$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: xQ4CaOC5R/B+dKKDVEP6YKnEAEyCCLS4o4U0XwOkkGA= Subject key identifier: 9C:3E:E4:6A:8F:1F:8D:5D:C6:60:78:61:B8:08:25:F2:B3:19:B1:14 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 0877 Signing time: Sun 31 May 2026 21:23:46 +0000 Manifest this update: Sun 31 May 2026 21:23:46 +0000 Manifest next update: Sun 07 Jun 2026 21:23:46 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: kbIv7cXEl6kn4ExI4fB4sTEjqTftp97pqt0YRJQXvxc=) 2: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: ySJ9f4a7cg7BoSELqx9I/0KDLVkwX9/nfnRYeM6OTmg=) 3: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: F6LSRzHnrTo7J01sXjb7AoMVO+sTd3XP3ZGtjca+Bu8=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: mEYTlHG5kpWGqAptPr16SuSTKtrgl88+S1qWS3rlZ1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 21:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: May 31 21:23:46 2026 GMT Not After : Jun 7 21:23:46 2026 GMT Subject: CN=6a1ca6e2-ba99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ed:a4:10:a9:9b:70:0c:4e:d0:d2:6e:e5:cc: f4:ff:a4:de:44:34:ff:0d:bc:9e:1c:f2:90:01:47: b6:f8:79:25:0c:ff:a0:76:65:fc:b0:12:86:2b:24: 92:3a:86:56:6d:c5:52:14:e6:61:57:73:0d:56:48: e8:37:40:ce:77:74:15:de:2f:4b:16:2e:a9:19:cd: 6f:1e:d7:87:a0:e6:87:a2:24:f9:db:47:43:d9:cf: 1d:27:22:62:f0:da:42:aa:3b:a3:74:0c:df:2f:4b: 53:7d:0b:15:7a:39:1d:19:e4:75:1c:87:9d:ad:e3: 45:23:fd:c7:b5:5f:a5:8d:43:e0:61:e7:2b:47:ff: 80:4f:03:bb:0f:e3:e0:b0:04:e7:cb:e1:49:1b:a6: 4a:bd:b9:24:1c:6a:81:4f:9a:c0:de:cd:a5:01:44: ec:06:79:21:9a:a0:b9:5b:ae:d9:a1:aa:63:4a:a2: b1:33:4b:5d:29:f2:ad:9e:d4:15:d9:0d:62:65:72: 23:84:74:bc:df:b5:9a:fd:79:e2:7f:aa:f1:b8:e3: 2c:71:e8:24:72:50:7d:37:4b:11:9e:64:35:4c:1b: 89:82:45:c1:52:15:2b:cf:c8:1b:46:a0:cb:52:f4: 44:d3:7b:78:4c:fe:32:0b:50:be:0a:b9:c9:2e:da: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3E:E4:6A:8F:1F:8D:5D:C6:60:78:61:B8:08:25:F2:B3:19:B1:14 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:1c:81:4b:13:76:3c:4e:b5:7d:8b:3d:23:26:c1:46:a9:ea: 6f:1a:49:de:be:bd:eb:14:d3:b0:b2:23:7e:f0:16:b4:82:4e: 9e:fb:04:c7:8d:35:e7:f0:28:fc:ba:97:67:91:f6:1c:50:61: 61:60:71:95:22:0b:5e:4d:dd:a2:e7:c5:a3:4c:9f:8b:f4:d6: b8:e2:55:2c:e8:49:5e:6e:e8:e7:1d:d8:31:5c:c6:39:b2:41: eb:75:b5:f9:45:09:fb:2a:59:7d:00:ab:52:84:71:c4:f8:3e: 85:35:fa:c2:6d:27:d4:e5:b7:ed:a1:cf:e6:14:e6:cc:96:99: 85:5c:f5:93:2e:d5:5c:78:dc:25:e4:bf:9f:2a:ed:21:36:a9: 45:94:d7:ca:82:85:73:7f:c7:93:b7:35:76:ab:3f:27:3a:13: 10:6a:3b:53:f3:5a:4d:a6:58:6c:5b:66:2e:92:27:29:d6:ef: 3b:22:48:d0:5d:d1:4c:f3:e8:71:6c:c3:0e:d9:53:88:4a:96: 63:b4:6c:d4:5b:71:45:86:96:28:13:7b:d8:35:b4:b1:fb:17: 72:f5:d0:6a:33:49:61:b8:d2:86:95:c7:b5:4a:a4:63:b6:8a: 56:e6:b5:5e:2a:19:23:0b:c2:d6:76:08:77:b5:9b:a4:11:4b: a6:8e:df:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwNTMxMjEyMzQ2WhcNMjYwNjA3MjEyMzQ2WjAYMRYwFAYD VQQDEw02YTFjYTZlMi1iYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6u2kEKmbcAxO0NJu5cz0/6TeRDT/DbyeHPKQAUe2+HklDP+gdmX8sBKGKySS OoZWbcVSFOZhV3MNVkjoN0DOd3QV3i9LFi6pGc1vHteHoOaHoiT520dD2c8dJyJi 8NpCqjujdAzfL0tTfQsVejkdGeR1HIedreNFI/3HtV+ljUPgYecrR/+ATwO7D+Pg sATny+FJG6ZKvbkkHGqBT5rA3s2lAUTsBnkhmqC5W67ZoapjSqKxM0tdKfKtntQV 2Q1iZXIjhHS837Wa/Xnif6rxuOMscegkclB9N0sRnmQ1TBuJgkXBUhUrz8gbRqDL UvRE03t4TP4yC1C+CrnJLtoy3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJw+5GqP H41dxmB4YbgIJfKzGbEUMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARxyBSxN2PE61fYs9IybBRqnqbxpJ3r696xTTsLIjfvAWtIJOnvsEx4015/Ao /LqXZ5H2HFBhYWBxlSILXk3doufFo0yfi/TWuOJVLOhJXm7o5x3YMVzGObJB63W1 +UUJ+ypZfQCrUoRxxPg+hTX6wm0n1OW37aHP5hTmzJaZhVz1ky7VXHjcJeS/nyrt ITapRZTXyoKFc3/Hk7c1dqs/JzoTEGo7U/NaTaZYbFtmLpInKdbvOyJI0F3RTPPo cWzDDtlTiEqWY7Rs1FtxRYaWKBN72DW0sfsXcvXQajNJYbjShpXHtUqkY7aKVua1 XioZIwvC1nYId7WbpBFLpo7fIA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:56 2026 by rpki-client