$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json) Hash identifier: ubsdrbOXe/1ESA5/X2QUW2daax5fCx9ePWIxX+6T/9w= Subject key identifier: 9C:C6:14:B6:CE:D0:BE:FA:24:2C:A3:E7:D9:DA:83:66:5E:D2:8D:31 Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 Certificate issuer: /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft Manifest number: 2D Signing time: Sat 13 Jun 2026 08:46:08 +0000 Manifest this update: Sat 13 Jun 2026 08:46:08 +0000 Manifest next update: Sat 20 Jun 2026 08:46:08 +0000 Files and hashes: 1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: SWzcai8uw+hGZ77y9DV/JBXd65H7jvy6DjgDRxLTV2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 08:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Validity Not Before: Jun 13 08:46:08 2026 GMT Not After : Jun 20 08:46:08 2026 GMT Subject: CN=6a2d18d0-2378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:19:7d:ac:ec:45:24:9e:c9:0b:12:bd:86: c7:0f:23:93:64:b4:a4:d3:73:10:e1:15:51:9c:26: d8:00:22:34:7a:4b:80:32:75:97:c7:37:85:1e:5a: 42:04:16:e7:ff:ec:74:2f:77:9f:f5:23:14:82:15: 8d:d2:82:d6:28:cd:4d:15:65:39:d5:4f:91:83:5a: 67:c2:51:9c:7f:98:55:e0:7d:14:ff:2a:45:26:65: c1:83:2c:9d:49:9d:f3:06:a8:9e:90:98:d2:89:92: f4:f4:23:c3:6d:c6:b8:32:6e:9c:29:f6:82:5d:09: f6:77:c1:39:9a:a4:de:56:8e:0c:8b:77:af:bc:5a: 07:37:81:3b:b7:42:7e:8f:2a:3b:34:ee:90:cf:b0: 5a:80:62:29:1b:b8:b0:9e:dd:ee:5b:6c:13:fd:0f: 02:f9:2b:5c:ec:75:0a:82:e4:19:79:29:19:f6:7f: 81:5c:76:54:15:70:4b:7e:0d:b9:13:db:9e:5b:37: f9:08:42:ad:58:26:99:45:c3:19:70:8f:bd:29:43: 8f:b1:f6:24:da:7f:b9:8a:0d:69:ec:5b:13:2e:03: d1:e3:c4:d2:ec:00:7c:7b:56:2e:87:ad:1f:0d:7f: 22:94:0c:93:f0:59:bf:2e:dc:eb:de:79:78:64:09: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C6:14:B6:CE:D0:BE:FA:24:2C:A3:E7:D9:DA:83:66:5E:D2:8D:31 X509v3 Authority Key Identifier: keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:07:9d:e6:db:51:6a:42:38:22:b4:2c:52:fa:0f:13:b9:17: 66:07:d3:64:fd:54:16:dd:25:74:1f:14:24:eb:76:a9:77:d2: 0b:6c:6d:ba:99:a9:a1:2d:04:68:fe:21:21:00:04:38:b9:9c: f2:ca:9b:3e:ff:a1:e1:6e:42:4a:be:9f:13:f1:1c:17:ce:bb: e3:10:61:36:c0:dd:9e:06:5c:f8:04:4c:df:9a:6d:3f:36:a4: 93:f8:b8:48:15:a1:37:a1:52:df:c8:12:3f:68:9f:40:0c:88: de:15:99:24:82:bf:a9:c4:c7:2e:7e:ab:17:9d:50:96:92:e0: c6:25:6c:0b:98:f1:24:d9:cc:0c:e6:9f:79:56:ae:0b:8b:4f: e9:39:00:09:6a:f3:f8:18:28:c5:f4:8f:f3:17:79:a3:a0:c2: 10:cd:ae:9f:54:5a:df:9b:27:00:37:89:69:c1:eb:e2:67:a5: 9f:8c:41:d3:44:fc:d0:cb:ea:1a:25:eb:ee:f0:20:d4:01:2c: 43:85:6e:d4:80:32:bf:8a:38:6f:85:df:5b:f7:4d:18:52:1c: bc:b5:b3:40:6a:3f:9c:f4:7b:04:cb:a9:a2:fe:96:7e:92:d4: 16:1b:52:cd:8e:19:4b:48:64:0a:d7:25:6f:f3:7a:6e:af:97: d8:d7:5a:2c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkExMDExMC8GA1UEBRMoRERBRUFBNTM0MDJCNzBBOTRGNzM3QzFCMEQ1RDk1MDFG ODI5RjAzOTAeFw0yNjA2MTMwODQ2MDhaFw0yNjA2MjAwODQ2MDhaMBgxFjAUBgNV BAMTDTZhMmQxOGQwLTIzNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsQhl9rOxFJJ7JCxK9hscPI5NktKTTcxDhFVGcJtgAIjR6S4AydZfHN4UeWkIE Fuf/7HQvd5/1IxSCFY3SgtYozU0VZTnVT5GDWmfCUZx/mFXgfRT/KkUmZcGDLJ1J nfMGqJ6QmNKJkvT0I8Ntxrgybpwp9oJdCfZ3wTmapN5WjgyLd6+8Wgc3gTu3Qn6P Kjs07pDPsFqAYikbuLCe3e5bbBP9DwL5K1zsdQqC5Bl5KRn2f4FcdlQVcEt+DbkT 255bN/kIQq1YJplFwxlwj70pQ4+x9iTaf7mKDWnsWxMuA9HjxNLsAHx7Vi6HrR8N fyKUDJPwWb8u3OveeXhkCT5DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnMYUts7Q vvokLKPn2dqDZl7SjTEwHwYDVR0jBBgwFoAU3a6qU0ArcKlPc3wbDV2VAfgp8Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0U4MzMyNUVBMjMy QzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0tsUGMzd2JEVjJWQWZncDhE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2E2cVUwQXJjS2xQYzN3YkRWMlZBZmdwOERrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QTEwL0U4MzMyNUVBMjMyQzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0ts UGMzd2JEVjJWQWZncDhEay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApB53m21FqQjgitCxS+g8TuRdmB9Nk/VQW3SV0HxQk63apd9ILbG26mamhLQRo /iEhAAQ4uZzyyps+/6HhbkJKvp8T8RwXzrvjEGE2wN2eBlz4BEzfmm0/NqST+LhI FaE3oVLfyBI/aJ9ADIjeFZkkgr+pxMcufqsXnVCWkuDGJWwLmPEk2cwM5p95Vq4L i0/pOQAJavP4GCjF9I/zF3mjoMIQza6fVFrfmycAN4lpweviZ6WfjEHTRPzQy+oa Jevu8CDUASxDhW7UgDK/ijhvhd9b900YUhy8tbNAaj+c9HsEy6mi/pZ+ktQWG1LN jhlLSGQK1yVv83pur5fY11os -----END CERTIFICATE-----Generated at Sat Jun 13 17:02:37 2026 by rpki-client