$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: fdbEp9MUVU87NCbTfEyZ/wQerihjLJ5BLmobw2apkD4= Subject key identifier: 50:F7:B1:E9:E9:1F:18:AE:E2:30:D2:61:D2:05:EA:5E:A1:AD:AA:26 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 022E Signing time: Thu 11 Jun 2026 04:49:59 +0000 Manifest this update: Thu 11 Jun 2026 04:49:58 +0000 Manifest next update: Thu 18 Jun 2026 04:49:58 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: 2q8ATyDN8a6C9iEc9WgBPEFm9Ak1GrKH0ftzZJ31rxI=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Jun 11 04:49:58 2026 GMT Not After : Jun 18 04:49:58 2026 GMT Subject: CN=6a2a3e76-9915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:f5:5e:2f:4f:d4:f1:29:eb:2b:6a:e0:6a: 7d:07:3a:0a:99:85:d8:54:52:05:9f:26:d2:5e:c4: 41:ea:c2:7f:72:33:6d:14:22:dc:ca:f9:a4:36:ae: 0e:53:12:4f:2a:3c:21:9a:6f:4b:64:8c:72:6a:53: ea:24:61:e7:2f:f8:14:e6:7e:40:1d:3d:6c:c5:45: 3d:92:06:ec:72:62:ab:cf:c9:1b:c6:22:1b:a7:17: 30:e0:26:53:e7:89:34:48:e4:48:12:14:91:e0:39: 1b:46:ef:74:a0:3e:12:41:c0:42:17:e3:0b:76:80: a8:e7:db:a7:01:60:d8:e9:98:f0:92:41:f0:7d:54: 75:03:ab:04:8e:ba:0a:4d:5c:c7:f9:72:dd:a2:29: 71:e3:84:ee:34:2e:6d:6f:fd:58:82:af:88:53:07: 31:e4:95:a4:4a:57:17:fa:37:a9:61:7a:32:ae:59: 5e:bb:bd:f7:39:32:b5:28:d5:d4:fe:00:07:b7:bd: c6:49:b4:61:77:cb:e0:1d:d4:4c:a5:9f:23:25:c8: 09:34:44:05:6b:49:d4:52:ed:82:48:3f:d7:9a:cf: 58:98:95:11:13:59:9f:23:72:88:54:18:36:ab:89: d3:6c:3e:f0:4f:46:1f:02:53:2a:94:4f:3f:ce:3a: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F7:B1:E9:E9:1F:18:AE:E2:30:D2:61:D2:05:EA:5E:A1:AD:AA:26 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b2:01:ff:21:7c:8f:c6:fb:7f:86:00:55:9a:75:10:2f:70: 16:c3:97:97:f3:95:ac:8d:a9:3d:5b:3e:fd:e1:46:0e:cd:09: 30:e4:93:cb:88:42:a2:9f:8b:74:96:ee:c5:f8:8d:29:77:95: af:7c:9c:e7:2c:b5:26:bb:ae:a4:e6:b9:3a:fe:7e:e6:f3:0a: cc:45:20:73:77:38:6c:0e:b8:04:26:46:9a:88:69:a4:3b:a4: 2f:3a:88:bb:d7:41:65:68:a6:76:da:82:36:be:7b:46:b8:21: 81:09:aa:b3:10:86:83:83:11:90:f6:f9:42:a5:f4:38:f8:fd: 71:f1:74:aa:7c:6a:8a:ce:f9:18:a2:8b:71:f8:f9:67:e8:69: 81:4b:ad:4b:04:0a:36:42:78:85:68:7e:a6:d4:e2:dd:4d:4a: 96:55:c0:88:16:5f:0b:93:34:d8:c5:fd:c9:8d:62:64:55:b0: 0a:2f:a1:09:42:ed:63:93:f4:98:c2:55:7d:53:db:9f:39:85: 48:30:5c:a8:ac:5f:a4:47:92:21:08:52:b4:d3:ea:e1:91:ad: d1:cd:ac:77:ce:fb:39:42:5e:14:ed:57:a7:de:b8:33:e2:8c: e7:fe:d5:bb:c4:26:b9:3a:c8:07:2f:b6:39:f5:8b:db:af:f8: 04:55:24:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwNjExMDQ0OTU4WhcNMjYwNjE4MDQ0OTU4WjAYMRYwFAYD VQQDEw02YTJhM2U3Ni05OTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPH1Xi9P1PEp6ytq4Gp9BzoKmYXYVFIFnybSXsRB6sJ/cjNtFCLcyvmkNq4O UxJPKjwhmm9LZIxyalPqJGHnL/gU5n5AHT1sxUU9kgbscmKrz8kbxiIbpxcw4CZT 54k0SORIEhSR4DkbRu90oD4SQcBCF+MLdoCo59unAWDY6ZjwkkHwfVR1A6sEjroK TVzH+XLdoilx44TuNC5tb/1Ygq+IUwcx5JWkSlcX+jepYXoyrlleu733OTK1KNXU /gAHt73GSbRhd8vgHdRMpZ8jJcgJNEQFa0nUUu2CSD/Xms9YmJURE1mfI3KIVBg2 q4nTbD7wT0YfAlMqlE8/zjqGcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFD3senp Hxiu4jDSYdIF6l6hraomMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiLIB/yF8j8b7f4YAVZp1EC9wFsOXl/OVrI2pPVs+/eFGDs0JMOSTy4hCop+L dJbuxfiNKXeVr3yc5yy1JruupOa5Ov5+5vMKzEUgc3c4bA64BCZGmohppDukLzqI u9dBZWimdtqCNr57RrghgQmqsxCGg4MRkPb5QqX0OPj9cfF0qnxqis75GKKLcfj5 Z+hpgUutSwQKNkJ4hWh+ptTi3U1KllXAiBZfC5M02MX9yY1iZFWwCi+hCULtY5P0 mMJVfVPbnzmFSDBcqKxfpEeSIQhStNPq4ZGt0c2sd877OUJeFO1Xp964M+KM5/7V u8QmuTrIBy+2OfWL26/4BFUk0Q== -----END CERTIFICATE-----Generated at Fri Jun 12 13:24:50 2026 by rpki-client