$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: ZpiIS6Mf/xD3H+fJ/RdekksS60L/b8bpIiVrCkXkGjc= Subject key identifier: F8:28:9D:58:5B:49:6F:50:68:66:9D:6D:25:7C:55:9B:AC:9A:17:01 Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: A3 Signing time: Sat 13 Jun 2026 07:25:52 +0000 Manifest this update: Sat 13 Jun 2026 07:25:52 +0000 Manifest next update: Sat 20 Jun 2026 07:25:52 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: SQzIk6QsR4nnE1cFNB2nzlskQLBzkh//YAkJU3effXI=) 2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: faAWxuL02WBDF7lhFM/mV+aG3ZsWz2hDnEoq4EKfApA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 07:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Jun 13 07:25:52 2026 GMT Not After : Jun 20 07:25:52 2026 GMT Subject: CN=6a2d0600-e3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:91:77:6d:4c:64:8c:bf:d1:c1:da:60:0d: dd:1a:cf:19:c2:25:b9:95:d1:f2:0a:a9:09:31:94: 66:bd:63:1a:b4:27:5e:5c:ff:8e:8d:59:45:2d:d7: 48:f4:0d:e6:05:44:b6:26:fa:81:2d:8b:9f:84:ce: b4:93:fc:47:ce:2a:a6:31:04:b6:3f:20:14:91:6e: 14:da:b3:e9:e7:d5:90:33:32:df:24:33:95:54:9f: 8d:75:4c:1a:cd:2e:6f:3b:a1:78:4f:1d:f5:60:2c: 09:8c:6b:c6:d4:2a:ec:2d:7d:37:28:86:c7:7d:86: 40:4a:1f:88:ef:16:41:a1:ee:3f:3a:0f:fa:12:99: 3a:ff:e9:65:09:12:cf:f5:f0:16:a4:74:3a:e5:59: 66:85:81:47:d7:79:79:81:8b:55:d1:dd:fa:f6:06: 4f:5b:62:3a:82:0d:65:bf:de:95:4c:1b:fc:16:da: 61:39:87:61:ac:b4:c6:c4:03:d1:53:b8:93:a5:ad: d1:b3:d5:8f:5c:c5:de:c0:a3:26:99:7d:7f:28:0a: 77:20:c2:8c:f5:07:bf:c1:73:18:b5:b1:64:90:de: 9e:8f:bf:2a:7c:e0:ce:18:a5:9d:fe:56:5d:f4:71: 9e:30:12:c3:f1:82:4a:1b:cf:0c:13:5b:82:61:f3: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:28:9D:58:5B:49:6F:50:68:66:9D:6D:25:7C:55:9B:AC:9A:17:01 X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ad:17:91:ad:94:a5:f4:5f:d0:4e:de:eb:6f:72:72:33:7d: 39:ce:27:24:d0:ca:21:56:90:aa:0d:56:a9:51:62:b4:8a:2a: 48:de:bc:c1:65:ad:0f:a4:a7:a5:12:9b:87:d7:fe:26:41:89: ed:c6:35:26:f6:13:90:24:ac:1d:18:af:2b:e7:1f:a9:7f:3f: 04:bd:5b:b5:2f:a6:a3:73:8d:a8:7e:2e:ff:7e:58:40:8b:b4: 93:7c:3d:2a:c8:a3:52:9b:c2:3d:7d:9b:88:44:7b:57:74:2e: 06:41:32:16:44:9c:f8:75:b6:30:29:19:98:16:e5:27:a8:8e: 03:93:de:6f:bb:4a:4f:24:07:67:99:21:a3:52:a7:42:9c:69: 4b:bc:04:22:b0:e6:2c:5f:fe:85:3d:43:e1:65:cc:3f:e7:d4: c6:9b:87:5e:3c:0a:a6:2a:f5:0e:b5:79:26:95:04:63:1a:28: 85:54:60:c8:3c:bb:3b:44:be:70:f3:16:43:ee:e6:6e:4a:ee: 70:0c:34:64:24:b9:a6:e6:75:98:be:fb:01:a0:91:cf:88:6a: 8c:4d:fd:fa:8b:ce:12:75:07:8e:fa:b3:77:75:fe:a8:8f:7f: 77:13:20:4b:16:83:35:08:1a:d9:9a:83:7c:44:e7:b6:c4:ea: f2:6f:a8:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5 OTUyQ0RBQkUwHhcNMjYwNjEzMDcyNTUyWhcNMjYwNjIwMDcyNTUyWjAYMRYwFAYD VQQDEw02YTJkMDYwMC1lM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2G6Rd21MZIy/0cHaYA3dGs8ZwiW5ldHyCqkJMZRmvWMatCdeXP+OjVlFLddI 9A3mBUS2JvqBLYufhM60k/xHziqmMQS2PyAUkW4U2rPp59WQMzLfJDOVVJ+NdUwa zS5vO6F4Tx31YCwJjGvG1CrsLX03KIbHfYZASh+I7xZBoe4/Og/6Epk6/+llCRLP 9fAWpHQ65VlmhYFH13l5gYtV0d369gZPW2I6gg1lv96VTBv8FtphOYdhrLTGxAPR U7iTpa3Rs9WPXMXewKMmmX1/KAp3IMKM9Qe/wXMYtbFkkN6ej78qfODOGKWd/lZd 9HGeMBLD8YJKG88ME1uCYfPj2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgonVhb SW9QaGadbSV8VZusmhcBMB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDBFMC8zRkJCNUUwNDdCNTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1 M2ViQjNVbFVmY3laVXMycjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk60Xka2UpfRf0E7e629ycjN9Oc4nJNDKIVaQqg1WqVFitIoqSN68wWWtD6Sn pRKbh9f+JkGJ7cY1JvYTkCSsHRivK+cfqX8/BL1btS+mo3ONqH4u/35YQIu0k3w9 KsijUpvCPX2biER7V3QuBkEyFkSc+HW2MCkZmBblJ6iOA5Peb7tKTyQHZ5kho1Kn QpxpS7wEIrDmLF/+hT1D4WXMP+fUxpuHXjwKpir1DrV5JpUEYxoohVRgyDy7O0S+ cPMWQ+7mbkrucAw0ZCS5puZ1mL77AaCRz4hqjE39+ovOEnUHjvqzd3X+qI9/dxMg SxaDNQga2ZqDfETntsTq8m+o4A== -----END CERTIFICATE-----Generated at Sat Jun 13 21:05:52 2026 by rpki-client