$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft File: 5dNtVjx7PUXNnF98WB6d59bsNDE.mft (raw, json) Hash identifier: OZ6Bovs1YnFnpMqSv50dK3RcFHqtaflXtYIIsWg3NIk= Subject key identifier: AC:20:58:75:A5:E1:2E:D4:3B:EE:87:F3:CD:15:DD:93:16:83:14:94 Authority key identifier: E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 Certificate issuer: /CN=A91B681A/serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft Manifest number: 3A Signing time: Mon 01 Jun 2026 09:23:10 +0000 Manifest this update: Mon 01 Jun 2026 09:23:09 +0000 Manifest next update: Mon 08 Jun 2026 09:23:09 +0000 Files and hashes: 1: 5dNtVjx7PUXNnF98WB6d59bsNDE.crl (hash: wAEfR7j3CXKAjSXiqJQ5Z8Q2Gn2W/ZhVVGG6WxDjQ+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=E5D36D563C7B3D45CD9C5F7C581E9DE7D6EC3431 Validity Not Before: Jun 1 09:23:09 2026 GMT Not After : Jun 8 09:23:09 2026 GMT Subject: CN=6a1d4f7d-276b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:3b:fc:f9:a7:34:92:e3:50:0f:43:d7:4e:6e: 23:af:b1:e4:92:50:5b:ae:d0:8c:29:bc:b9:57:fc: 2d:2b:3d:ce:d8:d4:c4:f0:48:2a:31:45:76:87:6f: a6:e1:73:2c:ba:ca:fc:8c:a6:48:9f:21:da:33:0a: 76:66:e1:d2:02:59:e7:84:4d:85:08:d0:a5:f5:c9: 8c:55:8f:1c:4d:96:ba:79:a0:d2:bb:09:4f:36:a7: d4:3a:01:bc:b3:35:3e:92:64:7b:6c:9f:ad:aa:87: 04:98:df:4e:05:5b:b9:17:bb:0a:6c:34:fb:6d:a0: 68:6d:6b:a7:30:aa:2c:1b:9a:72:94:e9:b9:d4:be: 76:e5:c2:08:c8:af:2c:86:98:78:66:4a:73:28:0a: 14:3c:83:89:ff:33:4f:6c:db:b7:6e:a3:88:26:15: 60:c6:69:cd:fc:74:08:b4:b4:52:e3:d6:3e:16:cb: 28:d6:c6:97:a8:9f:da:47:ea:2b:20:ae:2e:b7:b2: c4:af:1d:b3:92:76:35:9c:05:eb:ff:fd:58:ff:58: 43:7d:88:0e:fa:08:25:48:b6:70:01:50:58:30:c0: 1c:d8:f1:00:67:0d:84:8a:15:a3:77:0d:86:cc:1c: 4f:22:98:f7:81:fc:06:20:18:8b:0d:5a:ff:80:4d: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:20:58:75:A5:E1:2E:D4:3B:EE:87:F3:CD:15:DD:93:16:83:14:94 X509v3 Authority Key Identifier: keyid:E5:D3:6D:56:3C:7B:3D:45:CD:9C:5F:7C:58:1E:9D:E7:D6:EC:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5dNtVjx7PUXNnF98WB6d59bsNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/C34F16FC0BE011F19A1863A5313D8C67/5dNtVjx7PUXNnF98WB6d59bsNDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:73:1b:78:57:0e:2d:be:8d:f3:8d:cb:0e:6d:ba:1c:a3:d6: 97:4d:ae:b7:b3:34:76:0a:78:a1:05:c0:a6:94:17:19:c7:c0: 93:4b:1a:97:01:0a:54:42:fe:76:49:ae:94:49:45:74:3b:45: 3f:d1:0e:88:8f:6a:90:35:19:44:6f:7b:08:8a:9e:3b:45:1e: 2d:96:1c:aa:b6:f9:be:36:0e:44:b9:2c:7c:f6:51:83:84:84: 69:29:1f:28:a1:45:56:77:0c:40:2a:5b:21:62:d2:08:de:72: a3:76:0b:d4:54:7a:36:20:57:b1:d0:fe:aa:d2:6a:68:01:2d: 76:2f:af:9b:d0:af:16:e5:81:d0:c2:8b:3f:c0:83:3b:02:1e: 3d:15:1a:4d:87:b0:df:1d:9f:e3:3d:6b:99:da:ad:8a:b3:37: 61:4a:39:a0:3c:fb:3a:d7:a7:1d:df:8c:f8:ac:5d:44:4b:50: df:61:9b:be:7a:71:7a:cc:98:24:18:5b:ba:48:05:ff:b7:c0: 64:6c:99:53:a2:82:86:84:2e:6e:57:8f:65:2f:8a:49:e9:77: 78:d3:63:f3:e4:37:5a:c0:c6:9b:b3:25:b9:3b:0b:b1:3e:d6: a8:45:4e:74:6e:c3:80:2b:ea:4d:ad:f0:7b:8b:b1:10:f3:78: fd:8f:e6:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRTVEMzZENTYzQzdCM0Q0NUNEOUM1RjdDNTgxRTlERTdE NkVDMzQzMTAeFw0yNjA2MDEwOTIzMDlaFw0yNjA2MDgwOTIzMDlaMBgxFjAUBgNV BAMTDTZhMWQ0ZjdkLTI3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD9O/z5pzSS41APQ9dObiOvseSSUFuu0IwpvLlX/C0rPc7Y1MTwSCoxRXaHb6bh cyy6yvyMpkifIdozCnZm4dICWeeETYUI0KX1yYxVjxxNlrp5oNK7CU82p9Q6Abyz NT6SZHtsn62qhwSY304FW7kXuwpsNPttoGhta6cwqiwbmnKU6bnUvnblwgjIryyG mHhmSnMoChQ8g4n/M09s27duo4gmFWDGac38dAi0tFLj1j4WyyjWxpeon9pH6isg ri63ssSvHbOSdjWcBev//Vj/WEN9iA76CCVItnABUFgwwBzY8QBnDYSKFaN3DYbM HE8imPeB/AYgGIsNWv+ATaBVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrCBYdaXh LtQ77ofzzRXdkxaDFJQwHwYDVR0jBBgwFoAU5dNtVjx7PUXNnF98WB6d59bsNDEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0MzNEYxNkZDMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVYTm5GOThXQjZkNTlic05E RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNWROdFZqeDdQVVhObkY5OFdCNmQ1OWJzTkRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0MzNEYxNkZDMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzVkTnRWang3UFVY Tm5GOThXQjZkNTlic05ERS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA0cxt4Vw4tvo3zjcsObboco9aXTa63szR2CnihBcCmlBcZx8CTSxqXAQpUQv52 Sa6USUV0O0U/0Q6Ij2qQNRlEb3sIip47RR4tlhyqtvm+Ng5EuSx89lGDhIRpKR8o oUVWdwxAKlshYtII3nKjdgvUVHo2IFex0P6q0mpoAS12L6+b0K8W5YHQwos/wIM7 Ah49FRpNh7DfHZ/jPWuZ2q2KszdhSjmgPPs616cd34z4rF1ES1DfYZu+enF6zJgk GFu6SAX/t8BkbJlTooKGhC5uV49lL4pJ6Xd402Pz5DdawMabsyW5OwuxPtaoRU50 bsOAK+pNrfB7i7EQ83j9j+aj -----END CERTIFICATE-----Generated at Tue Jun 2 21:41:44 2026 by rpki-client