$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: ujy3kyby7W7hsmbHJEkP4HxxqARkirNo4k6Xa008vpM= Subject key identifier: CF:1E:B3:DF:13:E8:FA:3A:70:8C:5C:CE:AC:F5:F2:EB:B2:67:6B:EC Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 3532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 352C Signing time: Sat 04 Apr 2026 14:50:00 +0000 Manifest this update: Sat 04 Apr 2026 14:49:59 +0000 Manifest next update: Sat 11 Apr 2026 14:49:59 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: idS/V/3xql4+Yndx7UphlbujOJu2zL55vqdznlolnk4=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: nLdLNd1FqbqzPBvmomvzxR8c2GOexrERlWPqFeDBvG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13618 (0x3532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Apr 4 14:49:59 2026 GMT Not After : Apr 11 14:49:59 2026 GMT Subject: CN=69d12517-d932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0f:7b:77:2d:99:6c:e9:1e:81:f1:38:ae:8a: 98:5c:32:d6:1d:8f:0d:2d:32:94:b0:ee:df:1b:53: 1f:ac:54:15:44:51:ac:24:9f:4f:83:be:20:cd:ee: b2:51:a9:a8:39:0d:96:72:5e:a3:17:6f:8b:c1:08: 44:5a:c2:02:33:15:2d:da:79:ba:94:4a:2c:7f:c0: 3b:f4:90:a2:46:e1:6a:0b:3e:4c:ad:15:c7:e9:23: e3:5e:65:fb:7e:4e:97:2b:d8:8c:1a:ce:4b:b3:73: d3:62:d1:22:aa:3d:e0:17:d5:51:c0:61:39:31:50: a5:f6:5d:a6:1c:43:d6:0a:5f:36:58:9a:fc:49:dc: a7:ca:8d:49:fe:3c:0a:08:75:cd:a4:3b:30:e6:7f: fc:5a:ac:55:13:21:04:f4:53:f3:84:51:01:37:88: 34:90:57:71:a7:2a:dc:dd:d3:38:9b:95:8a:05:d8: c2:86:a2:d8:3c:f8:d1:3e:de:58:42:a9:25:e3:bb: 9c:1e:82:cf:11:53:d7:45:a8:52:58:87:90:2f:74: 50:ea:a0:26:39:e2:6e:2b:2e:05:ab:ca:4d:a5:27: 57:0b:ea:cc:1b:cb:9c:5b:62:80:f0:26:72:62:97: de:3c:a0:a6:d1:e1:63:1c:0f:5d:6b:20:b4:43:ee: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1E:B3:DF:13:E8:FA:3A:70:8C:5C:CE:AC:F5:F2:EB:B2:67:6B:EC X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:2b:8e:1e:5f:af:e5:34:48:e6:b0:8f:bf:54:9d:3a:e3:40: 8e:c9:7b:91:d2:35:72:98:f2:54:9a:9d:97:e8:a3:7e:d1:fb: 2d:d8:77:be:14:24:96:77:4a:a6:96:ef:ad:6a:b8:15:56:24: 6d:75:40:ad:2d:aa:9c:20:7f:1f:b8:21:a3:58:1e:8a:b0:99: 62:e8:70:5a:80:ed:c2:35:6a:71:a7:7a:42:0d:cf:92:bb:5d: d9:45:ac:9c:6b:de:06:79:58:04:19:df:c5:d7:ed:9e:22:a5: 58:71:8c:b9:76:31:55:75:f5:4b:be:5c:ed:a2:fb:24:e3:28: a4:11:3f:4b:7c:4b:c2:b3:4b:16:5c:8d:63:e7:3e:12:c1:1b: a8:af:c3:2e:10:8e:ea:34:90:8d:16:46:80:e1:b7:d9:e8:e8: 3f:f2:cf:36:37:bf:a7:be:3f:c7:a0:6d:ba:ba:bf:a6:63:cb: 7e:a3:3f:aa:6b:9d:0c:01:15:fb:f9:c5:fd:5b:5b:9f:a0:d5: 8d:ec:f1:96:97:13:ea:b9:f1:01:51:2c:f7:b9:54:05:12:a0: e4:04:9d:19:ab:af:50:f8:b9:3b:d5:e8:27:73:66:cc:f1:d4: b5:76:7f:21:f7:13:74:57:c9:c3:cb:16:a3:97:88:51:31:ec: 99:8b:e0:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjYwNDA0MTQ0OTU5WhcNMjYwNDExMTQ0OTU5WjAYMRYwFAYD VQQDEw02OWQxMjUxNy1kOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhg97dy2ZbOkegfE4roqYXDLWHY8NLTKUsO7fG1MfrFQVRFGsJJ9Pg74gze6y UamoOQ2Wcl6jF2+LwQhEWsICMxUt2nm6lEosf8A79JCiRuFqCz5MrRXH6SPjXmX7 fk6XK9iMGs5Ls3PTYtEiqj3gF9VRwGE5MVCl9l2mHEPWCl82WJr8Sdynyo1J/jwK CHXNpDsw5n/8WqxVEyEE9FPzhFEBN4g0kFdxpyrc3dM4m5WKBdjChqLYPPjRPt5Y Qqkl47ucHoLPEVPXRahSWIeQL3RQ6qAmOeJuKy4Fq8pNpSdXC+rMG8ucW2KA8CZy YpfePKCm0eFjHA9dayC0Q+4oBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8es98T 6Po6cIxczqz18uuyZ2vsMB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcSuOHl+v5TRI5rCPv1SdOuNAjsl7kdI1cpjyVJqdl+ijftH7Ldh3vhQklndK ppbvrWq4FVYkbXVArS2qnCB/H7gho1geirCZYuhwWoDtwjVqcad6Qg3Pkrtd2UWs nGveBnlYBBnfxdftniKlWHGMuXYxVXX1S75c7aL7JOMopBE/S3xLwrNLFlyNY+c+ EsEbqK/DLhCO6jSQjRZGgOG32ejoP/LPNje/p74/x6Bturq/pmPLfqM/qmudDAEV +/nF/Vtbn6DVjezxlpcT6rnxAVEs97lUBRKg5ASdGauvUPi5O9XoJ3NmzPHUtXZ/ IfcTdFfJw8sWo5eIUTHsmYvgbQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:38 2026 by rpki-client