$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft File: 3obmXuoeCzDk_Y2SRYft9XI9UH0.mft (raw, json) Hash identifier: sQkMvifPGgvjVmVRyt9bm+YY1VQXBSAHQ6LdOEBE6l4= Subject key identifier: 54:4E:05:9C:33:82:DB:BE:65:FA:B4:DC:64:DC:BA:19:22:EC:13:38 Authority key identifier: DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D Certificate issuer: /CN=A91E00A5/serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft Manifest number: 0121 Signing time: Sun 05 Apr 2026 05:07:28 +0000 Manifest this update: Sun 05 Apr 2026 05:07:28 +0000 Manifest next update: Sun 12 Apr 2026 05:07:28 +0000 Files and hashes: 1: 3obmXuoeCzDk_Y2SRYft9XI9UH0.crl (hash: JuEaXChmo8dw3I0BwE/qeOCx/QLWxnspiY7IFm1Eezg=) 2: 1F63E4347ABC11EF9E53E753C4F9AE02.roa (hash: EIk8cSgI2eVJTYnhDMxXScQ6yZa/oUis271sSK8mvCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00A5, serialNumber=DE86E65EEA1E0B30E4FD8D924587EDF5723D507D Validity Not Before: Apr 5 05:07:28 2026 GMT Not After : Apr 12 05:07:28 2026 GMT Subject: CN=69d1ee10-43a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:13:55:f1:f2:f6:d5:56:ad:7d:54:56:14:cc: 93:27:df:07:51:c4:cb:c6:d8:d7:e7:7b:2c:69:cf: 9a:0f:59:c6:f2:f4:54:9c:48:17:04:08:e8:01:20: 0f:7b:7b:3d:35:7a:2c:29:e9:11:d2:37:f7:48:86: bb:44:f0:ed:41:cf:39:bb:56:96:37:47:de:27:3d: 21:c0:13:be:dd:66:5b:63:95:ef:51:0e:05:fa:2d: 49:60:fd:d5:1b:29:69:3a:ff:71:98:7b:09:1b:dc: 48:96:13:bc:82:a8:2f:b2:2c:a2:9c:c6:ca:ab:b1: 16:91:3f:a3:d3:fa:c4:b0:80:27:0f:75:8d:82:62: bc:68:d3:06:86:87:69:6a:dc:26:25:8e:1b:d0:e8: 08:81:cc:03:d0:2d:19:43:f7:85:f1:78:ad:d1:75: e1:a3:d5:94:81:ea:f6:1c:e0:bd:94:db:f2:b3:0a: e0:78:47:90:01:9c:48:71:0e:3a:73:76:fd:d9:d1: e6:43:2d:c7:1c:e8:5b:51:cf:09:e5:cf:3f:9e:96: 5c:4b:df:94:56:a2:b6:4e:16:14:8e:d2:c8:4f:01: fc:de:bf:b4:f2:78:1f:b5:fd:72:1f:ba:28:65:81: 0c:29:cd:6b:99:1c:d3:7a:22:bc:d2:fe:25:4d:51: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4E:05:9C:33:82:DB:BE:65:FA:B4:DC:64:DC:BA:19:22:EC:13:38 X509v3 Authority Key Identifier: keyid:DE:86:E6:5E:EA:1E:0B:30:E4:FD:8D:92:45:87:ED:F5:72:3D:50:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3obmXuoeCzDk_Y2SRYft9XI9UH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00A5/A6483A3C7ABB11EF9379AE52C4F9AE02/3obmXuoeCzDk_Y2SRYft9XI9UH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:26:df:c7:da:16:7e:55:c0:e2:b1:d3:76:a8:dc:2c:8c:dd: 