$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft File: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json) Hash identifier: A+oSEG3ni/VV0yLBKj3tZ9DXf6MUDUeBArHHuJov1g0= Subject key identifier: 8F:3F:0D:8C:E2:78:FB:6C:AD:EB:32:C5:A4:7E:6B:84:9E:1F:46:DC Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 Certificate issuer: /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft Manifest number: 01CC Signing time: Tue 23 Jun 2026 03:50:26 +0000 Manifest this update: Tue 23 Jun 2026 03:50:25 +0000 Manifest next update: Tue 30 Jun 2026 03:50:25 +0000 Files and hashes: 1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: ztAsQ/fZuVZckDnkCS/9hsMqktcr9HdzMR7R7XctqCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 03:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4 Validity Not Before: Jun 23 03:50:25 2026 GMT Not After : Jun 30 03:50:25 2026 GMT Subject: CN=6a3a0282-18c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c6:04:f1:c9:d5:fc:41:9d:14:5a:36:a9:8c: 91:c7:fa:76:0a:86:ca:15:cd:62:66:39:6f:2e:9f: 3d:60:c6:cc:97:8f:af:97:d9:bc:66:ea:38:17:7c: 64:79:98:07:79:1a:70:5d:50:82:d6:37:8d:73:83: 39:8d:e1:fc:ff:e8:e0:db:cb:e2:72:95:fb:f8:50: 82:9e:e4:66:44:e6:23:e0:e8:3c:8c:e4:b4:9c:9e: 15:66:80:88:9b:ee:c5:d1:57:19:bd:50:9b:f6:7b: 0b:9e:b3:87:33:1d:d5:05:e5:e0:79:7e:3f:c4:51: 0e:8a:8d:cf:d4:cc:23:87:57:b0:33:39:62:0e:e4: fb:3e:9e:a8:18:12:02:26:40:45:57:e4:e4:2b:72: 8e:f2:ff:63:b0:21:28:45:3a:9c:8d:7c:7c:5a:25: 04:aa:4a:01:16:46:19:7b:ca:58:e1:3f:70:be:27: ad:d5:07:8b:a8:70:0c:5f:cf:f3:c6:12:ba:b8:32: 6b:e8:0a:98:7a:05:ea:17:b8:5b:0b:47:05:77:ac: 30:14:7b:5e:83:25:e2:4d:8c:95:b6:79:09:68:6f: 53:0d:4d:9d:d5:5a:bf:e2:d6:eb:4e:03:14:b3:97: 6f:c3:54:6c:3c:e9:70:cd:6b:c6:a7:43:9a:ca:c2: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3F:0D:8C:E2:78:FB:6C:AD:EB:32:C5:A4:7E:6B:84:9E:1F:46:DC X509v3 Authority Key Identifier: keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:08:29:ca:14:80:94:48:49:f9:b7:73:e7:a1:12:e8:7e:fb: 91:f0:79:89:7d:03:08:66:79:d5:aa:97:ce:29:9d:44:3c:b1: d2:12:2d:2c:73:86:27:60:e3:ca:0a:9e:12:b5:67:a8:60:4a: d7:67:3c:3c:cb:0f:0c:ee:38:3d:1a:62:ec:96:70:79:8d:84: e3:48:e2:02:56:fd:7e:17:70:8c:b5:af:50:8b:98:60:06:7d: 6b:ac:4e:02:97:b9:6f:ae:f5:b3:40:f8:fb:81:fa:21:f5:05: 90:ec:b5:88:ea:79:f4:dc:3f:2d:cf:8e:86:07:07:a7:3c:4a: 91:79:dd:5d:2a:ee:c1:bf:27:b4:b6:85:cf:00:e2:28:8c:57: 07:51:b7:23:58:21:ac:a1:83:51:7a:de:80:c1:60:6f:c9:c3: 19:44:a2:5d:01:5a:1a:93:12:32:db:53:09:23:78:8b:ef:d4: 34:08:0e:55:d2:26:93:0e:4c:5f:76:cc:52:ed:38:0d:18:07: e3:b3:90:4e:42:a7:b5:8c:52:59:f5:30:f6:48:2c:25:80:1a: 0a:95:12:db:bd:5f:12:4c:e3:d4:e1:c3:db:fa:cc:1e:af:7c: 4e:b9:d8:f3:35:0f:49:56:96:10:9a:f0:ac:a6:70:91:67:31: 46:38:70:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdGNTYxMTAvBgNVBAUTKDI4MUREQTA5NzE3NUMwNDMyOTQzRkRFNTdDQTMzRDI4 RTUwNzNCQzQwHhcNMjYwNjIzMDM1MDI1WhcNMjYwNjMwMDM1MDI1WjAYMRYwFAYD VQQDEw02YTNhMDI4Mi0xOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8YE8cnV/EGdFFo2qYyRx/p2CobKFc1iZjlvLp89YMbMl4+vl9m8Zuo4F3xk eZgHeRpwXVCC1jeNc4M5jeH8/+jg28vicpX7+FCCnuRmROYj4Og8jOS0nJ4VZoCI m+7F0VcZvVCb9nsLnrOHMx3VBeXgeX4/xFEOio3P1Mwjh1ewMzliDuT7Pp6oGBIC JkBFV+TkK3KO8v9jsCEoRTqcjXx8WiUEqkoBFkYZe8pY4T9wviet1QeLqHAMX8/z xhK6uDJr6AqYegXqF7hbC0cFd6wwFHtegyXiTYyVtnkJaG9TDU2d1Vq/4tbrTgMU s5dvw1RsPOlwzWvGp0OaysKoswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8/DYzi ePtsresyxaR+a4SeH0bcMB8GA1UdIwQYMBaAFCgd2glxdcBDKUP95XyjPSjlBzvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85RTFDODlBNkFD Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdFTXBRXzNsZktNOUtPVUhP OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCM2FDWEYxd0VNcFFfM2xmS005S09VSE84US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y1Ni85RTFDODlBNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9LQjNhQ1hGMXdF TXBRXzNsZktNOUtPVUhPOFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGAgpyhSAlEhJ+bdz56ES6H77kfB5iX0DCGZ51aqXzimdRDyx0hItLHOGJ2Dj ygqeErVnqGBK12c8PMsPDO44PRpi7JZweY2E40jiAlb9fhdwjLWvUIuYYAZ9a6xO Ape5b671s0D4+4H6IfUFkOy1iOp59Nw/Lc+OhgcHpzxKkXndXSruwb8ntLaFzwDi KIxXB1G3I1ghrKGDUXregMFgb8nDGUSiXQFaGpMSMttTCSN4i+/UNAgOVdImkw5M X3bMUu04DRgH47OQTkKntYxSWfUw9kgsJYAaCpUS271fEkzj1OHD2/rMHq98TrnY 8zUPSVaWEJrwrKZwkWcxRjhwpQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:14:57 2026 by rpki-client