$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft File: a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft (raw, json) Hash identifier: cE5wNszYx3hipYzy/1VAT5zRU0hjoEz8zvoM9PzVs+o= Subject key identifier: FB:13:23:54:C4:98:25:B9:6B:AA:82:04:C1:B8:AD:54:A1:28:0C:CB Authority key identifier: 6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9 Certificate issuer: /CN=A91AB1C2/serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft Manifest number: 21 Signing time: Tue 21 Apr 2026 08:13:32 +0000 Manifest this update: Tue 21 Apr 2026 08:13:32 +0000 Manifest next update: Tue 28 Apr 2026 08:13:32 +0000 Files and hashes: 1: a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl (hash: prpO7XMtdjw0q1QXn+KrCzevcEHrf785DhFwTioD30k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=6B7FC5E5B3BF1ABA5AE25DA38F54B96CE6257DB9 Validity Not Before: Apr 21 08:13:32 2026 GMT Not After : Apr 28 08:13:32 2026 GMT Subject: CN=69e731ac-44dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:80:c4:48:21:34:d3:87:6f:ab:61:cd:57: 08:d3:95:05:f9:c6:19:69:e5:ea:b2:d8:7b:7c:2d: 10:7d:cd:12:8a:53:27:89:28:bb:0c:8f:38:26:7b: 84:c4:ad:7d:b4:5c:b2:4f:e4:80:8d:8d:e2:86:59: b8:92:33:a5:4d:60:c3:c9:a5:d1:94:d2:75:b9:59: 88:01:e0:54:c6:e0:aa:b1:71:96:e8:43:40:85:00: 31:cf:bf:d1:37:fc:3d:6c:0c:19:29:40:77:d9:66: bf:2d:62:d6:f0:48:8d:e9:3f:ef:0a:a8:0e:f8:dd: 90:29:d8:3d:af:e6:c5:e5:1f:88:dc:6c:85:83:a3: 37:c3:51:48:6a:11:16:b4:4b:5c:06:45:c9:ce:dc: 8c:e8:4e:32:43:9f:d3:7f:6e:45:6e:b9:8c:83:0e: 09:8f:c8:40:4d:f7:e1:0d:43:0d:5d:5d:67:f0:6e: 50:78:0f:44:9b:35:8c:0b:a1:1b:1a:e7:a9:0b:ef: 36:0a:61:a7:82:15:86:e8:6f:fc:ea:e8:d8:e6:27: a1:07:1d:17:4f:d2:bd:72:85:7b:30:27:70:fb:78: 5d:e7:a6:b4:c3:d8:2a:90:0d:73:67:64:6f:f0:71: 6c:ea:a6:96:28:08:c8:68:ed:a6:8c:ac:a8:2d:bd: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:23:54:C4:98:25:B9:6B:AA:82:04:C1:B8:AD:54:A1:28:0C:CB X509v3 Authority Key Identifier: keyid:6B:7F:C5:E5:B3:BF:1A:BA:5A:E2:5D:A3:8F:54:B9:6C:E6:25:7D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/a3_F5bO_Grpa4l2jj1S5bOYlfbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/485032E20D6111F19F381CDAA9EE528E/a3_F5bO_Grpa4l2jj1S5bOYlfbk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:85:e9:bd:d9:d9:32:c2:5c:76:b7:b2:6f:c8:13:d3:25:b3: b0:3c:28:c1:ab:03:06:0c:19:8c:60:ec:ba:ff:03:3a:be:4e: f2:eb:36:7c:e4:ac:f4:50:00:b9:7e:0e:16:91:e3:26:e3:10: 71:ee:5f:e1:f6:2d:2e:61:fc:ed:1e:6e:49:ee:72:84:f4:86: e1:35:e9:d3:e6:c9:73:8c:e1:5e:1d:e9:cb:4a:f2:9c:a3:bf: dd:c7:02:18:bc:c6:c5:c5:2b:51:63:90:65:7d:f2:bc:90:08: bc:6f:ee:1c:1f:04:ad:e0:11:30:76:d3:d3:b1:42:f4:ba:cd: 53:6b:47:7b:eb:4e:bb:07:e5:8f:99:4b:0f:e2:ba:ad:8e:05: 01:14:fc:3e:6b:8b:05:6d:5a:73:00:10:6a:af:c3:ec:fc:1d: 23:b8:52:a8:87:80:a9:fa:d6:b0:1c:1a:d6:5d:dc:95:ef:eb: 7f:14:8e:a2:0b:9e:96:de:e7:62:68:b5:07:94:ff:38:16:d2: 84:75:ce:46:8c:29:13:f8:f1:59:ae:f0:be:82:cf:66:55:b0: 42:c2:c1:36:cc:b8:0e:8a:7f:ea:80:70:e0:ae:ef:1e:ec:30: f3:ff:16:2b:43:48:31:fd:39:a9:b3:fe:84:82:10:ae:9e:0f: 7f:78:ad:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjFDMjExMC8GA1UEBRMoNkI3RkM1RTVCM0JGMUFCQTVBRTI1REEzOEY1NEI5NkNF NjI1N0RCOTAeFw0yNjA0MjEwODEzMzJaFw0yNjA0MjgwODEzMzJaMBgxFjAUBgNV BAMTDTY5ZTczMWFjLTQ0ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaCIDESCE004dvq2HNVwjTlQX5xhlp5eqy2Ht8LRB9zRKKUyeJKLsMjzgme4TE rX20XLJP5ICNjeKGWbiSM6VNYMPJpdGU0nW5WYgB4FTG4KqxcZboQ0CFADHPv9E3 /D1sDBkpQHfZZr8tYtbwSI3pP+8KqA743ZAp2D2v5sXlH4jcbIWDozfDUUhqERa0 S1wGRcnO3IzoTjJDn9N/bkVuuYyDDgmPyEBN9+ENQw1dXWfwblB4D0SbNYwLoRsa 56kL7zYKYaeCFYbob/zq6NjmJ6EHHRdP0r1yhXswJ3D7eF3nprTD2CqQDXNnZG/w cWzqppYoCMho7aaMrKgtvUGHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+xMjVMSY JblrqoIEwbitVKEoDMswHwYDVR0jBBgwFoAUa3/F5bO/Grpa4l2jj1S5bOYlfbkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzQ4NTAzMkUyMEQ2 MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3JwYTRsMmpqMVM1Yk9ZbGZi ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYTNfRjViT19HcnBhNGwyamoxUzViT1lsZmJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzQ4NTAzMkUyMEQ2MTExRjE5RjM4MUNEQUE5RUU1MjhFL2EzX0Y1Yk9fR3Jw YTRsMmpqMVM1Yk9ZbGZiay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBBhem92dkywlx2t7JvyBPTJbOwPCjBqwMGDBmMYOy6/wM6vk7y6zZ85Kz0UAC5 fg4WkeMm4xBx7l/h9i0uYfztHm5J7nKE9IbhNenT5slzjOFeHenLSvKco7/dxwIY vMbFxStRY5BlffK8kAi8b+4cHwSt4BEwdtPTsUL0us1Ta0d76067B+WPmUsP4rqt jgUBFPw+a4sFbVpzABBqr8Ps/B0juFKoh4Cp+tawHBrWXdyV7+t/FI6iC56W3udi aLUHlP84FtKEdc5GjCkT+PFZrvC+gs9mVbBCwsE2zLgOin/qgHDgru8e7DDz/xYr Q0gx/Tmps/6EghCung9/eK23 -----END CERTIFICATE-----Generated at Tue Apr 21 21:33:38 2026 by rpki-client