$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: rCdrYJU0MKXx9rnlqDR+ZMtbJmvk6QzQOGBt5tBVck8= Subject key identifier: 92:31:AD:0A:A8:E5:41:29:76:5F:DD:D5:FC:5F:51:D0:75:D2:B6:EC Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 0190 Signing time: Thu 21 May 2026 04:26:09 +0000 Manifest this update: Thu 21 May 2026 04:26:09 +0000 Manifest next update: Thu 28 May 2026 04:26:09 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: Ci7WBRa2zorAtai0NIEsyQdcfVdT6wFjgxH9RLYCJMI=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: opYVyfVrf8nOteK7/xjEMUl4M6X/BkvRe3zd604oEu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: May 21 04:26:09 2026 GMT Not After : May 28 04:26:09 2026 GMT Subject: CN=6a0e8961-70d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:1f:8e:1c:b2:77:7e:17:08:f4:73:78:58: 57:ec:2e:4f:e7:1c:e8:32:17:7e:23:bc:e4:bf:a1: 4c:fe:47:2a:43:3d:b8:11:86:a8:63:40:35:ea:a9: 04:a5:8d:03:ba:af:6a:e9:98:36:ad:c5:8b:a7:a6: 08:f7:86:22:37:e7:ae:ee:0c:de:f7:7d:dd:b6:4f: c8:8a:8d:04:b8:7f:43:b5:8c:ef:c3:3d:ad:88:2a: 37:5d:52:a1:96:79:ea:75:82:9d:5f:fd:32:b8:d4: 76:0e:8a:51:49:d9:1e:35:0e:3a:32:b5:29:26:64: 34:fe:87:7f:41:9a:eb:78:e0:4a:56:9b:1a:d5:1b: dd:33:fd:71:0a:9b:81:dd:40:f7:31:c6:83:88:b9: 9c:40:d4:af:3d:c9:db:ae:3d:d2:0f:de:01:5c:49: 0d:ac:ac:9a:de:93:5d:00:05:1c:0c:a2:72:e6:64: 9e:d7:6b:db:78:62:cc:60:8f:31:bc:ac:91:57:74: 6a:ee:ce:92:e3:19:b2:56:b7:f6:26:6a:05:fd:07: a9:4a:ff:38:0e:87:06:dd:7f:1d:ad:40:e6:03:51: 71:1f:c9:64:ef:0d:91:7e:35:9c:c2:90:7b:96:bf: e5:7e:3c:3b:26:92:b3:d1:25:5c:5b:1b:e6:67:59: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:31:AD:0A:A8:E5:41:29:76:5F:DD:D5:FC:5F:51:D0:75:D2:B6:EC X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:57:59:db:67:6e:7a:ca:42:6a:17:05:eb:ab:ad:cd:68:fa: 79:2e:83:3d:c0:80:96:06:69:20:a8:48:f6:d7:b2:6c:a2:76: 1c:ad:e9:1d:78:a5:67:83:6b:ef:dd:e2:4f:0a:1e:d3:0b:50: 85:91:fa:11:a1:bc:06:84:b8:83:80:7e:94:5c:a0:ba:f8:9e: 60:cf:c4:29:e7:4a:09:9e:6a:87:f8:ee:7a:eb:d9:4c:64:a8: d8:d0:72:b7:8b:34:d6:fb:4b:6a:96:c8:46:da:7b:27:fb:c0: 08:0b:4f:ed:68:43:5b:3f:f7:d7:af:89:07:64:ff:9e:10:af: d1:23:45:b1:81:22:a2:46:94:b3:71:e0:21:ac:87:bb:21:fc: 93:e4:cd:7f:72:ab:28:8b:82:4d:04:01:5a:06:91:48:ca:fa: 35:96:a1:07:47:7f:48:79:8c:34:ff:cb:a3:d3:3b:5a:f4:e8: 04:20:b4:52:92:2b:7e:62:7c:9b:f9:2d:3c:01:35:ab:c4:90: ec:b8:2b:be:48:71:01:c0:7a:c7:19:e4:a7:9a:ff:e2:80:13: cf:60:66:d9:f5:6e:05:95:d8:70:c2:c1:21:e0:92:13:e6:0b: b5:3e:9f:66:6e:6a:3b:59:2b:19:16:d5:91:06:72:43:17:6a: eb:6b:c9:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjYwNTIxMDQyNjA5WhcNMjYwNTI4MDQyNjA5WjAYMRYwFAYD VQQDEw02YTBlODk2MS03MGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIUfjhyyd34XCPRzeFhX7C5P5xzoMhd+I7zkv6FM/kcqQz24EYaoY0A16qkE pY0Duq9q6Zg2rcWLp6YI94YiN+eu7gze933dtk/Iio0EuH9DtYzvwz2tiCo3XVKh lnnqdYKdX/0yuNR2DopRSdkeNQ46MrUpJmQ0/od/QZrreOBKVpsa1RvdM/1xCpuB 3UD3McaDiLmcQNSvPcnbrj3SD94BXEkNrKya3pNdAAUcDKJy5mSe12vbeGLMYI8x vKyRV3Rq7s6S4xmyVrf2JmoF/QepSv84DocG3X8drUDmA1FxH8lk7w2RfjWcwpB7 lr/lfjw7JpKz0SVcWxvmZ1l+WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIxrQqo 5UEpdl/d1fxfUdB10rbsMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD1dZ22duespCahcF66utzWj6eS6DPcCAlgZpIKhI9teybKJ2HK3pHXilZ4Nr 793iTwoe0wtQhZH6EaG8BoS4g4B+lFyguvieYM/EKedKCZ5qh/jueuvZTGSo2NBy t4s01vtLapbIRtp7J/vACAtP7WhDWz/316+JB2T/nhCv0SNFsYEiokaUs3HgIayH uyH8k+TNf3KrKIuCTQQBWgaRSMr6NZahB0d/SHmMNP/Lo9M7WvToBCC0UpIrfmJ8 m/ktPAE1q8SQ7LgrvkhxAcB6xxnkp5r/4oATz2Bm2fVuBZXYcMLBIeCSE+YLtT6f Zm5qO1krGRbVkQZyQxdq62vJ6g== -----END CERTIFICATE-----Generated at Thu May 21 09:37:47 2026 by rpki-client