$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: oWIhggsShgXVNOOf7D4PGXCLBO/WfRmIx4cXWn729Sc= Subject key identifier: 0D:D5:8B:C4:1B:A3:10:42:6F:C8:8F:9D:E1:D7:37:64:4A:35:FA:D6 Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 36 Signing time: Tue 21 Apr 2026 08:23:10 +0000 Manifest this update: Tue 21 Apr 2026 08:23:10 +0000 Manifest next update: Tue 28 Apr 2026 08:23:10 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: L7Au2Y7/j/vKq0oMFi8P9xanyKAwvG2ATj0xLT/zRL0=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Apr 21 08:23:10 2026 GMT Not After : Apr 28 08:23:10 2026 GMT Subject: CN=69e733ee-fb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ae:68:c3:b8:1d:7c:d7:4e:da:71:a5:0e:6f: 95:42:84:f3:8b:b8:20:97:ad:8d:ad:3f:26:ac:01: ad:41:31:5a:04:e5:77:4a:26:2f:92:23:6c:e8:65: df:38:7f:92:fb:d4:25:39:1c:17:03:b7:19:79:51: dc:4e:6c:79:82:1c:78:d8:7f:2e:6a:57:5c:8d:e5: 91:af:f7:ca:60:7a:0f:85:dd:68:f4:50:b8:05:38: a0:49:8a:33:d2:01:6f:3d:2d:2a:42:35:22:67:d6: b2:12:48:8a:ce:bf:33:e8:1b:80:84:2e:1b:c5:51: 31:0c:5f:6b:8f:df:04:04:dd:27:e3:fd:cd:6f:fd: 5e:ca:cc:32:72:e3:57:26:7b:f2:b1:f1:45:1f:c0: 48:dd:51:0f:4f:c0:fd:19:e9:3f:1b:1b:d5:59:43: 2b:75:b2:2b:4b:57:1d:40:ef:cf:fc:7e:f1:99:76: 4b:28:82:5d:17:17:63:15:16:18:a3:77:e8:93:e3: 1f:2b:7a:a0:e1:1a:92:f1:4e:55:db:f9:23:7e:4f: 76:b7:20:f0:da:a4:4d:2c:5f:bc:5e:d8:d6:a8:ef: e8:4e:f2:5c:7b:cf:f8:32:fb:b1:87:33:ba:fa:4d: 4a:78:92:00:01:80:b5:69:4f:32:92:c9:08:5d:ba: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D5:8B:C4:1B:A3:10:42:6F:C8:8F:9D:E1:D7:37:64:4A:35:FA:D6 X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:91:b0:5c:92:a0:e1:fb:66:48:63:38:9e:a4:8f:ac:c2:20: 7d:64:bc:31:85:38:05:9d:54:76:7c:33:f8:13:f7:3f:24:80: 0d:2f:e8:bb:f8:c4:9c:9e:41:34:74:ec:40:00:6a:d1:64:47: 75:a7:32:b9:25:17:40:5a:e1:16:92:da:ad:96:01:fd:7e:9d: 23:c1:88:6e:4f:78:c0:3d:cf:da:a8:ba:67:ac:80:7b:e0:f4: f5:24:d2:0c:aa:8b:f3:30:ee:54:aa:61:a0:59:6a:65:f8:3a: 36:ba:44:30:f4:f7:75:94:87:31:cb:3d:d4:78:ec:60:44:91: 66:58:63:aa:24:db:09:ce:29:56:e2:b9:9c:72:17:e1:78:16: 5a:fb:97:9c:a0:8f:cd:bb:4f:1e:9a:49:fe:85:85:47:13:6f: df:bb:eb:d1:9e:e9:59:d7:a5:c0:e8:5b:1a:e8:22:20:2e:ea: 48:6d:59:fc:42:a0:f5:88:cb:7c:b3:43:ea:50:ab:32:83:39: d5:46:64:96:92:b5:8b:9e:37:a4:3c:a9:e3:50:00:6a:1b:9b: 49:14:08:4e:99:3f:f4:5f:5c:4a:0a:5e:42:f6:1b:7f:34:6d: 65:f8:7c:bc:a2:26:52:e0:b5:e3:ef:b4:04:f8:26:2b:be:1c: c3:96:83:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjA0MjEwODIzMTBaFw0yNjA0MjgwODIzMTBaMBgxFjAUBgNV BAMTDTY5ZTczM2VlLWZiNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbrmjDuB18107acaUOb5VChPOLuCCXrY2tPyasAa1BMVoE5XdKJi+SI2zoZd84 f5L71CU5HBcDtxl5UdxObHmCHHjYfy5qV1yN5ZGv98pgeg+F3Wj0ULgFOKBJijPS AW89LSpCNSJn1rISSIrOvzPoG4CELhvFUTEMX2uP3wQE3Sfj/c1v/V7KzDJy41cm e/Kx8UUfwEjdUQ9PwP0Z6T8bG9VZQyt1sitLVx1A78/8fvGZdksogl0XF2MVFhij d+iT4x8reqDhGpLxTlXb+SN+T3a3IPDapE0sX7xe2Nao7+hO8lx7z/gy+7GHM7r6 TUp4kgABgLVpTzKSyQhdurtPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDdWLxBuj EEJvyI+d4dc3ZEo1+tYwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDAkbBckqDh+2ZIYziepI+swiB9ZLwxhTgFnVR2fDP4E/c/JIANL+i7+MScnkE0 dOxAAGrRZEd1pzK5JRdAWuEWktqtlgH9fp0jwYhuT3jAPc/aqLpnrIB74PT1JNIM qovzMO5UqmGgWWpl+Do2ukQw9Pd1lIcxyz3UeOxgRJFmWGOqJNsJzilW4rmcchfh eBZa+5ecoI/Nu08emkn+hYVHE2/fu+vRnulZ16XA6Fsa6CIgLupIbVn8QqD1iMt8 s0PqUKsygznVRmSWkrWLnjekPKnjUABqG5tJFAhOmT/0X1xKCl5C9ht/NG1l+Hy8 oiZS4LXj77QE+CYrvhzDloM7 -----END CERTIFICATE-----Generated at Wed Apr 22 00:10:01 2026 by rpki-client