4d:0d:39:b8:c6:71:e2:ba:71:e3:bf:d4:3d:4e:e3:b2:cb:c1: 36:95:00:ec:27:5e:69:64:94:f4:89:3c:5c:f8:d9:0c:95:1c: a8:e0:cb:ad:5e:86:0c:f9:66:16:c3:2f:5e:14:0c:fd:aa:77: 46:03:d4:2e:fb:ff:4d:db:6e:f8:26:66:58:e0:23:9b:f1:18: 7b:ab:5e:f8:2a:fe:b8:ae:18:2b:ea:1f:ea:4f:11:f7:5f:b9: 92:72:12:07:fe:0d:71:f7:29:ae:e9:a3:87:52:9d:4e:3e:ae: 31:b7:49:f6:5b:c9:f0:fe:9e:08:51:9e:de:c2:2f:3c:d0:24: ab:80:1a:ba:30:9f:d9:57:70:3f:1e:f0:14:91:4a:6b:f1:4e: 84:95:66:0f:c2:84:b4:bc:44:89:75:09:a8:7d:25:49:37:af: 0a:d7:74:52:25:38:01:c7:a8:22:de:02:64:02:2c:ae:65:2a: 8d:a7:06:d9:f4:90:ee:c7:27:43:07:83:70:cc:b1:f2:d6:98: 33:1a:a8:de:6e:92:60:be:5a:93:12:64:48:f3:ac:8a:8c:4d: 35:c0:f5:9a:0d:f8:c7:37:e7:f8:94:3a:e3:aa:db:a0:fd:5c: 75:9e:3a:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwQTUxMTAvBgNVBAUTKERFODZFNjVFRUExRTBCMzBFNEZEOEQ5MjQ1ODdFREY1 NzIzRDUwN0QwHhcNMjYwNDA1MDUwNzI4WhcNMjYwNDEyMDUwNzI4WjAYMRYwFAYD VQQDEw02OWQxZWUxMC00M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xNV8fL21VatfVRWFMyTJ98HUcTLxtjX53ssac+aD1nG8vRUnEgXBAjoASAP e3s9NXosKekR0jf3SIa7RPDtQc85u1aWN0feJz0hwBO+3WZbY5XvUQ4F+i1JYP3V GylpOv9xmHsJG9xIlhO8gqgvsiyinMbKq7EWkT+j0/rEsIAnD3WNgmK8aNMGhodp atwmJY4b0OgIgcwD0C0ZQ/eF8Xit0XXho9WUger2HOC9lNvyswrgeEeQAZxIcQ46 c3b92dHmQy3HHOhbUc8J5c8/npZcS9+UVqK2ThYUjtLITwH83r+08ngftf1yH7oo ZYEMKc1rmRzTeiK80v4lTVFbfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFROBZwz gtu+Zfq03GTcuhki7BM4MB8GA1UdIwQYMBaAFN6G5l7qHgsw5P2NkkWH7fVyPVB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBBNS9BNjQ4M0EzQzdB QkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6RGtfWTJTUllmdDlYSTlV SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvYm1YdW9lQ3pEa19ZMlNSWWZ0OVhJOVVIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBBNS9BNjQ4M0EzQzdBQkIxMUVGOTM3OUFFNTJDNEY5QUUwMi8zb2JtWHVvZUN6 RGtfWTJTUllmdDlYSTlVSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdybfx9oWflXA4rHTdqjcLIzdTQ05uMZx4rpx47/UPU7jssvBNpUA7CdeaWSU 9Ik8XPjZDJUcqODLrV6GDPlmFsMvXhQM/ap3RgPULvv/Tdtu+CZmWOAjm/EYe6te +Cr+uK4YK+of6k8R91+5knISB/4Ncfcprumjh1KdTj6uMbdJ9lvJ8P6eCFGe3sIv PNAkq4AaujCf2VdwPx7wFJFKa/FOhJVmD8KEtLxEiXUJqH0lSTevCtd0UiU4Aceo It4CZAIsrmUqjacG2fSQ7scnQweDcMyx8taYMxqo3m6SYL5akxJkSPOsioxNNcD1 mg34xzfn+JQ646rboP1cdZ46Xg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:20 2026 by rpki-client