$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: VLl1G6ZfWdS+e90q1Zu+wfOzymVe1xelU6LvBsr57Ew= Subject key identifier: 3E:4E:51:2B:8E:41:F5:D2:9C:73:36:43:70:72:46:26:2F:94:B4:FD Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1207 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 11FD Signing time: Sat 04 Apr 2026 17:02:47 +0000 Manifest this update: Sat 04 Apr 2026 17:02:47 +0000 Manifest next update: Sat 11 Apr 2026 17:02:47 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: V+XbyXBJt4Cxdux8AL9Xqk+O8dcoEUgefx2v494xck0=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4615 (0x1207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Apr 4 17:02:47 2026 GMT Not After : Apr 11 17:02:47 2026 GMT Subject: CN=69d14437-1536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:fa:b5:89:99:e4:58:af:28:14:85:18:44: 47:31:ca:74:17:ac:a4:ff:5e:10:d4:a5:ef:79:27: a1:73:f9:d7:df:a6:c0:09:15:0e:b0:41:71:d5:a5: 12:e2:79:51:47:70:cf:92:f6:a2:0d:f7:81:88:3d: 23:92:5b:1d:cd:23:b7:3d:f9:e0:4d:79:d2:11:00: 0f:f2:8a:ad:75:2b:a0:4d:bc:50:df:35:80:1c:8d: 1e:41:54:1b:1d:3e:89:19:17:4b:9e:fc:58:01:99: da:14:ce:17:65:af:be:b9:86:5f:a4:f6:02:3d:c7: 51:e7:2a:4c:96:5d:3a:c2:e5:4b:61:3b:d3:8c:98: 20:58:2a:00:9f:0c:cc:c5:7a:4f:62:c9:e0:52:60: cf:68:e9:7a:9c:fb:41:5e:f7:fa:b1:cf:81:70:33: e1:76:2e:a6:d5:52:c0:15:46:f2:c8:7e:48:2c:21: 8e:e4:6f:92:e7:65:3e:06:34:ff:b6:ea:f4:7d:93: 6a:46:fa:0e:37:22:47:0f:21:0d:64:7f:cf:c5:43: e9:69:5d:ed:96:17:e9:9b:73:b7:9b:0b:74:a3:5b: 6a:bb:24:f6:a1:15:71:f7:97:1d:94:a7:20:cb:9b: 43:a1:ee:c4:5e:9c:61:74:61:75:95:ff:bf:bd:bd: ee:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4E:51:2B:8E:41:F5:D2:9C:73:36:43:70:72:46:26:2F:94:B4:FD X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:15:f3:96:27:02:36:9f:6b:86:d8:d6:8d:67:ab:56:c3:af: 8b:ef:77:4f:12:15:f1:e5:9a:6b:4e:35:46:6f:0b:dc:f6:cb: ab:6c:ea:24:01:5b:75:a3:3b:f6:35:47:85:1d:1a:29:e8:97: ea:ca:bd:d4:06:84:40:6b:85:81:49:b1:c9:09:a2:e2:f0:4b: a6:21:1e:6f:c0:74:f4:86:25:7e:ef:1f:e0:2e:78:45:3c:4e: ad:4d:2d:e1:24:64:75:43:ef:26:7b:66:26:b9:aa:26:06:18: a0:13:22:91:24:aa:bf:dc:69:a4:29:4c:99:37:7c:8c:7e:40: d9:df:eb:35:8d:97:79:ec:fd:20:6e:c7:f1:09:18:66:62:bc: 8f:a6:63:17:6c:34:7d:06:d4:f2:fa:42:3f:95:d4:b8:72:c0: 34:e4:fd:6c:27:a2:b4:11:d3:83:7b:e5:0f:3c:1b:e6:ec:d2: aa:dc:10:03:6a:32:32:ce:4d:c1:32:29:84:27:e0:c9:82:04: 62:50:5a:35:df:6d:3d:3c:4b:fc:5b:82:90:45:7d:1e:a0:70: bb:c6:28:75:80:53:24:a4:bd:85:1b:0f:44:5d:98:9a:e0:80: 26:e5:c7:66:e2:bd:40:d8:f8:95:ae:e4:e2:11:e4:d7:06:87: f0:3b:f7:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjYwNDA0MTcwMjQ3WhcNMjYwNDExMTcwMjQ3WjAYMRYwFAYD VQQDEw02OWQxNDQzNy0xNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhv6tYmZ5FivKBSFGERHMcp0F6yk/14Q1KXveSehc/nX36bACRUOsEFx1aUS 4nlRR3DPkvaiDfeBiD0jklsdzSO3PfngTXnSEQAP8oqtdSugTbxQ3zWAHI0eQVQb HT6JGRdLnvxYAZnaFM4XZa++uYZfpPYCPcdR5ypMll06wuVLYTvTjJggWCoAnwzM xXpPYsngUmDPaOl6nPtBXvf6sc+BcDPhdi6m1VLAFUbyyH5ILCGO5G+S52U+BjT/ tur0fZNqRvoONyJHDyENZH/PxUPpaV3tlhfpm3O3mwt0o1tquyT2oRVx95cdlKcg y5tDoe7EXpxhdGF1lf+/vb3utQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5OUSuO QfXSnHM2Q3ByRiYvlLT9MB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmxXzlicCNp9rhtjWjWerVsOvi+93TxIV8eWaa041Rm8L3PbLq2zqJAFbdaM7 9jVHhR0aKeiX6sq91AaEQGuFgUmxyQmi4vBLpiEeb8B09IYlfu8f4C54RTxOrU0t 4SRkdUPvJntmJrmqJgYYoBMikSSqv9xppClMmTd8jH5A2d/rNY2Xeez9IG7H8QkY ZmK8j6ZjF2w0fQbU8vpCP5XUuHLANOT9bCeitBHTg3vlDzwb5uzSqtwQA2oyMs5N wTIphCfgyYIEYlBaNd9tPTxL/FuCkEV9HqBwu8YodYBTJKS9hRsPRF2YmuCAJuXH ZuK9QNj4la7k4hHk1waH8Dv36A== -----END CERTIFICATE-----Generated at Mon Apr 6 13:50:29 2026 by rpki-client