$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: OZC/e/6GDPAi8EaCDLQchvjJC2FReDnbjpKY2qEiqDk= Subject key identifier: 25:34:CD:DB:04:9E:C5:CE:B7:52:AD:A0:7A:55:CD:AF:A6:B0:F7:F4 Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 03E9 Signing time: Thu 21 May 2026 00:37:07 +0000 Manifest this update: Thu 21 May 2026 00:37:07 +0000 Manifest next update: Thu 28 May 2026 00:37:07 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: y82T13tcAzUi497eR1c8UbpmX+OTrbAwTPNqBU7Frkg=) 2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: k2oBvP0OHpEhn0rFjfJBUkA03yXoD6fncIA5rTRi8ZU=) 3: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: May 21 00:37:07 2026 GMT Not After : May 28 00:37:07 2026 GMT Subject: CN=6a0e53b3-b3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:eb:65:6e:b5:1a:f0:98:69:6f:37:bb:da: 6c:d4:ca:0d:b6:88:f7:f3:09:48:b9:ba:71:e3:a4: d7:89:98:20:a5:0f:f7:b0:bd:2a:de:f0:bf:bd:c8: 8f:aa:8f:2e:38:64:2a:0e:3c:ef:7f:6d:a3:26:30: b5:6d:a9:90:61:69:8a:c4:b7:f8:d8:e0:59:a1:67: b8:5f:18:be:28:cd:00:1d:dc:3c:7e:4d:6b:ce:d5: 28:19:c6:13:26:a7:e0:6e:6e:9f:d4:2f:c0:19:a3: 9f:46:47:cb:f5:53:34:d0:33:28:44:e8:75:92:21: 33:fa:6d:c9:bc:c8:84:7e:07:c9:cb:2a:5a:93:18: b8:ff:4d:b1:65:09:c3:2b:b8:9d:68:99:c2:c6:30: fd:d9:4b:b4:a8:aa:3b:0d:99:85:c6:e3:f4:a4:52: b1:ec:1e:48:b0:15:46:ba:9a:ec:10:e1:fa:d0:b1: ff:c8:2b:7e:6d:6c:59:d6:91:18:9b:20:33:fb:fb: e0:2f:4f:51:e5:42:c8:5f:5d:83:2f:aa:ed:9f:61: da:08:3b:22:c8:c1:05:7a:37:a2:de:ea:e6:f2:84: 07:3f:f2:7b:2e:09:41:9d:23:57:fb:6f:f9:41:84: 98:1b:ef:19:19:69:19:22:37:0c:c3:34:9a:6b:ef: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:CD:DB:04:9E:C5:CE:B7:52:AD:A0:7A:55:CD:AF:A6:B0:F7:F4 X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:64:40:d2:37:9e:ae:6c:f8:34:cc:af:3a:d7:ae:89:e1:1b: 46:00:44:9b:2e:57:6c:42:80:bc:0f:d6:67:e6:54:aa:3b:65: 25:81:d9:5e:65:de:f5:1d:e4:8e:94:8a:72:0a:4c:fb:92:78: f6:d3:7a:65:5f:5b:9e:a6:81:18:19:35:fa:5b:b2:f6:46:16: 4b:15:e9:f5:4c:cd:85:ac:95:52:9f:93:72:52:7a:1a:6e:cf: f5:b2:a4:9d:8a:ea:2c:0c:51:d9:9f:3e:ff:29:bc:23:e6:bc: 2b:bb:b8:0f:e3:a7:f8:b7:83:f6:93:1c:a3:38:f9:48:99:40: f2:22:5a:cb:49:dd:73:95:90:2f:56:66:a7:57:a7:66:63:84: b0:10:7d:dd:89:e1:0a:5e:99:51:4b:c1:b5:bd:99:45:ae:77: e8:ca:51:6b:2a:37:98:49:01:cb:24:d9:aa:50:3a:b4:bb:b7: 69:1a:4b:48:37:a5:fd:87:0d:fa:e9:78:e4:c6:34:52:4c:54: 60:b9:47:0e:7d:97:22:cd:9a:62:85:f4:7b:2a:90:24:9a:68: 50:cf:06:53:bf:c3:14:ff:6b:a6:f8:eb:cf:33:92:54:f3:66: cf:78:35:cc:2d:8e:43:d0:53:e1:0f:97:eb:48:16:b2:3d:40: 3e:3d:60:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjYwNTIxMDAzNzA3WhcNMjYwNTI4MDAzNzA3WjAYMRYwFAYD VQQDEw02YTBlNTNiMy1iM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmczrZW61GvCYaW83u9ps1MoNtoj38wlIubpx46TXiZggpQ/3sL0q3vC/vciP qo8uOGQqDjzvf22jJjC1bamQYWmKxLf42OBZoWe4Xxi+KM0AHdw8fk1rztUoGcYT Jqfgbm6f1C/AGaOfRkfL9VM00DMoROh1kiEz+m3JvMiEfgfJyypakxi4/02xZQnD K7idaJnCxjD92Uu0qKo7DZmFxuP0pFKx7B5IsBVGuprsEOH60LH/yCt+bWxZ1pEY myAz+/vgL09R5ULIX12DL6rtn2HaCDsiyMEFejei3urm8oQHP/J7LglBnSNX+2/5 QYSYG+8ZGWkZIjcMwzSaa+8+EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCU0zdsE nsXOt1KtoHpVza+msPf0MB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxmRA0jeermz4NMyvOteuieEbRgBEmy5XbEKAvA/WZ+ZUqjtlJYHZXmXe9R3k jpSKcgpM+5J49tN6ZV9bnqaBGBk1+luy9kYWSxXp9UzNhayVUp+TclJ6Gm7P9bKk nYrqLAxR2Z8+/ym8I+a8K7u4D+On+LeD9pMcozj5SJlA8iJay0ndc5WQL1Zmp1en ZmOEsBB93YnhCl6ZUUvBtb2ZRa536MpRayo3mEkByyTZqlA6tLu3aRpLSDel/YcN +ul45MY0UkxUYLlHDn2XIs2aYoX0eyqQJJpoUM8GU7/DFP9rpvjrzzOSVPNmz3g1 zC2OQ9BT4Q+X60gWsj1APj1g8g== -----END CERTIFICATE-----Generated at Thu May 21 10:20:19 2026 by rpki-client