$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft File: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json) Hash identifier: a6R2ERdR9OpU6TJviCIVKfDcnKnGMFFjynN4gUFsZr4= Subject key identifier: FD:B9:C3:83:4F:3A:E1:80:44:E4:21:3A:E1:A3:E2:62:AD:3E:0A:3F Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 Certificate issuer: /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Certificate serial: 08D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft Manifest number: 08C4 Signing time: Sat 04 Apr 2026 20:12:55 +0000 Manifest this update: Sat 04 Apr 2026 20:12:55 +0000 Manifest next update: Sat 11 Apr 2026 20:12:55 +0000 Files and hashes: 1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: Le31tCndJjyxMhu7pm32Lqp41L0V+c1ljEsaH5Rm/a4=) 2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 3Ec92baJsmBFXlv6Q2B/yYGvWMA45NR4PIY2EvsfluM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2257 (0x8d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6 Validity Not Before: Apr 4 20:12:55 2026 GMT Not After : Apr 11 20:12:55 2026 GMT Subject: CN=69d170c7-d3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:e4:07:f1:2b:dc:3e:4a:33:b0:d2:13:b2: 1a:55:b7:d2:3c:88:20:f6:ee:1d:ba:63:41:c1:67: 9e:dd:51:3c:fe:55:b4:a7:a9:a7:73:b5:02:aa:eb: 28:af:af:69:6c:5a:1e:1b:92:1b:11:bc:72:60:70: 59:74:bd:1c:ce:97:8a:55:3b:f8:8e:14:d9:86:33: 0e:5b:84:c8:5e:98:b4:b7:e4:cd:e1:b5:3b:16:87: 17:95:80:8a:a7:ff:b9:4e:0f:e8:2a:a6:fe:bc:46: ec:c3:76:05:56:34:f5:f6:e4:a0:00:9e:ad:81:d0: 26:dc:fd:90:db:2f:ce:7e:c1:96:3a:62:51:5e:16: 9b:c1:c1:62:80:e1:ce:2e:b1:9e:e4:5d:b7:82:88: 7a:60:ab:8a:6c:86:48:38:cc:fe:a9:a7:6a:af:0f: 82:5e:e7:31:ff:ff:d0:e7:be:a9:8d:5a:76:75:77: dc:89:e3:9c:c3:ba:78:db:08:16:7c:fa:15:f3:a1: 74:2f:77:fd:a5:16:be:99:e9:11:1a:0d:dd:d1:77: 50:93:2b:83:03:80:84:8d:25:ea:b2:d3:d1:a6:54: 30:43:ab:50:a0:fa:88:98:e6:f6:f5:7b:cc:05:ab: 53:7a:69:0d:b7:3d:7a:7c:6e:5a:69:1c:ba:c4:fb: 87:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B9:C3:83:4F:3A:E1:80:44:E4:21:3A:E1:A3:E2:62:AD:3E:0A:3F X509v3 Authority Key Identifier: keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:6d:39:02:5b:98:ca:10:24:65:c8:fd:cb:13:7a:72:0d:9b: 83:2f:21:71:85:03:23:ff:c6:d3:a6:65:89:53:7d:af:f7:79: 5b:93:07:d9:fd:55:37:98:a0:b8:01:65:1a:d3:2d:ab:cb:bc: 4e:9b:47:e6:64:49:60:ce:29:2d:f4:e0:88:ee:b0:4d:22:ba: 8e:d0:58:18:da:7e:89:cb:91:60:cd:3b:b2:f3:0d:ac:c3:fe: c7:77:3d:97:48:22:40:92:bf:6f:2c:d8:46:cb:05:9f:db:ee: 2e:28:d4:fb:21:d7:19:c7:5d:5c:ef:da:a6:62:37:6c:33:b5: d9:c2:c2:10:71:36:1a:26:22:fd:88:5e:71:0b:bf:e6:09:a3: c2:4f:1f:f3:c7:87:1e:23:4d:a8:0f:89:5d:6a:b2:6b:e4:74: ed:d9:c0:4d:63:38:d2:82:b3:9c:69:96:2b:f4:a4:5a:bb:7a: 44:02:db:d2:94:29:86:fa:bc:35:b0:f7:fe:89:a4:61:8c:f8: de:32:5d:65:74:88:1f:9f:a9:36:57:11:e8:ca:b4:c2:72:b5: 4c:bf:04:e7:fc:c0:a9:60:fc:94:27:37:da:2d:bf:91:16:f5: f8:3a:b7:ca:16:08:92:de:39:66:5a:40:0c:e7:e8:7b:57:5a: a4:2d:57:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4 RjhBMjA2QzYwHhcNMjYwNDA0MjAxMjU1WhcNMjYwNDExMjAxMjU1WjAYMRYwFAYD VQQDEw02OWQxNzBjNy1kM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBjkB/Er3D5KM7DSE7IaVbfSPIgg9u4dumNBwWee3VE8/lW0p6mnc7UCquso r69pbFoeG5IbEbxyYHBZdL0czpeKVTv4jhTZhjMOW4TIXpi0t+TN4bU7FocXlYCK p/+5Tg/oKqb+vEbsw3YFVjT19uSgAJ6tgdAm3P2Q2y/OfsGWOmJRXhabwcFigOHO LrGe5F23goh6YKuKbIZIOMz+qadqrw+CXucx///Q576pjVp2dXfcieOcw7p42wgW fPoV86F0L3f9pRa+mekRGg3d0XdQkyuDA4CEjSXqstPRplQwQ6tQoPqImOb29XvM BatTemkNtz16fG5aaRy6xPuHvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP25w4NP OuGAROQhOuGj4mKtPgo/MB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0 RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3 M2dfRVMtZUVKQkdQaWlCc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtW05AluYyhAkZcj9yxN6cg2bgy8hcYUDI//G06ZliVN9r/d5W5MH2f1VN5ig uAFlGtMtq8u8TptH5mRJYM4pLfTgiO6wTSK6jtBYGNp+icuRYM07svMNrMP+x3c9 l0giQJK/byzYRssFn9vuLijU+yHXGcddXO/apmI3bDO12cLCEHE2GiYi/YhecQu/ 5gmjwk8f88eHHiNNqA+JXWqya+R07dnATWM40oKznGmWK/SkWrt6RALb0pQphvq8 NbD3/omkYYz43jJdZXSIH5+pNlcR6Mq0wnK1TL8E5/zAqWD8lCc32i2/kRb1+Dq3 yhYIkt45ZlpADOfoe1dapC1Xyw== -----END CERTIFICATE-----Generated at Mon Apr 6 11:20:12 2026 by rpki-client