$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft File: pm3QENok34rhcGvZCMukO9E4ljE.mft (raw, json) Hash identifier: Bpr07zXmYtNoTJa7ddZg5bHwPlPNXg1hRYqGRmpbnpU= Subject key identifier: 60:F4:CF:67:86:28:46:05:ED:CA:0B:F6:C3:3D:86:18:DF:A6:76:BA Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Certificate serial: 355E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft Manifest number: 354D Signing time: Fri 12 Jun 2026 15:11:35 +0000 Manifest this update: Fri 12 Jun 2026 15:11:35 +0000 Manifest next update: Fri 19 Jun 2026 15:11:35 +0000 Files and hashes: 1: pm3QENok34rhcGvZCMukO9E4ljE.crl (hash: fssiQGE/b7FmYfsn/kqiBfiP4crhyzi3t5NjdjNLRgs=) 2: 41623A12778111ED8F236A62C4F9AE02.roa (hash: oWvONdzVtdNZzN0GXwvLtJk1cQSVlxMNqPZEYE5ztwk=) 3: C92F5F8077A211EDAF94D63EC4F9AE02.roa (hash: +F9H9L+0+ICkfZDERWmYJJTvYvZTjlwlv2iEB9U5xD8=) 4: DE670A60679D11EEAFBA0A5DC4F9AE02.roa (hash: S+2nZ/LwiFl9lCGr/q1pgYuQMM2ksAuYCF9P9dTV9cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13662 (0x355e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Validity Not Before: Jun 12 15:11:35 2026 GMT Not After : Jun 19 15:11:35 2026 GMT Subject: CN=6a2c21a7-7607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:1b:42:64:d5:ce:b6:27:0b:1a:39:1f:97: 05:be:1c:d4:14:3b:bb:be:ad:cb:52:73:68:4d:65: 4b:ba:a0:08:e1:eb:d3:10:36:5c:58:21:77:92:cd: 5f:11:2e:58:fe:41:05:f3:fb:c1:09:a5:65:70:22: 0c:08:45:c8:12:ec:d0:fb:4e:1f:ea:8b:19:92:d3: 4a:19:25:a2:fc:fb:0e:6e:8c:cc:27:d7:98:65:76: 32:7d:e5:99:4a:26:7d:b4:8b:44:6f:79:2d:c5:cc: 34:74:18:cb:90:f4:ff:15:44:f1:60:b3:7d:cc:56: ea:ab:7f:8f:b1:54:5c:a5:4a:36:35:96:3c:f5:c4: 36:50:f9:90:18:49:49:df:a2:d5:64:65:07:60:03: 1b:2c:7b:3c:d0:a5:78:2d:e0:af:a9:a9:e3:0b:e6: 43:ee:c2:6c:e9:14:c4:ac:84:a4:9f:09:41:44:f1: 73:5f:9c:e3:45:0d:fa:e0:6e:00:dd:89:97:c6:23: 24:69:51:ff:09:f8:ce:66:cb:ef:7d:50:c0:fa:ae: 24:a7:bc:f7:74:e6:bd:1e:b5:58:8f:c1:97:df:9c: 6a:62:57:62:58:5e:65:5e:69:75:30:e2:1b:23:e2: 35:7f:26:1b:95:93:8c:fb:cd:b8:51:72:63:b3:32: 4c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F4:CF:67:86:28:46:05:ED:CA:0B:F6:C3:3D:86:18:DF:A6:76:BA X509v3 Authority Key Identifier: keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:24:fd:3e:40:49:e6:aa:2a:d9:02:fb:69:70:aa:bb:35:08: c4:6e:bb:bc:64:23:cf:d4:b7:2e:bc:ab:09:70:b7:af:dd:31: 