$ rpki-client -vvf rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft File: 3CH4ZzeyOX3SsmCej7QGhuPI92E.mft (raw, json) Hash identifier: ojrlSXbaJzI/hwXUi4IjelXbjvLZMYS1ccujfv86HSM= Subject key identifier: 8E:13:F3:A1:66:60:D9:31:F6:BC:DE:C2:CE:93:20:47:51:69:D6:85 Authority key identifier: DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 Certificate issuer: /CN=A91C799C/serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Certificate serial: 0829 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft Manifest number: 081F Signing time: Sat 04 Apr 2026 20:50:02 +0000 Manifest this update: Sat 04 Apr 2026 20:50:01 +0000 Manifest next update: Sat 11 Apr 2026 20:50:01 +0000 Files and hashes: 1: 3CH4ZzeyOX3SsmCej7QGhuPI92E.crl (hash: M4Ih6eNhYWQAKp0NVR9ZOkE4td4sdx6J6PHXczAWmLA=) 2: 9F5F0EC6135911EBBC97C718C4F9AE02.roa (hash: nGutShTIxEkwTwwnglW9O9WTwfSVkS3vcucRNmR+lNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C799C, serialNumber=DC21F86737B2397DD2B2609E8FB40686E3C8F761 Validity Not Before: Apr 4 20:50:01 2026 GMT Not After : Apr 11 20:50:01 2026 GMT Subject: CN=69d17979-6178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:b5:16:b6:9e:15:c0:dd:86:93:a2:bb:7f: 44:ad:93:ac:ef:d3:2e:85:bf:5b:88:e7:d6:8c:e7: 62:54:78:25:5f:4e:b9:24:65:9b:81:35:91:73:f2: 1c:c2:c8:25:f2:c4:6f:9b:6a:bb:28:ac:23:76:5b: b4:d4:22:dd:6c:ab:16:62:36:dd:88:3a:bd:21:ab: 21:17:97:9c:11:cf:46:94:3e:19:0b:3f:3e:42:6a: f5:a9:66:81:41:77:dd:cc:19:18:1c:6b:0c:e2:11: e3:16:9c:48:5f:70:5e:99:60:91:93:f6:e9:34:0e: 6d:78:37:d3:09:0e:35:2e:ec:78:b7:d6:6d:92:2b: 54:dc:11:1b:00:68:d4:9b:b5:28:03:69:b8:90:ad: 32:79:f5:86:68:33:a8:ec:a5:a0:62:99:9f:77:4d: d7:a7:ce:12:5b:89:75:cd:da:f8:1e:42:ca:c7:ec: 59:8a:e5:d9:95:93:b5:15:76:88:2a:b5:28:d4:4e: ca:4c:db:f5:22:19:f9:d5:c9:96:87:ac:fe:2f:0b: 46:52:a6:47:61:ba:e4:91:0d:8f:ef:93:85:58:4d: 23:30:70:e1:b8:40:9e:00:a9:04:f2:d5:48:cb:86: d8:e8:13:68:a1:5c:aa:50:b9:eb:87:f4:36:23:36: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:13:F3:A1:66:60:D9:31:F6:BC:DE:C2:CE:93:20:47:51:69:D6:85 X509v3 Authority Key Identifier: keyid:DC:21:F8:67:37:B2:39:7D:D2:B2:60:9E:8F:B4:06:86:E3:C8:F7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CH4ZzeyOX3SsmCej7QGhuPI92E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C799C/A2DFB336135711EB8D13B215C4F9AE02/3CH4ZzeyOX3SsmCej7QGhuPI92E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:91:17:bf:85:7e:da:dc:ba:a1:89:ac:c2:16:1c:51:35:af: