$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: 5fxFcyHQOCNQgthl1O4o9xaSBiKpjS77iZG/DkRJlVU= Subject key identifier: F5:76:56:00:59:82:48:33:5F:90:1E:41:8A:8F:39:D0:34:3B:B4:25 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 01D7 Signing time: Sun 05 Apr 2026 03:03:32 +0000 Manifest this update: Sun 05 Apr 2026 03:03:31 +0000 Manifest next update: Sun 12 Apr 2026 03:03:31 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: aj8U+FYpxYe49kfM0hUlRaSgsBGaA34AUidEvLPrC4Q=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: uTyjoAh95BFvYOGGP6YDD2msOcpdKZlwbOX4CL5Jc1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Apr 5 03:03:31 2026 GMT Not After : Apr 12 03:03:31 2026 GMT Subject: CN=69d1d104-52c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:5d:21:0f:fe:d5:86:e9:92:0c:5f:7c:6c: 0b:23:fa:dd:d9:57:7a:7f:e8:d6:dd:4f:77:aa:db: ff:cb:50:6f:d0:90:08:9d:9d:97:58:bd:d5:d2:ed: 43:fb:6e:b6:6a:f6:6d:cb:74:a2:3e:94:c3:64:30: 03:f1:e0:a7:1d:d2:cd:ad:9b:07:a1:01:17:a8:93: d6:3f:5e:c5:95:c1:d4:7b:a3:61:bf:e5:ac:6a:14: cb:e5:8a:96:6f:b4:45:fb:4d:0a:04:12:ea:6a:99: bc:fd:3f:9c:96:ec:2d:aa:08:5e:55:8a:88:25:f0: f2:41:9f:1e:d9:e6:ae:f0:c7:17:5b:e8:dd:e8:9c: c2:9a:44:28:5f:07:3c:37:d1:7e:48:51:60:3e:01: 68:95:bc:07:69:ad:65:d7:48:55:02:58:4b:52:a9: e9:dd:85:3d:52:ae:be:2e:1c:94:11:00:71:b2:68: 7c:73:99:ae:a2:37:af:02:f4:7d:ee:4b:7a:f2:a1: 90:e7:26:73:13:2f:e2:7f:91:ea:00:be:61:17:ae: 7e:19:64:51:04:3f:64:8d:81:a4:28:05:d1:ff:66: a9:e2:a8:78:d3:aa:fc:19:b8:e8:01:bc:83:e8:d2: 41:4e:01:f7:0e:5e:d3:ae:b0:52:72:3b:0a:bc:06: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:76:56:00:59:82:48:33:5F:90:1E:41:8A:8F:39:D0:34:3B:B4:25 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cc:17:51:cd:af:9c:bb:f5:61:1b:75:7a:b9:39:77:a9:b7: 66:ef:9f:a0:5b:e3:f9:51:31:ac:7d:7f:5b:a7:25:70:11:31: 6e:a4:83:63:92:41:6a:c9:0f:54:9a:54:20:c9:67:47:9c:29: 53:5f:8a:33:1c:31:78:63:d6:af:16:e1:13:97:a8:a9:93:e2: b5:f8:21:4c:0d:ae:5f:f9:47:9f:c4:1c:87:c8:89:1d:2a:b1: 10:f6:87:cc:f8:c2:bb:7a:03:67:a2:17:48:11:90:6a:2b:c3: d8:d5:e2:ff:70:12:24:ea:7b:ad:cb:10:71:6c:49:43:6d:dd: bd:17:f4:40:37:0f:57:e0:a4:1a:32:83:b7:4b:88:db:00:08: 64:c0:b7:eb:0a:72:6c:34:d9:75:f7:4c:b6:e1:96:5f:28:9e: 35:a0:50:45:db:2c:ff:c3:0f:16:6e:5f:ce:e7:bc:08:76:1d: 7b:c7:35:8c:01:cd:e9:d5:06:35:e9:28:c0:9d:71:8b:2d:9c: 33:4c:b5:69:af:eb:1a:a5:3e:92:d9:1a:77:34:0b:05:ab:91: ee:5f:a3:67:ee:d8:c6:e7:28:dd:7c:b7:d9:6b:ae:06:29:64: 53:27:14:85:eb:31:f0:c4:23:6e:a0:d0:22:ee:b6:4d:5d:58: 42:5b:50:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjYwNDA1MDMwMzMxWhcNMjYwNDEyMDMwMzMxWjAYMRYwFAYD VQQDEw02OWQxZDEwNC01MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuFdIQ/+1YbpkgxffGwLI/rd2Vd6f+jW3U93qtv/y1Bv0JAInZ2XWL3V0u1D +262avZty3SiPpTDZDAD8eCnHdLNrZsHoQEXqJPWP17FlcHUe6Nhv+WsahTL5YqW b7RF+00KBBLqapm8/T+cluwtqgheVYqIJfDyQZ8e2eau8McXW+jd6JzCmkQoXwc8 N9F+SFFgPgFolbwHaa1l10hVAlhLUqnp3YU9Uq6+LhyUEQBxsmh8c5muojevAvR9 7kt68qGQ5yZzEy/if5HqAL5hF65+GWRRBD9kjYGkKAXR/2ap4qh406r8GbjoAbyD 6NJBTgH3Dl7TrrBScjsKvAagQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPV2VgBZ gkgzX5AeQYqPOdA0O7QlMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmswXUc2vnLv1YRt1erk5d6m3Zu+foFvj+VExrH1/W6clcBExbqSDY5JBaskP VJpUIMlnR5wpU1+KMxwxeGPWrxbhE5eoqZPitfghTA2uX/lHn8Qch8iJHSqxEPaH zPjCu3oDZ6IXSBGQaivD2NXi/3ASJOp7rcsQcWxJQ23dvRf0QDcPV+CkGjKDt0uI 2wAIZMC36wpybDTZdfdMtuGWXyieNaBQRdss/8MPFm5fzue8CHYde8c1jAHN6dUG NekowJ1xiy2cM0y1aa/rGqU+ktkadzQLBauR7l+jZ+7Yxuco3Xy32WuuBilkUycU hesx8MQjbqDQIu62TV1YQltQMA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:07 2026 by rpki-client