$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: 2HEfbYJXK+eyRU+AE3usSBoCD03fTL0pUepOV0lgxzA= Subject key identifier: BF:55:84:10:0E:73:76:4A:2A:7A:0E:99:55:13:8B:15:D5:8E:8F:43 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0957 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0921 Signing time: Fri 12 Jun 2026 14:45:33 +0000 Manifest this update: Fri 12 Jun 2026 14:45:32 +0000 Manifest next update: Fri 19 Jun 2026 14:45:32 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: d16Nf7OyH9ISHM55HkVoj0bR26q9lbwZC8Vl7Gg/N64=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: TJX/2z4AnWBNVG5vc+6iQbCnon+csxAc9hGSLvA14T4=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 14:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Jun 12 14:45:32 2026 GMT Not After : Jun 19 14:45:32 2026 GMT Subject: CN=6a2c1b8d-f0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:b7:08:0d:2f:29:75:75:d1:b0:15:c6:27: 0f:56:4f:12:16:78:4c:3f:cc:6c:33:8e:57:57:fe: d0:f9:1a:6c:39:32:c8:ca:7a:73:4e:ea:c9:f7:36: a9:3c:8c:f9:8f:e6:27:0c:83:5d:48:c2:32:bd:5f: d9:e3:ac:ac:96:0a:08:91:bb:4e:4c:c6:1d:44:c3: 3b:2a:9e:4c:9b:59:3f:54:70:db:4f:5f:4d:bc:38: 01:7c:35:27:19:52:68:34:0d:c2:f1:24:fa:8f:26: 3a:a3:cb:5f:a5:26:c1:ff:6d:8f:3c:3e:d5:54:80: 65:92:5c:af:90:73:4a:94:d9:11:a2:28:a4:a9:1e: 71:e4:71:ef:0b:91:63:db:7d:2b:47:a7:4b:37:dc: 8e:70:4d:d3:97:d1:ec:89:be:3f:97:b4:a9:e6:e6: dd:11:a6:78:be:93:25:31:8c:4f:0d:7e:ca:aa:c3: 04:cc:59:86:c8:c9:86:b0:6e:c0:e5:ed:3a:e1:c4: 13:fb:d7:24:64:45:1d:e8:9d:d4:8e:08:c9:34:1b: 8d:2b:e3:dc:5d:f8:50:b5:f5:50:1c:3a:51:73:2d: 87:d1:ec:12:12:5a:5f:62:ff:ec:36:97:14:44:99: 74:74:f8:36:46:52:d3:94:16:4b:27:c1:8b:46:10: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:55:84:10:0E:73:76:4A:2A:7A:0E:99:55:13:8B:15:D5:8E:8F:43 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:75:c0:9e:a4:61:84:23:c3:2b:1d:bc:69:7f:90:30:56:6e: b5:fe:78:dc:f6:9a:90:76:8d:5a:f6:4b:5e:6d:d4:15:08:30: 67:52:22:8b:c6:b5:27:59:fe:b0:ea:90:89:13:d7:0b:4b:79: 5f:be:9f:48:26:2a:30:32:6c:85:6c:c7:18:22:55:c6:22:f2: 66:af:fc:a4:72:74:52:7e:dc:43:7c:5f:bc:b6:e3:ae:46:44: e8:78:c8:af:f5:0a:c0:70:60:b9:7d:d1:8d:96:fe:f8:32:8b: 56:02:04:ae:0e:6b:ea:99:95:85:04:d7:4e:1b:07:de:5c:dc: 2b:0e:7d:9a:37:c9:42:64:d1:01:52:50:a9:6a:08:36:27:5b: 83:d5:df:d2:5e:2e:0f:76:9e:36:b9:c9:ae:2b:26:e0:9a:6e: d9:f9:49:2b:3e:cc:0c:46:a5:4c:2b:aa:a7:66:28:c3:c2:5f: b2:74:7c:02:f8:30:b1:0f:b5:63:c1:4e:c0:f4:3c:6f:b0:1a: e3:55:81:0c:24:f1:d5:55:51:e4:e4:06:7e:ee:2e:43:d2:62: 9c:4d:67:fa:80:23:79:5c:a6:e8:3f:a8:c8:a2:70:ed:7d:3a: 9e:d0:a2:f8:54:d7:b0:5d:f5:b3:55:71:aa:a8:61:8c:e2:2d: 4a:be:c2:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwNjEyMTQ0NTMyWhcNMjYwNjE5MTQ0NTMyWjAYMRYwFAYD VQQDEw02YTJjMWI4ZC1mMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+K3CA0vKXV10bAVxicPVk8SFnhMP8xsM45XV/7Q+RpsOTLIynpzTurJ9zap PIz5j+YnDINdSMIyvV/Z46yslgoIkbtOTMYdRMM7Kp5Mm1k/VHDbT19NvDgBfDUn GVJoNA3C8ST6jyY6o8tfpSbB/22PPD7VVIBlklyvkHNKlNkRoiikqR5x5HHvC5Fj 230rR6dLN9yOcE3Tl9Hsib4/l7Sp5ubdEaZ4vpMlMYxPDX7KqsMEzFmGyMmGsG7A 5e064cQT+9ckZEUd6J3UjgjJNBuNK+PcXfhQtfVQHDpRcy2H0ewSElpfYv/sNpcU RJl0dPg2RlLTlBZLJ8GLRhDLVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9VhBAO c3ZKKnoOmVUTixXVjo9DMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcHXAnqRhhCPDKx28aX+QMFZutf543PaakHaNWvZLXm3UFQgwZ1Iii8a1J1n+ sOqQiRPXC0t5X76fSCYqMDJshWzHGCJVxiLyZq/8pHJ0Un7cQ3xfvLbjrkZE6HjI r/UKwHBguX3RjZb++DKLVgIErg5r6pmVhQTXThsH3lzcKw59mjfJQmTRAVJQqWoI Nidbg9Xf0l4uD3aeNrnJrism4Jpu2flJKz7MDEalTCuqp2Yow8JfsnR8AvgwsQ+1 Y8FOwPQ8b7Aa41WBDCTx1VVR5OQGfu4uQ9JinE1n+oAjeVym6D+oyKJw7X06ntCi +FTXsF31s1VxqqhhjOItSr7C+Q== -----END CERTIFICATE-----Generated at Sat Jun 13 15:52:47 2026 by rpki-client