$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: oxBZ4mMIVfkM9QTIEl52sxti08P4K8Ikp3INkX92SQw= Subject key identifier: 7F:F7:F3:4A:D8:66:4C:D3:3E:22:EC:23:B1:DF:D4:60:9E:12:21:07 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0542 Signing time: Wed 20 May 2026 23:31:56 +0000 Manifest this update: Wed 20 May 2026 23:31:55 +0000 Manifest next update: Wed 27 May 2026 23:31:55 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: mdOi4zg+llS/VmZm/xWfElV2wbxBMJl8ujIFPKHBILo=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: May 20 23:31:55 2026 GMT Not After : May 27 23:31:55 2026 GMT Subject: CN=6a0e446b-9e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b3:de:28:36:6f:ed:78:0c:6a:6c:c0:c7:3d: 9a:22:0b:2e:0a:91:b3:7a:77:bd:a2:9d:f6:fd:57: ff:c9:03:50:c4:c6:eb:f0:3b:4c:9f:7a:60:db:df: 59:db:b2:6b:0e:d6:5b:58:70:4d:f0:0c:d0:a4:fe: 5e:01:58:6e:63:97:59:fd:52:04:db:05:4f:29:42: 2a:46:65:e3:51:65:33:14:fc:3b:49:80:2c:41:be: 62:a8:05:e5:c7:f5:8b:d9:c5:44:ea:72:27:20:fe: 2f:f9:1f:dc:c5:41:c1:a7:8c:db:67:7e:b5:dd:16: 0b:80:78:d1:ef:ef:49:6f:e3:bc:90:32:98:12:19: 9e:01:91:e1:46:02:dc:df:ff:cd:33:b1:fd:81:a6: 24:3d:64:87:b1:d2:32:ff:ae:c5:e6:cd:03:64:de: 27:01:04:f2:45:32:0d:5a:7e:69:45:a4:2f:fb:c3: fe:7b:2d:26:8b:46:9b:5d:90:7f:bc:cd:4e:0b:04: 8a:dc:73:af:39:7a:2a:0c:84:e1:63:98:aa:f0:78: fa:0c:96:6e:65:fb:0e:29:90:ed:32:fb:bb:82:02: 08:07:94:7e:14:de:a2:44:b0:c9:9e:44:86:3b:8a: 75:0b:2a:72:9b:48:38:80:11:3e:d4:b1:ac:43:2c: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:F3:4A:D8:66:4C:D3:3E:22:EC:23:B1:DF:D4:60:9E:12:21:07 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:64:ec:24:1d:35:71:93:e4:6d:6c:39:27:01:76:bc:1a:84: b2:5d:f6:35:e4:af:ca:f1:7c:91:a9:13:ce:af:4d:ab:de:17: b9:b8:0c:19:5a:c0:76:6e:9b:18:30:fe:cc:67:51:d0:14:fe: 48:cb:44:94:a4:c2:74:f8:ce:70:15:4c:19:97:b5:2d:a8:4f: b4:21:ec:a9:83:be:f8:6c:ab:18:48:d0:d6:12:ca:31:d3:ff: cd:d8:2e:46:b8:97:89:b9:12:f8:8b:53:31:a5:4d:03:a8:ba: 6e:30:55:58:8c:89:32:f7:a6:d8:a4:f9:7e:de:17:8c:2c:41: 4c:31:a4:cc:c5:59:3b:1b:0e:9c:3e:f5:88:d9:89:7f:97:7d: f0:9d:b5:dd:63:3b:cb:7e:80:65:35:fc:ec:be:82:89:28:17: 4f:42:dd:6f:59:05:60:71:2a:30:7f:80:5f:8e:04:58:eb:2b: a8:84:13:ed:50:5e:b1:56:bd:db:47:fa:42:a3:d4:ff:55:07: 01:97:ae:46:50:29:a5:1c:a0:3b:f5:20:ae:8d:f3:02:38:a9: 24:10:c6:8c:13:68:f5:0b:b2:2e:83:2d:a6:a3:50:06:2d:cf: 34:fe:96:b4:43:ef:68:b7:e1:89:54:68:70:06:fa:64:bb:f4: c7:24:16:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjYwNTIwMjMzMTU1WhcNMjYwNTI3MjMzMTU1WjAYMRYwFAYD VQQDEw02YTBlNDQ2Yi05ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLPeKDZv7XgMamzAxz2aIgsuCpGzene9op32/Vf/yQNQxMbr8DtMn3pg299Z 27JrDtZbWHBN8AzQpP5eAVhuY5dZ/VIE2wVPKUIqRmXjUWUzFPw7SYAsQb5iqAXl x/WL2cVE6nInIP4v+R/cxUHBp4zbZ3613RYLgHjR7+9Jb+O8kDKYEhmeAZHhRgLc 3//NM7H9gaYkPWSHsdIy/67F5s0DZN4nAQTyRTINWn5pRaQv+8P+ey0mi0abXZB/ vM1OCwSK3HOvOXoqDIThY5iq8Hj6DJZuZfsOKZDtMvu7ggIIB5R+FN6iRLDJnkSG O4p1Cypym0g4gBE+1LGsQyxLsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/380rY ZkzTPiLsI7Hf1GCeEiEHMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAomTsJB01cZPkbWw5JwF2vBqEsl32NeSvyvF8kakTzq9Nq94XubgMGVrAdm6b GDD+zGdR0BT+SMtElKTCdPjOcBVMGZe1LahPtCHsqYO++GyrGEjQ1hLKMdP/zdgu RriXibkS+ItTMaVNA6i6bjBVWIyJMvem2KT5ft4XjCxBTDGkzMVZOxsOnD71iNmJ f5d98J213WM7y36AZTX87L6CiSgXT0Ldb1kFYHEqMH+AX44EWOsrqIQT7VBesVa9 20f6QqPU/1UHAZeuRlAppRygO/Ugro3zAjipJBDGjBNo9QuyLoMtpqNQBi3PNP6W tEPvaLfhiVRocAb6ZLv0xyQWIQ== -----END CERTIFICATE-----Generated at Thu May 21 10:14:51 2026 by rpki-client