$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft File: 3Bh_yEFs5bNHuvIho2E6O0eCjog.mft (raw, json) Hash identifier: ExEatu06qj9KHYEARQWsPVvgVf4KvUZcJEE5lL1EbNI= Subject key identifier: 7C:7E:6B:A0:6C:06:31:FB:C0:49:E5:2C:20:AA:3D:84:A4:D7:00:BC Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0FB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft Manifest number: 0FA3 Signing time: Mon 22 Jun 2026 17:29:28 +0000 Manifest this update: Mon 22 Jun 2026 17:29:27 +0000 Manifest next update: Mon 29 Jun 2026 17:29:27 +0000 Files and hashes: 1: 3Bh_yEFs5bNHuvIho2E6O0eCjog.crl (hash: Zyb6NCJNtcX6yLzF1L1Em16WMADqwMiFDdRoK45wgNE=) 2: 085B4576C35711EC9F5ADC3DC4F9AE02.roa (hash: rVqpkfIia95fH7hrm3/K25j3N5yZHWL25KnyFo0eRas=) 3: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (hash: M1O0TrYvAUms1ssHPRAoRq4bhn4VdK0pL3BB4ocE2jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 17:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4021 (0xfb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Jun 22 17:29:27 2026 GMT Not After : Jun 29 17:29:27 2026 GMT Subject: CN=6a3970f8-0b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:bb:0c:df:5b:5e:c0:70:e1:b8:d2:0b:fe: 52:80:a5:be:88:41:c7:b0:6c:45:39:dc:d6:8b:8c: b3:92:c5:51:b6:46:01:54:a3:c3:dc:e1:ee:2c:63: 0c:7e:94:5b:cc:03:14:8d:bf:b7:77:3e:1d:ce:4b: fc:1b:ec:6c:fd:b0:b0:3f:96:c4:d9:9d:55:de:4c: ca:6d:2d:77:ee:c4:2e:72:ad:61:cf:2a:65:d9:44: b1:94:d2:01:b3:ed:0d:d2:79:ba:8e:e6:f3:13:d4: 39:14:d3:6d:6b:00:e9:15:4f:e1:1e:57:a7:71:9d: 45:36:47:ae:5b:a2:4b:f9:bc:03:96:1d:ad:8e:f0: 48:59:5f:c2:cc:de:af:a6:b1:08:8c:91:c7:af:7d: 0d:9f:57:13:de:b2:b5:fc:70:73:f7:4e:ae:52:0e: cb:25:90:52:20:51:d3:36:57:7d:c2:d2:11:db:fe: 49:8b:bf:52:e0:78:f6:f9:5e:27:da:87:1c:0d:d0: d5:d2:ff:4e:f6:e3:7d:00:03:7b:dc:05:53:d2:58: eb:6b:2b:d1:4e:c5:f8:1f:45:ff:47:a4:d7:83:f7: 4a:e3:56:2f:ed:29:fb:16:74:e7:31:ec:ea:c6:c7: 9a:26:80:8d:d7:1f:1f:13:b4:9d:b4:34:d8:93:83: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7E:6B:A0:6C:06:31:FB:C0:49:E5:2C:20:AA:3D:84:A4:D7:00:BC X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d2:d0:3e:0a:46:df:57:3e:a5:fd:59:c8:62:6b:6e:b8:81: 12:e6:6a:5c:69:15:ce:f4:76:8a:04:4a:50:dd:ed:41:d1:1f: a6:1b:5a:99:fd:c4:0d:12:53:a6:1f:c8:34:96:7e:77:43:7a: fd:7d:bd:73:b7:d4:2e:f8:3e:f4:13:18:cf:75:be:a8:7a:ec: 9f:db:5e:dd:f2:4a:38:13:72:6e:d1:a8:4a:1d:ab:cf:17:1a: ad:96:0c:84:01:96:86:89:66:4a:ec:a0:e8:50:e7:c2:16:fa: 1e:cc:dc:5c:d2:5b:d7:32:45:3e:aa:fa:9f:a0:d9:a8:ec:55: 22:68:51:9b:94:99:f2:33:f9:a4:a7:3d:ef:81:75:06:38:7a: f1:0b:a2:63:45:6c:cc:50:d0:50:54:a2:4f:bf:dd:8f:7d:61: 0f:c7:24:9c:d8:09:0f:bd:da:84:db:06:1e:34:2c:ae:b6:ae: 2b:a1:a8:a2:18:fb:58:81:5e:f8:4f:ff:64:63:71:87:bf:ef: 1c:ec:b6:f6:38:96:b7:9a:c2:76:96:85:94:c0:51:e3:5a:80: a0:15:82:0d:7a:06:e5:c1:8a:6b:bf:a0:62:a7:76:d0:39:43: 16:3e:61:48:c2:d0:5d:13:9a:64:a3:8d:46:d0:7c:6d:09:ef: 62:f0:e5:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjYwNjIyMTcyOTI3WhcNMjYwNjI5MTcyOTI3WjAYMRYwFAYD VQQDEw02YTM5NzBmOC0wYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CC7DN9bXsBw4bjSC/5SgKW+iEHHsGxFOdzWi4yzksVRtkYBVKPD3OHuLGMM fpRbzAMUjb+3dz4dzkv8G+xs/bCwP5bE2Z1V3kzKbS137sQucq1hzypl2USxlNIB s+0N0nm6jubzE9Q5FNNtawDpFU/hHlencZ1FNkeuW6JL+bwDlh2tjvBIWV/CzN6v prEIjJHHr30Nn1cT3rK1/HBz906uUg7LJZBSIFHTNld9wtIR2/5Ji79S4Hj2+V4n 2occDdDV0v9O9uN9AAN73AVT0ljrayvRTsX4H0X/R6TXg/dK41Yv7Sn7FnTnMezq xseaJoCN1x8fE7SdtDTYk4O/ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHx+a6Bs BjH7wEnlLCCqPYSk1wC8MB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdEMS85QTlCNDhBMjgyQTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczVi Tkh1dklobzJFNk8wZUNqb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU9LQPgpG31c+pf1ZyGJrbriBEuZqXGkVzvR2igRKUN3tQdEfphtamf3EDRJT ph/INJZ+d0N6/X29c7fULvg+9BMYz3W+qHrsn9te3fJKOBNybtGoSh2rzxcarZYM hAGWholmSuyg6FDnwhb6HszcXNJb1zJFPqr6n6DZqOxVImhRm5SZ8jP5pKc974F1 Bjh68QuiY0VszFDQUFSiT7/dj31hD8cknNgJD73ahNsGHjQsrrauK6Goohj7WIFe +E//ZGNxh7/vHOy29jiWt5rCdpaFlMBR41qAoBWCDXoG5cGKa7+gYqd20DlDFj5h SMLQXROaZKONRtB8bQnvYvDlRQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:20:54 2026 by rpki-client