$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: fBzS3oA5YGVBHubhB/1YoEjgTUogXI7jMrydMPlLr2s= Subject key identifier: BD:D6:6C:1C:9B:AC:75:FC:DD:CA:DE:C6:68:DF:63:5B:1D:7D:84:27 Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 3C Signing time: Mon 01 Jun 2026 09:22:27 +0000 Manifest this update: Mon 01 Jun 2026 09:22:26 +0000 Manifest next update: Mon 08 Jun 2026 09:22:26 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: st1oqkbujYLtttcyRs1JiG7F7qKhMDYHFEi3B9rco00=) 2: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) 3: 604F4E3C0D6611F1AAA528DE1B3D8C67.roa (hash: zn+Y2EzBvu1Td2sgtLKQfgs/gBSjMOZeXn2CBE9VYms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: Jun 1 09:22:26 2026 GMT Not After : Jun 8 09:22:26 2026 GMT Subject: CN=6a1d4f53-e420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:59:8e:2d:8a:29:99:7e:9f:a6:d0:8a:24: 24:7b:d2:a2:c0:32:fb:dd:b4:42:5a:15:ca:a2:c9: 87:75:b8:2c:54:90:57:48:0a:d1:e1:76:dc:63:5e: 9a:ae:1e:a6:30:b6:02:97:4f:1e:b6:a5:2d:57:17: ba:e2:f0:97:d5:5d:7d:f9:b2:ba:a5:b9:1e:da:24: 93:ff:d1:85:d6:81:39:7e:12:a1:24:10:c7:3f:e3: 43:06:66:66:11:bd:f7:ff:f8:fb:a3:40:a7:cb:cb: 7a:3c:e6:03:34:5b:74:a0:e0:b3:b5:f3:39:10:f3: f7:69:a5:a0:14:49:30:c8:92:9a:5f:48:a8:1d:09: e9:89:9f:31:dd:cb:46:bb:a8:9d:65:1e:36:43:0d: 7b:d9:e0:e4:f3:44:2a:ca:92:9c:21:d6:5f:86:f2: ad:76:d1:b8:38:1c:d9:f3:60:22:a8:b5:9a:d2:dc: 31:c4:db:86:31:67:0e:26:37:b6:87:88:f8:0f:f1: fd:49:8f:58:60:99:14:3b:d4:9d:37:07:a2:12:c5: 33:df:68:ae:41:b8:9b:38:87:80:59:37:91:df:03: 57:5e:1a:46:35:2d:51:bc:95:72:fd:c3:3e:03:b8: ef:33:8e:74:39:bb:21:03:22:a4:4d:8c:02:59:69: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D6:6C:1C:9B:AC:75:FC:DD:CA:DE:C6:68:DF:63:5B:1D:7D:84:27 X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:12:9a:16:6b:97:57:c4:f2:6f:c0:cb:4f:32:3d:0d:77:e9: 29:e8:92:91:ca:52:0d:0a:bd:92:a3:1c:0d:9c:cb:b0:ce:31: 26:ad:7b:c3:b8:2a:f1:6f:43:99:99:b2:ea:51:7b:0c:0c:08: de:40:d6:f3:8e:b5:0f:75:a5:6a:f5:35:3c:ac:8c:a6:ea:f8: b6:b4:b6:c2:a7:27:a5:67:82:59:de:cc:2a:b1:67:e6:2e:17: a1:76:8b:30:77:5f:a5:ca:61:44:0b:c4:2b:18:09:c3:53:29: 41:2b:fa:94:23:bd:5f:bf:a0:77:66:a7:eb:07:11:dd:a3:df: 1c:7c:98:e2:f7:39:17:d0:80:42:7c:fe:fb:7b:28:7c:a3:aa: e7:52:a3:f9:df:0a:82:60:84:02:b8:97:8d:70:a8:dd:ee:61: 64:d7:1c:fa:a1:b8:d5:6a:45:de:7b:1a:f4:8b:2b:ee:4d:6e: 3e:5f:c4:96:12:19:ef:3d:c3:6c:72:7f:c6:53:d4:7f:f7:5a: 4e:c7:47:58:21:46:b5:37:c7:83:62:fa:f7:e4:af:66:d8:8a: e9:c1:e9:6e:77:ec:f9:6b:c4:55:43:c3:2c:69:62:75:24:f0: d8:2c:d0:f3:87:3a:fa:8d:cb:99:2b:fe:28:ab:c7:79:17:a5: dd:83:3b:17 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD OUNGOUNDMjAeFw0yNjA2MDEwOTIyMjZaFw0yNjA2MDgwOTIyMjZaMBgxFjAUBgNV BAMTDTZhMWQ0ZjUzLWU0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSRlmOLYopmX6fptCKJCR70qLAMvvdtEJaFcqiyYd1uCxUkFdICtHhdtxjXpqu HqYwtgKXTx62pS1XF7ri8JfVXX35srqluR7aJJP/0YXWgTl+EqEkEMc/40MGZmYR vff/+PujQKfLy3o85gM0W3Sg4LO18zkQ8/dppaAUSTDIkppfSKgdCemJnzHdy0a7 qJ1lHjZDDXvZ4OTzRCrKkpwh1l+G8q120bg4HNnzYCKotZrS3DHE24YxZw4mN7aH iPgP8f1Jj1hgmRQ71J03B6ISxTPfaK5BuJs4h4BZN5HfA1deGkY1LVG8lXL9wz4D uO8zjnQ5uyEDIqRNjAJZaUQrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvdZsHJus dfzdyt7GaN9jWx19hCcwHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3 QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MzE0LzM2NTk3NEM2MDk3QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVu SWFTY3lDaTZkdThuUG5NSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB3EpoWa5dXxPJvwMtPMj0Nd+kp6JKRylINCr2SoxwNnMuwzjEmrXvDuCrxb0OZ mbLqUXsMDAjeQNbzjrUPdaVq9TU8rIym6vi2tLbCpyelZ4JZ3swqsWfmLhehdosw d1+lymFEC8QrGAnDUylBK/qUI71fv6B3ZqfrBxHdo98cfJji9zkX0IBCfP77eyh8 o6rnUqP53wqCYIQCuJeNcKjd7mFk1xz6objVakXeexr0iyvuTW4+X8SWEhnvPcNs cn/GU9R/91pOx0dYIUa1N8eDYvr35K9m2Irpwelud+z5a8RVQ8MsaWJ1JPDYLNDz hzr6jcuZK/4oq8d5F6XdgzsX -----END CERTIFICATE-----Generated at Tue Jun 2 22:49:00 2026 by rpki-client