$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json) Hash identifier: MaQoB/RwKl2G7Bk8P7lATu6iTdqK3SYjWTv2DLJljCU= Subject key identifier: 58:7E:DE:DB:0F:61:AC:BB:42:2C:67:DE:69:F7:CB:F9:06:A8:C1:DE Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 1938 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft Manifest number: 192F Signing time: Sat 04 Apr 2026 15:43:35 +0000 Manifest this update: Sat 04 Apr 2026 15:43:34 +0000 Manifest next update: Sat 11 Apr 2026 15:43:34 +0000 Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: TtSuGaaihMqpR+sSNY2bljd0CSUwNxPrQYJVQ/2AFQc=) 2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6456 (0x1938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Apr 4 15:43:34 2026 GMT Not After : Apr 11 15:43:34 2026 GMT Subject: CN=69d131a7-0929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:79:2d:e7:38:07:2d:c6:97:41:6d:1e:fa:d1: a5:f5:d2:ef:18:d6:94:04:97:0c:e1:62:88:ea:54: fb:91:e2:e8:79:69:a3:ce:78:50:f5:8d:c0:66:eb: af:82:c9:41:e4:25:e6:16:12:4d:fd:b2:c1:3b:4d: fb:ea:0d:af:a5:e8:dd:b7:d7:73:95:ce:f6:33:22: 62:0e:55:9e:00:e9:24:e6:5b:c1:cc:7c:ca:2f:20: 64:27:df:4f:60:f5:f0:c7:a2:bb:6f:f7:72:fc:5f: 10:29:ed:e5:7b:72:4d:ee:bb:af:5a:81:55:dc:5d: 70:68:22:78:ef:5c:95:92:91:9e:95:17:93:87:74: d9:fe:b3:ff:9c:fc:fd:21:1e:ec:64:16:ed:de:41: 47:c1:bb:fe:26:d0:45:b5:45:f2:31:3f:64:29:a3: 9f:f6:41:68:c3:65:4c:b9:95:9d:7b:dc:3f:3b:46: d3:4a:09:45:8d:a5:52:3b:d0:1f:86:e7:95:4c:71: 7f:84:26:33:90:ad:fe:0d:91:0f:cd:70:9c:72:87: fa:44:ee:5a:18:ef:80:3c:19:fe:c6:d2:82:9f:b8: 3a:de:89:6d:c8:1c:22:cf:6d:20:fa:ce:b2:26:31: 62:c2:ef:60:f1:ad:be:a9:28:ba:95:2c:84:47:bc: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7E:DE:DB:0F:61:AC:BB:42:2C:67:DE:69:F7:CB:F9:06:A8:C1:DE X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ce:3f:71:86:3f:17:22:e0:6e:33:b6:3c:ca:28:31:76:5f: 24:de:b7:f4:fe:02:9b:68:f1:73:37:ab:22:10:6a:c9:f0:63: a6:af:ee:42:9d:43:b3:4f:02:07:d5:0f:be:44:75:82:2d:fd: 4a:0d:78:60:33:16:de:a4:f8:f7:ff:b1:b2:16:12:92:0b:21: ca:66:c9:11:90:b9:ca:5b:bc:5d:25:11:c2:9a:f8:e2:a9:f5: 4e:59:63:cb:ae:cb:19:22:d0:1c:91:e2:7e:7b:42:62:ca:52: 45:55:75:08:4c:be:27:4b:5b:3a:03:8b:8c:c6:5e:e3:46:d5: b6:31:3d:f0:9b:65:d2:7c:ea:4f:64:33:97:2e:6d:67:11:01: 36:c7:c0:ed:52:c8:91:fa:bd:da:03:72:80:b8:75:e1:f3:de: 7b:36:19:ac:4e:b8:d7:25:a2:57:b8:5c:9a:6d:2a:fc:be:7d: dd:6f:53:ff:e1:1b:2c:d8:92:db:fa:7e:65:3c:40:97:bc:4b: 3c:4e:33:df:5b:9f:2d:a6:7e:0e:a7:48:a2:69:32:b9:78:70: c7:ba:33:b4:60:b7:c3:48:01:92:18:d4:8a:33:9d:98:c2:fe: 54:4b:0f:4e:75:ed:e8:01:7c:91:7a:33:f7:06:82:49:b3:69: d6:70:80:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjYwNDA0MTU0MzM0WhcNMjYwNDExMTU0MzM0WjAYMRYwFAYD VQQDEw02OWQxMzFhNy0wOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnkt5zgHLcaXQW0e+tGl9dLvGNaUBJcM4WKI6lT7keLoeWmjznhQ9Y3AZuuv gslB5CXmFhJN/bLBO0376g2vpejdt9dzlc72MyJiDlWeAOkk5lvBzHzKLyBkJ99P YPXwx6K7b/dy/F8QKe3le3JN7ruvWoFV3F1waCJ471yVkpGelReTh3TZ/rP/nPz9 IR7sZBbt3kFHwbv+JtBFtUXyMT9kKaOf9kFow2VMuZWde9w/O0bTSglFjaVSO9Af hueVTHF/hCYzkK3+DZEPzXCccof6RO5aGO+APBn+xtKCn7g63oltyBwiz20g+s6y JjFiwu9g8a2+qSi6lSyER7wYEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh+3tsP Yay7Qixn3mn3y/kGqMHeMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTY5MS81MEM2OTI5MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhs Z3ZGYTNlN254b0poSEsybEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ84/cYY/FyLgbjO2PMooMXZfJN639P4Cm2jxczerIhBqyfBjpq/uQp1Ds08C B9UPvkR1gi39Sg14YDMW3qT49/+xshYSkgshymbJEZC5ylu8XSURwpr44qn1Tllj y67LGSLQHJHifntCYspSRVV1CEy+J0tbOgOLjMZe40bVtjE98Jtl0nzqT2Qzly5t ZxEBNsfA7VLIkfq92gNygLh14fPeezYZrE641yWiV7hcmm0q/L593W9T/+EbLNiS 2/p+ZTxAl7xLPE4z31ufLaZ+DqdIomkyuXhwx7oztGC3w0gBkhjUijOdmML+VEsP TnXt6AF8kXoz9waCSbNp1nCAdg== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:02 2026 by rpki-client