$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft File: gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json) Hash identifier: 74ymEMCjudX4Q3cCnPq6D4OPvq7Urs35Bh27yX3Km1A= Subject key identifier: CB:D2:9B:31:5E:94:FC:FF:98:68:D3:F5:03:7A:92:03:2A:39:85:7E Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46 Certificate issuer: /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46 Certificate serial: 0E4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft Manifest number: 0E43 Signing time: Tue 12 May 2026 17:49:06 +0000 Manifest this update: Tue 12 May 2026 17:49:05 +0000 Manifest next update: Tue 19 May 2026 17:49:05 +0000 Files and hashes: 1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: UZ85uXzXIWJPJWfBRxCIgXSIqo3yFSBMn8kUyLO4Lg4=) 2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3663 (0xe4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46 Validity Not Before: May 12 17:49:05 2026 GMT Not After : May 19 17:49:05 2026 GMT Subject: CN=6a036811-9e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:08:40:b5:0a:86:88:62:9d:fc:7c:55:dd: e3:4c:44:b3:96:f1:35:30:87:35:27:f7:5f:a2:ac: 6a:16:cc:ac:33:6e:aa:92:7d:a3:95:8a:c7:9e:ad: 56:df:79:95:cc:c9:83:c8:d8:0f:f3:16:c1:03:35: c6:7c:a5:54:06:3a:c6:42:26:98:16:31:df:ac:f0: 1a:d4:06:6d:fe:3b:35:4d:17:9c:3c:b7:66:e7:9c: 4d:28:c9:ce:67:bb:11:0e:d2:fa:62:ec:40:8d:a8: 6c:44:5d:c9:ef:11:bb:47:01:f3:2a:cf:cb:03:24: b9:c4:c3:48:e3:70:cd:db:4b:83:d1:bf:5e:0a:3b: 98:d5:09:6e:be:bb:9e:cd:5d:0d:7a:6f:be:27:1c: e3:62:e6:d0:29:61:4d:9a:b4:ad:8f:c5:a9:87:49: cc:59:be:92:91:df:76:28:55:d3:25:86:94:2c:c2: 4b:d2:66:e2:84:1e:83:b1:67:55:5a:cc:09:55:f1: 1b:9e:df:76:25:1c:62:1b:c5:ff:06:ff:9b:17:61: 39:3e:1e:62:18:d6:ef:9a:e5:25:4c:11:76:19:1f: 1a:a1:61:71:78:16:e9:13:af:ca:50:85:3a:6d:5e: 24:0d:7c:7a:6a:62:49:d6:7f:10:94:2d:79:0b:72: c0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D2:9B:31:5E:94:FC:FF:98:68:D3:F5:03:7A:92:03:2A:39:85:7E X509v3 Authority Key Identifier: keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4d:3b:21:fd:bf:eb:c2:be:78:7a:60:11:63:6b:3a:53:0a: 2f:b7:fe:fd:05:88:6f:88:71:21:b3:8f:7c:48:91:b8:c5:10: 26:19:b3:fb:53:03:88:ef:06:36:40:b0:b1:89:e5:41:4b:7b: c9:b0:63:37:e7:f4:09:cb:92:94:fc:14:46:a3:5c:e7:44:41: 25:53:71:9f:61:3c:0e:4b:02:8d:a4:44:19:46:78:c4:18:1d: 43:b0:8b:f7:30:86:44:53:7b:75:52:7e:40:93:84:17:21:49: 22:f0:99:d3:89:68:20:83:eb:da:88:0d:65:c3:d3:e6:bf:58: 5d:5a:0f:40:0b:85:b4:10:a6:fe:64:76:f1:77:76:f7:8d:b0: 51:19:3e:17:0c:6c:4c:79:d4:9e:04:72:09:40:de:49:99:60: 73:6a:1f:b6:b9:16:28:34:62:be:e5:49:6a:82:46:3f:59:d8: 9c:9a:4e:28:32:21:d7:53:14:fd:81:fc:7b:b4:d2:49:01:92: 8c:b3:f9:58:7e:25:35:d1:6e:a1:6b:23:aa:c4:d8:31:8b:ef: 01:22:27:62:db:17:e4:af:cf:3f:83:db:b6:2c:c0:a3:d2:68: c0:ba:b6:b4:e7:d7:1d:9f:b2:f3:de:f3:65:34:22:48:a1:e5: 2e:20:52:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCRUYxMTAvBgNVBAUTKDgxMURFMTFFN0VEQzFDMTA3NjA1NTlFRUIzOUJGRDY2 RDY5QUVBNDYwHhcNMjYwNTEyMTc0OTA1WhcNMjYwNTE5MTc0OTA1WjAYMRYwFAYD VQQDEw02YTAzNjgxMS05ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56YIQLUKhohinfx8Vd3jTESzlvE1MIc1J/dfoqxqFsysM26qkn2jlYrHnq1W 33mVzMmDyNgP8xbBAzXGfKVUBjrGQiaYFjHfrPAa1AZt/js1TRecPLdm55xNKMnO Z7sRDtL6YuxAjahsRF3J7xG7RwHzKs/LAyS5xMNI43DN20uD0b9eCjuY1Qluvrue zV0Nem++JxzjYubQKWFNmrStj8Wph0nMWb6Skd92KFXTJYaULMJL0mbihB6DsWdV WswJVfEbnt92JRxiG8X/Bv+bF2E5Ph5iGNbvmuUlTBF2GR8aoWFxeBbpE6/KUIU6 bV4kDXx6amJJ1n8QlC15C3LAhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvSmzFe lPz/mGjT9QN6kgMqOYV+MB8GA1UdIwQYMBaAFIEd4R5+3BwQdgVZ7rOb/WbWmupG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkJFRi80RUE4NjZDNEM0 NDIxMUU5OTQ3N0UyMUZDNEY5QUUwMi9nUjNoSG43Y0hCQjJCVm51czV2OVp0YWE2 a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dSM2hIbjdjSEJCMkJWbnVzNXY5WnRhYTZrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkJFRi80RUE4NjZDNEM0NDIxMUU5OTQ3N0UyMUZDNEY5QUUwMi9nUjNoSG43Y0hC QjJCVm51czV2OVp0YWE2a1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN007If2/68K+eHpgEWNrOlMKL7f+/QWIb4hxIbOPfEiRuMUQJhmz+1MDiO8G NkCwsYnlQUt7ybBjN+f0CcuSlPwURqNc50RBJVNxn2E8DksCjaREGUZ4xBgdQ7CL 9zCGRFN7dVJ+QJOEFyFJIvCZ04loIIPr2ogNZcPT5r9YXVoPQAuFtBCm/mR28Xd2 942wURk+FwxsTHnUngRyCUDeSZlgc2oftrkWKDRivuVJaoJGP1nYnJpOKDIh11MU /YH8e7TSSQGSjLP5WH4lNdFuoWsjqsTYMYvvASInYtsX5K/PP4PbtizAo9JowLq2 tOfXHZ+y897zZTQiSKHlLiBSfg== -----END CERTIFICATE-----Generated at Wed May 13 14:32:47 2026 by rpki-client