$ rpki-client -vvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json) Hash identifier: x5iinsXk5sl3gX4EdYhMsNdxqcPHCrBW7vooUSDrTfI= Subject key identifier: 19:58:B2:39:4F:7F:13:44:99:AD:6A:D4:35:93:B7:81:F7:E3:0C:E9 Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft Manifest number: 1B Signing time: Sun 05 Apr 2026 08:18:19 +0000 Manifest this update: Sun 05 Apr 2026 08:18:19 +0000 Manifest next update: Sun 12 Apr 2026 08:18:19 +0000 Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: gY8zxwJiUlsRBcLX+Mr5HZ46s00BhGMINECi+UgMDNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Validity Not Before: Apr 5 08:18:19 2026 GMT Not After : Apr 12 08:18:19 2026 GMT Subject: CN=69d21acb-3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:7e:a9:fc:2b:38:a0:27:58:dc:2c:ea:b5: 60:7e:16:7e:af:f7:be:59:24:ea:69:28:4d:b8:da: f7:79:d6:3e:09:6a:03:7c:33:2c:a1:fb:65:6e:33: 1d:2c:2a:c8:81:6c:d8:55:93:33:d2:0e:57:8f:eb: e5:39:92:a8:95:d8:a7:03:8a:ae:6a:10:95:8d:1c: e0:96:f7:e6:63:8a:e8:db:aa:51:d0:7d:89:f2:1d: e3:e6:f7:74:1c:09:02:bd:3f:96:a4:70:b8:70:9d: 50:5d:88:0f:67:8a:6e:40:02:60:48:5b:6c:37:3e: 1b:ef:e8:99:55:dc:ce:92:49:e3:8f:40:c3:1d:2d: 0c:58:68:c4:15:74:3b:cc:98:d3:42:15:2f:4f:b6: 48:d4:af:fc:bb:47:e6:5c:d5:a4:7d:02:6d:c4:56: 2e:ec:4c:20:d5:be:ce:85:b3:c1:13:16:47:8e:94: 2d:02:93:aa:f5:cd:a6:b1:1e:86:eb:40:39:1a:4f: f1:5e:44:eb:e1:24:27:3d:bc:3a:fb:7e:c5:d3:c5: 63:31:39:e1:ce:71:fe:42:f6:0d:6b:c7:b7:a0:a7: 6b:33:b2:24:2b:23:86:37:d8:ac:8d:57:cd:c7:6e: 06:af:44:e8:2c:88:54:8e:d2:36:14:22:85:d6:06: 06:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:B2:39:4F:7F:13:44:99:AD:6A:D4:35:93:B7:81:F7:E3:0C:E9 X509v3 Authority Key Identifier: keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2d:43:c9:fe:9c:df:f0:a4:5c:98:64:8d:bb:4c:44:ab:92: 89:73:5a:76:fd:25:3f:73:75:a0:5a:44:62:1c:6b:9c:23:51: 9f:58:88:a8:62:87:7e:b9:71:17:1a:74:60:6d:5b:69:c7:13: a7:89:19:fc:e4:24:6e:fb:dc:0b:bf:f0:3e:10:1e:15:e0:96: 39:8d:93:05:30:f1:a4:b3:06:d8:a4:86:07:1c:51:2a:05:b3: b2:8d:d1:06:31:bb:78:8b:1c:27:c3:d2:b5:88:f6:ed:11:84: 97:98:d8:0a:b1:48:41:b5:31:08:90:43:38:f2:fb:1a:24:2b: b1:b4:4f:ab:a8:d1:d8:3d:aa:b8:1a:a9:8f:af:b5:e4:e9:69: 49:af:e9:92:35:a6:55:eb:cd:94:5a:7f:87:d2:85:f2:18:1f: 5c:d6:fa:26:d0:da:a5:b1:ef:65:05:97:f2:4a:78:b4:f7:c1: 0f:40:a2:60:48:26:21:a2:31:d6:c0:6d:29:66:7d:f1:c6:ba: fa:39:b7:f5:51:9e:71:e6:07:94:e6:33:11:20:fc:56:1c:8b: f2:2d:71:6b:2e:79:4d:1b:b7:7a:10:49:85:ac:be:af:d5:36: fa:00:cf:a8:7f:f7:82:5f:db:82:c2:bc:c1:91:71:6a:c7:85: 47:3a:07:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdFRjExMC8GA1UEBRMoREU3REM2NEY5OUY2MjQwNjI0QkExM0QyMTU0OTQ0NEM0 MjRCNTQ2RjAeFw0yNjA0MDUwODE4MTlaFw0yNjA0MTIwODE4MTlaMBgxFjAUBgNV BAMTDTY5ZDIxYWNiLTMyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7gH6p/Cs4oCdY3CzqtWB+Fn6v975ZJOppKE242vd51j4JagN8Myyh+2VuMx0s KsiBbNhVkzPSDleP6+U5kqiV2KcDiq5qEJWNHOCW9+ZjiujbqlHQfYnyHePm93Qc CQK9P5akcLhwnVBdiA9nim5AAmBIW2w3Phvv6JlV3M6SSeOPQMMdLQxYaMQVdDvM mNNCFS9PtkjUr/y7R+Zc1aR9Am3EVi7sTCDVvs6Fs8ETFkeOlC0Ck6r1zaaxHobr QDkaT/FeROvhJCc9vDr7fsXTxWMxOeHOcf5C9g1rx7egp2szsiQrI4Y32KyNV83H bgavROgsiFSO0jYUIoXWBga9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGViyOU9/ E0SZrWrUNZO3gffjDOkwHwYDVR0jBBgwFoAU3n3GT5n2JAYkuhPSFUlETEJLVG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0VGLzVDOUM4QUMwMTEz RjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZa3VoUFNGVWxFVEVKTFZH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM24zR1Q1bjJKQVlrdWhQU0ZVbEVURUpMVkc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0VGLzVDOUM4QUMwMTEzRjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZ a3VoUFNGVWxFVEVKTFZHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNLUPJ/pzf8KRcmGSNu0xEq5KJc1p2/SU/c3WgWkRiHGucI1GfWIioYod+uXEX GnRgbVtpxxOniRn85CRu+9wLv/A+EB4V4JY5jZMFMPGkswbYpIYHHFEqBbOyjdEG Mbt4ixwnw9K1iPbtEYSXmNgKsUhBtTEIkEM48vsaJCuxtE+rqNHYPaq4GqmPr7Xk 6WlJr+mSNaZV682UWn+H0oXyGB9c1vom0Nqlse9lBZfySni098EPQKJgSCYhojHW wG0pZn3xxrr6Obf1UZ5x5geU5jMRIPxWHIvyLXFrLnlNG7d6EEmFrL6v1Tb6AM+o f/eCX9uCwrzBkXFqx4VHOgdb -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:19 2026 by rpki-client