$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft File: 3BEw2GFrq8bOCI9fIOaXGamcMrs.mft (raw, json) Hash identifier: tY6nCBUCIFU4kqVjeQCRx02Vt7fSYN9PSfDUbIAgUew= Subject key identifier: 13:87:B9:DC:29:C4:91:E3:B2:BD:25:F0:6F:03:CB:E6:05:7C:2A:2A Authority key identifier: DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB Certificate issuer: /CN=A91B732A/serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft Manifest number: FC Signing time: Sun 05 Apr 2026 05:39:23 +0000 Manifest this update: Sun 05 Apr 2026 05:39:22 +0000 Manifest next update: Sun 12 Apr 2026 05:39:22 +0000 Files and hashes: 1: 3BEw2GFrq8bOCI9fIOaXGamcMrs.crl (hash: o40t/UQljtg+DFdIhq2cDQF7yXGJic3fOPwkJZI7720=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=DC1130D8616BABC6CE088F5F20E69719A99C32BB Validity Not Before: Apr 5 05:39:22 2026 GMT Not After : Apr 12 05:39:22 2026 GMT Subject: CN=69d1f58a-7bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:62:06:ca:02:8e:b0:37:7a:e3:4f:96:a2: 5b:a6:77:de:75:59:10:43:5d:05:8a:e8:0d:0b:d2: 66:c7:d3:9d:e0:49:11:e4:cb:7b:73:19:80:f7:a8: a6:0e:65:4e:3f:fa:52:4c:3a:20:ae:95:7c:bf:8b: cd:31:18:d5:ba:ed:ec:ac:08:de:ed:ef:d5:64:e8: 49:b2:cf:0c:bc:2b:7a:73:29:db:6c:0e:c6:03:e8: 7e:a5:94:97:7c:39:f1:d9:20:ce:a6:2b:6d:f2:d8: 27:09:b1:39:d0:f2:09:29:80:67:db:17:b4:25:ec: a2:4f:23:ac:db:11:b6:09:d2:17:4e:7e:21:cf:41: e1:36:ff:89:31:2f:84:d3:35:02:49:e4:99:1f:7c: 8c:78:25:f3:06:07:1f:df:57:be:07:0a:2f:8d:0e: c8:7b:aa:6e:e4:a8:23:ea:fa:1c:8b:55:25:64:eb: dc:99:1c:fe:85:d2:69:8a:1e:f0:2b:0c:1f:a6:67: 41:eb:de:20:e9:09:d3:b8:a1:47:3a:c3:ad:23:20: 91:52:b5:8a:ff:cc:74:3d:00:f2:82:b1:7e:f7:1b: 2e:aa:b7:85:c4:cf:cd:48:04:25:c7:f6:bd:bd:f5: 80:93:e4:77:d2:ce:ef:c0:46:84:1d:5d:cc:98:96: cd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:87:B9:DC:29:C4:91:E3:B2:BD:25:F0:6F:03:CB:E6:05:7C:2A:2A X509v3 Authority Key Identifier: keyid:DC:11:30:D8:61:6B:AB:C6:CE:08:8F:5F:20:E6:97:19:A9:9C:32:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3BEw2GFrq8bOCI9fIOaXGamcMrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/089BC4E6B63111EFA2D7FB63C4F9AE02/3BEw2GFrq8bOCI9fIOaXGamcMrs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:78:57:0f:ad:61:0e:85:c4:d7:31:78:66:0d:ad:ec:ed:71: de:9d:4b:08:c2:23:bf:15:14:30:65:ae:60:04:4d:f1:ca:4b: 53:e6:23:20:dd:54:5e:30:29:4e:be:24:e1:f9:bb:a7:a4:ba: f3:6e:a2:89:cb:dd:4b:c6:3d:13:c4:fe:b2:35:a4:93:3e:75: cd:0b:1e:17:8e:1a:cb:e0:eb:ca:0b:e8:94:e2:68:2c:61:2d: a3:12:40:a2:73:f2:81:90:30:8a:50:30:6f:8e:f2:1b:c1:f6: 08:37:9e:54:de:06:58:7d:dc:1a:8f:b4:12:5a:94:5b:b1:b4: 87:7b:c0:13:fd:20:53:9b:51:f0:96:c5:ca:dc:08:62:1d:d3: 67:92:c7:60:46:57:df:9e:72:f3:50:24:91:62:6c:9f:e1:35: 11:dd:9d:a1:d6:e3:32:3a:e0:ac:24:ae:63:e8:18:6a:cd:5d: 09:ca:48:06:63:a0:5a:6f:3e:60:5c:0a:b4:6d:81:81:d9:4a: 58:a5:e1:a8:ee:4c:ff:39:6c:7e:95:d0:c9:63:85:b4:95:61: 25:fd:1f:07:c7:f9:58:9f:22:05:e6:20:41:20:63:dc:10:3c: 52:47:7c:aa:8a:2e:74:22:94:6c:27:b4:ee:27:17:b1:04:ac: eb:39:d8:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczMkExMTAvBgNVBAUTKERDMTEzMEQ4NjE2QkFCQzZDRTA4OEY1RjIwRTY5NzE5 QTk5QzMyQkIwHhcNMjYwNDA1MDUzOTIyWhcNMjYwNDEyMDUzOTIyWjAYMRYwFAYD VQQDEw02OWQxZjU4YS03YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yRiBsoCjrA3euNPlqJbpnfedVkQQ10FiugNC9Jmx9Od4EkR5Mt7cxmA96im DmVOP/pSTDogrpV8v4vNMRjVuu3srAje7e/VZOhJss8MvCt6cynbbA7GA+h+pZSX fDnx2SDOpitt8tgnCbE50PIJKYBn2xe0JeyiTyOs2xG2CdIXTn4hz0HhNv+JMS+E 0zUCSeSZH3yMeCXzBgcf31e+BwovjQ7Ie6pu5Kgj6voci1UlZOvcmRz+hdJpih7w KwwfpmdB694g6QnTuKFHOsOtIyCRUrWK/8x0PQDygrF+9xsuqreFxM/NSAQlx/a9 vfWAk+R30s7vwEaEHV3MmJbNCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOHudwp xJHjsr0l8G8Dy+YFfCoqMB8GA1UdIwQYMBaAFNwRMNhha6vGzgiPXyDmlxmpnDK7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzMyQS8wODlCQzRFNkI2 MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4Yk9DSTlmSU9hWEdhbWNN cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCRXcyR0ZycThiT0NJOWZJT2FYR2FtY01ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzMyQS8wODlCQzRFNkI2MzExMUVGQTJEN0ZCNjNDNEY5QUUwMi8zQkV3MkdGcnE4 Yk9DSTlmSU9hWEdhbWNNcnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASHhXD61hDoXE1zF4Zg2t7O1x3p1LCMIjvxUUMGWuYARN8cpLU+YjIN1UXjAp Tr4k4fm7p6S6826iicvdS8Y9E8T+sjWkkz51zQseF44ay+DrygvolOJoLGEtoxJA onPygZAwilAwb47yG8H2CDeeVN4GWH3cGo+0ElqUW7G0h3vAE/0gU5tR8JbFytwI Yh3TZ5LHYEZX355y81AkkWJsn+E1Ed2dodbjMjrgrCSuY+gYas1dCcpIBmOgWm8+ YFwKtG2BgdlKWKXhqO5M/zlsfpXQyWOFtJVhJf0fB8f5WJ8iBeYgQSBj3BA8Ukd8 qooudCKUbCe07icXsQSs6znYUg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:25:43 2026 by rpki-client