$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: nyIotcZlgWeJddSZdVHc6JfM9/Kb/O2cgmxNql481pg= Subject key identifier: 44:BF:EA:5C:01:21:22:9F:F4:0A:14:E3:D5:AF:B1:87:7A:44:26:A0 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: D5 Signing time: Thu 11 Jun 2026 09:13:37 +0000 Manifest this update: Thu 11 Jun 2026 09:13:36 +0000 Manifest next update: Thu 18 Jun 2026 09:13:36 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: z2u0QezJkuF19QtBmkM48iSif6mXcb6mFKzCQKjxbsY=) 2: 0148654664AE11F1AC9CD4CD9247A888.roa (hash: dAqlfUeo579kfcR3e3mwTUUjP1lSljKQQMLJkli9MDI=) 3: 375E8232C13411F0A297231CC4F9AE02.roa (hash: Rcvi6yejJNqA4Zq2UKAey1CzzI6dgFF00kMlDMOnfRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 09:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Jun 11 09:13:36 2026 GMT Not After : Jun 18 09:13:36 2026 GMT Subject: CN=6a2a7c40-8f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:80:81:46:43:3d:48:75:a0:16:c5:c2:47: e1:b1:26:a9:4c:f5:38:23:ea:a8:ec:3d:02:24:74: ad:09:d8:0f:61:a4:c5:5d:09:de:89:b6:0e:60:05: 5f:93:90:7b:ba:30:e1:e6:ff:28:78:63:b5:d4:83: 96:ff:a2:a7:1e:fb:35:e8:3a:3d:da:3c:57:2c:85: a5:61:53:7a:4a:bd:32:bd:37:8f:9a:2f:85:cc:fb: fd:f8:a7:7d:4f:0b:28:5d:69:8b:5e:43:f8:d7:7c: 65:a8:b9:b6:25:82:38:66:c2:a1:12:0b:79:05:dc: c0:6f:04:04:92:fb:aa:78:62:3b:53:ed:c3:58:d3: 18:c5:85:5a:b9:23:32:bb:9a:39:f5:ed:cc:ca:08: 5b:3a:dc:23:e8:c6:02:f6:ee:17:59:71:1b:84:2f: 96:99:d1:05:6f:9c:bb:4f:1b:c2:85:b3:53:cb:e7: 0d:8d:60:fd:f7:e6:85:d2:0e:5c:90:5d:26:47:ec: 30:39:e2:82:2f:43:2f:02:d8:c2:12:f6:8a:ab:bb: 75:34:2e:bf:09:1e:22:01:c4:4f:92:ff:ff:17:5c: e1:1a:0b:0d:b1:26:da:58:ee:0d:09:42:a8:61:51: 94:d4:fa:e3:b3:d4:03:b0:c9:9f:3c:37:b7:89:29: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BF:EA:5C:01:21:22:9F:F4:0A:14:E3:D5:AF:B1:87:7A:44:26:A0 X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:17:cc:94:af:8e:91:4b:54:a4:4b:7d:7f:45:1b:0a:85:9c: 2f:ac:37:92:a2:cb:c7:36:4b:76:6b:a4:de:b6:b4:88:4b:e3: fd:ad:e0:47:14:47:58:c2:c2:29:8c:5f:b3:03:96:2f:d2:ac: b7:a6:c4:59:fe:c9:fc:a2:5b:0a:9a:bc:3e:dc:40:07:7b:4a: 34:bb:71:d7:96:fc:58:b1:7f:db:40:50:4b:2a:08:84:cb:7a: 1c:94:b4:43:ec:f6:ee:24:9d:76:a3:58:38:7a:88:99:9d:70: ab:ec:67:c6:fa:95:bc:3f:42:42:a7:e4:7b:6d:d9:fb:ea:c6: 95:b3:f8:2e:71:db:41:58:f5:2f:37:2e:11:8b:4a:ab:00:f6: 66:b2:cc:2d:c2:57:1b:85:ec:99:2f:b9:28:2d:78:16:3a:52: 66:4e:b0:88:60:b8:35:e4:67:73:e2:fa:49:57:9d:25:af:6d: 0a:fe:4c:8a:ff:2a:6b:12:b6:53:59:07:e8:d9:fd:fb:85:f8: dc:06:58:99:98:3a:a6:a9:b8:84:d2:cc:ab:6f:6f:37:2a:c1: ba:90:bf:d3:7a:7d:e7:49:23:e4:ef:47:ee:7a:d2:3e:fb:9a: 93:9c:15:16:f2:fc:2c:54:ca:45:21:ff:ad:3b:18:11:27:7f: eb:ea:f5:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwNjExMDkxMzM2WhcNMjYwNjE4MDkxMzM2WjAYMRYwFAYD VQQDEw02YTJhN2M0MC04ZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznmAgUZDPUh1oBbFwkfhsSapTPU4I+qo7D0CJHStCdgPYaTFXQneibYOYAVf k5B7ujDh5v8oeGO11IOW/6KnHvs16Do92jxXLIWlYVN6Sr0yvTePmi+FzPv9+Kd9 TwsoXWmLXkP413xlqLm2JYI4ZsKhEgt5BdzAbwQEkvuqeGI7U+3DWNMYxYVauSMy u5o59e3MyghbOtwj6MYC9u4XWXEbhC+WmdEFb5y7TxvChbNTy+cNjWD99+aF0g5c kF0mR+wwOeKCL0MvAtjCEvaKq7t1NC6/CR4iAcRPkv//F1zhGgsNsSbaWO4NCUKo YVGU1Prjs9QDsMmfPDe3iSms0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFES/6lwB ISKf9AoU49WvsYd6RCagMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DQjE0QkYyNjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Za a0NDa0NELWh3OWxrc2hNTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXBfMlK+OkUtUpEt9f0UbCoWcL6w3kqLLxzZLdmuk3ra0iEvj/a3gRxRHWMLC KYxfswOWL9Kst6bEWf7J/KJbCpq8PtxAB3tKNLtx15b8WLF/20BQSyoIhMt6HJS0 Q+z27iSddqNYOHqImZ1wq+xnxvqVvD9CQqfke23Z++rGlbP4LnHbQVj1LzcuEYtK qwD2ZrLMLcJXG4XsmS+5KC14FjpSZk6wiGC4NeRnc+L6SVedJa9tCv5Miv8qaxK2 U1kH6Nn9+4X43AZYmZg6pqm4hNLMq29vNyrBupC/03p950kj5O9H7nrSPvuak5wV FvL8LFTKRSH/rTsYESd/6+r1Og== -----END CERTIFICATE-----Generated at Thu Jun 11 15:44:27 2026 by rpki-client