$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft File: 3dzECt5nfyP4p5ukFo729r7wZcc.mft (raw, json) Hash identifier: /u9/PKbIdi3Ja4Twxg6vkzm3OzajYbzBsKpnP2VBhxM= Subject key identifier: 59:E8:41:AB:03:B4:A0:55:87:48:A6:5C:A7:35:74:DF:00:6F:6B:6F Authority key identifier: DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 Certificate issuer: /CN=A91CB2E2/serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft Manifest number: 70 Signing time: Sun 05 Apr 2026 07:12:34 +0000 Manifest this update: Sun 05 Apr 2026 07:12:33 +0000 Manifest next update: Sun 12 Apr 2026 07:12:33 +0000 Files and hashes: 1: 3dzECt5nfyP4p5ukFo729r7wZcc.crl (hash: 0TK3MbtKXnEwx3W+DCLSZvFnjF4TkukjSPM3LpFQBvw=) 2: 240EF95E896311F0B911053BC4F9AE02.roa (hash: bgfPYSTEsSkfhGSuxOoFNVtQR8SOazKoHfsSU4GrHl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB2E2, serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Validity Not Before: Apr 5 07:12:33 2026 GMT Not After : Apr 12 07:12:33 2026 GMT Subject: CN=69d20b62-05bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:86:d4:3a:c4:73:b9:49:05:f6:82:13:d9: 0d:bd:b2:c1:ca:11:67:b5:7d:fa:d7:24:91:15:60: c5:34:be:28:cf:7f:68:15:04:f7:a3:de:70:ba:1c: a7:f4:fb:ba:09:c9:7e:4b:f4:5e:91:16:74:c4:33: 85:3b:a8:2c:11:bd:0c:71:54:bc:4c:13:68:c0:33: 19:1a:60:55:55:40:8a:86:45:ce:8f:b9:2a:5f:d2: 52:fc:91:70:e7:13:af:85:e2:22:af:04:ae:78:ff: c5:fc:a9:5b:ec:8e:3d:a7:79:5e:31:39:02:61:e5: 06:47:5c:78:ec:bc:d6:dd:f1:f4:3f:69:0a:1c:3b: b2:27:cd:52:9b:bb:3e:9f:bf:07:7a:4f:2b:bf:f8: f4:7b:f9:cb:48:2e:ff:5d:6c:70:da:09:a6:c1:6f: 8c:ad:32:5f:35:fa:00:66:a1:22:c4:26:da:fb:68: c4:11:cf:2b:ea:88:4d:f0:30:3a:6a:29:ad:c7:a9: 88:e7:63:29:aa:4d:a9:37:9a:09:c1:8d:4e:f0:68: 2f:65:fd:48:54:62:a3:40:83:6c:bc:3f:eb:12:94: 95:5b:1c:53:6e:99:d9:fe:31:33:6c:5c:65:81:97: bf:16:8c:fa:d3:6e:c9:e3:7c:c7:f3:91:e1:a2:26: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E8:41:AB:03:B4:A0:55:87:48:A6:5C:A7:35:74:DF:00:6F:6B:6F X509v3 Authority Key Identifier: keyid:DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:28:f2:88:d3:a8:03:b3:96:06:65:25:80:9a:8a:bd:50:59: 21:9e:99:84:ca:38:63:ec:1c:62:2d:30:bb:e7:e5:8e:dc:45: b8:08:51:bf:e8:e1:96:ef:60:1f:5f:9e:a7:fb:41:0f:81:5c: de:33:57:a8:f4:a2:84:b9:19:58:93:25:eb:91:6e:b9:ce:54: 0f:a0:98:28:ce:22:6d:75:0f:43:7a:27:91:29:16:c2:24:d4: 2f:61:fd:7b:e4:2c:0b:da:fd:e5:2f:e9:60:20:0a:f9:2d:c6: 22:f3:1b:5b:d1:f1:0d:ff:ab:48:c2:48:99:7c:e3:21:9b:15: 71:db:0e:54:bf:b4:0a:5d:b6:e4:ba:fb:d7:d2:24:25:7a:8d: 44:aa:09:6f:37:d7:8c:59:50:55:ab:0a:45:26:11:10:c0:cc: 3c:c2:c0:4b:76:86:3b:65:dd:56:15:96:46:8b:61:7e:34:0a: 47:e7:ea:82:61:21:49:20:ff:d0:da:64:6f:bf:97:99:5d:81: dc:ee:4d:25:e6:fe:ec:55:b9:02:1d:7e:69:a9:82:80:29:3e: 02:96:1b:30:40:8a:45:b5:07:f8:f1:18:77:4c:bf:51:0f:e2: ec:06:39:ee:db:0e:d6:b9:0e:3d:ea:f3:54:a4:be:d8:33:00: bb:9a:7c:81 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjJFMjExMC8GA1UEBRMoREREQ0M0MEFERTY3N0YyM0Y4QTc5QkE0MTY4RUY2RjZC RUYwNjVDNzAeFw0yNjA0MDUwNzEyMzNaFw0yNjA0MTIwNzEyMzNaMBgxFjAUBgNV BAMTDTY5ZDIwYjYyLTA1YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdoIbUOsRzuUkF9oIT2Q29ssHKEWe1ffrXJJEVYMU0vijPf2gVBPej3nC6HKf0 +7oJyX5L9F6RFnTEM4U7qCwRvQxxVLxME2jAMxkaYFVVQIqGRc6PuSpf0lL8kXDn E6+F4iKvBK54/8X8qVvsjj2neV4xOQJh5QZHXHjsvNbd8fQ/aQocO7InzVKbuz6f vwd6Tyu/+PR7+ctILv9dbHDaCabBb4ytMl81+gBmoSLEJtr7aMQRzyvqiE3wMDpq Ka3HqYjnYymqTak3mgnBjU7waC9l/UhUYqNAg2y8P+sSlJVbHFNumdn+MTNsXGWB l78WjPrTbsnjfMfzkeGiJt6LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWehBqwO0 oFWHSKZcpzV03wBva28wHwYDVR0jBBgwFoAU3dzECt5nfyP4p5ukFo729r7wZccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMkUyLzQxMUM2M0IwODk1 OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQNHA1dWtGbzcyOXI3d1pj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2R6RUN0NW5meVA0cDV1a0ZvNzI5cjd3WmNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MkUyLzQxMUM2M0IwODk1OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQ NHA1dWtGbzcyOXI3d1pjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEKPKI06gDs5YGZSWAmoq9UFkhnpmEyjhj7BxiLTC75+WO3EW4CFG/6OGW72Af X56n+0EPgVzeM1eo9KKEuRlYkyXrkW65zlQPoJgoziJtdQ9DeieRKRbCJNQvYf17 5CwL2v3lL+lgIAr5LcYi8xtb0fEN/6tIwkiZfOMhmxVx2w5Uv7QKXbbkuvvX0iQl eo1EqglvN9eMWVBVqwpFJhEQwMw8wsBLdoY7Zd1WFZZGi2F+NApH5+qCYSFJIP/Q 2mRvv5eZXYHc7k0l5v7sVbkCHX5pqYKAKT4ClhswQIpFtQf48Rh3TL9RD+LsBjnu 2w7WuQ496vNUpL7YMwC7mnyB -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:07 2026 by rpki-client