$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: BFSn8RKKIvZkRcW2I/VoKIbkSRf09DAfrFgJAbTid0g= Subject key identifier: 98:4C:D4:0B:AA:97:A5:1E:71:CD:F1:0D:63:C3:56:3C:BC:E7:F5:60 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1225 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 121B Signing time: Tue 02 Jun 2026 17:07:50 +0000 Manifest this update: Tue 02 Jun 2026 17:07:50 +0000 Manifest next update: Tue 09 Jun 2026 17:07:50 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: zbS83harpt4QkP4bMX+2w2354PHjzcdUku14SVKjJjA=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4645 (0x1225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Jun 2 17:07:50 2026 GMT Not After : Jun 9 17:07:50 2026 GMT Subject: CN=6a1f0de6-1932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0f:e9:ea:1e:ef:95:b7:91:33:d7:71:b4:c9: 5b:fd:f7:66:de:93:07:e8:14:9b:59:94:06:65:86: 1d:94:47:bb:e0:0a:f0:7f:17:fb:97:48:13:f5:ed: de:3c:15:cb:d7:b4:f3:e0:56:d6:de:4d:94:53:39: 84:ee:74:7e:47:0d:86:af:e0:98:5c:fe:4a:5a:cf: 4b:3a:e1:36:96:50:61:93:8f:5a:7b:a9:a7:0d:1b: 0c:20:b2:ae:e9:d7:b5:48:e7:a2:da:11:b4:e4:68: 07:0b:c2:98:a2:e2:fe:51:3f:c8:83:fb:04:71:88: 74:67:9e:a8:fb:b6:95:c8:38:b7:f1:56:6e:39:b2: e9:ce:28:24:33:ca:df:3c:bf:51:78:4c:df:88:eb: b1:e0:c4:00:3a:f1:b5:f0:b0:26:19:0b:d0:3a:38: 02:e7:10:f2:1a:b8:97:78:65:4f:47:0d:f7:59:35: fd:e5:1c:ae:3e:a2:fe:ad:f1:28:d7:2f:81:59:e4: e2:c1:e9:a1:94:82:a7:b6:c4:c9:48:3c:da:ab:22: 66:cf:55:7d:45:72:7a:5d:11:9b:7f:5e:83:5f:79: dd:85:5e:83:93:c1:0c:8a:59:fc:61:1f:67:a5:0c: 91:e5:ff:8c:c2:3b:19:a8:66:fc:84:56:e2:a5:ed: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4C:D4:0B:AA:97:A5:1E:71:CD:F1:0D:63:C3:56:3C:BC:E7:F5:60 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c4:0b:e3:87:29:ab:5f:f3:ce:02:57:b7:74:40:de:18:57: 6c:e4:2c:18:ed:27:05:48:f3:ea:ec:9c:c7:28:dc:02:d7:3d: 44:c9:84:45:74:59:d5:23:d7:39:96:0a:14:76:c6:a0:45:ad: 20:e2:06:82:2d:d2:d0:17:5f:1a:e5:d5:8c:57:74:e1:2c:9a: 0f:d8:1b:0f:3c:26:cf:33:27:f5:4d:ca:ee:55:f8:08:23:a5: 05:b1:7a:3c:62:f3:9f:9c:19:f7:c8:f4:d7:be:a5:2d:66:f7: 41:1f:b4:ea:a7:47:f0:62:2b:4e:02:2b:1d:e7:a1:a2:f8:33: de:10:52:8a:bb:8a:97:a9:da:08:c2:c7:06:2d:2e:0c:58:e4: 7c:fc:05:d5:1e:a0:23:d3:91:1e:ab:c3:f8:83:50:8d:98:f4: 64:87:33:d5:23:00:02:ac:76:8c:63:5f:16:c7:34:50:4d:2c: bd:ef:99:91:84:67:e4:7c:71:94:3e:ce:3b:fc:a0:29:96:55: 16:73:40:db:56:6d:af:76:df:a9:c7:f8:e3:7e:48:4a:4b:44: 9a:51:30:b2:d8:d0:98:c3:42:a1:e9:a5:13:b6:a9:e3:48:b0: 0a:a9:27:b1:8c:30:e6:9e:a2:a2:ae:72:e2:3e:a8:4a:6d:5e: ca:11:5f:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjYwNjAyMTcwNzUwWhcNMjYwNjA5MTcwNzUwWjAYMRYwFAYD VQQDEw02YTFmMGRlNi0xOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg/p6h7vlbeRM9dxtMlb/fdm3pMH6BSbWZQGZYYdlEe74Arwfxf7l0gT9e3e PBXL17Tz4FbW3k2UUzmE7nR+Rw2Gr+CYXP5KWs9LOuE2llBhk49ae6mnDRsMILKu 6de1SOei2hG05GgHC8KYouL+UT/Ig/sEcYh0Z56o+7aVyDi38VZuObLpzigkM8rf PL9ReEzfiOux4MQAOvG18LAmGQvQOjgC5xDyGriXeGVPRw33WTX95RyuPqL+rfEo 1y+BWeTiwemhlIKntsTJSDzaqyJmz1V9RXJ6XRGbf16DX3ndhV6Dk8EMiln8YR9n pQyR5f+MwjsZqGb8hFbipe3XBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJhM1Auq l6Uecc3xDWPDVjy85/VgMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvcQL44cpq1/zzgJXt3RA3hhXbOQsGO0nBUjz6uycxyjcAtc9RMmERXRZ1SPX OZYKFHbGoEWtIOIGgi3S0BdfGuXVjFd04SyaD9gbDzwmzzMn9U3K7lX4CCOlBbF6 PGLzn5wZ98j0176lLWb3QR+06qdH8GIrTgIrHeehovgz3hBSiruKl6naCMLHBi0u DFjkfPwF1R6gI9ORHqvD+INQjZj0ZIcz1SMAAqx2jGNfFsc0UE0sve+ZkYRn5Hxx lD7OO/ygKZZVFnNA21Ztr3bfqcf4435ISktEmlEwstjQmMNCoemlE7ap40iwCqkn sYww5p6ioq5y4j6oSm1eyhFfKg== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:40 2026 by rpki-client