$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: hDqMSwihz0NmdCyVMvsuQkxWQGrgpOhD+SvCPKrrz5o= Subject key identifier: E1:7E:29:CC:AF:31:DC:30:C4:48:A2:FF:50:1D:95:43:3F:81:5A:98 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 353D Signing time: Sat 04 Apr 2026 14:34:53 +0000 Manifest this update: Sat 04 Apr 2026 14:34:53 +0000 Manifest next update: Sat 11 Apr 2026 14:34:53 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: ZKviLTbg+kIiUldGaTuC1Ci2oubA2AjAhjQpoH+1fwg=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Apr 4 14:34:53 2026 GMT Not After : Apr 11 14:34:53 2026 GMT Subject: CN=69d1218d-6499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:b2:de:a7:9e:3f:ee:61:81:25:93:60:5d: 18:98:3e:a3:18:6a:40:2f:55:35:54:b0:4c:25:f8: d0:95:08:30:26:72:45:10:61:3f:6c:7a:13:71:6c: 04:16:8f:22:70:88:67:30:0d:02:65:43:65:26:5f: 73:1c:59:a2:1d:bd:2f:84:34:b5:31:24:04:26:20: 6f:be:07:5f:84:2b:db:25:6b:7c:90:d9:c5:7e:24: 46:a4:8c:1f:a8:d0:98:78:30:1b:a4:52:28:9a:98: ef:30:73:6a:cc:dc:39:6b:14:66:f4:14:66:fb:80: 2a:d5:4e:a7:79:07:27:f6:9b:84:b8:0f:32:13:a4: 9a:ed:fb:78:e9:24:8c:75:3e:4b:c8:01:8c:db:c1: 7d:a8:af:34:ed:81:05:c2:0d:04:49:61:5e:a6:c4: 1d:75:5f:0b:a7:2f:5b:de:bf:ce:9e:fc:ad:36:a0: 01:b3:f2:94:29:27:68:9a:2b:9c:41:2e:cc:07:82: 1a:b2:87:48:81:2c:4a:3f:89:df:57:35:76:a2:78: 09:90:7b:77:b9:b7:22:7b:ab:98:98:48:76:ce:23: f9:af:fb:2b:09:8a:36:ff:8c:21:24:20:18:f8:6a: 91:1b:83:d5:3d:72:4f:94:71:63:12:19:9c:6a:9f: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7E:29:CC:AF:31:DC:30:C4:48:A2:FF:50:1D:95:43:3F:81:5A:98 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ae:81:08:74:d8:8e:70:ec:4a:3e:56:f6:2a:41:71:fc:87: 8c:55:9d:b6:30:14:da:47:01:a5:48:da:31:95:41:0e:65:9f: d8:7f:d5:30:f0:5c:34:43:38:fb:29:3b:8b:ac:46:b8:7e:eb: 92:2b:fd:d5:f6:ed:a2:9d:f4:ae:03:e2:3b:a2:40:54:f7:17: 65:d3:bd:8c:09:a1:83:05:7c:3b:bc:ea:2d:5f:1f:f2:83:f7: 98:79:70:81:68:f9:d7:4f:0e:f6:a2:69:5f:15:5c:20:9f:31: 41:e9:61:9a:17:59:03:a0:35:52:e6:55:5b:55:e5:d1:fe:15: 6a:86:b1:9e:81:d9:fb:d1:cc:61:b4:43:42:ac:5f:cc:56:20: 10:a6:2c:7e:45:7a:4b:01:54:a5:d3:e4:33:5a:48:b3:2e:98: 00:73:49:cc:0e:49:00:30:43:4c:2f:57:35:dd:52:5d:1a:88: 46:b1:19:78:f4:04:02:d8:ce:8c:2b:7d:7a:44:ff:5d:53:4a: a1:44:1f:f5:0c:89:7b:38:86:85:d3:8a:bf:54:d9:be:ef:01: 4e:91:24:9c:75:8d:35:74:f2:fa:5c:66:4c:9b:63:4a:49:fc: 74:c2:e8:5c:a0:ae:93:88:bd:7a:4e:1c:24:cc:83:cf:4a:26: 43:1c:37:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwNDA0MTQzNDUzWhcNMjYwNDExMTQzNDUzWjAYMRYwFAYD VQQDEw02OWQxMjE4ZC02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIyy3qeeP+5hgSWTYF0YmD6jGGpAL1U1VLBMJfjQlQgwJnJFEGE/bHoTcWwE Fo8icIhnMA0CZUNlJl9zHFmiHb0vhDS1MSQEJiBvvgdfhCvbJWt8kNnFfiRGpIwf qNCYeDAbpFIompjvMHNqzNw5axRm9BRm+4Aq1U6neQcn9puEuA8yE6Sa7ft46SSM dT5LyAGM28F9qK807YEFwg0ESWFepsQddV8Lpy9b3r/OnvytNqABs/KUKSdomiuc QS7MB4IasodIgSxKP4nfVzV2ongJkHt3ubcie6uYmEh2ziP5r/srCYo2/4whJCAY +GqRG4PVPXJPlHFjEhmcap9TewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOF+Kcyv MdwwxEii/1AdlUM/gVqYMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvK6BCHTYjnDsSj5W9ipBcfyHjFWdtjAU2kcBpUjaMZVBDmWf2H/VMPBcNEM4 +yk7i6xGuH7rkiv91fbtop30rgPiO6JAVPcXZdO9jAmhgwV8O7zqLV8f8oP3mHlw gWj5108O9qJpXxVcIJ8xQelhmhdZA6A1UuZVW1Xl0f4VaoaxnoHZ+9HMYbRDQqxf zFYgEKYsfkV6SwFUpdPkM1pIsy6YAHNJzA5JADBDTC9XNd1SXRqIRrEZePQEAtjO jCt9ekT/XVNKoUQf9QyJeziGhdOKv1TZvu8BTpEknHWNNXTy+lxmTJtjSkn8dMLo XKCuk4i9ek4cJMyDz0omQxw3ug== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:08 2026 by rpki-client