25:aa:92:69:97:1e:9c:cd:32:8a:56:20:84:7e:fc:4f:9c:8c: 29:21:3b:af:4b:a1:b6:5c:06:b0:bc:e0:9e:06:37:2a:37:98: 02:c3:c9:54:58:e8:dc:9f:03:ef:48:f1:59:fc:99:0d:07:7d: af:0d:f3:39:4c:6a:f3:0b:60:5a:f3:45:58:03:f1:de:d3:1b: a9:cd:d7:16:5c:84:b2:fd:67:d8:97:80:39:de:2d:87:9f:6b: b3:d8:2e:95:20:b0:66:9f:f6:24:61:68:a2:3e:2b:66:a3:0d: fd:1a:dd:e8:9c:49:4b:bd:8b:e0:e6:23:3c:70:07:c7:de:48: c8:fd:e0:25:8a:9e:50:a6:45:5e:21:b5:5a:3c:88:f8:4b:e7: 22:96:3c:64:de:71:17:79:3e:ef:96:48:59:89:3f:2a:4c:c0: 6d:f9:e3:c3:84:2b:d0:60:90:e6:ab:b8:37:e0:52:86:a6:fa: 2a:c1:b1:98:c7:1f:41:5e:40:91:ba:d8:8c:30:42:cd:d2:8d: 2e:49:97:4b:ef:ff:91:40:11:aa:22:be:6c:06:74:f4:5b:e6: f4:ab:98:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NTMxMTAvBgNVBAUTKEE2NkREMDEwREEyNERGOEFFMTcwNkJEOTA4Q0JBNDNC RDEzODk2MzEwHhcNMjYwNjEyMTUxMTM1WhcNMjYwNjE5MTUxMTM1WjAYMRYwFAYD VQQDEw02YTJjMjFhNy03NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquobQmTVzrYnCxo5H5cFvhzUFDu7vq3LUnNoTWVLuqAI4evTEDZcWCF3ks1f ES5Y/kEF8/vBCaVlcCIMCEXIEuzQ+04f6osZktNKGSWi/PsObozMJ9eYZXYyfeWZ SiZ9tItEb3ktxcw0dBjLkPT/FUTxYLN9zFbqq3+PsVRcpUo2NZY89cQ2UPmQGElJ 36LVZGUHYAMbLHs80KV4LeCvqanjC+ZD7sJs6RTErISknwlBRPFzX5zjRQ364G4A 3YmXxiMkaVH/CfjOZsvvfVDA+q4kp7z3dOa9HrVYj8GX35xqYldiWF5lXml1MOIb I+I1fyYblZOM+824UXJjszJM8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGD0z2eG KEYF7coL9sM9hhjfpna6MB8GA1UdIwQYMBaAFKZt0BDaJN+K4XBr2QjLpDvROJYx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc1My84MDUxNDU5MDFE QTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0cmhjR3ZaQ011a085RTRs akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BtM1FFTm9rMzRyaGNHdlpDTXVrTzlFNGxqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc1My84MDUxNDU5MDFEQTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0 cmhjR3ZaQ011a085RTRsakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArCT9PkBJ5qoq2QL7aXCquzUIxG67vGQjz9S3LryrCXC3r90xJaqSaZcenM0y ilYghH78T5yMKSE7r0uhtlwGsLzgngY3KjeYAsPJVFjo3J8D70jxWfyZDQd9rw3z OUxq8wtgWvNFWAPx3tMbqc3XFlyEsv1n2JeAOd4th59rs9gulSCwZp/2JGFooj4r ZqMN/Rrd6JxJS72L4OYjPHAHx95IyP3gJYqeUKZFXiG1WjyI+EvnIpY8ZN5xF3k+ 75ZIWYk/KkzAbfnjw4Qr0GCQ5qu4N+BShqb6KsGxmMcfQV5AkbrYjDBCzdKNLkmX S+//kUARqiK+bAZ09Fvm9KuYnA== -----END CERTIFICATE-----Generated at Sat Jun 13 17:36:55 2026 by rpki-client