$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json) Hash identifier: gIKdADqRQ0pqRaezIwTlCO7DFsdoqvy6hG6sO/Poj9c= Subject key identifier: D0:71:CB:57:55:66:0B:A1:15:D5:67:65:4E:D8:6D:2A:B6:02:E1:98 Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 Certificate issuer: /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft Manifest number: 11 Signing time: Fri 17 Apr 2026 08:44:58 +0000 Manifest this update: Fri 17 Apr 2026 08:44:57 +0000 Manifest next update: Fri 24 Apr 2026 08:44:57 +0000 Files and hashes: 1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: EYqB9ARNXMCgas3UKwVSZ+5XTwh34xR96qJMKILltoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Validity Not Before: Apr 17 08:44:57 2026 GMT Not After : Apr 24 08:44:57 2026 GMT Subject: CN=69e1f30a-e855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:bb:90:ab:4c:ca:cf:46:aa:e2:70:88:3a: b9:f3:12:90:52:1a:5a:3a:63:79:a5:01:c7:c7:22: eb:1f:fa:dc:96:18:49:d1:3e:c0:9c:64:13:ad:f9: 82:0e:06:f8:3b:6b:79:8e:40:2e:9e:fe:f6:3f:33: 3d:28:cf:ff:d4:c3:b0:83:80:93:de:63:0c:1f:11: 65:0e:0f:31:e3:64:4a:a4:77:a3:c3:11:30:e2:a6: 36:24:4f:22:1f:f0:0e:bb:35:b7:12:46:37:ee:01: 67:1f:30:23:4d:50:07:8c:39:54:eb:d7:14:69:06: d2:1e:5e:5d:f4:3f:0e:a7:64:c8:a9:b1:6d:3e:f7: 64:e9:d6:c2:04:9e:21:90:0f:90:2a:3b:27:ab:45: 55:fb:d1:04:dd:9f:e5:ef:3e:c7:b5:27:bd:95:de: 0e:d4:b8:60:ce:b6:3a:e3:f5:e9:bc:a5:6e:a6:b3: 09:03:21:6b:ad:1f:10:c5:2e:3f:31:b3:ce:dc:6a: 6e:fc:09:02:d6:8e:2c:e3:1c:b9:16:c2:cd:1c:30: 03:ef:4e:d5:97:e5:7c:0d:3d:1b:47:41:40:ac:df: 44:5d:d8:e9:ce:b4:9e:39:a7:a3:ef:89:37:32:db: 2a:4d:7f:e1:1c:0f:ab:89:4f:b2:0e:e6:00:1c:78: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:71:CB:57:55:66:0B:A1:15:D5:67:65:4E:D8:6D:2A:B6:02:E1:98 X509v3 Authority Key Identifier: keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:67:97:43:e5:c7:f8:5b:04:07:2c:9b:78:5a:22:4b:85:6b: 32:a9:e9:0f:4e:68:9c:3d:40:26:94:85:38:cd:42:d3:ea:23: f3:7e:e1:5d:2c:fa:e9:a0:1d:08:b9:71:ab:14:dd:e8:bf:5b: 20:b5:e9:dc:de:7d:e2:18:bd:c4:48:45:08:a2:05:85:c1:ab: 47:14:0a:c7:69:08:f5:d5:26:09:dc:d0:84:83:17:f5:9c:05: 2d:eb:f9:f3:42:cc:41:fb:06:0b:15:00:c3:35:b5:26:47:bb: 47:cc:ae:c1:e1:e4:ed:0a:a6:fa:68:ec:9b:68:1b:bb:cc:cb: 2c:96:59:ad:71:85:e6:c1:b1:0c:4e:cc:db:61:88:86:46:57: e7:d9:cd:67:94:95:c0:4a:73:4a:58:51:ed:86:d9:1f:bf:79: 34:c7:d5:ef:24:11:91:ce:55:fe:05:7f:30:86:1e:5f:d3:62: 67:75:33:75:c3:8f:f6:d5:71:45:11:07:74:66:a1:b4:cf:76: d5:7a:83:56:26:6c:2c:a8:f1:68:c6:cf:be:c9:13:f2:2e:97: 28:7a:07:39:4e:00:98:a2:6b:e2:66:a2:72:a1:f4:3f:93:59: ac:ee:81:a9:61:6f:db:da:8a:7d:aa:a6:71:9e:4f:95:60:4d: d6:76:67:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkExMDExMC8GA1UEBRMoRERBRUFBNTM0MDJCNzBBOTRGNzM3QzFCMEQ1RDk1MDFG ODI5RjAzOTAeFw0yNjA0MTcwODQ0NTdaFw0yNjA0MjQwODQ0NTdaMBgxFjAUBgNV BAMTDTY5ZTFmMzBhLWU4NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTQLuQq0zKz0aq4nCIOrnzEpBSGlo6Y3mlAcfHIusf+tyWGEnRPsCcZBOt+YIO Bvg7a3mOQC6e/vY/Mz0oz//Uw7CDgJPeYwwfEWUODzHjZEqkd6PDETDipjYkTyIf 8A67NbcSRjfuAWcfMCNNUAeMOVTr1xRpBtIeXl30Pw6nZMipsW0+92Tp1sIEniGQ D5AqOyerRVX70QTdn+XvPse1J72V3g7UuGDOtjrj9em8pW6mswkDIWutHxDFLj8x s87cam78CQLWjizjHLkWws0cMAPvTtWX5XwNPRtHQUCs30Rd2OnOtJ45p6PviTcy 2ypNf+EcD6uJT7IO5gAcePLHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0HHLV1Vm C6EV1WdlTthtKrYC4ZgwHwYDVR0jBBgwFoAU3a6qU0ArcKlPc3wbDV2VAfgp8Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0U4MzMyNUVBMjMy QzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0tsUGMzd2JEVjJWQWZncDhE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2E2cVUwQXJjS2xQYzN3YkRWMlZBZmdwOERrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QTEwL0U4MzMyNUVBMjMyQzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0ts UGMzd2JEVjJWQWZncDhEay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmZ5dD5cf4WwQHLJt4WiJLhWsyqekPTmicPUAmlIU4zULT6iPzfuFdLPrpoB0I uXGrFN3ov1sgtenc3n3iGL3ESEUIogWFwatHFArHaQj11SYJ3NCEgxf1nAUt6/nz QsxB+wYLFQDDNbUmR7tHzK7B4eTtCqb6aOybaBu7zMssllmtcYXmwbEMTszbYYiG Rlfn2c1nlJXASnNKWFHthtkfv3k0x9XvJBGRzlX+BX8whh5f02JndTN1w4/21XFF EQd0ZqG0z3bVeoNWJmwsqPFoxs++yRPyLpcoegc5TgCYomviZqJyofQ/k1ms7oGp YW/b2op9qqZxnk+VYE3Wdmdl -----END CERTIFICATE-----Generated at Sat Apr 18 20:58:43 2026 by rpki-client