$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: BmwG+0E3ZIKbEfgyA4U+XFBrSruNosXkiKrav8QLHiM= Subject key identifier: 0A:AB:9A:40:5C:0D:1E:11:3F:B2:69:F2:F4:DC:41:0A:D4:A8:EB:A0 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0CEC Signing time: Sat 04 Apr 2026 18:05:31 +0000 Manifest this update: Sat 04 Apr 2026 18:05:30 +0000 Manifest next update: Sat 11 Apr 2026 18:05:30 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: bRIstDipzBePGGlaeYSwZtZsjlRbaRWpucnkwRTZL6o=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: mAWGAZYLLIP3Y6WhqMok7bqseMlhVIGtAozjDaFZhow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Apr 4 18:05:30 2026 GMT Not After : Apr 11 18:05:30 2026 GMT Subject: CN=69d152ea-b3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:34:ed:ad:b7:26:66:30:0c:76:6e:4c:da:cc: e0:86:71:43:d4:04:a1:aa:41:71:1a:cb:a1:37:c0: ed:3f:af:a6:f5:d2:08:ca:fd:24:73:49:7f:1d:bc: 30:bd:7d:0e:c0:d7:20:8a:ba:13:a5:7e:1e:b4:62: 41:3c:89:3a:37:9f:7c:c1:95:53:05:29:7b:9d:18: fa:6c:c3:f4:72:b7:f7:4d:30:5a:d3:93:69:18:b3: 0f:dc:c0:d7:24:0a:63:a0:59:ea:70:f1:b8:9c:2a: b0:8d:1c:b3:70:fb:c8:52:4a:46:1b:6c:7a:e1:aa: a2:f5:c0:d8:24:fc:28:81:9c:99:31:db:e7:62:57: a1:ea:82:70:be:05:2e:5d:1e:3c:17:36:11:b9:80: f7:3a:3c:1f:f7:11:a7:8d:01:f0:ee:1d:34:cd:50: 0e:d5:9d:74:b7:5a:90:4d:d3:de:e0:5f:9f:83:11: ec:15:8d:1b:8d:da:20:02:84:6e:e7:c4:ad:84:36: 88:00:73:90:6f:19:d0:0e:60:50:20:c1:52:c4:35: 60:b8:95:47:9b:f6:cb:4e:a9:07:d1:5e:20:e4:8e: 6a:59:a7:8e:a3:42:ee:7a:b3:c9:62:47:07:67:02: 23:68:07:31:bb:9a:c7:45:c2:05:37:b0:6b:2a:27: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AB:9A:40:5C:0D:1E:11:3F:B2:69:F2:F4:DC:41:0A:D4:A8:EB:A0 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ee:24:ef:86:b4:01:69:66:df:9c:69:58:34:ce:d9:0d:60: fc:fe:cf:1b:03:4c:dd:5f:c2:dc:5a:18:aa:30:9b:5e:ef:3e: 99:c0:0b:2f:fc:6b:46:e4:84:2a:7a:47:37:0c:86:b7:a7:2b: 82:27:b0:21:af:81:0c:d7:9c:c2:68:14:b3:93:61:2c:33:4d: c8:d3:6b:6e:96:1f:fb:c7:08:1f:88:07:60:38:18:5b:c0:97: 3a:7b:8d:bc:b1:09:8f:03:2e:4c:10:6d:57:37:22:91:6a:96: c8:7b:10:80:89:97:78:f1:76:db:6b:91:ee:34:39:78:37:1e: 43:7d:ad:b9:ce:24:47:cf:ea:14:e4:5e:a9:c1:36:52:28:47: b7:55:11:20:6e:8d:12:2c:01:6b:ac:fd:e8:a4:77:52:54:23: 8a:b6:56:8d:ee:41:58:bc:e0:d3:b9:2b:5e:6d:da:46:31:88: 95:10:7d:54:19:15:c7:e9:67:a0:dd:c9:12:22:8d:15:94:4f: 5f:8a:61:9f:2f:39:cc:64:05:f6:75:cb:91:40:44:33:d5:b1: 24:4b:e4:e9:ee:80:75:58:4d:cf:89:64:3f:d0:48:ee:00:fa: af:a1:e7:3b:68:38:37:47:32:b6:d2:92:29:76:9c:15:e2:99: 08:50:b3:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjYwNDA0MTgwNTMwWhcNMjYwNDExMTgwNTMwWjAYMRYwFAYD VQQDEw02OWQxNTJlYS1iM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9TTtrbcmZjAMdm5M2szghnFD1AShqkFxGsuhN8DtP6+m9dIIyv0kc0l/Hbww vX0OwNcgiroTpX4etGJBPIk6N598wZVTBSl7nRj6bMP0crf3TTBa05NpGLMP3MDX JApjoFnqcPG4nCqwjRyzcPvIUkpGG2x64aqi9cDYJPwogZyZMdvnYleh6oJwvgUu XR48FzYRuYD3Ojwf9xGnjQHw7h00zVAO1Z10t1qQTdPe4F+fgxHsFY0bjdogAoRu 58SthDaIAHOQbxnQDmBQIMFSxDVguJVHm/bLTqkH0V4g5I5qWaeOo0LuerPJYkcH ZwIjaAcxu5rHRcIFN7BrKif+1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqrmkBc DR4RP7Jp8vTcQQrUqOugMB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFu4k74a0AWlm35xpWDTO2Q1g/P7PGwNM3V/C3FoYqjCbXu8+mcALL/xrRuSE KnpHNwyGt6crgiewIa+BDNecwmgUs5NhLDNNyNNrbpYf+8cIH4gHYDgYW8CXOnuN vLEJjwMuTBBtVzcikWqWyHsQgImXePF222uR7jQ5eDceQ32tuc4kR8/qFOReqcE2 UihHt1URIG6NEiwBa6z96KR3UlQjirZWje5BWLzg07krXm3aRjGIlRB9VBkVx+ln oN3JEiKNFZRPX4phny85zGQF9nXLkUBEM9WxJEvk6e6AdVhNz4lkP9BI7gD6r6Hn O2g4N0cyttKSKXacFeKZCFCzwA== -----END CERTIFICATE-----Generated at Sun Apr 5 21:08:37 2026 by rpki-client