$ rpki-client -vvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json) Hash identifier: mIH1QYHeYyeTNWjPyLvOpovBlneAc200KEzv5y1YRtk= Subject key identifier: 4B:E9:5E:C0:C4:90:3E:01:16:DE:7E:A3:78:4E:56:72:6D:1D:57:23 Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft Manifest number: 31 Signing time: Tue 19 May 2026 08:34:55 +0000 Manifest this update: Tue 19 May 2026 08:34:55 +0000 Manifest next update: Tue 26 May 2026 08:34:55 +0000 Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: O9mhFJ2gilvMD8T+HJO2A3/Ocsl9MZ/Ag1BjVzFqm+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Validity Not Before: May 19 08:34:55 2026 GMT Not After : May 26 08:34:55 2026 GMT Subject: CN=6a0c20af-53da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9b:b4:cd:5a:10:d1:c2:87:ad:8a:bc:65:17: e4:25:fe:db:f3:fe:50:3d:57:e6:e9:95:41:fc:d8: 9a:86:94:48:9e:87:6e:c0:b9:e2:a1:29:05:39:93: 3e:0f:71:c8:37:4b:83:fc:3e:b6:fc:7f:e9:e8:8a: af:4b:c7:31:d9:f6:de:f0:a3:8e:ab:ad:38:90:57: f6:2b:a2:3a:9b:48:3c:ee:67:c4:45:15:14:d9:84: 00:da:46:50:7e:ac:ea:e1:d9:a5:79:bf:1a:10:c8: 1c:e7:8c:65:7e:40:e0:8b:71:b0:25:c3:97:1a:8c: e4:2e:05:1a:fb:a2:17:4f:e8:9c:77:85:28:cb:47: d9:d6:88:5a:c7:e6:cd:c1:0c:05:97:f5:44:47:53: 29:95:a5:7f:5a:3a:45:d9:e7:42:0a:a1:4a:74:43: 6e:0e:17:5a:40:13:42:c5:45:0f:5d:22:c6:05:f5: 24:a5:85:0d:9f:63:29:09:c3:47:76:a7:e1:a5:6c: 4c:d2:f7:e0:ab:0b:cb:be:b2:2e:b6:40:68:d7:83: 1d:57:8b:f7:a3:63:5d:7e:8d:52:b8:49:00:ad:07: e0:50:b7:37:55:f7:31:34:92:1b:c5:2d:dc:9b:d8: 8d:30:d7:83:30:20:40:27:9e:70:57:c2:c8:00:67: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E9:5E:C0:C4:90:3E:01:16:DE:7E:A3:78:4E:56:72:6D:1D:57:23 X509v3 Authority Key Identifier: keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:01:a5:83:32:60:58:3c:6a:fd:1a:b4:e0:97:ca:ba:59:5e: d6:09:8b:70:c4:74:9b:08:79:a9:58:d5:f6:33:73:5f:f9:42: 3a:e4:63:66:b4:08:34:4a:b0:f5:a7:2b:60:45:c1:2a:e9:10: 0b:e5:d1:c6:8f:e8:07:81:47:98:a0:ff:98:1d:1b:4c:c7:fc: 5b:4a:cb:c1:b6:f7:ae:78:56:e3:9d:24:82:1e:a8:0a:82:d1: d6:ae:ce:62:75:37:2a:cc:9c:16:33:d1:f7:cd:7a:86:b8:ff: ff:c9:ec:05:d7:0c:2a:dc:57:23:25:e7:0c:00:45:7b:26:f2: e6:5d:31:25:2a:9b:53:7f:0d:47:7a:11:00:20:5e:5f:f1:fb: 3b:06:1f:fc:af:2c:e5:f1:e5:c7:88:2c:a6:f7:73:90:7e:80: 52:aa:ea:7c:76:ac:41:2c:97:32:d4:d9:5a:4c:f4:49:5a:27: da:37:34:a0:f6:89:b1:64:fb:70:43:8a:ff:38:ee:7c:9b:2e: af:8a:72:fe:ad:04:e9:97:d0:2c:ae:dc:c7:30:7e:81:d3:4e: e6:bd:15:f8:44:89:87:8c:1c:96:01:d8:c0:09:79:c3:3d:48: d0:b5:f6:04:59:cb:a1:1c:5f:2d:db:10:43:6d:99:a9:68:62: 68:73:db:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdFRjExMC8GA1UEBRMoREU3REM2NEY5OUY2MjQwNjI0QkExM0QyMTU0OTQ0NEM0 MjRCNTQ2RjAeFw0yNjA1MTkwODM0NTVaFw0yNjA1MjYwODM0NTVaMBgxFjAUBgNV BAMTDTZhMGMyMGFmLTUzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+m7TNWhDRwoetirxlF+Ql/tvz/lA9V+bplUH82JqGlEieh27AueKhKQU5kz4P ccg3S4P8Prb8f+noiq9LxzHZ9t7wo46rrTiQV/YrojqbSDzuZ8RFFRTZhADaRlB+ rOrh2aV5vxoQyBznjGV+QOCLcbAlw5cajOQuBRr7ohdP6Jx3hSjLR9nWiFrH5s3B DAWX9URHUymVpX9aOkXZ50IKoUp0Q24OF1pAE0LFRQ9dIsYF9SSlhQ2fYykJw0d2 p+GlbEzS9+CrC8u+si62QGjXgx1Xi/ejY11+jVK4SQCtB+BQtzdV9zE0khvFLdyb 2I0w14MwIEAnnnBXwsgAZ+upAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS+lewMSQ PgEW3n6jeE5Wcm0dVyMwHwYDVR0jBBgwFoAU3n3GT5n2JAYkuhPSFUlETEJLVG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0VGLzVDOUM4QUMwMTEz RjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZa3VoUFNGVWxFVEVKTFZH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM24zR1Q1bjJKQVlrdWhQU0ZVbEVURUpMVkc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0VGLzVDOUM4QUMwMTEzRjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZ a3VoUFNGVWxFVEVKTFZHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgAaWDMmBYPGr9GrTgl8q6WV7WCYtwxHSbCHmpWNX2M3Nf+UI65GNmtAg0SrD1 pytgRcEq6RAL5dHGj+gHgUeYoP+YHRtMx/xbSsvBtveueFbjnSSCHqgKgtHWrs5i dTcqzJwWM9H3zXqGuP//yewF1wwq3FcjJecMAEV7JvLmXTElKptTfw1HehEAIF5f 8fs7Bh/8ryzl8eXHiCym93OQfoBSqup8dqxBLJcy1NlaTPRJWifaNzSg9omxZPtw Q4r/OO58my6vinL+rQTpl9AsrtzHMH6B007mvRX4RImHjByWAdjACXnDPUjQtfYE WcuhHF8t2xBDbZmpaGJoc9uQ -----END CERTIFICATE-----Generated at Thu May 21 10:28:49 2026 by rpki-client