$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: 6LODGWzbcn5Vx93itWxnnZYrWqMLyaAGbIkchiw3VJY= Subject key identifier: 88:0A:C0:15:D1:9D:C2:7C:E0:5C:15:59:BD:10:01:73:C2:F7:99:34 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0CDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0CD2 Signing time: Tue 02 Jun 2026 18:26:43 +0000 Manifest this update: Tue 02 Jun 2026 18:26:42 +0000 Manifest next update: Tue 09 Jun 2026 18:26:42 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: N3bKJYLnPvec3aIF2IBAULMcW385NUjDeQ5bLRc17EY=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: STCKrvlRsuBwgCCitF/41y1bZsQULp/xbRwSRQTsp2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Jun 2 18:26:42 2026 GMT Not After : Jun 9 18:26:42 2026 GMT Subject: CN=6a1f2063-f2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:dd:2f:94:ce:51:14:d0:2c:bc:5c:d5:5a: ee:80:af:d4:e9:92:ad:ea:40:aa:7d:10:c0:0c:cf: 70:1a:8b:85:4e:cf:2e:33:77:b4:9d:91:b8:a6:4c: ee:d4:42:85:f2:95:c0:92:31:37:7a:33:0d:74:c8: d3:3a:8b:0e:f4:09:11:1d:f3:eb:3f:a3:ed:b0:6f: 76:a8:61:f3:dd:01:21:a3:a2:a7:50:7b:a0:80:60: a5:36:c0:9e:e2:08:71:b2:ca:06:74:24:60:96:8e: 23:6a:72:d0:f6:cf:cb:d2:28:d9:63:84:5c:68:3e: bb:a4:50:17:58:89:39:65:4a:17:bd:8f:27:53:23: 03:84:a9:73:ff:db:28:6a:d3:bf:8d:13:1e:ed:1d: 86:5d:c1:31:40:bc:8b:f0:9c:e8:75:e7:00:19:25: a9:cd:02:6a:2f:11:06:b1:c3:55:e0:1b:5b:b7:58: 4f:8f:8e:41:8f:a0:64:b2:dc:98:c0:f4:fa:93:7d: 7c:1a:fd:00:27:3a:a1:5a:87:83:2f:8a:c2:85:c4: 7c:49:02:ff:d3:d6:64:f7:0c:40:12:3b:40:02:60: b9:1e:c8:17:32:0c:e8:bb:e2:f2:4c:91:b8:3b:ee: 37:6a:92:48:ab:c1:df:af:00:d0:0a:2f:7d:5c:9b: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0A:C0:15:D1:9D:C2:7C:E0:5C:15:59:BD:10:01:73:C2:F7:99:34 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4b:6c:ad:de:e1:0e:6f:32:e1:e2:35:54:56:e4:b4:6a:8a: 01:4b:e6:57:86:63:f3:0d:3f:66:ee:70:65:e9:26:73:55:57: 68:ab:96:da:60:0b:87:d1:ae:9f:39:4b:06:69:a4:e4:50:39: a4:7b:11:9f:4e:4a:0f:af:f9:b6:2b:d4:d7:ba:02:22:ad:ec: 15:aa:c8:16:ee:be:36:c8:60:91:d2:95:a0:c0:4c:00:97:f1: 9e:9d:01:c6:f8:50:72:95:7b:b5:b6:8d:fc:61:32:11:92:51: 56:50:55:71:07:75:7f:37:37:91:bd:bf:74:fd:e7:d4:d6:e4: df:93:88:3d:a9:40:27:26:02:ce:a9:81:38:f1:d4:86:2a:ca: 38:21:b0:70:04:71:91:71:be:36:49:7b:bc:91:dc:8a:db:71: 66:ff:c8:f7:8d:a8:a3:7e:5c:ae:d2:ed:a9:07:d9:ed:2f:6f: db:79:84:a0:69:bc:f5:44:24:58:97:2e:4b:7b:3a:32:03:eb: c1:1b:08:97:d7:4f:0c:c5:bf:e8:59:c0:f4:e8:2b:ea:fb:69: 09:b5:aa:66:c6:4e:c3:86:63:31:df:f6:99:f3:98:a6:26:e9: fc:9a:ff:4e:f0:68:4c:1f:e3:72:ee:44:00:e0:01:24:a9:1c: 8b:e9:75:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjYwNjAyMTgyNjQyWhcNMjYwNjA5MTgyNjQyWjAYMRYwFAYD VQQDEw02YTFmMjA2My1mMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr3dL5TOURTQLLxc1VrugK/U6ZKt6kCqfRDADM9wGouFTs8uM3e0nZG4pkzu 1EKF8pXAkjE3ejMNdMjTOosO9AkRHfPrP6PtsG92qGHz3QEho6KnUHuggGClNsCe 4ghxssoGdCRglo4janLQ9s/L0ijZY4RcaD67pFAXWIk5ZUoXvY8nUyMDhKlz/9so atO/jRMe7R2GXcExQLyL8JzodecAGSWpzQJqLxEGscNV4Btbt1hPj45Bj6BkstyY wPT6k318Gv0AJzqhWoeDL4rChcR8SQL/09Zk9wxAEjtAAmC5HsgXMgzou+LyTJG4 O+43apJIq8HfrwDQCi99XJsBLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgKwBXR ncJ84FwVWb0QAXPC95k0MB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL0tsrd7hDm8y4eI1VFbktGqKAUvmV4Zj8w0/Zu5wZekmc1VXaKuW2mALh9Gu nzlLBmmk5FA5pHsRn05KD6/5tivU17oCIq3sFarIFu6+NshgkdKVoMBMAJfxnp0B xvhQcpV7tbaN/GEyEZJRVlBVcQd1fzc3kb2/dP3n1Nbk35OIPalAJyYCzqmBOPHU hirKOCGwcARxkXG+Nkl7vJHcittxZv/I942oo35crtLtqQfZ7S9v23mEoGm89UQk WJcuS3s6MgPrwRsIl9dPDMW/6FnA9Ogr6vtpCbWqZsZOw4ZjMd/2mfOYpibp/Jr/ TvBoTB/jcu5EAOABJKkci+l1QQ== -----END CERTIFICATE-----Generated at Tue Jun 2 22:24:10 2026 by rpki-client