b7:db:b6:7f:fd:82:02:7d:d7:c6:f6:e5:fc:e0:bb:d8:96:58: 8e:20:09:f6:4a:4d:b4:29:18:57:d0:34:2b:f3:7f:c8:33:68: f5:d3:ff:8a:1c:65:0e:2d:f6:dd:62:00:e2:14:6d:a0:84:7d: 5f:64:5d:6e:e5:5a:ca:25:ba:0c:ce:ae:f1:74:1b:bf:b0:55: 6a:27:18:48:1e:2b:eb:9e:9c:2d:69:35:1c:59:69:fb:00:f6: 0d:64:42:7e:57:9d:20:74:b6:d7:9e:f8:b1:bd:39:c6:25:a0: 63:06:76:94:6e:83:88:f7:52:64:21:0f:84:39:85:1a:f0:ba: 3d:a3:de:12:b4:9d:e2:1d:c5:db:3e:a1:cf:d1:f7:ba:10:91: c4:11:e6:b0:a7:00:0b:e2:85:8e:d4:1b:85:d7:83:f9:a2:44: 52:84:88:8e:10:34:56:a4:5c:ae:57:6b:e6:35:03:92:b0:77: 9a:0a:26:97:09:94:41:eb:37:92:14:60:06:a6:87:e7:c0:c8: 4d:0c:e6:9e:ac:a5:83:70:15:e2:0a:7b:50:ce:c2:ca:90:4c: 3a:e4:55:01:6e:8c:87:27:41:57:5b:4b:ed:e3:7f:6f:cf:87: ea:be:22:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OUMxMTAvBgNVBAUTKERDMjFGODY3MzdCMjM5N0REMkIyNjA5RThGQjQwNjg2 RTNDOEY3NjEwHhcNMjYwNDA0MjA1MDAxWhcNMjYwNDExMjA1MDAxWjAYMRYwFAYD VQQDEw02OWQxNzk3OS02MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ti1FraeFcDdhpOiu39ErZOs79Muhb9biOfWjOdiVHglX065JGWbgTWRc/Ic wsgl8sRvm2q7KKwjdlu01CLdbKsWYjbdiDq9IashF5ecEc9GlD4ZCz8+Qmr1qWaB QXfdzBkYHGsM4hHjFpxIX3BemWCRk/bpNA5teDfTCQ41Lux4t9ZtkitU3BEbAGjU m7UoA2m4kK0yefWGaDOo7KWgYpmfd03Xp84SW4l1zdr4HkLKx+xZiuXZlZO1FXaI KrUo1E7KTNv1Ihn51cmWh6z+LwtGUqZHYbrkkQ2P75OFWE0jMHDhuECeAKkE8tVI y4bY6BNooVyqULnrh/Q2IzZxuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4T86Fm YNkx9rzews6TIEdRadaFMB8GA1UdIwQYMBaAFNwh+Gc3sjl90rJgno+0BobjyPdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk5Qy9BMkRGQjMzNjEz NTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9YM1NzbUNlajdRR2h1UEk5 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDSDRaemV5T1gzU3NtQ2VqN1FHaHVQSTkyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk5Qy9BMkRGQjMzNjEzNTcxMUVCOEQxM0IyMTVDNEY5QUUwMi8zQ0g0WnpleU9Y M1NzbUNlajdRR2h1UEk5MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5EXv4V+2ty6oYmswhYcUTWvt9u2f/2CAn3Xxvbl/OC72JZYjiAJ9kpNtCkY V9A0K/N/yDNo9dP/ihxlDi323WIA4hRtoIR9X2RdbuVayiW6DM6u8XQbv7BVaicY SB4r656cLWk1HFlp+wD2DWRCfledIHS21574sb05xiWgYwZ2lG6DiPdSZCEPhDmF GvC6PaPeErSd4h3F2z6hz9H3uhCRxBHmsKcAC+KFjtQbhdeD+aJEUoSIjhA0VqRc rldr5jUDkrB3mgomlwmUQes3khRgBqaH58DITQzmnqylg3AV4gp7UM7CypBMOuRV AW6MhydBV1tL7eN/b8+H6r4i0g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:29 2026 by rpki-client