$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: 6SgzubqXgi02CLsZiYaCnqhkenU5evEo/wrWSS3VTGw= Subject key identifier: FB:8E:44:31:F0:EA:04:BE:0B:DD:19:2B:C3:DA:4A:94:50:7F:65:F4 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0CD7 Signing time: Fri 12 Jun 2026 18:25:49 +0000 Manifest this update: Fri 12 Jun 2026 18:25:48 +0000 Manifest next update: Fri 19 Jun 2026 18:25:48 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: trUEzuXIk9vacsuuqn5/J8E53weDIvboxhkfjKrt/to=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: STCKrvlRsuBwgCCitF/41y1bZsQULp/xbRwSRQTsp2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Jun 12 18:25:48 2026 GMT Not After : Jun 19 18:25:48 2026 GMT Subject: CN=6a2c4f2c-f9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:df:8c:11:28:d4:25:51:80:46:76:6a:f2: 8b:91:24:97:d5:c9:8c:51:15:f2:fa:27:42:34:9a: 50:8d:ef:65:5f:8c:fa:50:78:d2:19:06:74:5a:da: ea:0d:a0:8f:ce:25:60:0b:55:0a:bc:0c:c0:5a:65: cf:0e:70:22:1d:3a:7a:13:16:fe:b9:1b:23:0f:dd: 13:97:d3:3b:b6:16:c3:b2:4f:66:a2:c4:c8:13:55: 4b:fd:d6:16:33:6f:7a:86:a6:c6:e2:b9:a5:7c:ea: 46:d4:64:a2:ba:82:da:80:8d:c2:ea:c8:db:10:5a: 4b:58:19:0c:e2:1c:91:28:71:23:d7:4d:88:c0:8c: bf:52:d2:d9:81:15:1a:a2:54:14:75:f1:7b:9e:57: 0c:a3:e3:09:ef:30:07:5a:62:b6:5b:a8:08:76:dc: f9:e1:1f:4a:08:a8:0f:94:13:95:c9:eb:c2:b4:29: c0:4d:e2:f8:3a:19:f8:d7:be:aa:da:c9:2a:00:52: 20:6d:9e:64:b8:a6:5e:e4:df:18:cf:d1:1a:ff:73: 2c:9c:e7:58:1e:58:cb:1c:d3:c0:eb:a3:54:ba:02: 64:05:95:27:ef:3a:da:0b:62:c5:89:8e:21:e9:c0: a9:45:df:be:6f:fb:2e:9b:54:80:d7:e8:03:10:12: 10:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:44:31:F0:EA:04:BE:0B:DD:19:2B:C3:DA:4A:94:50:7F:65:F4 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:f6:82:75:2a:53:90:a7:00:72:04:4f:a5:f9:a8:e5:8a:42: b7:17:db:7b:54:e4:ec:18:08:95:4b:2b:ea:ef:4d:9a:88:25: f2:0b:29:08:37:bc:83:73:3c:1e:8c:a7:7b:45:13:da:5a:01: cb:65:43:fb:6e:bb:49:3a:0e:bd:a3:08:b3:0d:dc:46:fb:b0: 53:14:0b:78:e9:37:d8:1a:5f:6e:39:28:4c:20:c8:74:ba:a8: 77:74:96:b6:2d:bc:1e:0b:30:ad:d5:17:12:c0:eb:37:bd:dd: a1:a5:2e:93:4d:fc:30:2e:4d:73:f2:38:92:a0:c5:04:8b:14: 13:32:80:8e:73:cb:4b:57:16:fd:16:ac:25:f6:7c:d8:99:c0: 21:bb:b5:a4:fc:3d:df:b5:9f:5a:f8:5f:c4:c9:87:53:d9:6b: 7b:89:57:0d:b5:88:ba:86:71:39:62:07:3c:b8:76:15:1a:d6: 95:5a:b2:f8:21:a3:55:eb:50:8d:3e:c3:18:22:0e:af:90:7f: ad:6f:fe:53:f3:8f:a7:8e:63:00:f3:26:44:7c:aa:4a:db:09: fb:77:3b:a4:53:ad:69:4f:38:62:54:4e:50:86:3c:88:35:be: 3a:29:ca:2b:3d:31:58:6a:43:6d:c7:e5:3d:1a:25:f9:bc:9e: 98:76:bc:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjYwNjEyMTgyNTQ4WhcNMjYwNjE5MTgyNTQ4WjAYMRYwFAYD VQQDEw02YTJjNGYyYy1mOWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4N3fjBEo1CVRgEZ2avKLkSSX1cmMURXy+idCNJpQje9lX4z6UHjSGQZ0Wtrq DaCPziVgC1UKvAzAWmXPDnAiHTp6Exb+uRsjD90Tl9M7thbDsk9mosTIE1VL/dYW M296hqbG4rmlfOpG1GSiuoLagI3C6sjbEFpLWBkM4hyRKHEj102IwIy/UtLZgRUa olQUdfF7nlcMo+MJ7zAHWmK2W6gIdtz54R9KCKgPlBOVyevCtCnATeL4Ohn4176q 2skqAFIgbZ5kuKZe5N8Yz9Ea/3MsnOdYHljLHNPA66NUugJkBZUn7zraC2LFiY4h 6cCpRd++b/sum1SA1+gDEBIQlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPuORDHw 6gS+C90ZK8PaSpRQf2X0MB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwvaCdSpTkKcAcgRPpfmo5YpCtxfbe1Tk7BgIlUsr6u9Nmogl8gspCDe8g3M8 Hoyne0UT2loBy2VD+267SToOvaMIsw3cRvuwUxQLeOk32BpfbjkoTCDIdLqod3SW ti28HgswrdUXEsDrN73doaUuk038MC5Nc/I4kqDFBIsUEzKAjnPLS1cW/RasJfZ8 2JnAIbu1pPw937WfWvhfxMmHU9lre4lXDbWIuoZxOWIHPLh2FRrWlVqy+CGjVetQ jT7DGCIOr5B/rW/+U/OPp45jAPMmRHyqStsJ+3c7pFOtaU84YlROUIY8iDW+OinK Kz0xWGpDbcflPRol+byemHa8aQ== -----END CERTIFICATE-----Generated at Sat Jun 13 22:45:55 2026 by rpki-client