$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: Iz8ROk+Aon05sVOqlPT7OnyK/xd+tMgp1S4u4roBln8= Subject key identifier: CE:91:EC:6E:58:11:1E:44:99:81:D9:4B:51:55:EB:32:91:3A:E1:9F Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 052C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 04E4 Signing time: Tue 12 May 2026 23:58:54 +0000 Manifest this update: Tue 12 May 2026 23:58:53 +0000 Manifest next update: Tue 19 May 2026 23:58:53 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: LxifbwLzaIg+31seVNM3BE2JUi1X5U6HR0o/O1yd5CE=) 2: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 4: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) 5: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 7: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 8: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1324 (0x52c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: May 12 23:58:53 2026 GMT Not After : May 19 23:58:53 2026 GMT Subject: CN=6a03bebe-8a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:2f:ae:7e:e4:4e:d2:db:a8:c5:91:0b:be: e9:1e:7d:7c:86:02:17:77:6c:d9:05:ee:c9:1d:7e: c4:f4:e1:d5:41:5e:ee:b8:c1:e1:ec:23:1c:c2:87: 3d:a4:8d:a7:4b:54:b4:1a:46:2b:1a:80:c2:0e:70: fc:bf:bc:aa:c0:6e:7b:c2:d6:31:2c:cc:26:5a:04: 28:77:90:eb:96:58:03:49:ef:0b:9f:59:c2:f9:52: ce:e3:df:55:81:7c:90:e0:fa:d4:39:1e:3b:af:ae: 22:06:9c:61:0b:fa:ac:a7:4e:af:af:44:c9:8e:02: 15:5d:f3:5f:61:d2:80:50:0a:03:38:16:ae:4b:77: 37:17:f3:43:37:2e:1e:e5:38:6f:f5:e0:ed:96:3e: c5:e6:51:8f:c2:33:b4:38:fd:dc:1e:4d:88:d6:49: 80:86:b7:57:11:18:59:37:04:a0:8d:54:55:b6:82: 2d:0f:8a:96:e0:8c:0f:a9:98:1f:25:2f:35:5b:e8: 41:4f:0d:01:46:06:03:37:49:ba:39:2d:05:49:ac: 08:bd:0f:e7:ad:0a:34:0b:62:7a:4c:28:9a:71:9e: 76:96:4f:37:53:a0:ea:ec:9e:d5:15:7f:01:f2:52: d4:d3:3b:dd:84:33:fe:62:a3:cc:eb:e6:26:c1:1d: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:EC:6E:58:11:1E:44:99:81:D9:4B:51:55:EB:32:91:3A:E1:9F X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:64:bb:66:22:1b:74:ae:66:f1:d6:4e:af:4b:9d:93:2f:07: df:2d:9e:28:14:98:4e:04:60:7f:e2:5e:1a:16:7b:77:67:19: b9:13:87:ca:15:93:2c:c0:91:4e:98:c7:14:0a:d5:f7:db:fc: 17:1e:61:98:b3:ab:5d:16:25:99:1c:b0:26:ca:91:89:93:97: 89:e8:da:5d:81:32:ed:a1:e5:17:91:93:59:0f:76:3e:38:50: 16:c6:fd:3e:e1:7f:51:a9:73:4f:21:3a:81:ab:c6:c3:a4:80: 16:6a:ba:f0:56:5d:ea:94:18:23:61:ac:aa:69:71:f9:96:68: 3c:2f:88:48:36:ab:f0:49:5b:84:63:27:7c:68:8b:df:4e:9e: 53:c4:0f:32:75:ed:6f:c4:4e:9d:b6:fa:05:41:f8:37:3b:c6: 8a:b1:4f:74:b5:45:c5:2b:e7:30:83:18:ec:dc:99:45:0a:05: f1:90:30:e9:ac:68:d1:0c:67:18:6e:db:7e:38:47:35:60:ac: 12:7a:99:c4:9e:93:6a:57:9a:14:08:d9:48:58:dc:66:fa:60: 1b:5d:f7:85:d2:d2:22:54:50:8c:06:81:b2:c1:9a:3f:54:9d: a8:d2:56:51:d7:cd:cf:e9:c6:6e:51:bb:db:8b:84:45:6b:ef: b4:3b:ad:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwNTEyMjM1ODUzWhcNMjYwNTE5MjM1ODUzWjAYMRYwFAYD VQQDEw02YTAzYmViZS04YTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa8vrn7kTtLbqMWRC77pHn18hgIXd2zZBe7JHX7E9OHVQV7uuMHh7CMcwoc9 pI2nS1S0GkYrGoDCDnD8v7yqwG57wtYxLMwmWgQod5DrllgDSe8Ln1nC+VLO499V gXyQ4PrUOR47r64iBpxhC/qsp06vr0TJjgIVXfNfYdKAUAoDOBauS3c3F/NDNy4e 5Thv9eDtlj7F5lGPwjO0OP3cHk2I1kmAhrdXERhZNwSgjVRVtoItD4qW4IwPqZgf JS81W+hBTw0BRgYDN0m6OS0FSawIvQ/nrQo0C2J6TCiacZ52lk83U6Dq7J7VFX8B 8lLU0zvdhDP+YqPM6+YmwR2HZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6R7G5Y ER5EmYHZS1FV6zKROuGfMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnWS7ZiIbdK5m8dZOr0udky8H3y2eKBSYTgRgf+JeGhZ7d2cZuROHyhWTLMCR TpjHFArV99v8Fx5hmLOrXRYlmRywJsqRiZOXiejaXYEy7aHlF5GTWQ92PjhQFsb9 PuF/UalzTyE6gavGw6SAFmq68FZd6pQYI2Gsqmlx+ZZoPC+ISDar8ElbhGMnfGiL 306eU8QPMnXtb8ROnbb6BUH4NzvGirFPdLVFxSvnMIMY7NyZRQoF8ZAw6axo0Qxn GG7bfjhHNWCsEnqZxJ6TaleaFAjZSFjcZvpgG133hdLSIlRQjAaBssGaP1SdqNJW UdfNz+nGblG724uERWvvtDutaQ== -----END CERTIFICATE-----Generated at Wed May 13 04:06:50 2026 by rpki-client