$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: Ihc9t/+UWT3Y55TQTjrPWG1aISY0uBzxXb6SqgESNiM= Subject key identifier: 4B:9A:22:68:96:57:CD:FB:F3:F5:A5:FE:68:5C:45:82:70:19:93:42 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 01A0 Signing time: Fri 05 Jun 2026 04:25:08 +0000 Manifest this update: Fri 05 Jun 2026 04:25:07 +0000 Manifest next update: Fri 12 Jun 2026 04:25:07 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: LYsjJvhiOfBotIKl676rv/rMvGY7ApkcuYfZ7fMeR24=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=) 3: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=) 4: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 04:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Jun 5 04:25:07 2026 GMT Not After : Jun 12 04:25:07 2026 GMT Subject: CN=6a224fa4-d97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:fd:40:9e:29:27:14:13:a0:62:65:b1:e9: 6e:28:f1:02:e8:bd:9e:9e:77:ac:f5:55:9c:a2:c5: 56:75:d4:88:f8:1d:e8:1f:e2:45:80:0f:98:d0:21: 0d:12:5a:4e:8d:2f:26:4e:b1:82:c4:44:29:21:69: a4:df:22:d3:f2:99:8f:25:cb:f9:2c:5b:75:b5:c2: 8c:9c:3e:47:51:26:1f:01:a8:2f:53:42:73:04:2a: 1c:81:2c:24:96:22:f1:49:1c:bf:44:39:cf:ec:9b: 26:81:ff:0c:33:92:02:25:b2:d7:5a:57:d1:2b:95: f7:05:bd:24:f6:7e:12:b6:b4:a5:d2:3a:36:62:8f: 8d:48:1a:79:4b:d9:5d:10:3e:26:b1:72:0f:d6:9e: 49:d8:b7:68:fe:e4:e4:b0:72:a1:79:75:2e:be:d3: 38:f9:54:9a:ca:aa:4a:8e:ec:5d:9e:cf:3a:39:5b: 8a:0b:b5:ff:88:f6:1b:b5:1d:a0:04:8e:e1:37:d1: d2:24:99:d2:16:41:68:6d:97:75:ed:c1:a9:f0:74: f3:6e:10:62:a6:f1:7e:bd:4c:fd:7d:29:4a:ab:d7: a2:f5:cb:01:c4:d3:23:72:69:a6:7d:c0:f2:01:3b: f4:55:02:47:7c:9d:7d:67:1f:cb:a7:08:24:bc:df: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9A:22:68:96:57:CD:FB:F3:F5:A5:FE:68:5C:45:82:70:19:93:42 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:71:1e:23:03:2e:7d:93:84:1d:ad:a4:1c:79:5c:3f:46:4c: 22:99:cd:f5:15:ff:64:3a:19:c4:40:e9:b4:d4:a9:12:c2:72: 76:6f:96:c4:75:08:7e:de:08:bf:c3:00:fe:d6:41:26:b1:e2: 25:96:bc:24:65:07:de:e9:ad:18:ec:8a:9c:8f:5a:e1:7b:02: 92:6f:10:ea:26:95:94:84:1c:db:e8:60:08:64:2c:98:a3:c1: 68:0a:50:dd:e4:3c:53:1c:b4:b4:48:4a:70:1d:1e:b6:04:35: 7c:54:d3:28:38:8b:4b:94:4b:04:86:bc:9f:c7:d8:60:a6:fe: fc:5b:cb:25:f4:cb:3e:62:30:2c:47:97:a1:e9:c2:52:46:93: 4f:f6:74:d2:41:49:df:97:8d:04:91:ea:d4:58:d6:8b:8e:91: 7b:79:01:6a:61:e7:0b:e0:29:cd:52:84:fb:af:9a:25:06:37: 93:cf:98:79:f0:dd:12:e8:c1:ce:9c:10:29:59:7f:f5:5f:c8: 60:8f:36:ed:4d:fc:b7:10:a7:91:2d:34:fd:80:08:fe:dd:5f: 87:3c:b5:08:77:f3:fe:26:57:89:b4:c4:b2:66:8d:b0:27:f2: c3:97:97:a1:2a:a1:e5:50:78:6a:19:c7:46:1c:f8:89:a7:fd: 4c:ff:9e:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjYwNjA1MDQyNTA3WhcNMjYwNjEyMDQyNTA3WjAYMRYwFAYD VQQDEw02YTIyNGZhNC1kOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbX9QJ4pJxQToGJlseluKPEC6L2ennes9VWcosVWddSI+B3oH+JFgA+Y0CEN ElpOjS8mTrGCxEQpIWmk3yLT8pmPJcv5LFt1tcKMnD5HUSYfAagvU0JzBCocgSwk liLxSRy/RDnP7Jsmgf8MM5ICJbLXWlfRK5X3Bb0k9n4StrSl0jo2Yo+NSBp5S9ld ED4msXIP1p5J2Ldo/uTksHKheXUuvtM4+VSayqpKjuxdns86OVuKC7X/iPYbtR2g BI7hN9HSJJnSFkFobZd17cGp8HTzbhBipvF+vUz9fSlKq9ei9csBxNMjcmmmfcDy ATv0VQJHfJ19Zx/LpwgkvN+52QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEuaImiW V8378/Wl/mhcRYJwGZNCMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgnEeIwMufZOEHa2kHHlcP0ZMIpnN9RX/ZDoZxEDptNSpEsJydm+WxHUIft4I v8MA/tZBJrHiJZa8JGUH3umtGOyKnI9a4XsCkm8Q6iaVlIQc2+hgCGQsmKPBaApQ 3eQ8Uxy0tEhKcB0etgQ1fFTTKDiLS5RLBIa8n8fYYKb+/FvLJfTLPmIwLEeXoenC UkaTT/Z00kFJ35eNBJHq1FjWi46Re3kBamHnC+ApzVKE+6+aJQY3k8+YefDdEujB zpwQKVl/9V/IYI827U38txCnkS00/YAI/t1fhzy1CHfz/iZXibTEsmaNsCfyw5eX oSqh5VB4ahnHRhz4iaf9TP+edg== -----END CERTIFICATE-----Generated at Sat Jun 6 06:59:21 2026 by rpki-client