$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: yxkpdSnpmNawjg312obN4PKiAOQ2H9Z79C9FFJ+c+fs= Subject key identifier: 72:03:CA:F2:D2:7A:FE:AC:5E:01:33:9F:04:C1:A6:48:20:98:3A:23 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1DA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1D9C Signing time: Sat 04 Apr 2026 16:02:43 +0000 Manifest this update: Sat 04 Apr 2026 16:02:42 +0000 Manifest next update: Sat 11 Apr 2026 16:02:42 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: vvsocqrsvikNpSltl+gnmV9MyeSuomCazfjXwNCuqcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7593 (0x1da9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Apr 4 16:02:42 2026 GMT Not After : Apr 11 16:02:42 2026 GMT Subject: CN=69d13623-5330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:58:cb:1a:db:da:f4:a8:cb:bf:b4:c0:6e: 90:e2:b6:b5:68:2f:b0:a1:90:4c:04:64:a5:f3:89: 01:17:3d:82:71:7e:83:2c:79:90:21:f2:e2:7c:c7: 5e:0a:52:17:16:9b:22:1c:dc:f6:5a:37:2b:6b:12: ba:20:f5:64:4d:ad:34:76:08:32:79:27:73:05:4b: 85:ad:a8:ac:30:1f:a0:7b:7b:04:63:54:47:30:00: 4f:2b:2d:9c:5c:20:dd:f2:11:61:2b:f5:19:d7:c6: a2:90:53:3e:80:33:42:d9:e5:51:33:75:4a:4d:d5: 88:d3:26:d9:b2:2e:2e:d0:3a:ef:3c:88:6f:c3:a4: db:e5:54:bc:6f:91:dc:79:fe:da:47:45:f1:21:df: d5:28:47:67:57:b8:09:42:c8:e8:f8:4e:39:07:8d: d9:86:4b:78:e2:bd:39:f2:f7:a3:64:5c:c4:2a:70: d8:cf:b8:45:24:12:1b:df:44:22:99:8a:cb:0d:47: b7:04:2e:5d:a2:91:88:dd:42:77:af:05:6d:db:e8: 31:92:ff:b2:61:85:9b:83:39:b0:e9:55:6b:5b:8e: 96:46:e3:a5:87:28:03:6f:76:96:7c:7c:0d:eb:a4: 42:98:fa:f2:20:c5:cd:b7:d0:90:d1:94:92:55:3f: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:CA:F2:D2:7A:FE:AC:5E:01:33:9F:04:C1:A6:48:20:98:3A:23 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ee:33:d5:ea:a1:b4:bd:34:3e:1f:68:45:26:d3:14:ee:01: 44:d8:dd:a7:a5:e7:d9:62:22:0c:6e:9b:fa:04:5b:4b:c0:b7: 3d:35:d0:fc:52:86:37:49:f4:0c:f1:d8:19:32:69:a8:72:3f: 51:e7:ab:65:66:90:f6:28:aa:e5:44:dc:11:4a:52:a1:f0:8b: a4:7a:dd:ae:5f:7a:06:fa:b0:03:e8:be:5f:90:c4:08:9d:93: f6:a8:5c:d8:fd:56:94:36:fd:79:ec:ef:13:7e:72:81:f3:87: 62:58:21:c6:5d:01:ed:89:d3:b2:5f:26:e6:cb:17:cd:e2:b1: 8a:74:78:e0:2b:c0:11:43:b6:eb:4e:8e:cb:6e:57:82:ca:25: 8b:00:c7:ee:db:51:a3:a9:26:c8:1d:27:48:2a:c9:15:b5:72: b9:d4:94:66:7b:a0:5f:38:66:5b:54:25:66:3f:5b:65:52:db: c1:5b:85:f6:93:9d:e7:59:b4:61:07:42:4e:99:03:f7:08:23: 69:10:d7:47:37:7a:f4:ee:c4:51:a7:54:ca:79:9d:71:77:5c: ff:b6:96:52:81:6e:e8:d7:28:c1:9b:a7:35:89:46:ca:73:dc: 71:35:87:87:16:8f:99:35:1a:75:f9:a1:ab:1f:81:80:40:f0: 76:c5:ed:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjYwNDA0MTYwMjQyWhcNMjYwNDExMTYwMjQyWjAYMRYwFAYD VQQDEw02OWQxMzYyMy01MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq55Yyxrb2vSoy7+0wG6Q4ra1aC+woZBMBGSl84kBFz2CcX6DLHmQIfLifMde ClIXFpsiHNz2WjcraxK6IPVkTa00dggyeSdzBUuFraisMB+ge3sEY1RHMABPKy2c XCDd8hFhK/UZ18aikFM+gDNC2eVRM3VKTdWI0ybZsi4u0DrvPIhvw6Tb5VS8b5Hc ef7aR0XxId/VKEdnV7gJQsjo+E45B43Zhkt44r058vejZFzEKnDYz7hFJBIb30Qi mYrLDUe3BC5dopGI3UJ3rwVt2+gxkv+yYYWbgzmw6VVrW46WRuOlhygDb3aWfHwN 66RCmPryIMXNt9CQ0ZSSVT91YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHIDyvLS ev6sXgEznwTBpkggmDojMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhe4z1eqhtL00Ph9oRSbTFO4BRNjdp6Xn2WIiDG6b+gRbS8C3PTXQ/FKGN0n0 DPHYGTJpqHI/UeerZWaQ9iiq5UTcEUpSofCLpHrdrl96BvqwA+i+X5DECJ2T9qhc 2P1WlDb9eezvE35ygfOHYlghxl0B7YnTsl8m5ssXzeKxinR44CvAEUO2606Oy25X gsoliwDH7ttRo6kmyB0nSCrJFbVyudSUZnugXzhmW1QlZj9bZVLbwVuF9pOd51m0 YQdCTpkD9wgjaRDXRzd69O7EUadUynmdcXdc/7aWUoFu6NcowZunNYlGynPccTWH hxaPmTUadfmhqx+BgEDwdsXt9w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:23 2026 by rpki-client