$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft File: 3yKppXt9OorrEk1pDHkXBmtNtZ4.mft (raw, json) Hash identifier: rBg+oM0BXItGRZRJO5BYaGzS95MeZK0aN6wQavhjn7s= Subject key identifier: E8:12:64:30:1C:95:0B:FB:7D:1D:45:77:38:EB:97:AB:80:5B:57:53 Authority key identifier: DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E Certificate issuer: /CN=A91DE19B/serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft Manifest number: 7F Signing time: Thu 21 May 2026 07:51:30 +0000 Manifest this update: Thu 21 May 2026 07:51:29 +0000 Manifest next update: Thu 28 May 2026 07:51:29 +0000 Files and hashes: 1: 3yKppXt9OorrEk1pDHkXBmtNtZ4.crl (hash: wFyFRG1mgGIDubiRD3K2DXy712/RMx0zVAMvPIA2fnA=) 2: DA06E7EAA37511F09017D760C4F9AE02.roa (hash: jDv+Js4PBwNUeHPmXEMSjePprI/MWg7gMm1K3QYqJ6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:51:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE19B, serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Validity Not Before: May 21 07:51:29 2026 GMT Not After : May 28 07:51:29 2026 GMT Subject: CN=6a0eb982-8194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:71:bf:0a:d0:ca:26:8f:26:2d:29:fa:c6: b3:d3:be:7a:07:0c:51:51:d2:1c:b7:f7:5d:26:58: d0:6e:50:0f:0c:1c:88:c3:21:69:d2:07:fe:08:91: 16:40:5d:1c:e2:0b:1d:62:c2:62:a6:f6:dd:de:21: 82:7d:93:79:18:1b:81:48:1c:42:41:87:a4:e2:7b: 30:9c:01:35:72:f5:ca:89:5e:0c:0c:f8:ed:d8:4f: 1e:30:3e:1a:58:2e:cb:56:df:8a:70:c1:a7:63:4f: e4:57:57:37:2f:89:fe:82:d5:c1:fe:3a:0c:69:65: 6c:c5:bc:52:a0:82:58:dc:3f:1b:cf:60:57:78:ce: a2:08:94:a5:1f:5e:fd:1f:78:75:37:ee:af:fb:85: 7c:0e:02:31:d6:ad:bc:f9:dd:e7:07:38:3c:46:6c: 99:d3:25:ca:c3:9d:8e:1b:27:e5:80:5a:81:80:2a: f8:01:2c:03:80:d5:d1:c7:ba:b2:35:ab:45:bb:5a: 1f:df:02:09:34:63:f9:57:9a:1d:60:61:bc:af:f2: 09:07:66:2c:b3:09:e1:d7:cb:00:36:d2:54:e2:c2: 50:c6:a4:71:4a:48:90:34:ba:6a:5e:f7:98:4d:05: cd:da:00:79:5d:55:d3:3d:8c:60:17:60:64:4e:03: 79:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:12:64:30:1C:95:0B:FB:7D:1D:45:77:38:EB:97:AB:80:5B:57:53 X509v3 Authority Key Identifier: keyid:DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:06:c3:67:d8:c3:99:f4:14:f8:f8:6e:9c:74:b2:95:c9:8e: 3e:3b:95:97:51:08:32:25:8a:73:cc:9a:ec:0b:30:27:ef:a1: 94:f0:42:8c:49:11:ff:ef:50:6f:2a:99:17:c4:49:e7:56:c1: 3f:9a:62:b0:48:83:ca:db:bb:69:b7:80:79:a3:2d:7d:82:e1: d0:9e:eb:da:25:11:e3:f1:c6:b2:30:06:f9:53:f9:1f:6a:9f: 3e:55:33:bd:19:1b:62:56:8d:2a:0f:07:cc:48:62:d6:0b:31: ce:de:16:b6:80:27:4a:0c:88:c0:7c:a5:db:47:0c:71:06:f0: e4:98:8d:01:f6:a0:b0:b0:11:00:1d:11:5a:39:72:c7:28:29: 21:98:f5:a8:c7:e7:c5:68:f4:a8:9a:52:07:e3:36:d5:02:e3: 66:69:d0:3d:8f:8f:bd:a0:9d:42:b8:95:40:84:fa:39:ce:cb: 6b:24:b2:2c:d6:bc:ed:f6:54:98:4e:f9:39:aa:3c:6b:8e:0d: 1b:87:50:fb:f2:f2:d9:c0:6a:eb:4e:17:43:9c:86:0d:76:c8: 05:fe:ba:62:d1:12:55:35:ef:34:63:d1:32:76:37:de:d2:7a: 3c:8a:f6:a1:de:2e:c7:16:60:62:75:7d:eb:1d:e1:ca:d6:b0: b7:e5:cc:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxOUIxMTAvBgNVBAUTKERGMjJBOUE1N0I3RDNBOEFFQjEyNEQ2OTBDNzkxNzA2 NkI0REI1OUUwHhcNMjYwNTIxMDc1MTI5WhcNMjYwNTI4MDc1MTI5WjAYMRYwFAYD VQQDEw02YTBlYjk4Mi04MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsilxvwrQyiaPJi0p+saz0756BwxRUdIct/ddJljQblAPDByIwyFp0gf+CJEW QF0c4gsdYsJipvbd3iGCfZN5GBuBSBxCQYek4nswnAE1cvXKiV4MDPjt2E8eMD4a WC7LVt+KcMGnY0/kV1c3L4n+gtXB/joMaWVsxbxSoIJY3D8bz2BXeM6iCJSlH179 H3h1N+6v+4V8DgIx1q28+d3nBzg8RmyZ0yXKw52OGyflgFqBgCr4ASwDgNXRx7qy NatFu1of3wIJNGP5V5odYGG8r/IJB2Ysswnh18sANtJU4sJQxqRxSkiQNLpqXveY TQXN2gB5XVXTPYxgF2BkTgN5vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOgSZDAc lQv7fR1Fdzjrl6uAW1dTMB8GA1UdIwQYMBaAFN8iqaV7fTqK6xJNaQx5FwZrTbWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTE5Qi9EQUI4NUUyOEEz NzMxMUYwOEY4OTFDMzdDNEY5QUUwMi8zeUtwcFh0OU9vcnJFazFwREhrWEJtdE50 WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5S3BwWHQ5T29yckVrMXBESGtYQm10TnRaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTE5Qi9EQUI4NUUyOEEzNzMxMUYwOEY4OTFDMzdDNEY5QUUwMi8zeUtwcFh0OU9v cnJFazFwREhrWEJtdE50WjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeAbDZ9jDmfQU+PhunHSylcmOPjuVl1EIMiWKc8ya7AswJ++hlPBCjEkR/+9Q byqZF8RJ51bBP5pisEiDytu7abeAeaMtfYLh0J7r2iUR4/HGsjAG+VP5H2qfPlUz vRkbYlaNKg8HzEhi1gsxzt4WtoAnSgyIwHyl20cMcQbw5JiNAfagsLARAB0RWjly xygpIZj1qMfnxWj0qJpSB+M21QLjZmnQPY+PvaCdQriVQIT6Oc7LaySyLNa87fZU mE75Oao8a44NG4dQ+/Ly2cBq604XQ5yGDXbIBf66YtESVTXvNGPRMnY33tJ6PIr2 od4uxxZgYnV96x3hytawt+XMcA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:48 2026 by rpki-client