$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: X5a6dfNH+D7wAQovP9zB/CxxalqiBapY94Ynben4fbE= Subject key identifier: 19:1B:C4:3C:4F:A7:3C:34:9E:7B:E9:35:7C:25:7A:F7:C9:32:20:C3 Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 021C Signing time: Mon 11 May 2026 02:53:51 +0000 Manifest this update: Mon 11 May 2026 02:53:51 +0000 Manifest next update: Mon 18 May 2026 02:53:51 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: VHVm+N2JeCjUU1b1PlNx9R+P3OH0I6UnreI2SiVDHdQ=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: DcXA2eAZGbJr4/hnQ1XPdT8g+RnlXIW8GnA5M9/Nm2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: May 11 02:53:51 2026 GMT Not After : May 18 02:53:51 2026 GMT Subject: CN=6a0144bf-34f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:24:78:a8:49:95:43:ba:dd:cd:ce:e9:4d: d4:ad:f2:e7:bd:00:0a:52:04:a2:28:17:c2:98:9e: 69:36:95:a1:a9:d9:a8:b4:87:81:89:98:83:6f:83: 61:34:15:58:9d:2b:6e:44:cc:ad:63:26:98:09:2e: d9:4f:cf:b0:d3:30:35:1f:8e:1d:a2:89:06:19:95: f6:bd:3e:87:21:a2:99:86:80:03:bb:de:77:13:a6: f2:fc:50:f7:b0:2a:c7:c4:20:aa:03:13:b5:a0:b2: 32:0a:e2:04:a1:c1:92:9e:23:f8:5f:eb:76:13:27: bc:8d:d5:9c:ea:91:6e:6b:8b:23:9c:fe:cc:35:08: 7d:57:1f:fb:84:4d:c8:9e:9c:56:5b:6c:14:84:f2: a7:0f:88:14:50:02:d9:28:e2:54:21:ea:be:27:26: 60:7b:a7:a4:4b:07:36:19:20:36:ca:e6:e7:48:37: eb:e9:a9:3d:21:32:18:92:44:e6:e5:fb:27:80:3a: 54:51:23:a9:db:12:c9:bb:e9:aa:e8:39:6d:7b:a4: ee:5e:b7:01:20:d0:c6:77:98:34:ee:12:33:1d:29: 30:2f:1a:16:cf:05:0c:a9:a1:04:0d:e2:ef:cb:e5: c7:39:be:8f:67:fd:8d:71:8c:07:87:99:65:f2:31: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1B:C4:3C:4F:A7:3C:34:9E:7B:E9:35:7C:25:7A:F7:C9:32:20:C3 X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:49:88:08:27:d2:36:cd:2d:40:da:6e:0a:30:a8:b3:05:d5: 17:98:ce:c8:bf:d1:6b:5e:fa:5f:a9:6c:91:48:2a:fc:9c:7f: df:79:19:5b:9f:ea:bc:73:74:82:69:75:a9:2f:c8:72:74:28: 8a:58:8d:56:9e:9b:24:70:c8:65:5d:33:57:bf:ef:81:94:d0: 0f:18:4d:2e:26:90:53:86:82:11:38:49:89:fe:fd:48:bc:74: 00:c5:0c:59:66:e5:ed:17:65:f7:30:09:2f:00:5e:b6:b5:97: b2:3e:a0:b1:d1:07:77:79:3d:81:5f:b1:2f:12:b8:0c:cb:3b: f6:63:19:2c:0d:31:0c:41:ae:03:b1:b8:dd:e6:0a:d7:9d:fd: 04:79:bc:e1:e4:a2:55:2a:d4:20:80:56:ed:7e:79:10:5e:1d: b1:08:7c:4a:96:50:07:d2:0f:df:e4:d6:82:0b:83:12:28:2a: 2b:64:83:31:b9:a7:b3:89:ce:bb:fa:4b:ae:a9:fb:9b:8a:75: e5:90:dd:6a:bf:3d:2a:bd:db:f9:ca:c2:59:7d:03:a1:01:df: e9:e7:05:34:b2:e4:7a:e0:8d:a7:4c:54:aa:0c:d0:d4:ea:4c: ec:12:bb:bb:49:ec:e4:e7:05:a4:0c:ed:60:96:22:2d:8d:79: e3:7d:30:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjYwNTExMDI1MzUxWhcNMjYwNTE4MDI1MzUxWjAYMRYwFAYD VQQDEw02YTAxNDRiZi0zNGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaQkeKhJlUO63c3O6U3UrfLnvQAKUgSiKBfCmJ5pNpWhqdmotIeBiZiDb4Nh NBVYnStuRMytYyaYCS7ZT8+w0zA1H44dookGGZX2vT6HIaKZhoADu953E6by/FD3 sCrHxCCqAxO1oLIyCuIEocGSniP4X+t2Eye8jdWc6pFua4sjnP7MNQh9Vx/7hE3I npxWW2wUhPKnD4gUUALZKOJUIeq+JyZge6ekSwc2GSA2yubnSDfr6ak9ITIYkkTm 5fsngDpUUSOp2xLJu+mq6Dlte6TuXrcBINDGd5g07hIzHSkwLxoWzwUMqaEEDeLv y+XHOb6PZ/2NcYwHh5ll8jGEDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkbxDxP pzw0nnvpNXwlevfJMiDDMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAekmICCfSNs0tQNpuCjCoswXVF5jOyL/Ra176X6lskUgq/Jx/33kZW5/qvHN0 gml1qS/IcnQoiliNVp6bJHDIZV0zV7/vgZTQDxhNLiaQU4aCEThJif79SLx0AMUM WWbl7Rdl9zAJLwBetrWXsj6gsdEHd3k9gV+xLxK4DMs79mMZLA0xDEGuA7G43eYK 1539BHm84eSiVSrUIIBW7X55EF4dsQh8SpZQB9IP3+TWgguDEigqK2SDMbmns4nO u/pLrqn7m4p15ZDdar89Kr3b+crCWX0DoQHf6ecFNLLkeuCNp0xUqgzQ1OpM7BK7 u0ns5OcFpAztYJYiLY15430wug== -----END CERTIFICATE-----Generated at Wed May 13 01:33:42 2026 by rpki-client