$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: aEZHl9UwJjad0skpGNcteoo73vyZEGhC/E/QaWZgzzI= Subject key identifier: D7:B4:93:22:2F:E2:76:7E:37:7C:02:26:35:3E:2A:FA:A0:CD:61:E4 Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 1F Signing time: Sun 05 Apr 2026 08:15:21 +0000 Manifest this update: Sun 05 Apr 2026 08:15:20 +0000 Manifest next update: Sun 12 Apr 2026 08:15:20 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: tcqg6H74FZ7a7GSNjtvOJwIde8mEy9PZBjE0nXXoJRg=) 2: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) 3: 604F4E3C0D6611F1AAA528DE1B3D8C67.roa (hash: zn+Y2EzBvu1Td2sgtLKQfgs/gBSjMOZeXn2CBE9VYms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: Apr 5 08:15:20 2026 GMT Not After : Apr 12 08:15:20 2026 GMT Subject: CN=69d21a19-cd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:d9:58:09:ba:9e:3a:d5:dc:c7:80:93:6d: 19:c2:15:a0:37:f7:b3:0d:74:1c:0c:76:54:b8:a7: 12:50:f9:3b:32:01:f9:bd:07:4c:c3:52:f0:8f:33: 7f:4f:39:4d:32:3c:c9:dd:d9:a0:67:8d:03:ee:37: 44:14:0c:40:86:bf:01:ee:4a:cf:e0:69:49:48:56: ba:18:69:bc:01:03:10:22:9c:eb:1a:34:94:42:66: 7a:02:e3:fc:f7:3b:99:ab:32:1d:c5:cc:2d:91:81: 3d:5e:32:a5:64:24:c7:1d:ab:12:37:81:f8:8a:13: cb:fc:9e:32:d7:6d:d1:5f:71:59:cc:43:eb:b6:fa: d7:bc:2c:05:2b:14:49:88:e2:94:8e:51:af:37:2a: 95:31:9a:5d:67:ed:bd:bf:80:8a:2d:34:e2:0c:89: 7f:6a:d6:1a:52:fe:d6:d1:99:28:b9:4a:75:53:5f: da:e0:2f:a1:c2:0c:e5:d1:7d:be:98:96:b7:84:3a: 64:a0:bb:ad:71:2a:d2:34:13:7a:31:eb:2b:24:fe: a6:b2:bd:81:92:72:a3:b8:1d:ed:d2:40:70:50:ff: 60:88:31:16:08:aa:a9:a2:d6:a9:45:04:03:8d:45: 3d:bb:df:1f:92:ee:61:c8:32:b9:f0:8d:07:db:cc: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B4:93:22:2F:E2:76:7E:37:7C:02:26:35:3E:2A:FA:A0:CD:61:E4 X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:7d:62:e8:10:ba:86:a1:8c:aa:ec:1b:55:f9:3e:00:32:7f: 91:2a:af:80:df:b8:0f:71:02:18:8e:3f:b4:ad:21:c0:30:99: ea:60:83:d7:b2:23:e7:23:1d:66:5c:9b:dd:50:3b:7f:06:e8: 34:0a:4b:67:65:f0:80:39:2c:c0:53:8e:06:5b:17:0d:08:17: c2:29:39:6f:c8:d6:57:fd:2e:4f:a7:3c:43:db:85:40:f1:18: 90:a1:c6:39:31:4e:e8:a4:5b:c7:8c:71:61:03:a9:4d:40:27: 30:cb:15:c1:4d:7b:ba:92:c0:65:36:b5:3d:4f:53:31:ad:47: 61:6c:cf:84:be:d2:a0:74:e5:2f:29:03:3e:d4:58:2a:14:7d: 44:15:62:63:c1:0a:93:8d:7f:1d:fd:f2:ad:57:de:2e:83:d5: d7:56:1e:9b:8e:93:3a:4a:be:20:39:10:4d:cf:30:ad:0e:98: 7f:90:1a:98:77:9b:34:7d:2a:49:97:4f:7e:58:e9:3c:d7:ca: d7:13:c4:67:05:b9:f0:87:28:17:47:99:97:40:ac:3f:f9:96: c1:72:d3:bb:0b:fe:1d:29:51:fb:03:fd:eb:51:fc:72:ed:a4: 5e:44:ca:7b:1d:04:fb:25:0f:b4:df:5f:68:87:5d:59:c9:da: ec:e6:95:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD OUNGOUNDMjAeFw0yNjA0MDUwODE1MjBaFw0yNjA0MTIwODE1MjBaMBgxFjAUBgNV BAMTDTY5ZDIxYTE5LWNkOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVedlYCbqeOtXcx4CTbRnCFaA397MNdBwMdlS4pxJQ+TsyAfm9B0zDUvCPM39P OU0yPMnd2aBnjQPuN0QUDECGvwHuSs/gaUlIVroYabwBAxAinOsaNJRCZnoC4/z3 O5mrMh3FzC2RgT1eMqVkJMcdqxI3gfiKE8v8njLXbdFfcVnMQ+u2+te8LAUrFEmI 4pSOUa83KpUxml1n7b2/gIotNOIMiX9q1hpS/tbRmSi5SnVTX9rgL6HCDOXRfb6Y lreEOmSgu61xKtI0E3ox6ysk/qayvYGScqO4He3SQHBQ/2CIMRYIqqmi1qlFBAON RT273x+S7mHIMrnwjQfbzHRVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU17STIi/i dn43fAImNT4q+qDNYeQwHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3 QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MzE0LzM2NTk3NEM2MDk3QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVu SWFTY3lDaTZkdThuUG5NSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwfWLoELqGoYyq7BtV+T4AMn+RKq+A37gPcQIYjj+0rSHAMJnqYIPXsiPnIx1m XJvdUDt/Bug0CktnZfCAOSzAU44GWxcNCBfCKTlvyNZX/S5PpzxD24VA8RiQocY5 MU7opFvHjHFhA6lNQCcwyxXBTXu6ksBlNrU9T1MxrUdhbM+EvtKgdOUvKQM+1Fgq FH1EFWJjwQqTjX8d/fKtV94ug9XXVh6bjpM6Sr4gORBNzzCtDph/kBqYd5s0fSpJ l09+WOk818rXE8RnBbnwhygXR5mXQKw/+ZbBctO7C/4dKVH7A/3rUfxy7aReRMp7 HQT7JQ+0319oh11Zydrs5pWP -----END CERTIFICATE-----Generated at Mon Apr 6 15:21:21 2026 by rpki-client