$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: TMbknpqERZAa3RRU20XUARv9v6y/G2P+0xWEZUUleX8= Subject key identifier: 86:C3:16:23:8D:1D:14:39:C5:21:D9:4D:A7:AE:00:04:18:D0:08:5A Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 022F Signing time: Sat 13 Jun 2026 02:40:57 +0000 Manifest this update: Sat 13 Jun 2026 02:40:57 +0000 Manifest next update: Sat 20 Jun 2026 02:40:57 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: z2I13fTVXmOAl51M5HsS7sExkWkOky6veUKXM3qOfeU=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 02:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Jun 13 02:40:57 2026 GMT Not After : Jun 20 02:40:57 2026 GMT Subject: CN=6a2cc339-67da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:d8:0a:6c:fd:c3:49:1f:80:6a:b3:4d:f3: 65:5e:31:38:a7:46:2f:d7:74:90:85:27:25:0e:26: 19:0b:72:15:3e:ed:df:c4:80:09:a5:8d:a3:29:cc: 85:38:09:58:eb:9a:f4:b1:6c:e8:fa:78:a3:b6:18: 30:1a:8a:f7:b2:05:d3:53:e3:6b:b0:e8:e8:2f:86: e3:e4:ff:8d:b8:62:e6:3d:cc:40:3b:f8:7f:d8:9f: f4:a8:83:35:28:ac:23:47:79:f8:1d:78:e1:44:d0: 15:12:a1:62:48:8b:fc:9e:f8:a3:29:e3:2a:81:ba: 3b:fa:a3:c7:dd:06:24:d9:2b:44:ea:da:8b:4d:cd: 0a:ef:18:52:17:a9:46:8a:05:35:0e:22:87:e8:32: 49:3e:a8:15:73:78:83:4b:c1:c3:08:06:ea:06:60: ed:38:db:ad:02:73:3c:85:50:a9:82:10:51:04:1a: 67:95:98:4d:7c:b6:fd:4b:4b:47:d0:75:30:f4:31: 93:23:ac:1e:1a:87:cc:41:9a:88:60:14:32:28:73: 51:50:8e:4c:3c:99:e5:71:d4:06:bf:fc:f7:7b:a5: df:fb:d7:47:65:78:f0:0a:16:87:eb:f9:1d:61:d2: 03:e6:89:01:84:c7:55:48:0c:f0:51:ed:f1:56:55: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C3:16:23:8D:1D:14:39:C5:21:D9:4D:A7:AE:00:04:18:D0:08:5A X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:23:b4:25:1f:5c:5f:80:14:f8:1a:5b:ad:76:c5:99:7d:ef: 6e:40:0b:cb:1c:4f:17:a4:41:01:bf:8f:b0:1d:37:60:76:38: 16:c3:b6:52:ac:3c:8b:98:15:c1:32:c8:c2:ec:c9:a1:f8:47: c1:0b:67:38:dd:75:0d:26:a7:93:c8:07:57:d6:d4:3f:ea:7b: 98:d8:b9:cb:ca:ed:dc:50:f9:55:9a:14:bf:e2:4a:d8:52:74: b5:4f:5b:38:1c:e7:80:a5:03:66:a5:58:c5:7c:8d:77:50:b3: f9:01:7a:10:f1:f3:2b:da:df:38:c1:64:9f:e9:78:e6:9d:79: 7e:9b:4f:b6:44:5e:2b:8f:f1:12:0e:01:5e:44:82:29:60:92: 93:bc:5b:6e:77:7f:61:7c:d1:50:4e:4f:1f:a0:d2:e2:a1:fe: d4:14:36:fc:31:a1:e7:b2:47:41:1c:6b:99:c7:7d:f3:06:06: ad:8b:6d:ad:f9:6b:8d:bf:4d:23:f5:59:82:e3:46:b2:41:fe: 69:ee:d1:8d:db:ee:4e:81:cb:ca:c0:ac:db:ff:fc:2b:9a:f8: 2d:27:11:61:b2:51:43:0e:18:89:0a:33:4f:4c:6a:63:dc:90: 25:18:0f:7b:d8:b5:01:a8:a2:de:80:e7:23:54:3d:2f:f0:3e: d6:fe:d7:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwNjEzMDI0MDU3WhcNMjYwNjIwMDI0MDU3WjAYMRYwFAYD VQQDEw02YTJjYzMzOS02N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGbYCmz9w0kfgGqzTfNlXjE4p0Yv13SQhSclDiYZC3IVPu3fxIAJpY2jKcyF OAlY65r0sWzo+nijthgwGor3sgXTU+NrsOjoL4bj5P+NuGLmPcxAO/h/2J/0qIM1 KKwjR3n4HXjhRNAVEqFiSIv8nvijKeMqgbo7+qPH3QYk2StE6tqLTc0K7xhSF6lG igU1DiKH6DJJPqgVc3iDS8HDCAbqBmDtONutAnM8hVCpghBRBBpnlZhNfLb9S0tH 0HUw9DGTI6weGofMQZqIYBQyKHNRUI5MPJnlcdQGv/z3e6Xf+9dHZXjwChaH6/kd YdID5okBhMdVSAzwUe3xVlX61QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbDFiON HRQ5xSHZTaeuAAQY0AhaMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYiO0JR9cX4AU+BpbrXbFmX3vbkALyxxPF6RBAb+PsB03YHY4FsO2Uqw8i5gV wTLIwuzJofhHwQtnON11DSank8gHV9bUP+p7mNi5y8rt3FD5VZoUv+JK2FJ0tU9b OBzngKUDZqVYxXyNd1Cz+QF6EPHzK9rfOMFkn+l45p15fptPtkReK4/xEg4BXkSC KWCSk7xbbnd/YXzRUE5PH6DS4qH+1BQ2/DGh57JHQRxrmcd98wYGrYttrflrjb9N I/VZguNGskH+ae7RjdvuToHLysCs2//8K5r4LScRYbJRQw4YiQozT0xqY9yQJRgP e9i1Aaii3oDnI1Q9L/A+1v7Xmw== -----END CERTIFICATE-----Generated at Sat Jun 13 13:18:40 2026 by rpki-client