$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: 9dBmtxtnRKaDh4yhfHifmt3vYxRyqtEA3EUrBTfRjYI= Subject key identifier: 71:F1:38:64:3B:6F:69:FD:41:A7:E8:8F:15:D0:93:62:D4:E5:96:54 Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 0132 Signing time: Thu 21 May 2026 05:44:01 +0000 Manifest this update: Thu 21 May 2026 05:44:00 +0000 Manifest next update: Thu 28 May 2026 05:44:00 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: ChyDPuEV5zKKeWT1V6eCRDE58bvi0z0kOnoAJfYCDf4=) 2: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: QMr7SSp5xbajHiCRuT5qA5lZIJuO6WaXl9EYEvA91Ec=) 3: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: 3kIF68zO8V/KZKS8dRul3MgYSoRJ3VG5qDumT+v5J+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: May 21 05:44:00 2026 GMT Not After : May 28 05:44:00 2026 GMT Subject: CN=6a0e9ba1-c314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:78:a2:59:8d:d4:63:bb:70:9a:68:36:c1:04: 31:62:b7:98:fc:36:14:db:db:98:62:0e:50:ea:6b: e1:80:18:9f:d3:02:59:66:cd:35:7b:5d:15:48:51: c7:ec:a7:17:63:28:ca:f1:00:a0:9f:40:ef:7d:ed: f2:d1:fe:90:99:79:5b:83:f4:3d:ca:a9:fe:1d:6e: e9:74:6b:b3:83:43:e2:11:62:5a:81:5c:79:71:ba: a8:0e:ff:16:5f:d4:0c:47:a2:93:9e:d6:96:9d:fc: d5:8c:e8:1a:24:07:26:b2:a4:f2:f5:84:95:49:81: a6:31:4d:3e:72:29:69:c5:30:96:22:13:1a:15:41: a9:1d:68:e5:61:55:64:64:57:4f:7e:fe:13:a2:f5: c3:54:f3:20:f6:cd:73:bb:db:ec:cc:1c:e4:f2:03: 19:b5:c2:71:da:f5:9c:32:20:68:27:78:6a:ff:0e: b3:38:2e:9d:5c:fc:55:03:2b:92:e2:df:3f:ff:bb: 3e:35:fe:93:63:4f:68:9a:bd:a8:68:8c:4b:cf:51: be:77:8a:d4:67:51:5f:b0:75:0d:89:3b:3d:29:2e: 90:49:1f:60:3d:be:ff:86:3b:e7:89:2d:21:86:96: d5:c9:57:2b:92:8e:1f:ac:26:1d:fb:b2:08:8c:75: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:38:64:3B:6F:69:FD:41:A7:E8:8F:15:D0:93:62:D4:E5:96:54 X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:83:42:c6:06:2a:3d:c3:99:65:bb:60:01:b4:67:e2:df:70: 71:4e:1b:d6:7b:4a:53:d3:14:87:ad:38:f7:90:f3:3c:a0:74: 01:77:57:06:1d:3e:d3:9a:64:aa:57:b7:c7:b9:dc:6f:19:bc: 29:e0:a7:ca:81:32:00:e2:e5:ac:9f:ec:4e:30:7b:88:fe:e6: 75:cb:7f:9e:a2:79:f2:be:98:4d:3c:56:c0:12:68:f7:c2:13: 20:1e:d7:42:0c:da:62:bf:fc:92:83:5a:20:aa:1c:8e:98:3c: ed:78:fc:10:bf:2d:0e:9c:de:09:3e:59:9b:08:29:5d:77:00: 9d:74:70:95:0c:99:12:9b:69:ac:73:c7:9f:0b:79:6e:04:31: 74:10:37:de:73:ce:e7:bf:c8:a4:ce:39:20:68:ac:fc:a6:8e: ca:84:1c:d8:cb:5a:44:99:7e:c2:c8:43:c0:2b:5e:51:a4:d6: 3e:4b:0c:e9:d3:fd:3d:3f:ca:c8:d0:5c:d7:9d:81:ce:4f:5c: a1:eb:3e:af:8d:87:b5:61:52:54:13:db:55:07:46:4c:b1:7a: 57:ea:41:c4:1e:ff:37:41:3d:74:e1:ee:af:62:29:a0:3b:d6: b6:35:cb:da:93:b1:15:9e:ac:d4:20:9c:e3:c6:94:67:0a:19: 8a:1d:fc:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjYwNTIxMDU0NDAwWhcNMjYwNTI4MDU0NDAwWjAYMRYwFAYD VQQDEw02YTBlOWJhMS1jMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiXiiWY3UY7twmmg2wQQxYreY/DYU29uYYg5Q6mvhgBif0wJZZs01e10VSFHH 7KcXYyjK8QCgn0Dvfe3y0f6QmXlbg/Q9yqn+HW7pdGuzg0PiEWJagVx5cbqoDv8W X9QMR6KTntaWnfzVjOgaJAcmsqTy9YSVSYGmMU0+cilpxTCWIhMaFUGpHWjlYVVk ZFdPfv4TovXDVPMg9s1zu9vszBzk8gMZtcJx2vWcMiBoJ3hq/w6zOC6dXPxVAyuS 4t8//7s+Nf6TY09omr2oaIxLz1G+d4rUZ1FfsHUNiTs9KS6QSR9gPb7/hjvniS0h hpbVyVcrko4frCYd+7IIjHXcFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHxOGQ7 b2n9QafojxXQk2LU5ZZUMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWINCxgYqPcOZZbtgAbRn4t9wcU4b1ntKU9MUh60495DzPKB0AXdXBh0+05pk qle3x7ncbxm8KeCnyoEyAOLlrJ/sTjB7iP7mdct/nqJ58r6YTTxWwBJo98ITIB7X QgzaYr/8koNaIKocjpg87Xj8EL8tDpzeCT5ZmwgpXXcAnXRwlQyZEptprHPHnwt5 bgQxdBA33nPO57/IpM45IGis/KaOyoQc2MtaRJl+wshDwCteUaTWPksM6dP9PT/K yNBc152Bzk9coes+r42HtWFSVBPbVQdGTLF6V+pBxB7/N0E9dOHur2IpoDvWtjXL 2pOxFZ6s1CCc48aUZwoZih38Fw== -----END CERTIFICATE-----Generated at Thu May 21 10:53:42 2026 by rpki-client