:78:09:d4:df:a1:d3:a1:bc:a8:d4:a7:93:96:b5: 08:a5:cb:33:d7:7e:2a:41:29:2d:88:73:c9:8c:bb: 60:09:e6:31:09:7d:a5:b7:14:b9:c1:0e:0a:47:5c: 64:8f:2b:ba:cf:7f:8f:90:76:65:72:06:51:5c:f8: 67:81:74:d5:5a:9c:42:bc:7d:d3:18:57:ad:90:fc: a7:a6:e1:f6:67:52:21:8b:46:43:c7:d8:d1:6d:29: 77:e3:d2:38:eb:16:c3:f8:a1:f5:f0:cd:4f:5c:e1: a2:72:ca:31:14:93:fc:fd:81:7f:18:10:e0:d3:54: 82:71:e6:f9:01:98:b1:64:96:d2:20:d4:a5:96:ab: 38:a5:db:d6:69:5f:83:f6:4d:98:b0:32:2e:e1:47: 11:91:c1:b4:1b:d1:ce:f0:db:cf:be:82:8f:3d:4e: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5B:CF:8E:9A:44:1D:6E:4E:BD:D3:1A:7A:2B:0A:A0:89:4C:EF:E6 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c9:ed:d4:24:c8:81:d2:fa:3e:ea:cf:77:65:93:d4:6f:c1: 89:1a:d2:b2:20:d1:84:31:db:01:08:44:cc:b7:03:05:3e:da: 65:22:98:66:19:cd:28:1e:4b:18:9a:3a:e4:de:d9:cf:07:73: 11:75:72:db:09:bc:c3:17:8b:73:0a:0a:21:9f:e4:6a:98:a2: ff:10:ee:99:c3:3f:e8:53:c3:d0:c9:27:3a:1d:3c:38:cf:d1: e0:9f:62:2a:9c:d6:ba:71:2b:30:f4:52:cd:d4:4a:1b:3c:66: 56:06:97:be:e0:ad:62:8d:bd:05:24:90:71:1c:76:ac:86:93: d6:12:b5:2c:23:32:89:45:5b:9e:df:2d:e9:30:2a:f1:18:83: c1:19:e6:c2:37:7d:60:5f:02:f7:43:15:f0:03:ad:88:d4:7f: 38:cc:07:6d:0f:28:72:9c:e1:2c:2c:7d:47:a4:5c:b3:62:d9: de:8a:f7:c6:b5:4b:c3:2e:7d:76:86:dc:04:38:4b:36:ae:bf: 2e:3b:84:41:7b:fe:5d:98:e5:42:6f:93:3c:aa:ab:5a:79:ee: c2:18:b7:88:d8:30:eb:c6:b6:ce:20:be:3d:0c:10:70:82:ae: f5:94:06:ae:f0:c7:b1:3b:2a:07:8e:af:e2:03:60:a4:9d:6a: 25:26:95:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjYwNTEyMTkyNjUwWhcNMjYwNTE5MTkyNjUwWjAYMRYwFAYD VQQDEw02YTAzN2VmYS1jMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskcmK4rVcSqRcrtKR94f582wQrjmH4I0r50NKhTX5LZU/NS8E01b5JRpOdHm vs1gVhFvwcQ5VFRme2FQzVta9b2ODMjo1UzQ1dGk0Vvq9O6j4XXGM5zM1IrfeAnU 36HTobyo1KeTlrUIpcsz134qQSktiHPJjLtgCeYxCX2ltxS5wQ4KR1xkjyu6z3+P kHZlcgZRXPhngXTVWpxCvH3TGFetkPynpuH2Z1Ihi0ZDx9jRbSl349I46xbD+KH1 8M1PXOGicsoxFJP8/YF/GBDg01SCceb5AZixZJbSINSllqs4pdvWaV+D9k2YsDIu 4UcRkcG0G9HO8NvPvoKPPU4MWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1bz46a RB1uTr3TGnorCqCJTO/mMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADcnt1CTIgdL6PurPd2WT1G/BiRrSsiDRhDHbAQhEzLcDBT7aZSKYZhnNKB5L GJo65N7ZzwdzEXVy2wm8wxeLcwoKIZ/kapii/xDumcM/6FPD0MknOh08OM/R4J9i KpzWunErMPRSzdRKGzxmVgaXvuCtYo29BSSQcRx2rIaT1hK1LCMyiUVbnt8t6TAq 8RiDwRnmwjd9YF8C90MV8AOtiNR/OMwHbQ8ocpzhLCx9R6Rcs2LZ3or3xrVLwy59 dobcBDhLNq6/LjuEQXv+XZjlQm+TPKqrWnnuwhi3iNgw68a2ziC+PQwQcIKu9ZQG rvDHsTsqB46v4gNgpJ1qJSaVYA== -----END CERTIFICATE-----Generated at Wed May 13 12:49:16 2026 by rpki-client