$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json) Hash identifier: oSOWtl6433E1froSXJEsk4SZ0zRBoZBVvE3gDMLvuao= Subject key identifier: C1:57:5B:16:46:DA:0C:EC:C2:21:65:72:CC:9F:D5:77:31:4F:4C:7D Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft Manifest number: C7 Signing time: Thu 21 May 2026 06:55:01 +0000 Manifest this update: Thu 21 May 2026 06:55:01 +0000 Manifest next update: Thu 28 May 2026 06:55:01 +0000 Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: SGNHSYu1e3XeiR3XnoIUsg4+woAQOGnbs3mFMXkEVlE=) 2: F1940290212911F087425013C4F9AE02.roa (hash: aIejdLAewgudU6U+kv+7+KGIiYEWb/Zyhioe0M0XWcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Validity Not Before: May 21 06:55:01 2026 GMT Not After : May 28 06:55:01 2026 GMT Subject: CN=6a0eac45-fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:38:65:ab:68:2b:15:7a:6c:3a:1d:98:79: a8:33:03:c9:98:49:af:9b:8a:ac:ab:c8:df:d0:0f: 07:77:d7:9a:6e:ba:89:89:6b:ab:28:a9:22:93:c2: 4e:3f:94:c2:7d:96:7f:69:7b:84:f0:86:55:1e:27: 4c:27:36:b8:f4:d6:00:f6:f1:9c:6d:7f:4c:fd:e6: 78:c6:21:f1:eb:7d:23:fe:f7:a4:28:20:9b:ea:0b: 3d:87:4f:48:df:1e:6a:e8:f8:f7:85:6f:61:4d:91: 6e:6c:cc:0f:66:bc:c2:8d:51:53:d9:dc:01:b6:18: 1f:f2:75:87:2d:fa:8b:61:eb:f8:fd:dc:15:1c:58: 5f:95:a1:12:0c:28:e3:ca:6d:7f:c4:74:b9:fb:31: cc:ef:b2:57:11:9a:83:03:89:d3:6d:a1:6f:ed:b9: 40:d9:50:2e:ed:ae:76:bd:44:79:0f:51:ee:67:38: ff:dd:c6:3b:3e:16:67:97:a8:9a:7f:51:e6:49:72: c5:7f:8a:74:77:7c:8e:d1:62:f4:db:bb:75:3a:ef: 8b:c6:76:f1:cc:6a:0a:5d:6b:58:d4:a9:c8:4a:2d: dd:81:24:76:c6:9a:66:ff:df:b6:f2:0e:e8:11:3f: e3:01:1e:fb:b5:f3:bc:41:e2:8f:a4:72:10:da:81: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:57:5B:16:46:DA:0C:EC:C2:21:65:72:CC:9F:D5:77:31:4F:4C:7D X509v3 Authority Key Identifier: keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:66:86:30:11:74:02:73:92:3a:4b:84:0c:8d:0e:85:92:a0: 47:8a:8d:0d:20:f0:d1:a3:8a:df:2b:77:fa:7c:1d:9e:15:f2: ec:34:5c:2a:6d:a6:ba:fa:aa:48:e5:14:e3:17:0b:e6:ee:06: bc:43:0d:d6:cd:c4:c9:1a:32:27:e2:ab:a2:bd:89:b3:a8:7e: a5:74:8b:2c:56:38:18:0b:01:52:ac:e0:1d:55:1a:ac:62:57: bb:d2:d3:a1:d9:41:40:30:e8:2f:8a:52:fb:fc:34:d7:e8:76: ba:77:b0:e9:15:85:ce:7f:35:55:5b:c3:00:f7:fa:97:f3:13: 9d:96:4b:d1:a1:3a:b9:7c:1c:4c:f5:ea:67:a6:48:4a:71:9c: dc:45:2f:b4:83:b2:3c:fe:f8:25:ca:b4:9e:39:76:1d:bb:85: f6:32:41:9f:fc:ff:4f:89:a7:ee:1d:92:3d:32:08:e2:2b:39: f4:60:80:8f:1d:fc:f8:43:ad:d6:a3:95:dc:04:c0:86:70:47: e9:b0:7c:58:5f:16:04:b8:f0:27:3e:08:cd:c4:bd:b8:51:f1: 0a:9f:98:09:06:0a:2e:ac:00:8d:2e:05:0e:de:1a:08:b6:96: 43:fe:20:c0:ef:c7:06:ca:90:da:8f:a5:3a:e7:4d:1e:c3:b3: 2b:84:20:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBMDUxMTAvBgNVBAUTKERGMTg3MzExRkEwOUM3NzlCOEIxNUQ5NDdBNDZENEY0 RURDQzUwNTMwHhcNMjYwNTIxMDY1NTAxWhcNMjYwNTI4MDY1NTAxWjAYMRYwFAYD VQQDEw02YTBlYWM0NS1mYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJc4ZatoKxV6bDodmHmoMwPJmEmvm4qsq8jf0A8Hd9eabrqJiWurKKkik8JO P5TCfZZ/aXuE8IZVHidMJza49NYA9vGcbX9M/eZ4xiHx630j/vekKCCb6gs9h09I 3x5q6Pj3hW9hTZFubMwPZrzCjVFT2dwBthgf8nWHLfqLYev4/dwVHFhflaESDCjj ym1/xHS5+zHM77JXEZqDA4nTbaFv7blA2VAu7a52vUR5D1HuZzj/3cY7PhZnl6ia f1HmSXLFf4p0d3yO0WL027t1Ou+LxnbxzGoKXWtY1KnISi3dgSR2xppm/9+28g7o ET/jAR77tfO8QeKPpHIQ2oEaOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFXWxZG 2gzswiFlcsyf1XcxT0x9MB8GA1UdIwQYMBaAFN8YcxH6Ccd5uLFdlHpG1PTtzFBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUEwNS80REMxRDkyNjIx MjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngzbTRzVjJVZWtiVTlPM01V Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUEwNS80REMxRDkyNjIxMjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngz bTRzVjJVZWtiVTlPM01VRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnWaGMBF0AnOSOkuEDI0OhZKgR4qNDSDw0aOK3yt3+nwdnhXy7DRcKm2muvqq SOUU4xcL5u4GvEMN1s3EyRoyJ+Kror2Js6h+pXSLLFY4GAsBUqzgHVUarGJXu9LT odlBQDDoL4pS+/w01+h2unew6RWFzn81VVvDAPf6l/MTnZZL0aE6uXwcTPXqZ6ZI SnGc3EUvtIOyPP74Jcq0njl2HbuF9jJBn/z/T4mn7h2SPTII4is59GCAjx38+EOt 1qOV3ATAhnBH6bB8WF8WBLjwJz4IzcS9uFHxCp+YCQYKLqwAjS4FDt4aCLaWQ/4g wO/HBsqQ2o+lOudNHsOzK4Qgdw== -----END CERTIFICATE-----Generated at Thu May 21 09:39:08 2026 by rpki-client