$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: LgnV0TcvAe3XsCuDZBCr1IINu0OfHHdo5hC/cQlthUg= Subject key identifier: 9D:00:23:27:DB:00:9B:92:DC:64:85:2C:E8:10:F1:A1:51:A8:B2:CD Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D67 Signing time: Mon 22 Jun 2026 15:29:47 +0000 Manifest this update: Mon 22 Jun 2026 15:29:46 +0000 Manifest next update: Mon 29 Jun 2026 15:29:46 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: XlOHJHRq06bHYeA8W2EgiTNEQbcXX1Y7L3DUmN7ZSog=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: 9I/UF8wVS9sTnXr5fHjV7Fm4AlFC8LAa0hnWMtmsfp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 15:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11651 (0x2d83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Jun 22 15:29:46 2026 GMT Not After : Jun 29 15:29:46 2026 GMT Subject: CN=6a3954eb-0c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:50:92:80:9e:a4:1b:5e:26:c5:fc:c7:a1: 94:3e:40:a9:20:44:05:b3:0d:78:36:f4:e9:88:5b: 94:4b:59:3c:08:53:0c:63:98:06:c1:f7:ad:af:3b: 61:05:e1:c0:65:3d:67:53:f1:e9:74:fa:46:f9:df: d0:47:29:cf:15:65:9b:80:01:89:89:77:fe:14:f3: 1d:3b:b1:3d:78:79:28:09:a9:41:01:8a:f0:de:d1: 36:a7:27:ff:a9:a5:09:69:72:43:02:3c:4a:a2:79: 2a:b4:9e:e2:22:96:94:99:df:59:d9:4b:0f:5a:04: 83:c1:07:e5:16:ba:28:1a:53:7b:ae:2c:09:fc:28: e5:fb:ae:88:3c:b4:09:d0:87:63:ff:fc:44:8f:0f: 46:fe:25:7b:38:67:3c:4d:78:e2:0f:81:86:1a:98: 96:6e:37:2a:89:15:44:99:d8:4c:62:43:7d:86:60: 5f:0f:6c:b3:19:75:e9:59:0d:a3:34:15:c9:69:05: 2a:5d:3e:37:68:69:ff:a1:e6:4f:26:21:2f:73:de: 65:91:93:e7:11:25:86:68:c5:ef:7b:43:e7:78:de: f0:69:72:81:fd:79:8e:fc:8c:5e:00:73:d7:eb:9f: fd:84:17:65:08:b4:91:08:45:a3:c5:72:3d:70:88: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:00:23:27:DB:00:9B:92:DC:64:85:2C:E8:10:F1:A1:51:A8:B2:CD X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:0e:1d:09:75:18:0b:1b:8f:67:24:38:81:16:08:98:d5:89: 51:39:6a:0a:c0:9a:b7:e4:49:60:7b:6b:69:45:80:9b:70:a5: 50:71:03:00:9e:76:aa:ac:0b:c1:08:06:dc:8c:c0:3f:cd:fc: cf:09:16:3e:ec:01:a0:9b:70:41:44:ec:be:6c:c0:9d:23:71: a5:43:76:d6:dd:57:36:71:08:66:ba:c4:9e:c2:6c:a5:a4:51: a7:f0:14:07:fc:a5:1e:1c:5a:1a:ea:21:90:74:6e:ff:a6:59: 90:47:23:05:30:7d:c8:57:41:e1:53:7b:81:88:c0:35:04:9e: c6:78:a0:60:f4:5f:1d:24:17:a4:d6:51:b5:02:a9:a4:8a:d5: 9d:d8:0b:6b:a7:26:70:f0:e2:20:40:22:ec:1a:22:f2:5e:37: 9f:43:0f:d8:a6:64:a0:65:9d:5c:d0:4c:ff:00:5a:75:e3:f1: fc:c5:40:4d:54:00:a5:96:33:a7:76:65:c0:ba:58:5b:79:bc: 24:41:58:7b:f1:53:34:64:2e:49:57:f3:24:80:01:00:28:c4: 1f:9b:96:7c:75:31:10:d6:22:0d:90:f8:13:fa:22:9f:86:25: 74:c6:95:85:2a:fa:c4:01:02:35:47:03:b5:5b:c1:a4:f0:aa: 89:cb:89:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNjIyMTUyOTQ2WhcNMjYwNjI5MTUyOTQ2WjAYMRYwFAYD VQQDEw02YTM5NTRlYi0wYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzchQkoCepBteJsX8x6GUPkCpIEQFsw14NvTpiFuUS1k8CFMMY5gGwfetrzth BeHAZT1nU/HpdPpG+d/QRynPFWWbgAGJiXf+FPMdO7E9eHkoCalBAYrw3tE2pyf/ qaUJaXJDAjxKonkqtJ7iIpaUmd9Z2UsPWgSDwQflFrooGlN7riwJ/Cjl+66IPLQJ 0Idj//xEjw9G/iV7OGc8TXjiD4GGGpiWbjcqiRVEmdhMYkN9hmBfD2yzGXXpWQ2j NBXJaQUqXT43aGn/oeZPJiEvc95lkZPnESWGaMXve0PneN7waXKB/XmO/IxeAHPX 65/9hBdlCLSRCEWjxXI9cIjyXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0AIyfb AJuS3GSFLOgQ8aFRqLLNMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkg4dCXUYCxuPZyQ4gRYImNWJUTlqCsCat+RJYHtraUWAm3ClUHEDAJ52qqwL wQgG3IzAP838zwkWPuwBoJtwQUTsvmzAnSNxpUN21t1XNnEIZrrEnsJspaRRp/AU B/ylHhxaGuohkHRu/6ZZkEcjBTB9yFdB4VN7gYjANQSexnigYPRfHSQXpNZRtQKp pIrVndgLa6cmcPDiIEAi7Boi8l43n0MP2KZkoGWdXNBM/wBadePx/MVATVQApZYz p3ZlwLpYW3m8JEFYe/FTNGQuSVfzJIABACjEH5uWfHUxENYiDZD4E/oin4YldMaV hSr6xAECNUcDtVvBpPCqicuJwQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:30:37 2026 by rpki-client