$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: O+qk+jJjAUvBURzR/tD17gBfsPJsoQzu3Xvsm/L7DJQ= Subject key identifier: 64:5D:0C:9D:1C:E6:32:4F:82:7C:EF:8A:C3:12:15:2F:06:86:E5:A9 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0D09 Signing time: Sat 04 Apr 2026 18:00:17 +0000 Manifest this update: Sat 04 Apr 2026 18:00:16 +0000 Manifest next update: Sat 11 Apr 2026 18:00:16 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: ChNk+1a5qTtNFYXvHQFrQ6fIireKL2Mcur+O0nAhvAE=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Apr 4 18:00:16 2026 GMT Not After : Apr 11 18:00:16 2026 GMT Subject: CN=69d151b1-4f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f7:e7:4a:dc:95:4d:d1:63:71:2e:b2:de:34: ee:6a:a0:02:f3:73:40:49:a6:54:d0:b6:4a:59:15: 39:9a:de:dc:17:9b:2f:27:b8:f2:ec:0b:a3:d6:57: 6d:f3:de:6e:c1:98:e3:2f:ed:14:48:16:1f:14:b9: fd:c8:72:e9:52:f6:42:b0:a7:1a:6b:6f:91:ea:6c: 28:b7:79:79:87:56:93:98:38:33:15:0e:6c:b8:9c: a1:3d:dd:be:f0:98:07:e0:0f:25:fa:ab:53:c9:0a: 9d:60:21:ca:f0:f6:46:5a:e1:74:03:df:ef:ad:56: e1:bc:fd:d0:2c:98:3c:b5:da:78:1d:6c:dd:e6:9f: c2:0a:f5:73:53:c4:1a:d2:75:d3:f6:66:cc:bb:12: b3:c7:1e:64:b7:6b:7e:76:6a:6e:68:39:a7:20:46: 5f:9d:96:b3:63:c1:55:6e:b6:b4:18:94:4a:f3:ae: b5:05:8f:1a:48:f8:a8:f2:52:bf:1d:b3:97:9b:4c: 44:dd:bf:d2:b6:3b:7a:cc:fb:95:2f:02:66:81:04: 12:4c:54:14:7e:9c:68:60:8f:4d:9d:c4:d5:9c:81: c5:85:dc:53:7b:1a:b1:31:b4:82:ea:41:4b:f3:86: e5:41:ba:de:aa:35:b9:38:3b:87:2c:27:6f:5f:db: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:0C:9D:1C:E6:32:4F:82:7C:EF:8A:C3:12:15:2F:06:86:E5:A9 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f1:42:89:5c:32:d8:08:aa:6e:58:c2:ec:5d:b4:49:ca:67: 26:d3:38:4f:45:8d:a2:41:91:29:a2:2b:2b:72:bc:01:7b:be: b8:e4:68:86:95:af:b3:0b:fc:b1:c2:b7:b1:94:23:dc:40:5f: 03:2f:bd:20:fc:5c:05:2a:bb:18:24:9e:ab:b8:a1:02:29:9a: 96:ee:27:0e:d7:7b:db:d9:ed:52:de:16:70:c6:31:8e:03:1f: 0c:12:b0:4a:df:71:99:ce:76:e5:d3:d2:63:b9:23:df:dc:b2: 0a:b7:2a:44:33:7f:40:36:b5:75:82:86:75:1f:ba:e0:28:da: 94:d7:62:ed:be:b2:63:b6:9c:71:e4:17:a0:1b:94:d7:20:5d: 42:c4:99:5a:b6:cc:e3:04:22:20:c4:e5:b2:86:d5:03:10:1c: c7:3e:af:33:ea:1a:c6:8b:76:ce:51:1b:7a:5c:a5:34:4f:65: 42:fd:86:c4:1b:a4:9f:f2:6d:22:5f:48:64:41:31:7a:56:44: 4c:19:0a:79:83:7d:d1:20:0d:12:3f:07:13:7a:b4:ad:94:04: 3a:16:34:a6:ee:48:d2:9e:3f:cf:aa:43:1d:2c:b7:04:18:c6: 57:4b:56:36:50:79:24:11:ad:b9:9a:8f:79:6d:ee:ab:58:8b: df:cc:e9:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjYwNDA0MTgwMDE2WhcNMjYwNDExMTgwMDE2WjAYMRYwFAYD VQQDEw02OWQxNTFiMS00ZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoffnStyVTdFjcS6y3jTuaqAC83NASaZU0LZKWRU5mt7cF5svJ7jy7Auj1ldt 895uwZjjL+0USBYfFLn9yHLpUvZCsKcaa2+R6mwot3l5h1aTmDgzFQ5suJyhPd2+ 8JgH4A8l+qtTyQqdYCHK8PZGWuF0A9/vrVbhvP3QLJg8tdp4HWzd5p/CCvVzU8Qa 0nXT9mbMuxKzxx5kt2t+dmpuaDmnIEZfnZazY8FVbra0GJRK8661BY8aSPio8lK/ HbOXm0xE3b/Stjt6zPuVLwJmgQQSTFQUfpxoYI9NncTVnIHFhdxTexqxMbSC6kFL 84blQbreqjW5ODuHLCdvX9ucDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRdDJ0c 5jJPgnzvisMSFS8GhuWpMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfFCiVwy2AiqbljC7F20ScpnJtM4T0WNokGRKaIrK3K8AXu+uORohpWvswv8 scK3sZQj3EBfAy+9IPxcBSq7GCSeq7ihAimalu4nDtd729ntUt4WcMYxjgMfDBKw St9xmc525dPSY7kj39yyCrcqRDN/QDa1dYKGdR+64CjalNdi7b6yY7acceQXoBuU 1yBdQsSZWrbM4wQiIMTlsobVAxAcxz6vM+oaxot2zlEbelylNE9lQv2GxBukn/Jt Il9IZEExelZETBkKeYN90SANEj8HE3q0rZQEOhY0pu5I0p4/z6pDHSy3BBjGV0tW NlB5JBGtuZqPeW3uq1iL38zpIA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:28:59 2026 by rpki-client