$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: fohqz/n+PdsyjId/Jkb7oyuOciF1wddzMU1Hhh9TbzI= Subject key identifier: E9:10:64:BF:0B:F3:8F:81:42:07:CA:C8:15:26:1C:19:67:84:D2:2D Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 03BF Signing time: Mon 01 Jun 2026 01:23:08 +0000 Manifest this update: Mon 01 Jun 2026 01:23:08 +0000 Manifest next update: Mon 08 Jun 2026 01:23:08 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: FRMBdhIdEZfBWlHvQFa2v8Um2SpLNZgvpYso6Rokk70=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: RJPc40XFK5jtMh57bQpC2ukr/5ePr0qsfi6VvsDutiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 01:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Jun 1 01:23:08 2026 GMT Not After : Jun 8 01:23:08 2026 GMT Subject: CN=6a1cdefc-87ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:13:d9:f1:ae:ff:f6:ed:e9:d0:a5:90:19: 49:be:36:14:62:75:43:a1:5f:92:4e:a2:8b:cd:3e: ee:88:64:8b:ed:f7:ae:3d:a9:ec:6c:07:9e:06:ae: 5b:dc:66:45:f2:ae:6b:9c:33:07:d9:77:7b:43:d4: d7:e7:ed:6b:cf:7e:66:c5:4e:f9:6c:db:6d:5e:eb: 6e:0a:39:8e:75:57:4e:57:55:36:34:d4:73:04:ad: fb:1a:d5:a0:44:a1:4a:d3:f3:83:20:be:88:ce:25: af:01:61:ba:72:9d:15:ce:55:9a:53:b9:29:5f:1c: 63:87:70:b5:18:e6:12:c4:e2:79:49:db:0e:49:ab: 46:63:49:76:4b:58:8a:1d:36:33:18:40:c4:85:00: cb:31:14:48:b7:3c:c1:2e:c0:70:07:65:bd:55:f2: 75:cf:42:11:f1:b2:9a:b5:c8:5f:84:0e:03:8f:0d: 82:10:c3:eb:6d:92:a5:e9:4b:89:73:10:00:74:d2: 59:a8:bf:9c:5c:75:75:b9:6a:46:ba:c9:27:a8:e5: ad:95:44:79:7f:1a:3a:3e:11:70:d0:ac:f4:f4:67: 62:17:8b:e8:40:61:95:f8:de:c1:3d:27:59:13:24: bd:ea:03:8b:00:55:a8:bd:21:b5:38:a8:6f:d0:ec: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:10:64:BF:0B:F3:8F:81:42:07:CA:C8:15:26:1C:19:67:84:D2:2D X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:86:12:98:e6:1f:f0:22:58:f4:35:72:57:97:00:3b:ff:83: e6:f1:ae:68:c6:89:54:c1:91:44:60:aa:de:cb:b5:1c:20:16: af:cc:d8:13:dc:54:40:5e:ff:51:ce:1d:1c:99:d8:ac:1c:02: 5c:a1:10:10:15:ef:e7:1d:cd:6f:50:49:73:5f:6d:59:bd:36: e9:a2:22:c1:39:ab:b8:0e:61:ae:89:35:d3:fb:be:25:93:cb: f8:c9:f5:f7:69:d9:e8:b0:44:c6:8c:cf:dd:db:89:09:30:a9: 82:68:05:94:96:a4:8a:49:06:fd:b2:12:53:ea:2e:a4:aa:8e: 8a:46:39:a7:17:f0:d3:02:8f:9f:fb:98:ee:23:97:46:da:67: 65:35:3a:69:3c:fe:10:86:0f:4b:52:aa:f1:ba:0b:d3:1a:c4: 48:fd:2c:7e:c1:bd:2c:66:29:77:b0:e9:1e:86:af:19:5d:16: 12:c6:93:b1:3c:97:03:8a:0a:d3:74:b8:da:c6:92:ec:8b:9d: 70:29:59:f6:94:8f:49:90:11:51:2e:44:ef:e5:8c:5e:a4:78: 78:4e:dc:79:be:70:2d:00:9e:04:ca:7a:7c:39:66:19:e2:92: 4b:93:42:5a:46:41:76:d9:ec:14:b8:bc:68:eb:88:2b:6a:f0: d7:7e:7f:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwNjAxMDEyMzA4WhcNMjYwNjA4MDEyMzA4WjAYMRYwFAYD VQQDEw02YTFjZGVmYy04N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBMT2fGu//bt6dClkBlJvjYUYnVDoV+STqKLzT7uiGSL7feuPansbAeeBq5b 3GZF8q5rnDMH2Xd7Q9TX5+1rz35mxU75bNttXutuCjmOdVdOV1U2NNRzBK37GtWg RKFK0/ODIL6IziWvAWG6cp0VzlWaU7kpXxxjh3C1GOYSxOJ5SdsOSatGY0l2S1iK HTYzGEDEhQDLMRRItzzBLsBwB2W9VfJ1z0IR8bKatchfhA4Djw2CEMPrbZKl6UuJ cxAAdNJZqL+cXHV1uWpGusknqOWtlUR5fxo6PhFw0Kz09GdiF4voQGGV+N7BPSdZ EyS96gOLAFWovSG1OKhv0Oyl0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkQZL8L 84+BQgfKyBUmHBlnhNItMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsYYSmOYf8CJY9DVyV5cAO/+D5vGuaMaJVMGRRGCq3su1HCAWr8zYE9xUQF7/ Uc4dHJnYrBwCXKEQEBXv5x3Nb1BJc19tWb026aIiwTmruA5hrok10/u+JZPL+Mn1 92nZ6LBExozP3duJCTCpgmgFlJakikkG/bISU+oupKqOikY5pxfw0wKPn/uY7iOX RtpnZTU6aTz+EIYPS1Kq8boL0xrESP0sfsG9LGYpd7DpHoavGV0WEsaTsTyXA4oK 03S42saS7IudcClZ9pSPSZARUS5E7+WMXqR4eE7ceb5wLQCeBMp6fDlmGeKSS5NC WkZBdtnsFLi8aOuIK2rw135/MQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:30:08 2026 by rpki-client