$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json) Hash identifier: Zr6UkLpYeh+eD8540THT0+j+gDW9x+6DjL8wJbPJais= Subject key identifier: 63:4C:66:D7:25:D8:70:94:81:63:8B:5B:22:C9:EA:EF:1A:71:08:CB Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft Manifest number: D2 Signing time: Sat 13 Jun 2026 06:46:56 +0000 Manifest this update: Sat 13 Jun 2026 06:46:55 +0000 Manifest next update: Sat 20 Jun 2026 06:46:55 +0000 Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: cBg6afXl/XMYlUs2skJWAnan96SCEUKY+cMeAef7QuU=) 2: F1940290212911F087425013C4F9AE02.roa (hash: aIejdLAewgudU6U+kv+7+KGIiYEWb/Zyhioe0M0XWcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Validity Not Before: Jun 13 06:46:55 2026 GMT Not After : Jun 20 06:46:55 2026 GMT Subject: CN=6a2cfce0-d4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:b1:25:8d:28:f1:1a:88:f5:95:21:d4:d9: c0:c0:b2:1d:58:7c:e6:93:c0:01:64:dc:11:af:01: f9:cd:bd:35:d5:b6:3a:5e:be:87:f6:90:47:3e:b1: b7:3d:47:8e:f9:42:59:f1:df:2c:1a:4a:ff:c1:42: c8:f8:92:f3:93:93:fb:fd:98:14:f3:5b:30:58:5c: 27:f8:6d:a2:a3:b7:3c:77:90:ba:2e:8d:be:55:25: 4f:1b:a7:7c:96:a5:a0:3a:54:fa:73:26:55:0a:cc: b9:37:89:de:f0:46:e1:a4:4f:fb:d6:fc:3d:a1:97: 64:37:12:31:84:57:cb:bc:d0:32:26:5d:34:ec:37: 56:28:5f:a7:d2:71:54:64:f4:2f:67:65:e6:4e:a7: 77:4b:41:0c:80:24:3f:31:d3:b2:6d:9a:99:2b:09: 11:0f:d7:06:bd:d4:8a:3e:ee:94:b3:73:9d:f7:6b: e0:69:b5:01:c3:36:00:e7:52:af:61:79:cc:d3:50: 42:54:6a:5c:98:1a:e7:7d:94:06:77:3d:8c:d4:b7: 80:ea:ba:01:bc:3b:bf:d7:f4:47:85:f8:21:21:e1: 3b:1e:8d:78:38:2f:43:72:a1:6b:67:8f:5d:2a:6e: e8:49:1b:69:52:82:bb:1d:20:c8:ad:8f:5d:30:6d: ce:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4C:66:D7:25:D8:70:94:81:63:8B:5B:22:C9:EA:EF:1A:71:08:CB X509v3 Authority Key Identifier: keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:42:9c:2c:ce:ab:36:5f:78:7b:07:c2:93:35:8a:cd:f4:fe: 5e:de:ba:86:eb:6b:b1:f6:c2:76:2f:6d:6a:71:96:1d:d5:5a: 55:b0:9c:eb:25:48:7f:b6:2a:36:2e:1f:a6:a7:ed:07:4a:1a: 81:b6:dc:50:5d:05:cd:32:c5:ce:2d:ca:38:f9:5d:c0:2a:3f: 53:a5:c5:27:d9:b9:4c:2c:4b:81:ef:ee:d9:05:c4:b6:a1:61: e5:de:63:5b:21:b6:af:26:b0:1f:b0:59:e5:bf:5d:54:fc:cb: 57:e1:a0:72:ad:9a:b6:0a:3b:c5:32:3d:e7:b3:de:6d:76:d2: db:6a:df:6c:3f:b4:52:4b:62:d9:27:b1:ca:b0:9c:4d:88:75: 5f:cb:36:88:99:c7:c5:39:91:52:59:2e:d7:56:27:ea:70:6e: aa:94:07:7f:8f:a4:40:5d:99:3f:d7:f4:81:1c:2f:c7:01:ca: 7e:da:2b:8f:95:f5:00:12:5c:07:6f:78:b5:f0:f2:bc:75:e7: 3b:b4:02:7b:67:db:23:a7:49:70:e1:bb:db:f3:16:53:a5:a3: e6:f3:f3:5a:88:50:77:08:db:96:ad:80:44:17:71:79:79:4a: d5:09:53:25:78:62:4f:84:7b:8d:b0:b0:ea:5f:fd:db:46:20: a0:e5:b4:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBMDUxMTAvBgNVBAUTKERGMTg3MzExRkEwOUM3NzlCOEIxNUQ5NDdBNDZENEY0 RURDQzUwNTMwHhcNMjYwNjEzMDY0NjU1WhcNMjYwNjIwMDY0NjU1WjAYMRYwFAYD VQQDEw02YTJjZmNlMC1kNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpuxJY0o8RqI9ZUh1NnAwLIdWHzmk8ABZNwRrwH5zb011bY6Xr6H9pBHPrG3 PUeO+UJZ8d8sGkr/wULI+JLzk5P7/ZgU81swWFwn+G2io7c8d5C6Lo2+VSVPG6d8 lqWgOlT6cyZVCsy5N4ne8EbhpE/71vw9oZdkNxIxhFfLvNAyJl007DdWKF+n0nFU ZPQvZ2XmTqd3S0EMgCQ/MdOybZqZKwkRD9cGvdSKPu6Us3Od92vgabUBwzYA51Kv YXnM01BCVGpcmBrnfZQGdz2M1LeA6roBvDu/1/RHhfghIeE7Ho14OC9DcqFrZ49d Km7oSRtpUoK7HSDIrY9dMG3OtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNMZtcl 2HCUgWOLWyLJ6u8acQjLMB8GA1UdIwQYMBaAFN8YcxH6Ccd5uLFdlHpG1PTtzFBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUEwNS80REMxRDkyNjIx MjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngzbTRzVjJVZWtiVTlPM01V Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUEwNS80REMxRDkyNjIxMjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngz bTRzVjJVZWtiVTlPM01VRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxkKcLM6rNl94ewfCkzWKzfT+Xt66hutrsfbCdi9tanGWHdVaVbCc6yVIf7Yq Ni4fpqftB0oagbbcUF0FzTLFzi3KOPldwCo/U6XFJ9m5TCxLge/u2QXEtqFh5d5j WyG2ryawH7BZ5b9dVPzLV+Ggcq2atgo7xTI957PebXbS22rfbD+0Ukti2SexyrCc TYh1X8s2iJnHxTmRUlku11Yn6nBuqpQHf4+kQF2ZP9f0gRwvxwHKftorj5X1ABJc B294tfDyvHXnO7QCe2fbI6dJcOG72/MWU6Wj5vPzWohQdwjblq2ARBdxeXlK1QlT JXhiT4R7jbCw6l/920YgoOW05Q== -----END CERTIFICATE-----Generated at Sat Jun 13 19:02:34 2026 by rpki-client