$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: eIAnZeQy3vXARzF/0vLOqeALIru68NTcoVBeatPd5Tc= Subject key identifier: 3F:97:16:AC:7F:5D:B8:DA:FA:FD:DF:1C:DE:90:63:1C:A5:52:79:C8 Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 04B6 Signing time: Wed 20 May 2026 23:57:23 +0000 Manifest this update: Wed 20 May 2026 23:57:23 +0000 Manifest next update: Wed 27 May 2026 23:57:23 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: eLQWNU0MGCAqsLk1p6e6LVZ1aqhAwDW+JquMcdlj2Pk=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2RXStLDjyOeuSTsmkifmHRekLcbCRcqX4watjvDv81g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: May 20 23:57:23 2026 GMT Not After : May 27 23:57:23 2026 GMT Subject: CN=6a0e4a63-e66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:7d:f7:26:3d:1a:03:19:b5:95:24:0d:1e: 0f:05:c9:a8:71:1b:98:59:69:c2:0d:89:9e:6a:97: 96:09:9b:77:9f:23:a0:9a:f9:3f:f7:99:ff:a3:ba: 0a:f4:c5:db:69:bd:e9:2a:7b:a2:0c:2a:0d:e8:3e: b7:05:bb:56:99:40:9f:6d:f5:13:57:81:56:15:e5: cc:de:6b:8d:65:d1:59:c0:c8:15:5d:9f:21:73:7c: c1:aa:24:17:6a:9d:68:c3:55:b3:79:09:e2:e3:28: 03:3c:cd:75:e4:e8:6b:99:86:fc:b9:29:43:e2:07: c2:20:c8:84:cb:19:fb:59:d0:38:90:b3:11:4d:af: ca:a9:e2:79:1c:e8:9a:40:66:fc:49:92:6b:f1:26: 90:34:5e:20:d6:e1:77:4f:08:e4:a5:f3:08:56:4d: 19:82:51:56:89:40:76:d5:dc:05:72:3b:88:9a:22: c6:99:78:7f:98:56:89:ae:57:3e:45:2b:48:b1:b3: eb:2b:83:d9:d9:ec:e2:1d:45:09:1f:22:da:51:39: d4:e7:e2:3a:e9:b2:be:4a:08:81:3c:3f:9b:ab:81: ff:eb:f5:96:00:ec:7c:7d:7f:b1:ee:0b:34:fd:fc: 5f:f3:ef:38:ba:52:80:59:89:26:84:f4:4d:69:7e: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:97:16:AC:7F:5D:B8:DA:FA:FD:DF:1C:DE:90:63:1C:A5:52:79:C8 X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5c:16:07:33:9f:44:2f:36:33:67:69:58:44:80:50:2c:4d: 41:fd:cc:d1:f9:3d:20:73:5a:e0:cd:e2:40:78:02:5e:f0:40: f4:e1:df:d1:d4:77:64:f2:cb:db:2c:ee:e7:a4:a2:98:bf:91: 29:fe:ad:2f:65:85:6a:f1:00:4a:37:97:60:f5:fa:4f:d7:94: 58:44:13:01:a2:55:44:a0:d4:82:83:23:db:0d:09:e5:f0:83: 8e:3a:a5:b2:e9:93:0e:f8:07:3a:d5:74:6b:f7:c5:5d:02:99: a9:5e:34:8e:16:e9:5b:46:46:7a:6f:64:42:c2:52:30:c7:14: 1e:9c:aa:64:36:76:62:1b:6d:e8:9b:e2:62:70:17:97:4f:eb: 08:20:09:5d:39:fa:25:72:c7:34:8f:6b:5d:b0:84:cf:0f:7f: e6:76:cd:e9:22:2a:f8:2c:07:d2:12:b5:b7:5b:d2:05:34:f2: bd:9e:ce:0e:c7:93:44:f1:3c:d1:fb:64:5e:ef:05:cf:cd:cc: 5a:88:34:a8:71:8a:b2:ad:a6:66:71:37:64:23:13:de:77:e6: a1:f6:51:3b:36:cb:20:db:40:5d:25:53:76:83:77:5e:5e:bf: 80:43:2f:2a:7e:26:b8:bb:cf:1e:50:e0:ad:1e:2d:da:a3:57: 0f:50:db:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjYwNTIwMjM1NzIzWhcNMjYwNTI3MjM1NzIzWjAYMRYwFAYD VQQDEw02YTBlNGE2My1lNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+J99yY9GgMZtZUkDR4PBcmocRuYWWnCDYmeapeWCZt3nyOgmvk/95n/o7oK 9MXbab3pKnuiDCoN6D63BbtWmUCfbfUTV4FWFeXM3muNZdFZwMgVXZ8hc3zBqiQX ap1ow1WzeQni4ygDPM115OhrmYb8uSlD4gfCIMiEyxn7WdA4kLMRTa/KqeJ5HOia QGb8SZJr8SaQNF4g1uF3TwjkpfMIVk0ZglFWiUB21dwFcjuImiLGmXh/mFaJrlc+ RStIsbPrK4PZ2eziHUUJHyLaUTnU5+I66bK+SgiBPD+bq4H/6/WWAOx8fX+x7gs0 /fxf8+84ulKAWYkmhPRNaX6FpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+XFqx/ Xbja+v3fHN6QYxylUnnIMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApFwWBzOfRC82M2dpWESAUCxNQf3M0fk9IHNa4M3iQHgCXvBA9OHf0dR3ZPLL 2yzu56SimL+RKf6tL2WFavEASjeXYPX6T9eUWEQTAaJVRKDUgoMj2w0J5fCDjjql sumTDvgHOtV0a/fFXQKZqV40jhbpW0ZGem9kQsJSMMcUHpyqZDZ2Yhtt6JviYnAX l0/rCCAJXTn6JXLHNI9rXbCEzw9/5nbN6SIq+CwH0hK1t1vSBTTyvZ7ODseTRPE8 0ftkXu8Fz83MWog0qHGKsq2mZnE3ZCMT3nfmofZROzbLINtAXSVTdoN3Xl6/gEMv Kn4muLvPHlDgrR4t2qNXD1DbbA== -----END CERTIFICATE-----Generated at Thu May 21 10:23:34 2026 by rpki-client