$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: ukJxCYBb2TwBMsdujpqVI2TSmafnuppRFz/eCfmHPlc= Subject key identifier: E7:D3:53:0B:69:D0:69:FC:B1:ED:2F:59:38:DE:58:3C:3B:8E:C7:38 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 0880 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 0859 Signing time: Sat 04 Apr 2026 20:40:42 +0000 Manifest this update: Sat 04 Apr 2026 20:40:42 +0000 Manifest next update: Sat 11 Apr 2026 20:40:42 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: OUYEPaKfLRmFll8w0mfO244R1cPRztJmbZ1FPqSW5xs=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: F6LSRzHnrTo7J01sXjb7AoMVO+sTd3XP3ZGtjca+Bu8=) 3: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: mEYTlHG5kpWGqAptPr16SuSTKtrgl88+S1qWS3rlZ1c=) 4: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: ySJ9f4a7cg7BoSELqx9I/0KDLVkwX9/nfnRYeM6OTmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Apr 4 20:40:42 2026 GMT Not After : Apr 11 20:40:42 2026 GMT Subject: CN=69d1774a-c288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:70:72:cc:70:b8:c0:cd:9b:b9:1e:8c:bf: 74:39:0d:36:82:b4:5c:bd:ca:3f:75:af:13:cd:3f: d2:cb:d6:68:d5:12:73:96:65:cb:7c:95:82:d2:d3: 5c:83:61:79:36:1f:ea:11:3c:79:1d:53:a5:05:c0: 60:e9:07:ec:02:e9:ae:ed:fa:24:e9:6b:43:0a:17: 6a:d1:c1:b3:56:96:5f:94:28:53:77:aa:2f:f0:d8: b3:11:8a:90:4e:63:2f:49:e2:f5:14:14:44:41:76: 4d:1e:24:78:04:11:31:57:c3:07:6b:ba:32:ee:c5: 4f:26:62:7d:e1:70:de:97:2b:57:ed:e9:88:e0:48: b7:b7:b7:5f:13:e6:97:26:2e:3f:15:9d:6c:59:1a: f8:60:ff:97:bb:af:ce:04:33:88:3a:e3:8a:9b:d4: b4:a3:28:4f:ea:f8:97:df:4e:30:0a:79:43:77:44: 29:44:9c:e2:97:84:b2:31:8e:80:d9:46:ea:76:5c: 4c:b2:5d:ea:32:26:7d:13:8f:5e:69:8a:1d:27:58: 61:d8:a5:6a:2f:eb:ef:78:44:88:10:c2:04:cc:2b: 48:22:9b:a9:7f:bb:45:5f:1c:3f:c0:5a:e4:08:22: 02:0c:84:cc:bf:d0:bc:a1:d1:02:6a:01:a2:4e:f2: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D3:53:0B:69:D0:69:FC:B1:ED:2F:59:38:DE:58:3C:3B:8E:C7:38 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:43:e2:44:7f:56:af:03:b1:3c:53:5d:25:f2:1b:32:25:aa: 2d:bf:d9:ea:c5:34:7f:ce:be:de:18:5e:8d:92:c1:6d:17:f5: 19:25:19:6f:6e:b5:49:02:cc:a9:97:10:9e:7a:93:c1:cb:9f: 92:9c:8f:ab:94:fb:42:c1:49:50:40:cc:d9:ae:bd:a5:d3:22: db:c4:f9:e1:37:f4:0d:33:d4:28:51:0b:24:7d:46:b9:c8:9f: ab:63:d3:30:8a:da:72:00:61:8b:58:6d:9a:ee:68:38:c7:6d: 24:a9:f3:38:c4:01:be:ff:7e:72:e6:c2:c2:d8:a6:97:05:97: 04:02:68:84:9b:0a:45:cd:fd:2b:d5:29:13:6e:06:f8:83:86: 84:03:d7:5c:90:96:7f:a9:fe:c8:ba:53:cd:ad:1f:30:15:d0: f1:80:66:a2:e2:6b:17:d4:1f:fa:ac:3d:7d:1a:42:52:91:96: 11:0b:56:01:30:37:82:c3:11:71:05:e3:03:d3:f9:01:fd:15: 67:5f:bc:63:ad:90:1f:44:66:c5:56:b8:3e:f8:fd:4b:e4:e2: 60:8c:8a:11:d2:5a:95:a9:77:dc:e4:fe:2b:32:cf:72:cf:7b: 70:a4:0e:c4:2d:0e:f2:bb:42:6f:05:9e:73:17:87:09:8f:df: fd:1e:36:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwNDA0MjA0MDQyWhcNMjYwNDExMjA0MDQyWjAYMRYwFAYD VQQDEw02OWQxNzc0YS1jMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvdwcsxwuMDNm7kejL90OQ02grRcvco/da8TzT/Sy9Zo1RJzlmXLfJWC0tNc g2F5Nh/qETx5HVOlBcBg6QfsAumu7fok6WtDChdq0cGzVpZflChTd6ov8NizEYqQ TmMvSeL1FBREQXZNHiR4BBExV8MHa7oy7sVPJmJ94XDelytX7emI4Ei3t7dfE+aX Ji4/FZ1sWRr4YP+Xu6/OBDOIOuOKm9S0oyhP6viX304wCnlDd0QpRJzil4SyMY6A 2UbqdlxMsl3qMiZ9E49eaYodJ1hh2KVqL+vveESIEMIEzCtIIpupf7tFXxw/wFrk CCICDITMv9C8odECagGiTvLAewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfTUwtp 0Gn8se0vWTjeWDw7jsc4MB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUPiRH9WrwOxPFNdJfIbMiWqLb/Z6sU0f86+3hhejZLBbRf1GSUZb261SQLM qZcQnnqTwcufkpyPq5T7QsFJUEDM2a69pdMi28T54Tf0DTPUKFELJH1Gucifq2PT MIracgBhi1htmu5oOMdtJKnzOMQBvv9+cubCwtimlwWXBAJohJsKRc39K9UpE24G +IOGhAPXXJCWf6n+yLpTza0fMBXQ8YBmouJrF9Qf+qw9fRpCUpGWEQtWATA3gsMR cQXjA9P5Af0VZ1+8Y62QH0RmxVa4Pvj9S+TiYIyKEdJalal33OT+KzLPcs97cKQO xC0O8rtCbwWecxeHCY/f/R42Ig== -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:27 2026 by rpki-client