$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json) Hash identifier: xZZL5ODUMIACiJCuEKEKGuRcvwPgVcyqRqj6tdVrowo= Subject key identifier: 4B:02:D5:93:A3:12:C3:2D:37:EF:F2:94:3E:BF:05:57:61:64:1A:EF Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft Manifest number: CF Signing time: Tue 07 Apr 2026 06:15:18 +0000 Manifest this update: Tue 07 Apr 2026 06:15:17 +0000 Manifest next update: Tue 14 Apr 2026 06:15:17 +0000 Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: Xjipey4FAdBFZLrBUCNGVWOiwgCYsHiq0lwhF2CHyyc=) 2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Validity Not Before: Apr 7 06:15:17 2026 GMT Not After : Apr 14 06:15:17 2026 GMT Subject: CN=69d4a0f5-c03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:29:6b:05:75:1a:e7:7e:6a:b9:e6:bc:43: 25:67:3c:3b:51:11:c3:cd:5e:0b:1a:f1:58:64:bf: d3:01:f1:8b:5d:14:0a:ed:02:cc:a6:b1:cd:c5:f2: 41:4d:67:c2:86:2d:d0:4d:c7:ba:dd:29:21:f4:07: 4d:00:47:2d:ff:da:88:9e:6a:91:bf:cd:21:5c:9e: 9b:55:11:43:8b:25:03:b8:85:9d:89:54:e5:47:99: fe:56:3a:9b:91:b2:88:ae:6e:06:ba:12:f0:f3:cf: 09:47:7d:15:ec:dc:24:83:e6:2e:bd:6e:fb:94:02: 70:ed:c7:31:81:9e:a8:2f:22:96:06:36:ff:48:7e: 8a:85:95:eb:9f:01:e0:d5:07:e2:01:3b:56:74:d1: b1:70:83:4a:7b:3b:fd:9a:a5:60:9c:b2:ca:db:24: 77:82:00:21:08:3d:32:da:f4:30:b6:26:fb:57:a3: 17:0f:f3:30:02:be:79:34:a8:0f:60:a0:20:df:2e: 04:f4:dc:02:68:c9:9a:c9:79:ed:53:9f:71:6e:ff: 8d:8a:71:a2:bc:27:56:e8:c0:7e:be:d8:a6:7a:32: c4:e3:1d:56:a1:e4:3b:6c:75:f2:1b:75:42:18:a8: ba:35:ca:c4:0a:63:73:57:c1:ab:ad:3a:72:05:63: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:02:D5:93:A3:12:C3:2D:37:EF:F2:94:3E:BF:05:57:61:64:1A:EF X509v3 Authority Key Identifier: keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:27:55:46:80:c6:6b:ff:2b:99:1c:9d:30:42:d5:45:3c:4f: 07:fc:85:6e:5d:75:6a:70:56:28:07:14:c6:50:ce:0b:15:64: f9:19:66:a6:28:fb:18:ec:de:27:38:f8:16:08:23:16:5a:bf: c4:09:ec:e3:e2:99:ea:28:3f:54:ad:6c:43:29:63:1d:9b:d5: 0b:69:2a:96:ac:41:66:c4:58:26:c4:7a:03:d0:81:62:22:fa: 82:45:a5:c3:0c:15:60:cf:a1:98:51:ea:0f:78:d1:5d:55:98: 89:5d:84:bc:14:b9:46:28:66:8a:40:cc:c2:de:f0:df:7a:c2: a3:32:f2:77:77:73:6c:cf:1c:91:5d:30:10:df:f3:ac:4f:13: 48:4b:5f:09:38:c5:fb:e5:d9:39:83:37:a1:7b:04:f1:92:28: 90:9f:6e:40:6a:2a:c8:3b:7d:5d:4a:44:32:b3:66:49:c7:db: c9:4d:d8:bb:77:b4:42:27:13:19:6e:aa:4e:bf:c8:3f:43:6e: d3:3c:d6:d8:e6:1c:b0:64:7e:74:af:49:97:b4:fe:2d:47:96: 7a:d4:f3:3b:d7:3e:ec:b2:8c:66:5e:87:fd:55:af:86:fa:f7: 17:64:55:fc:f7:77:7f:76:26:0a:66:7d:9c:fe:f6:3a:d2:20: 0d:7d:ca:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDlGN0I0MkVGMThEMzQyRkRENTZBOUZEQzVGM0Q4MDFF MkQyQzFBQjcwHhcNMjYwNDA3MDYxNTE3WhcNMjYwNDE0MDYxNTE3WjAYMRYwFAYD VQQDEw02OWQ0YTBmNS1jMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FApawV1Gud+arnmvEMlZzw7URHDzV4LGvFYZL/TAfGLXRQK7QLMprHNxfJB TWfChi3QTce63Skh9AdNAEct/9qInmqRv80hXJ6bVRFDiyUDuIWdiVTlR5n+Vjqb kbKIrm4GuhLw888JR30V7Nwkg+YuvW77lAJw7ccxgZ6oLyKWBjb/SH6KhZXrnwHg 1QfiATtWdNGxcINKezv9mqVgnLLK2yR3ggAhCD0y2vQwtib7V6MXD/MwAr55NKgP YKAg3y4E9NwCaMmayXntU59xbv+NinGivCdW6MB+vtimejLE4x1WoeQ7bHXyG3VC GKi6NcrECmNzV8GrrTpyBWOn5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsC1ZOj EsMtN+/ylD6/BVdhZBrvMB8GA1UdIwQYMBaAFJ97Qu8Y00L91Wqf3F89gB4tLBq3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8wNjFBQUI1MkZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2M1ZhcF9jWHoyQUhpMHNH cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODI4Mi8wNjFBQUI1MkZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2 M1ZhcF9jWHoyQUhpMHNHcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbydVRoDGa/8rmRydMELVRTxPB/yFbl11anBWKAcUxlDOCxVk+Rlmpij7GOze Jzj4FggjFlq/xAns4+KZ6ig/VK1sQyljHZvVC2kqlqxBZsRYJsR6A9CBYiL6gkWl wwwVYM+hmFHqD3jRXVWYiV2EvBS5RihmikDMwt7w33rCozLyd3dzbM8ckV0wEN/z rE8TSEtfCTjF++XZOYM3oXsE8ZIokJ9uQGoqyDt9XUpEMrNmScfbyU3Yu3e0QicT GW6qTr/IP0Nu0zzW2OYcsGR+dK9Jl7T+LUeWetTzO9c+7LKMZl6H/VWvhvr3F2RV /Pd3f3YmCmZ9nP72OtIgDX3K8Q== -----END CERTIFICATE-----Generated at Tue Apr 7 23:34:23 2026 by rpki-client