$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: 4DvG+LS7gh53bVfOoQHuXclhfwKBgYL7lqn8rUA/TrA= Subject key identifier: C1:6F:03:AF:02:A5:EE:E8:74:6E:81:BF:E4:AC:BC:1D:6F:20:6D:AE Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0D73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0D32 Signing time: Tue 12 May 2026 18:13:41 +0000 Manifest this update: Tue 12 May 2026 18:13:41 +0000 Manifest next update: Tue 19 May 2026 18:13:41 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: ozX21pXYMMIaGHF4ncTOvziX1G20owFa44gqibDJdZ8=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: /T4LYRFjurWo+sXlwXITQRtGPqnCSql2DU5VkiOEfeM=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: 4IRrcima1swbv66pFPjLf2ozuN5JrXfc27o1SCSzjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: May 12 18:13:41 2026 GMT Not After : May 19 18:13:41 2026 GMT Subject: CN=6a036dd5-80ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:71:ed:b5:94:eb:ba:25:9b:45:3b:4a:9b: 70:43:99:e8:20:e0:c5:af:3e:9a:4f:15:e4:cd:a9: 5c:e8:ad:5e:3c:84:de:85:59:4e:d9:4c:6d:39:ae: f6:ab:2c:75:14:54:c0:4a:8d:83:08:2e:7e:b4:28: c2:19:bd:0b:00:35:20:23:65:a1:38:80:5c:54:a0: 4a:e0:55:61:20:15:ff:e5:ee:9f:a8:55:1f:7c:6f: 06:25:2a:ce:ec:3f:e5:e5:21:9d:0c:1e:38:89:26: fb:ef:a6:03:27:58:ff:e6:8c:ee:12:e1:37:39:21: 94:bb:8e:3b:36:7a:52:2c:50:24:b4:6c:7b:06:1e: 0e:37:58:c5:eb:ca:9c:6a:62:e2:98:5a:a5:38:97: 8a:80:62:ca:5e:5a:0a:04:78:66:ea:39:b4:08:0c: c2:b8:3a:08:71:11:cc:2f:72:90:42:e7:b6:9f:a1: b9:b0:82:88:7d:d9:a5:04:3d:14:37:fe:5a:b4:9b: b5:37:fa:fc:29:8a:12:8c:64:8d:50:ba:58:57:1f: 90:00:87:3a:1d:33:42:42:f0:cf:aa:9f:dd:45:70: ba:61:43:b1:78:ea:2e:4e:7c:a1:2d:6f:c9:9a:b3: 64:d7:71:2f:20:c2:55:91:6c:a1:4a:c9:fe:ec:0c: 3e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:03:AF:02:A5:EE:E8:74:6E:81:BF:E4:AC:BC:1D:6F:20:6D:AE X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b3:0b:64:ff:2b:c8:c3:58:67:65:35:c8:48:13:96:d7:4b: c6:31:37:fc:c0:96:2a:36:40:b3:56:c6:e7:0d:57:53:9e:6f: 1f:a7:fa:37:65:5d:24:a0:f9:36:71:15:a1:51:b6:fa:0e:ee: ef:53:67:c3:f0:c6:8a:24:e6:38:6f:5c:48:63:89:81:5d:df: 6a:72:7b:a8:a1:b8:9c:a0:df:73:69:b2:82:b2:79:f4:8f:48: 73:0b:84:6d:50:35:9e:bf:e0:68:62:b0:a8:23:8b:c4:0c:f3: ff:e4:26:b9:ec:35:b4:a5:ad:b7:9a:93:0c:f3:6d:39:3f:02: 81:ed:2b:d7:d2:4f:31:0f:f2:eb:f7:22:15:19:1a:93:e3:73: db:a2:52:3a:aa:24:68:42:6c:52:54:ea:8e:94:a9:8c:b0:71: 22:3f:70:9f:51:98:aa:b6:d4:02:53:7b:fc:b3:ca:6c:2b:09: c4:32:64:0c:2f:98:e3:83:7b:43:c8:32:38:2a:7b:ea:17:cf: 27:0c:fd:19:2d:ce:6d:fa:f8:3b:71:29:36:98:6b:c0:31:18: 0d:e3:94:f2:3d:83:f2:d9:65:62:c8:a9:ae:d0:ce:45:dc:a1: a2:af:b2:65:c1:53:5a:d7:1f:f9:6d:30:6b:a0:f1:fe:c6:1e: 59:c6:e6:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjYwNTEyMTgxMzQxWhcNMjYwNTE5MTgxMzQxWjAYMRYwFAYD VQQDEw02YTAzNmRkNS04MGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLJx7bWU67olm0U7SptwQ5noIODFrz6aTxXkzalc6K1ePITehVlO2UxtOa72 qyx1FFTASo2DCC5+tCjCGb0LADUgI2WhOIBcVKBK4FVhIBX/5e6fqFUffG8GJSrO 7D/l5SGdDB44iSb776YDJ1j/5ozuEuE3OSGUu447NnpSLFAktGx7Bh4ON1jF68qc amLimFqlOJeKgGLKXloKBHhm6jm0CAzCuDoIcRHML3KQQue2n6G5sIKIfdmlBD0U N/5atJu1N/r8KYoSjGSNULpYVx+QAIc6HTNCQvDPqp/dRXC6YUOxeOouTnyhLW/J mrNk13EvIMJVkWyhSsn+7Aw+gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFvA68C pe7odG6Bv+SsvB1vIG2uMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc7MLZP8ryMNYZ2U1yEgTltdLxjE3/MCWKjZAs1bG5w1XU55vH6f6N2VdJKD5 NnEVoVG2+g7u71Nnw/DGiiTmOG9cSGOJgV3fanJ7qKG4nKDfc2mygrJ59I9IcwuE bVA1nr/gaGKwqCOLxAzz/+Qmuew1tKWtt5qTDPNtOT8Cge0r19JPMQ/y6/ciFRka k+Nz26JSOqokaEJsUlTqjpSpjLBxIj9wn1GYqrbUAlN7/LPKbCsJxDJkDC+Y44N7 Q8gyOCp76hfPJwz9GS3Obfr4O3EpNphrwDEYDeOU8j2D8tllYsiprtDORdyhoq+y ZcFTWtcf+W0wa6Dx/sYeWcbmFQ== -----END CERTIFICATE-----Generated at Wed May 13 11:42:21 2026 by rpki-client