$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: b1tI4/x1msLLL0Tzn4gwBvBcgMbIqBdBVRzu8F6omVI= Subject key identifier: 64:2E:BA:03:5E:49:CD:41:1E:CF:29:4D:AB:12:60:DD:A6:77:FF:E9 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: EC Signing time: Wed 13 May 2026 06:33:18 +0000 Manifest this update: Wed 13 May 2026 06:33:17 +0000 Manifest next update: Wed 20 May 2026 06:33:17 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: 7G/NCvI+ULg7ZjzUOUbZkoPJ8ErC36YA247PFVixpVc=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: TBjFZLoAcX8XTz4OXPD8ohPadAtZD+uq/tBStT0J3HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: May 13 06:33:17 2026 GMT Not After : May 20 06:33:17 2026 GMT Subject: CN=6a041b2e-7062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:32:76:ba:d0:df:48:d8:46:cf:5e:bd:8d:3a: 21:d5:c6:d9:a5:e2:d3:46:fa:71:86:45:f4:3f:f9: e4:59:93:d1:5d:a7:d6:50:c0:0b:bc:6e:e3:51:a0: 7d:56:e4:66:81:76:d5:6c:8a:32:cc:ce:c4:96:96: 3c:0d:8d:a1:67:a9:b0:c5:19:3a:ef:fb:45:43:bf: 9e:ef:c5:23:43:b7:bd:c7:09:01:ec:fa:9d:1a:90: 40:16:2a:18:e6:92:fd:1c:d4:01:5d:94:e3:c1:8f: 54:e3:14:26:a3:82:c7:df:16:ac:ef:0f:9a:4a:e6: 03:11:2e:7c:25:35:e8:77:0e:f8:a9:67:2c:ac:5c: 51:61:7e:09:1a:8b:a7:8f:fa:c0:17:02:1f:0d:43: 43:42:74:cb:b5:9d:1c:a9:be:d5:8a:e7:83:4e:8e: 37:09:da:d9:3c:a2:af:c6:16:37:d7:49:bd:ad:80: 94:7e:e3:ec:8c:f3:36:4a:6c:31:ba:28:11:5f:82: 7f:85:34:40:e7:14:eb:d8:28:93:0c:91:e8:bb:57: fe:c6:60:9b:3b:2c:f3:fa:a4:24:63:ba:f3:e0:98: 13:ba:5a:2b:d9:09:4f:67:ff:05:21:9b:ae:14:10: 62:93:6a:34:94:5e:ba:f6:70:ce:c0:40:8a:ac:1c: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2E:BA:03:5E:49:CD:41:1E:CF:29:4D:AB:12:60:DD:A6:77:FF:E9 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:07:75:3b:7b:0c:01:47:e0:33:b0:4b:d4:7a:51:22:f2:37: 13:4a:43:7f:fa:a5:b7:86:fb:21:f2:45:ae:7b:2b:9e:64:f9: 4b:7e:cf:ea:ef:eb:6e:07:c4:b3:da:dd:58:89:ce:f0:38:6b: 5e:b1:02:5a:7f:ee:52:47:b9:5e:77:c5:ce:c5:d2:be:cb:b5: f3:dc:f0:1c:9e:96:c3:a4:ec:cf:6c:04:42:3e:a9:8d:a9:45: d0:55:82:c4:5a:e6:f4:66:e9:59:42:e0:1a:40:d0:ae:14:e3: 6c:0a:59:ff:69:9e:bd:64:0e:37:94:70:18:64:51:dc:61:19: 58:9f:ca:ce:32:da:db:35:ba:42:a2:f6:3c:24:61:6e:c3:37: f4:a1:88:51:49:32:ea:fc:22:e4:a6:25:94:34:99:39:17:23: e7:e7:60:3c:4d:96:3f:aa:18:48:d7:c2:32:d6:24:a6:df:68: ec:fe:6b:79:0b:36:5b:bf:54:b0:08:a5:77:7b:4b:11:7b:ce: e3:c6:c6:41:aa:c6:e3:1b:94:fe:73:4a:bd:d6:7e:fd:7b:06: 02:1d:f0:95:3d:1b:bc:eb:80:52:12:f8:54:12:39:14:55:87: 0e:77:65:fc:95:ce:3a:63:d9:db:f8:3f:28:da:a7:92:53:b6: 87:56:80:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB ODYyREZCNjIwHhcNMjYwNTEzMDYzMzE3WhcNMjYwNTIwMDYzMzE3WjAYMRYwFAYD VQQDEw02YTA0MWIyZS03MDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgzJ2utDfSNhGz169jToh1cbZpeLTRvpxhkX0P/nkWZPRXafWUMALvG7jUaB9 VuRmgXbVbIoyzM7ElpY8DY2hZ6mwxRk67/tFQ7+e78UjQ7e9xwkB7PqdGpBAFioY 5pL9HNQBXZTjwY9U4xQmo4LH3xas7w+aSuYDES58JTXodw74qWcsrFxRYX4JGoun j/rAFwIfDUNDQnTLtZ0cqb7ViueDTo43CdrZPKKvxhY310m9rYCUfuPsjPM2Smwx uigRX4J/hTRA5xTr2CiTDJHou1f+xmCbOyzz+qQkY7rz4JgTulor2QlPZ/8FIZuu FBBik2o0lF669nDOwECKrBwtuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQuugNe Sc1BHs8pTasSYN2md//pMB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5 RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h WHpQbkhHUVo0bWVvWXQtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzAd1O3sMAUfgM7BL1HpRIvI3E0pDf/qlt4b7IfJFrnsrnmT5S37P6u/rbgfE s9rdWInO8DhrXrECWn/uUke5XnfFzsXSvsu189zwHJ6Ww6Tsz2wEQj6pjalF0FWC xFrm9GbpWULgGkDQrhTjbApZ/2mevWQON5RwGGRR3GEZWJ/KzjLa2zW6QqL2PCRh bsM39KGIUUky6vwi5KYllDSZORcj5+dgPE2WP6oYSNfCMtYkpt9o7P5reQs2W79U sAild3tLEXvO48bGQarG4xuU/nNKvdZ+/XsGAh3wlT0bvOuAUhL4VBI5FFWHDndl /JXOOmPZ2/g/KNqnklO2h1aAzA== -----END CERTIFICATE-----Generated at Wed May 13 11:48:18 2026 by rpki-client