$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: ya9r4VQWdtxv30C4t8GpG++SC0lNchi3UYIZnoN4izs= Subject key identifier: 01:28:C9:43:38:61:96:11:36:C4:C4:09:9A:7D:D4:07:CD:90:95:BD Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 0147 Signing time: Sun 21 Jun 2026 05:17:44 +0000 Manifest this update: Sun 21 Jun 2026 05:17:44 +0000 Manifest next update: Sun 28 Jun 2026 05:17:44 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: d3s1H+d/QSBftd1e7UHxowrLmj8X7m+/HGS5eE7jwFU=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Jun 2026 05:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Jun 21 05:17:44 2026 GMT Not After : Jun 28 05:17:44 2026 GMT Subject: CN=6a3773f8-3736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:90:74:c8:cf:e7:18:59:8a:d3:0b:13:9f: 1f:cf:4a:fe:41:13:0b:45:c4:ff:21:6a:4d:8e:6e: 71:88:8a:a8:9c:e9:c6:6f:f1:ec:14:dd:35:65:0e: 2e:6c:8b:a7:0b:c9:52:b6:df:4d:b5:81:27:ea:90: 4f:72:57:c4:7b:13:8e:d6:1f:b7:30:24:ec:53:9b: 82:f7:83:8a:21:f8:0b:e8:11:bb:c7:aa:62:27:20: ec:3f:35:59:60:84:2e:d1:ff:94:3f:df:41:af:7f: a7:c2:bc:6a:e6:3a:7b:d2:f0:83:00:2e:5e:4f:20: 84:3f:99:04:ab:90:32:57:af:eb:05:da:be:9a:33: 2b:69:d0:42:83:9f:22:9f:13:7e:d1:ff:04:03:be: 9f:fc:65:8e:97:78:97:b1:ae:16:ca:e0:ca:b4:3d: 3a:98:bf:68:16:24:6c:a7:09:cd:2e:b9:78:17:6e: 64:ef:ae:74:ff:3a:eb:ad:6b:51:33:c7:17:89:7a: b5:31:c3:6c:5b:e1:a0:0d:1b:44:79:53:fb:c1:61: 39:c1:2f:71:13:da:fa:21:4d:b6:86:76:87:a8:3d: fc:81:5a:69:ca:ff:34:47:c0:af:38:48:34:1c:4f: d7:62:62:c3:61:78:91:42:80:23:5d:3a:ec:d3:cc: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:28:C9:43:38:61:96:11:36:C4:C4:09:9A:7D:D4:07:CD:90:95:BD X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:10:36:c5:78:ce:62:de:29:98:b0:47:da:7b:c8:b6:97:89: 6e:32:c2:56:aa:6a:fc:3c:55:7a:be:29:42:a5:10:03:93:48: ae:43:49:21:69:f0:65:e4:78:40:a0:a0:39:c7:0f:bd:66:b8: bd:ab:a8:b6:aa:e9:8d:23:df:59:57:03:a3:7c:c2:32:a3:9f: 9b:0d:c8:5e:dd:fa:0c:7f:9d:aa:aa:c0:96:23:8b:c7:2a:e8: f2:bc:87:0a:9c:44:c2:c2:6d:dc:7b:f9:d5:fb:60:b8:a9:00: ab:29:3c:8b:2e:92:ed:89:18:11:d4:fb:87:04:08:80:48:e7: be:fa:cd:9f:3f:2a:83:67:37:d4:60:3f:b3:29:4b:c3:ac:24: fb:0e:41:2f:db:e2:02:8e:81:31:b1:18:44:df:0e:b6:9c:0a: d3:84:35:68:f0:be:ad:6a:fd:21:3f:f6:f3:70:6e:22:4e:e5: a2:9d:92:ee:84:d4:78:96:dc:79:a8:1a:54:99:2e:92:fe:95: 9c:76:66:fc:0e:2f:43:bf:00:cb:ff:62:60:2c:15:6f:bf:64: 89:40:5d:56:01:c1:8e:f8:56:3a:2e:bd:ab:9f:cb:c3:ab:11: 90:ef:f4:ab:3d:83:9c:c7:49:81:59:4d:73:74:5f:53:e1:ee: 0a:37:c1:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjYwNjIxMDUxNzQ0WhcNMjYwNjI4MDUxNzQ0WjAYMRYwFAYD VQQDEw02YTM3NzNmOC0zNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3iQdMjP5xhZitMLE58fz0r+QRMLRcT/IWpNjm5xiIqonOnGb/HsFN01ZQ4u bIunC8lStt9NtYEn6pBPclfEexOO1h+3MCTsU5uC94OKIfgL6BG7x6piJyDsPzVZ YIQu0f+UP99Br3+nwrxq5jp70vCDAC5eTyCEP5kEq5AyV6/rBdq+mjMradBCg58i nxN+0f8EA76f/GWOl3iXsa4WyuDKtD06mL9oFiRspwnNLrl4F25k7650/zrrrWtR M8cXiXq1McNsW+GgDRtEeVP7wWE5wS9xE9r6IU22hnaHqD38gVppyv80R8CvOEg0 HE/XYmLDYXiRQoAjXTrs08zxkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEoyUM4 YZYRNsTECZp91AfNkJW9MB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArRA2xXjOYt4pmLBH2nvItpeJbjLCVqpq/DxVer4pQqUQA5NIrkNJIWnwZeR4 QKCgOccPvWa4vauotqrpjSPfWVcDo3zCMqOfmw3IXt36DH+dqqrAliOLxyro8ryH CpxEwsJt3Hv51ftguKkAqyk8iy6S7YkYEdT7hwQIgEjnvvrNnz8qg2c31GA/sylL w6wk+w5BL9viAo6BMbEYRN8OtpwK04Q1aPC+rWr9IT/283BuIk7lop2S7oTUeJbc eagaVJkukv6VnHZm/A4vQ78Ay/9iYCwVb79kiUBdVgHBjvhWOi69q5/Lw6sRkO/0 qz2DnMdJgVlNc3RfU+HuCjfBzQ== -----END CERTIFICATE-----Generated at Sun Jun 21 13:57:53 2026 by rpki-client