$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: nvFSaQPT88Fdo2cwQe8MMaiLdmpaclxBfHnNWvwCgIg= Subject key identifier: E1:71:1D:43:A2:7A:EE:7A:3A:32:4E:E3:2F:5D:FB:10:1E:76:0C:CA Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0218 Signing time: Mon 27 Apr 2026 02:44:27 +0000 Manifest this update: Mon 27 Apr 2026 02:44:26 +0000 Manifest next update: Mon 04 May 2026 02:44:26 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: Zh9T9FnDrNYU+71Nmri+fVZQ/0qOdAsPbjLpxFdUJ3s=) 2: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) 3: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 02:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Apr 27 02:44:26 2026 GMT Not After : May 4 02:44:26 2026 GMT Subject: CN=69eecd8a-08a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:5f:58:99:b0:d0:4e:a8:42:b9:39:49:33: 13:b3:dd:9a:22:eb:a0:81:67:df:dd:a5:77:2a:e6: e1:58:08:5d:2a:c2:62:74:c1:38:24:3e:bc:f7:e5: 90:31:31:5b:e8:f3:ee:8a:e9:72:89:9a:2b:25:66: c1:28:8e:2f:a9:4e:01:00:f9:21:74:87:49:60:9e: 1e:7c:40:25:7b:6b:d5:63:13:9a:84:aa:c9:cc:2e: c2:7c:99:f6:5e:d6:9c:98:e1:01:bf:e2:ed:fd:f3: 8e:f7:84:c8:d7:15:ee:6b:26:57:52:b9:cf:e0:16: 5c:a8:22:fe:30:d6:d0:29:a4:61:92:f9:da:5d:60: 81:b5:e5:32:f5:4a:a2:1a:d0:a7:95:99:f4:4f:bc: cd:b1:0f:8b:a1:cf:c0:ea:37:a3:fe:52:6a:c1:1e: 37:82:72:7b:9d:bd:0b:db:05:3a:de:bf:c2:a6:d0: 35:90:5f:75:f8:95:8f:b7:c5:58:a6:13:8e:bb:a7: 2d:23:49:91:28:89:43:91:30:d6:1a:a7:4d:8b:61: 32:52:b7:5f:4e:a1:d8:ea:26:b1:f1:ca:df:d7:17: 20:fe:2b:2b:a7:4c:50:f9:6c:6d:69:3a:54:75:75: 89:b8:53:3c:6f:b9:0a:0a:20:a8:41:cb:d6:d1:19: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:71:1D:43:A2:7A:EE:7A:3A:32:4E:E3:2F:5D:FB:10:1E:76:0C:CA X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:6a:f6:7c:36:67:09:65:9e:3a:5f:3a:ff:a3:3a:d4:f0: d6:47:60:3e:5a:b5:16:35:ec:60:d5:4f:2a:9f:fc:ef:d8:4e: 30:80:7a:c5:ce:b2:83:07:df:af:d1:0a:59:19:bf:73:77:85: 52:e9:94:d6:a6:f0:b2:5f:b8:54:05:69:72:f5:0c:5a:07:6c: ec:bf:7a:60:9a:a9:eb:67:ed:65:5e:2b:7d:4d:62:7c:6a:d8: ad:90:c9:4d:1a:00:4f:76:3a:af:74:f0:c7:fd:dd:49:00:93: 2e:61:21:47:23:2d:42:45:ee:d3:07:6c:e6:b3:30:6f:32:73: 56:5b:50:9b:fc:30:a1:bf:62:a9:b6:7e:22:cb:20:9f:93:dc: 02:81:f2:ac:e7:5b:63:c0:55:30:14:a4:9a:0d:f4:27:46:82: 16:a4:b6:0b:06:1f:9c:52:a8:70:d5:cd:d2:f8:61:54:d5:df: bb:2e:7b:3e:29:8b:33:c2:58:5c:a3:58:cd:5c:aa:8d:02:8b: 74:6c:42:c8:7e:a3:86:41:61:22:64:cd:1f:f9:12:35:fd:9a: d8:05:e6:ae:76:92:6f:83:33:b7:c6:37:7b:56:14:31:f3:91: 8d:d2:39:66:21:67:7b:54:83:fa:fd:69:9c:f2:7b:db:53:51: fc:35:ee:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwNDI3MDI0NDI2WhcNMjYwNTA0MDI0NDI2WjAYMRYwFAYD VQQDEw02OWVlY2Q4YS0wOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79BfWJmw0E6oQrk5STMTs92aIuuggWff3aV3KubhWAhdKsJidME4JD689+WQ MTFb6PPuiulyiZorJWbBKI4vqU4BAPkhdIdJYJ4efEAle2vVYxOahKrJzC7CfJn2 XtacmOEBv+Lt/fOO94TI1xXuayZXUrnP4BZcqCL+MNbQKaRhkvnaXWCBteUy9Uqi GtCnlZn0T7zNsQ+Loc/A6jej/lJqwR43gnJ7nb0L2wU63r/CptA1kF91+JWPt8VY phOOu6ctI0mRKIlDkTDWGqdNi2EyUrdfTqHY6iax8crf1xcg/isrp0xQ+WxtaTpU dXWJuFM8b7kKCiCoQcvW0RkKRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFxHUOi eu56OjJO4y9d+xAedgzKMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqaBq9nw2ZwllnjpfOv+jOtTw1kdgPlq1FjXsYNVPKp/879hOMIB6xc6ygwff r9EKWRm/c3eFUumU1qbwsl+4VAVpcvUMWgds7L96YJqp62ftZV4rfU1ifGrYrZDJ TRoAT3Y6r3Twx/3dSQCTLmEhRyMtQkXu0wds5rMwbzJzVltQm/wwob9iqbZ+Issg n5PcAoHyrOdbY8BVMBSkmg30J0aCFqS2CwYfnFKocNXN0vhhVNXfuy57PimLM8JY XKNYzVyqjQKLdGxCyH6jhkFhImTNH/kSNf2a2AXmrnaSb4Mzt8Y3e1YUMfORjdI5 ZiFne1SD+v1pnPJ721NR/DXusA== -----END CERTIFICATE-----Generated at Tue Apr 28 08:11:21 2026 by rpki-client