$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft File: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft (raw, json) Hash identifier: zlU/SRbLjDiT7if0fXID7l7NnowSDwi6DB8s4vl2PGs= Subject key identifier: 3B:66:42:7D:89:44:B3:15:C7:10:88:5A:1E:F0:4D:92:5D:7A:65:3A Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE Certificate issuer: /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft Manifest number: 37 Signing time: Tue 21 Apr 2026 08:26:40 +0000 Manifest this update: Tue 21 Apr 2026 08:26:39 +0000 Manifest next update: Tue 28 Apr 2026 08:26:39 +0000 Files and hashes: 1: 7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl (hash: 86MBGSATgEXzwxMr9ss1pdFPOZznaFa8kwbWMEo/jjM=) 2: CCCD5D78F98011F0A50135134F6F56BC.roa (hash: 1M2DD/iZFFo8+gHRyKlwxw6SxZSzmI1dVyv8AHl5J7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE Validity Not Before: Apr 21 08:26:39 2026 GMT Not After : Apr 28 08:26:39 2026 GMT Subject: CN=69e734c0-6604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:31:68:e8:36:9b:b4:06:5d:59:62:ad:73: 33:60:0c:0f:91:30:94:82:a3:96:ce:e2:78:71:94: 13:de:27:04:93:10:9b:27:73:0c:45:69:e7:b8:92: 4a:68:a9:8d:b5:45:f1:54:33:9a:2c:9a:5a:e1:cd: 38:63:3a:71:ad:cf:8a:d4:71:c7:df:7f:be:64:e4: ca:fb:3a:5f:8d:67:aa:41:42:53:9c:77:66:3b:78: 78:b8:d5:41:8d:78:c2:99:13:be:2c:8c:7d:d3:a3: 08:57:e5:1c:a7:4f:ea:76:1e:5a:8f:df:5a:65:57: 03:8e:a9:06:81:1e:ae:18:01:42:7f:a4:7f:e3:a6: ba:4e:5b:5b:07:f8:a0:54:84:c3:ae:3d:69:e5:e3: 56:4e:aa:40:01:8f:52:cc:94:2d:68:11:e5:2a:e6: 23:1b:77:9b:7c:1e:bf:1b:53:80:4d:d6:35:39:23: e9:b9:5b:88:0b:78:dc:53:67:7c:08:1d:a4:8f:ce: de:f2:6f:fc:ce:b3:63:02:46:f6:14:6d:55:37:f1: ac:4f:f7:26:d6:01:12:9d:e4:9f:43:b1:f6:97:e5: 32:32:dd:e2:b0:4b:9c:ff:8b:d2:8f:36:e0:4b:57: 90:db:41:36:ed:82:fd:5e:a9:46:5a:40:42:3a:30: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:66:42:7D:89:44:B3:15:C7:10:88:5A:1E:F0:4D:92:5D:7A:65:3A X509v3 Authority Key Identifier: keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:99:ce:16:aa:02:3b:37:62:96:b9:0b:d6:6e:8c:09:22:8e: 94:71:b7:11:c4:aa:94:b2:15:79:20:87:a3:9d:8d:97:a6:d4: 90:50:45:bb:44:2f:a9:f6:22:be:33:f3:44:4f:19:9c:d3:41: 8d:2d:8c:f7:bc:4d:b1:61:68:89:20:ee:7e:aa:89:b4:3f:31: b6:f9:22:c3:3e:e1:12:71:8f:86:1d:75:b0:d2:97:c7:e4:0d: 09:51:40:d5:ae:5f:d3:30:ad:b6:32:e9:41:d5:8d:e8:e4:91: 3c:0a:de:cf:b2:00:f2:1c:46:db:3b:76:e9:80:82:f0:5f:a9: d0:b8:3d:74:95:bc:8a:93:cc:49:e8:f2:fd:e8:1d:d1:d4:5f: e6:96:0f:af:da:c6:2b:d6:17:53:51:1d:58:c8:07:af:5b:b1: b4:75:36:22:24:f2:07:8b:1a:25:78:6a:a7:eb:3c:a9:26:bc: 54:a6:2a:00:f6:27:8b:ec:00:a7:bc:95:41:e3:09:53:d5:83: 3f:4a:3a:42:d4:44:83:58:b1:c3:1c:dc:ac:88:8a:ec:16:c3: bf:29:96:f1:51:36:d9:86:85:a9:d8:0c:5e:36:22:49:4c:96: cf:1f:22:4f:c4:20:55:3b:8c:08:da:e8:0b:8b:e3:70:ee:81: 96:1a:91:b5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0FEOTExMC8GA1UEBRMoRUMyQUYwNzQwRkQ3ODk5REU1REExMkQ0MTI3QTVERkNG QTZFNjNERTAeFw0yNjA0MjEwODI2MzlaFw0yNjA0MjgwODI2MzlaMBgxFjAUBgNV BAMTDTY5ZTczNGMwLTY2MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFajFo6DabtAZdWWKtczNgDA+RMJSCo5bO4nhxlBPeJwSTEJsncwxFaee4kkpo qY21RfFUM5osmlrhzThjOnGtz4rUccfff75k5Mr7Ol+NZ6pBQlOcd2Y7eHi41UGN eMKZE74sjH3TowhX5RynT+p2HlqP31plVwOOqQaBHq4YAUJ/pH/jprpOW1sH+KBU hMOuPWnl41ZOqkABj1LMlC1oEeUq5iMbd5t8Hr8bU4BN1jU5I+m5W4gLeNxTZ3wI HaSPzt7yb/zOs2MCRvYUbVU38axP9ybWARKd5J9DsfaX5TIy3eKwS5z/i9KPNuBL V5DbQTbtgv1eqUZaQEI6MOO/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO2ZCfYlE sxXHEIhaHvBNkl16ZTowHwYDVR0jBBgwFoAU7CrwdA/XiZ3l2hLUEnpd/PpuY94w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQUQ5LzkxNTBEQTRBRjk4 MDExRjA4N0RBOTkwODRGNkY1NkJDLzdDcndkQV9YaVozbDJoTFVFbnBkX1BwdVk5 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN0Nyd2RBX1hpWjNsMmhMVUVucGRfUHB1WTk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz QUQ5LzkxNTBEQTRBRjk4MDExRjA4N0RBOTkwODRGNkY1NkJDLzdDcndkQV9YaVoz bDJoTFVFbnBkX1BwdVk5NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0mc4WqgI7N2KWuQvWbowJIo6UcbcRxKqUshV5IIejnY2XptSQUEW7RC+p9iK+ M/NETxmc00GNLYz3vE2xYWiJIO5+qom0PzG2+SLDPuEScY+GHXWw0pfH5A0JUUDV rl/TMK22MulB1Y3o5JE8Ct7PsgDyHEbbO3bpgILwX6nQuD10lbyKk8xJ6PL96B3R 1F/mlg+v2sYr1hdTUR1YyAevW7G0dTYiJPIHixoleGqn6zypJrxUpioA9ieL7ACn vJVB4wlT1YM/SjpC1ESDWLHDHNysiIrsFsO/KZbxUTbZhoWp2AxeNiJJTJbPHyJP xCBVO4wI2ugLi+Nw7oGWGpG1 -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:45 2026 by rpki-client