$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json) Hash identifier: ealRGJ///0vHXH0lpUrtWzXsq5+Km1kS8Qb8jaN/WZA= Subject key identifier: D0:5C:68:3A:B2:12:B5:8E:D9:68:12:98:EE:A6:38:0D:D7:7B:6B:AC Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Certificate serial: 0368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft Manifest number: 0362 Signing time: Thu 21 May 2026 00:58:06 +0000 Manifest this update: Thu 21 May 2026 00:58:06 +0000 Manifest next update: Thu 28 May 2026 00:58:06 +0000 Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: sQ1nmAFD3yxebIOaKKsqd2wh20xp0Ujk6B1j2/69EFI=) 2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: ogTzdNf1gHD/xTlxA8D6h7pqJeFDXQYw5yT4vowpzqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 872 (0x368) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Validity Not Before: May 21 00:58:06 2026 GMT Not After : May 28 00:58:06 2026 GMT Subject: CN=6a0e589e-7649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:bf:6a:6a:fb:de:53:0c:4c:d8:7d:f5:ff: be:14:1b:65:43:dd:25:e4:64:5e:cb:6e:a8:9b:e8: 57:3d:39:3d:99:f5:2f:66:e8:7c:01:cd:79:bd:48: 3b:99:94:f6:38:fc:25:37:01:fe:fc:df:de:c2:ba: 1a:4d:95:b5:46:94:f1:8e:60:11:53:ca:2b:f7:78: 8c:be:c6:98:ba:2f:82:e9:e1:ff:9e:b0:7d:0a:4e: 93:c2:22:f0:24:bc:9a:c9:3b:0b:fe:79:69:8a:69: ab:be:45:af:6d:48:7e:70:fd:4c:f5:1e:4b:53:19: 6d:95:b2:8a:fc:96:f5:6d:a0:19:bd:6a:08:35:88: 6a:d9:97:b6:b5:52:a8:d3:43:ce:51:e6:98:12:5f: 70:da:e9:30:02:a2:4f:d5:90:44:a4:bc:ff:40:59: f5:4a:01:fe:83:94:42:3f:62:43:4c:e0:5f:e8:8b: 55:94:ae:f0:7d:38:3c:40:a7:5c:5a:2a:f2:44:b8: 30:75:3c:7a:37:c1:1d:b0:3d:9e:11:af:4c:98:7e: fb:3c:ee:4d:65:1c:c2:5e:db:ec:32:e8:d3:68:1e: b1:8e:16:3c:e5:cb:d2:b3:5c:e2:76:74:db:09:34: b6:88:10:ac:ca:45:0d:6f:45:33:05:78:f2:63:35: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5C:68:3A:B2:12:B5:8E:D9:68:12:98:EE:A6:38:0D:D7:7B:6B:AC X509v3 Authority Key Identifier: keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:fa:7c:18:a2:43:ed:bd:a7:32:a4:f0:d7:cd:47:93:b8:d7: 7e:e6:10:87:a9:3c:8c:20:67:b9:25:dc:a7:75:6e:da:3e:bc: c7:06:75:c9:4a:e6:50:80:49:58:b1:56:99:b6:09:47:e4:b5: be:f8:8f:f6:56:c5:fb:8b:4c:35:72:36:9b:ce:7f:af:d4:15: c4:3d:50:45:5c:88:6b:78:9f:a0:6d:6a:ab:ce:b2:d9:09:8c: 4f:75:f1:f4:e9:c1:db:ae:0c:cf:3d:ed:fc:de:3a:69:fb:c2: b8:e1:83:99:7e:67:b7:ed:f9:0a:0a:2e:d7:aa:cf:26:75:23: 1d:a1:f3:41:98:2a:ae:35:7d:4f:83:93:6d:11:c2:84:db:88: c8:fd:f0:dc:88:85:55:45:a3:75:ee:52:b9:32:e7:4d:8a:1e: 2f:a7:05:e8:7a:e6:99:2c:7f:a8:b7:32:ed:cb:29:e7:49:3f: 68:f2:80:a5:ff:4a:60:03:64:ed:71:c8:2f:a4:a1:4a:ed:c0: 3f:49:15:9d:78:31:fc:2f:62:3a:74:33:a2:27:75:37:46:e3: 56:ab:ae:47:06:dc:00:5e:46:41:8b:63:18:1d:24:37:34:57: 60:91:f7:f5:82:44:fb:e9:44:d9:85:32:53:85:a8:8d:59:38: 53:87:94:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5RUExMTAvBgNVBAUTKDdEM0REQjIwQUZGRTcxNEM4RjM1NDk2NTFDMUVFODBG NTU2MDExQjgwHhcNMjYwNTIxMDA1ODA2WhcNMjYwNTI4MDA1ODA2WjAYMRYwFAYD VQQDEw02YTBlNTg5ZS03NjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN+/amr73lMMTNh99f++FBtlQ90l5GRey26om+hXPTk9mfUvZuh8Ac15vUg7 mZT2OPwlNwH+/N/ewroaTZW1RpTxjmARU8or93iMvsaYui+C6eH/nrB9Ck6TwiLw JLyayTsL/nlpimmrvkWvbUh+cP1M9R5LUxltlbKK/Jb1baAZvWoINYhq2Ze2tVKo 00POUeaYEl9w2ukwAqJP1ZBEpLz/QFn1SgH+g5RCP2JDTOBf6ItVlK7wfTg8QKdc WiryRLgwdTx6N8EdsD2eEa9MmH77PO5NZRzCXtvsMujTaB6xjhY85cvSs1zidnTb CTS2iBCsykUNb0UzBXjyYzWy5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNBcaDqy ErWO2WgSmO6mOA3Xe2usMB8GA1UdIwQYMBaAFH092yCv/nFMjzVJZRwe6A9VYBG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTlFQS9EMjZDNDEyOEY4 RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNVeVBOVWxsSEI3b0QxVmdF YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUM2JJS18tY1V5UE5VbGxIQjdvRDFWZ0ViZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTlFQS9EMjZDNDEyOEY4RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNV eVBOVWxsSEI3b0QxVmdFYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgPp8GKJD7b2nMqTw181Hk7jXfuYQh6k8jCBnuSXcp3Vu2j68xwZ1yUrmUIBJ WLFWmbYJR+S1vviP9lbF+4tMNXI2m85/r9QVxD1QRVyIa3ifoG1qq86y2QmMT3Xx 9OnB264Mzz3t/N46afvCuOGDmX5nt+35Cgou16rPJnUjHaHzQZgqrjV9T4OTbRHC hNuIyP3w3IiFVUWjde5SuTLnTYoeL6cF6HrmmSx/qLcy7csp50k/aPKApf9KYANk 7XHIL6ShSu3AP0kVnXgx/C9iOnQzoid1N0bjVquuRwbcAF5GQYtjGB0kNzRXYJH3 9YJE++lE2YUyU4WojVk4U4eUiQ== -----END CERTIFICATE-----Generated at Thu May 21 10:23:58 2026 by rpki-client