$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: qZeVj6CufkL0/5tKL4hEhNO2zAawO5VEkh4d5yFRry4= Subject key identifier: CD:CE:DB:2F:03:F7:E3:41:D4:80:08:46:0D:06:A7:E2:5A:03:14:B8 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 0842 Signing time: Fri 12 Jun 2026 20:59:24 +0000 Manifest this update: Fri 12 Jun 2026 20:59:23 +0000 Manifest next update: Fri 19 Jun 2026 20:59:23 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: dSK/pyo1cNrTP00EEUqsfYDCZ4eyp8P7yyYDCDYZGrM=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: nGutShTIxEkwTwwnglW9O9WTwfSVkS3vcucRNmR+lNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 20:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Jun 12 20:59:23 2026 GMT Not After : Jun 19 20:59:23 2026 GMT Subject: CN=6a2c732b-f900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:13:bd:64:20:7a:dd:b4:d7:72:30:a7:7d: 89:1f:09:c1:ff:6e:cc:46:00:dd:43:b1:e8:a1:5e: 4f:83:0b:41:4d:6d:b4:c5:a4:93:61:f7:32:e6:4f: d5:30:d3:b4:42:7b:10:94:2c:dd:31:39:3c:db:e2: 5b:2d:fd:84:1c:98:17:5a:40:ad:20:7d:88:86:f7: 86:f4:2b:0e:73:57:53:33:16:c6:35:41:c3:1a:0e: 6b:0f:fb:80:a3:45:85:8f:4c:77:2d:70:89:37:9a: 1a:3d:87:48:a0:dc:4b:38:c4:e4:2c:b2:b7:51:50: da:9e:64:09:9d:ae:91:73:5b:be:6b:8b:95:77:45: c1:53:a2:9d:20:30:b9:26:29:11:7c:b8:7a:63:86: d5:9d:99:0c:b5:7a:82:2c:0c:44:b2:49:5e:84:d4: e8:35:14:24:ba:90:4d:fe:52:6c:c5:80:cf:0f:85: e0:a0:22:f7:33:b2:24:65:b1:32:eb:91:ca:48:cb: 09:87:5e:82:f2:5f:83:8d:23:77:93:c0:0e:46:8d: c4:8d:d4:15:76:e3:88:2e:40:8e:a7:aa:b8:17:ec: 75:60:38:fc:b7:36:20:c8:fa:d5:82:e6:29:97:ec: da:6a:74:40:9a:97:6e:92:6b:b0:a9:92:00:f0:6e: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:DB:2F:03:F7:E3:41:D4:80:08:46:0D:06:A7:E2:5A:03:14:B8 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d2:72:17:cd:8b:00:9e:71:c4:0d:5d:b2:60:2a:af:d6:75: 8f:f9:22:ce:8c:3c:50:4c:01:81:ee:26:97:0f:92:7b:82:45: 35:93:07:27:36:ed:bd:bb:53:4e:10:0d:ac:94:e6:c6:52:8f: 44:e4:79:0a:49:13:0c:6e:9e:83:02:99:f6:ca:a4:ce:c9:9e: 9d:39:17:e8:07:32:c3:aa:31:23:90:ee:9a:9f:92:6c:48:17: e3:18:e7:85:14:78:ab:af:fe:af:00:bc:ed:00:58:5b:d5:b1: 6c:63:1e:65:01:ca:3e:9c:d4:6c:d9:5f:9e:d1:61:6b:29:ff: 95:db:ac:47:25:27:b0:5b:56:7b:94:d2:73:f3:a0:0a:c7:de: 27:ab:b1:65:b2:be:c4:ab:f8:f2:62:fa:bc:6e:56:9b:2f:8e: cb:18:99:17:ff:35:99:c1:e2:25:66:83:ad:d4:09:e8:5d:36: df:27:9a:c9:45:64:da:e3:17:81:34:90:60:87:d6:a6:1a:2a: 5b:ac:29:7f:50:fa:88:25:ac:8a:fe:b0:3c:95:76:65:b2:51: 7e:f0:c3:af:4c:2e:3e:c4:91:c2:6c:71:ff:3c:57:5b:03:fd: b9:c4:b6:8f:c5:55:8e:25:21:fe:f8:f2:92:a5:ec:8d:65:34: ca:f3:87:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjYwNjEyMjA1OTIzWhcNMjYwNjE5MjA1OTIzWjAYMRYwFAYD VQQDEw02YTJjNzMyYi1mOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwakTvWQget2013Iwp32JHwnB/27MRgDdQ7HooV5PgwtBTW20xaSTYfcy5k/V MNO0QnsQlCzdMTk82+JbLf2EHJgXWkCtIH2IhveG9CsOc1dTMxbGNUHDGg5rD/uA o0WFj0x3LXCJN5oaPYdIoNxLOMTkLLK3UVDanmQJna6Rc1u+a4uVd0XBU6KdIDC5 JikRfLh6Y4bVnZkMtXqCLAxEsklehNToNRQkupBN/lJsxYDPD4XgoCL3M7IkZbEy 65HKSMsJh16C8l+DjSN3k8AORo3EjdQVduOILkCOp6q4F+x1YDj8tzYgyPrVguYp l+zaanRAmpdukmuwqZIA8G7glwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3O2y8D 9+NB1IAIRg0Gp+JaAxS4MB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmNJyF82LAJ5xxA1dsmAqr9Z1j/kizow8UEwBge4mlw+Se4JFNZMHJzbtvbtT ThANrJTmxlKPROR5CkkTDG6egwKZ9sqkzsmenTkX6Acyw6oxI5Dump+SbEgX4xjn hRR4q6/+rwC87QBYW9WxbGMeZQHKPpzUbNlfntFhayn/ldusRyUnsFtWe5TSc/Og CsfeJ6uxZbK+xKv48mL6vG5Wmy+OyxiZF/81mcHiJWaDrdQJ6F023yeayUVk2uMX gTSQYIfWphoqW6wpf1D6iCWsiv6wPJV2ZbJRfvDDr0wuPsSRwmxx/zxXWwP9ucS2 j8VVjiUh/vjykqXsjWU0yvOH8Q== -----END CERTIFICATE-----Generated at Sat Jun 13 08:37:33 2026 by rpki-client