$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft File: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft (raw, json) Hash identifier: rVaIN1XdTVQNKauhQt8c4zz4ttMotDdmklyW+b4YPVE= Subject key identifier: 3E:E9:D8:97:50:BD:06:20:B1:2F:13:37:E3:41:32:03:B4:3E:06:96 Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft Manifest number: 02BE Signing time: Tue 23 Jun 2026 01:31:05 +0000 Manifest this update: Tue 23 Jun 2026 01:31:05 +0000 Manifest next update: Tue 30 Jun 2026 01:31:05 +0000 Files and hashes: 1: 3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl (hash: xr9vicxrLU4zbCGN1VAGDe5x0QvvYs8RP1Iq3lJ90Vw=) 2: 0CDAA8EEE86611EFA5152A24C4F9AE02.roa (hash: Z52mVJSz988Jd9hitOllyu60oqioAYARpSvRGcwNtnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 01:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17 Validity Not Before: Jun 23 01:31:05 2026 GMT Not After : Jun 30 01:31:05 2026 GMT Subject: CN=6a39e1d9-5ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:42:45:f7:dc:a9:22:6d:65:3b:62:ef:f0: 52:38:cf:32:b6:53:b7:bc:94:49:eb:bc:0a:ec:f3: ab:4d:03:88:f5:b3:3c:6b:9e:62:90:44:5a:03:73: fc:a1:cf:9f:54:4c:94:5d:d2:8e:39:de:51:a5:6a: 10:36:64:3d:02:3b:d5:9c:a4:76:30:11:46:98:a8: 2c:ff:8c:9b:b6:54:0b:69:4c:2e:14:e7:82:f5:35: 43:c5:82:34:48:3c:7f:5b:40:bb:07:33:d9:24:18: 04:d7:c1:fd:27:42:3e:1a:bc:4d:3c:c1:9a:c6:ad: 35:b7:c2:37:33:45:83:4d:fb:13:5f:bd:8b:f7:f4: 24:1f:ff:c9:b6:e9:25:8c:c2:c3:7f:02:25:50:97: 0e:68:96:90:61:c4:96:02:5e:41:91:56:53:3f:aa: 97:0b:8a:25:76:25:07:7e:8f:a5:d0:92:a5:27:7c: d8:46:22:93:0c:2a:9a:2d:c0:7e:20:53:63:24:70: 76:93:8f:35:db:51:79:57:e8:27:9a:30:8c:28:f7: c0:a4:bd:c9:6a:29:6c:d0:82:b8:d0:9d:14:d0:77: 80:32:07:0d:56:d3:23:be:76:5a:3d:bd:85:0c:df: 6c:85:86:62:1e:33:d4:91:61:06:a9:8c:29:01:23: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:D8:97:50:BD:06:20:B1:2F:13:37:E3:41:32:03:B4:3E:06:96 X509v3 Authority Key Identifier: keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c9:de:8c:0e:05:37:ae:2d:39:e0:22:96:60:49:d7:68:ef: 67:7b:42:69:65:1d:3f:5e:ab:e4:5b:2b:01:82:da:10:7b:dd: 8c:71:57:5d:45:77:e9:7a:e4:90:b0:c8:8b:bd:94:68:51:75: 5a:3b:21:d8:24:42:52:6e:b2:c8:46:4a:6b:d9:c4:bc:55:46: 7c:8a:36:75:e5:fe:c9:eb:c5:80:3e:1c:52:c0:44:f0:e6:f0: 3d:1b:c0:33:a1:72:c8:1c:42:f2:bf:f6:a3:5f:46:74:a8:df: ad:9d:f4:76:1e:fe:94:07:18:fe:4a:24:0a:d4:56:e5:77:1c: 92:bd:a6:b7:55:af:2f:d9:0b:6d:d7:87:45:db:63:9a:19:84: 4e:22:fe:30:29:51:81:cb:c2:01:1f:82:8c:a4:6c:a8:0a:39: 37:b8:f8:c2:16:85:61:77:65:c5:4c:4c:a6:da:47:f4:01:84: 0f:ca:9d:32:74:a1:6f:06:d8:b1:23:12:6d:74:9a:0a:ec:03: 39:eb:c9:b8:c3:e0:5b:54:42:c6:e4:f6:11:dc:1d:c8:81:cb: 2c:69:fc:7d:f5:dd:f5:21:79:6e:d7:74:3b:af:ec:b8:32:7a: 27:93:2e:c2:a9:c4:15:f0:2a:8b:cf:29:7c:2c:14:99:ff:72: 20:7a:44:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2OUUxMTAvBgNVBAUTKERDQjgzOTMxOUZENTJFQUQ5RkNCOTc3ODI5ODRGRDFG RDQ0OTJDMTcwHhcNMjYwNjIzMDEzMTA1WhcNMjYwNjMwMDEzMTA1WjAYMRYwFAYD VQQDEw02YTM5ZTFkOS01YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3NCRffcqSJtZTti7/BSOM8ytlO3vJRJ67wK7POrTQOI9bM8a55ikERaA3P8 oc+fVEyUXdKOOd5RpWoQNmQ9AjvVnKR2MBFGmKgs/4ybtlQLaUwuFOeC9TVDxYI0 SDx/W0C7BzPZJBgE18H9J0I+GrxNPMGaxq01t8I3M0WDTfsTX72L9/QkH//Jtukl jMLDfwIlUJcOaJaQYcSWAl5BkVZTP6qXC4oldiUHfo+l0JKlJ3zYRiKTDCqaLcB+ IFNjJHB2k48121F5V+gnmjCMKPfApL3Jails0IK40J0U0HeAMgcNVtMjvnZaPb2F DN9shYZiHjPUkWEGqYwpASNUOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD7p2JdQ vQYgsS8TN+NBMgO0PgaWMB8GA1UdIwQYMBaAFNy4OTGf1S6tn8uXeCmE/R/USSwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTY5RS8yNTI1QzdDODRE MjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxxMmZ5NWQ0S1lUOUg5UkpM QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMZzVNWl9WTHEyZnk1ZDRLWVQ5SDlSSkxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTY5RS8yNTI1QzdDODREMjUxMUVEQTZEREQyMkVDNEY5QUUwMi8zTGc1TVpfVkxx MmZ5NWQ0S1lUOUg5UkpMQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl8nejA4FN64tOeAilmBJ12jvZ3tCaWUdP16r5FsrAYLaEHvdjHFXXUV36Xrk kLDIi72UaFF1Wjsh2CRCUm6yyEZKa9nEvFVGfIo2deX+yevFgD4cUsBE8ObwPRvA M6FyyBxC8r/2o19GdKjfrZ30dh7+lAcY/kokCtRW5Xcckr2mt1WvL9kLbdeHRdtj mhmETiL+MClRgcvCAR+CjKRsqAo5N7j4whaFYXdlxUxMptpH9AGED8qdMnShbwbY sSMSbXSaCuwDOevJuMPgW1RCxuT2EdwdyIHLLGn8ffXd9SF5btd0O6/suDJ6J5Mu wqnEFfAqi88pfCwUmf9yIHpEtw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:28:49 2026 by rpki-client