$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: gN+SgHTqMoWI+Ptq9s5Zm6bnfkN1DDUAwfD+/9OLLyM= Subject key identifier: B0:D4:82:5F:72:C1:41:4F:1D:AD:44:C9:5D:15:C0:B6:88:0E:9F:19 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 355B Signing time: Tue 02 Jun 2026 14:35:12 +0000 Manifest this update: Tue 02 Jun 2026 14:35:11 +0000 Manifest next update: Tue 09 Jun 2026 14:35:11 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: 4BzaEIyQKlf+4IE4lVkbgs5avwCNi0tPi0Lfbf4I590=) 2: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) 3: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 14:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Jun 2 14:35:11 2026 GMT Not After : Jun 9 14:35:11 2026 GMT Subject: CN=6a1eea20-019d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:39:ad:b8:bc:f4:26:64:63:36:86:d5:94: 3f:f6:f4:45:ea:2e:49:1f:b3:2a:fa:b4:d5:d9:51: 85:e2:f9:4f:0c:60:b9:7f:b1:29:28:a5:f9:d9:83: 32:aa:55:91:3d:62:6b:83:21:19:48:34:6a:6c:52: b3:ba:99:4e:ee:37:aa:de:93:9f:da:43:53:92:15: a8:b6:c4:76:1c:8a:bf:82:99:6a:2c:eb:6d:83:02: 26:9d:fa:6d:ce:87:48:3a:ae:2d:41:a4:78:72:df: b8:c1:c6:ac:11:4f:a3:ff:d6:4b:01:87:58:f7:66: 0e:4b:97:0b:f7:5c:b5:60:eb:aa:fa:e1:47:4d:46: 79:b2:6e:e0:23:b1:cd:51:16:63:85:fc:55:88:9a: 64:af:80:9f:b2:53:17:c5:bb:87:4b:3c:38:91:57: 4c:02:14:aa:54:11:54:ad:3a:68:92:ac:51:7a:dd: 6d:4a:78:0e:1e:d6:d9:73:8f:95:55:6c:27:d9:95: 47:fd:5f:7f:2c:9c:db:90:2c:79:d3:b3:4b:71:a3: 80:5f:e6:fd:04:17:31:33:45:6e:4d:98:55:5a:1b: ce:d3:2d:82:7c:36:3b:77:91:33:e7:74:3f:64:55: 0a:2d:ee:bb:ea:05:64:f6:98:d5:54:07:af:fc:a6: 27:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D4:82:5F:72:C1:41:4F:1D:AD:44:C9:5D:15:C0:B6:88:0E:9F:19 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b5:42:54:a9:92:29:3a:57:60:a3:1e:d7:e6:39:0f:07:23: 88:7d:83:50:8f:1a:e0:da:8c:ec:8d:ca:a0:17:7f:25:42:6c: 0b:c1:8d:9d:b7:3c:db:22:f7:5b:00:f7:dd:6f:24:2e:bb:b8: 07:fb:74:90:57:7b:a4:f2:34:34:b8:4b:44:d4:30:a7:32:1e: 3c:4e:38:01:61:87:6a:80:7e:02:62:84:16:7b:1f:52:07:24: 97:79:b8:ab:db:d5:87:33:28:40:20:f7:c2:88:2c:96:e3:b7: 2a:37:9c:85:b2:9e:4a:46:2f:41:ba:f4:be:79:d4:88:a4:7a: 45:f4:08:cf:83:71:32:3a:86:78:ae:e9:5f:4b:80:7a:1f:18: d1:41:4a:0b:61:49:fd:59:aa:ee:8f:5d:bc:c8:5b:ad:a7:a7: d4:ff:4d:b3:94:b7:5a:d4:10:f5:a8:83:11:e3:72:7f:c5:bc: b6:0a:1b:ba:63:d8:be:e1:67:c2:7e:6d:a9:73:34:8c:94:87: db:84:c5:a8:76:39:9e:ff:59:f9:86:a5:f6:bd:88:57:92:d4: 7a:73:35:f2:d0:1f:f8:31:f4:65:a0:30:eb:ab:f9:34:0b:e3: 85:59:fe:e3:8d:98:1a:e5:be:05:30:cd:ae:b3:3a:e2:72:7a: 2c:b0:b5:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwNjAyMTQzNTExWhcNMjYwNjA5MTQzNTExWjAYMRYwFAYD VQQDEw02YTFlZWEyMC0wMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyU5rbi89CZkYzaG1ZQ/9vRF6i5JH7Mq+rTV2VGF4vlPDGC5f7EpKKX52YMy qlWRPWJrgyEZSDRqbFKzuplO7jeq3pOf2kNTkhWotsR2HIq/gplqLOttgwImnfpt zodIOq4tQaR4ct+4wcasEU+j/9ZLAYdY92YOS5cL91y1YOuq+uFHTUZ5sm7gI7HN URZjhfxViJpkr4CfslMXxbuHSzw4kVdMAhSqVBFUrTpokqxRet1tSngOHtbZc4+V VWwn2ZVH/V9/LJzbkCx507NLcaOAX+b9BBcxM0VuTZhVWhvO0y2CfDY7d5Ez53Q/ ZFUKLe676gVk9pjVVAev/KYnoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDUgl9y wUFPHa1EyV0VwLaIDp8ZMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANrVCVKmSKTpXYKMe1+Y5DwcjiH2DUI8a4NqM7I3KoBd/JUJsC8GNnbc82yL3 WwD33W8kLru4B/t0kFd7pPI0NLhLRNQwpzIePE44AWGHaoB+AmKEFnsfUgckl3m4 q9vVhzMoQCD3wogsluO3KjechbKeSkYvQbr0vnnUiKR6RfQIz4NxMjqGeK7pX0uA eh8Y0UFKC2FJ/Vmq7o9dvMhbraen1P9Ns5S3WtQQ9aiDEeNyf8W8tgobumPYvuFn wn5tqXM0jJSH24TFqHY5nv9Z+Yal9r2IV5LUenM18tAf+DH0ZaAw66v5NAvjhVn+ 442YGuW+BTDNrrM64nJ6LLC1yw== -----END CERTIFICATE-----Generated at Tue Jun 2 22:05:30 2026 by rpki-client