$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft File: r3YSV94snaXzPnHGQZ4meoYt-2I.mft (raw, json) Hash identifier: 5N2k5xKG8qxCHTV8LjVw81vvn4gN6xHFS7AyOl+4GfI= Subject key identifier: 45:31:ED:DD:0C:1A:A2:01:EB:B1:1D:87:BB:B5:A6:8E:F9:44:0A:07 Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 Certificate issuer: /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft Manifest number: D7 Signing time: Sun 05 Apr 2026 06:02:40 +0000 Manifest this update: Sun 05 Apr 2026 06:02:39 +0000 Manifest next update: Sun 12 Apr 2026 06:02:39 +0000 Files and hashes: 1: r3YSV94snaXzPnHGQZ4meoYt-2I.crl (hash: HV0ff4YZuIU+MsVJlunn8ofaLc7ih1hPPvunXjq7YFs=) 2: 61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (hash: dQJ3RW7hJaU0g8iPp7h8PfqQXue8K1gg2a56fyB2vzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62 Validity Not Before: Apr 5 06:02:39 2026 GMT Not After : Apr 12 06:02:39 2026 GMT Subject: CN=69d1faff-4e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:d9:ed:ce:76:c7:27:d2:89:4a:92:20:73: 84:4e:9c:72:a5:72:44:59:a5:39:f2:5b:61:93:24: fc:50:0a:d0:3f:ea:d5:ac:39:2e:b1:b4:f7:3b:8d: 7b:4a:11:36:da:0a:37:d4:5b:66:50:66:33:8a:c4: 45:46:be:e7:6e:ef:16:36:2b:5e:03:4e:9e:b1:2b: e2:c9:84:2c:83:34:85:21:2c:22:ab:f9:d9:44:bc: 89:4f:13:fb:18:0c:d6:b9:d5:24:ce:c0:13:c3:98: c7:5c:22:fa:b9:d7:f4:1a:7e:98:1f:7c:65:c6:09: 60:82:cd:14:35:b9:1b:7e:40:94:32:e6:a2:d9:9e: 2c:7a:c4:34:de:19:01:d8:2a:61:ba:81:de:65:7c: c8:90:14:16:a4:62:af:cd:17:e4:ce:c6:8e:87:ea: c8:ed:60:29:8e:17:76:74:fe:be:1c:18:45:7a:4b: 6c:33:4e:f7:87:9f:92:0b:a3:bd:f6:d3:84:4e:36: d9:bf:f2:08:05:95:72:0e:0d:98:a7:56:6a:6f:c5: 2c:e2:d7:af:ec:ef:e5:1b:ae:ba:f8:51:5b:0c:a3: 79:ad:7d:bf:8c:ac:0d:d7:7d:fd:43:97:85:d3:fd: c3:d9:d2:1e:43:f7:a9:96:fa:73:e0:21:2a:43:a5: 53:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:ED:DD:0C:1A:A2:01:EB:B1:1D:87:BB:B5:A6:8E:F9:44:0A:07 X509v3 Authority Key Identifier: keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:d0:d5:02:b8:ca:f3:ee:f2:47:fd:3a:bb:bf:e2:ed:d9:5a: 69:cb:66:cf:8c:f1:51:2e:70:0c:5e:ea:69:56:de:0f:35:7e: c7:03:1d:3f:a1:59:22:da:c7:60:f1:5d:8c:b9:64:b4:f6:09: 45:c5:80:87:82:d7:d4:64:9b:07:f6:bd:43:6e:8d:b5:90:6d: e5:1c:02:ae:de:49:1f:76:49:8d:fe:43:c2:7e:c7:8d:f5:64: ee:cb:28:29:7b:14:47:a8:3d:c9:9f:2b:25:56:56:bd:ff:9e: 98:ee:dd:72:1d:36:65:af:75:f6:1d:96:d4:c0:e8:51:e0:e6: ba:56:70:af:90:0f:28:92:0a:1c:a5:e4:74:87:ba:77:86:c5: d1:d9:3e:7b:1e:74:90:eb:75:43:a8:e7:6c:60:76:0c:4d:84: 82:f0:ce:d4:c1:fa:9f:6b:d4:9e:36:59:03:a7:21:d6:bd:28: fb:a5:3c:b3:ad:ad:af:01:00:6c:dd:d5:59:07:74:e0:d0:33: de:9f:83:34:f2:69:b2:da:6f:5d:dd:cd:45:c6:2d:07:c8:a9: 63:1b:46:e1:1d:63:f6:54:72:6f:e5:2a:90:07:00:ad:dc:24: 5b:4f:00:de:b2:10:99:86:bb:91:bb:5f:9d:f9:e9:ba:f1:c8: e2:7f:f8:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRENTQxMTAvBgNVBAUTKEFGNzYxMjU3REUyQzlEQTVGMzNFNzFDNjQxOUUyNjdB ODYyREZCNjIwHhcNMjYwNDA1MDYwMjM5WhcNMjYwNDEyMDYwMjM5WjAYMRYwFAYD VQQDEw02OWQxZmFmZi00ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxePZ7c52xyfSiUqSIHOETpxypXJEWaU58lthkyT8UArQP+rVrDkusbT3O417 ShE22go31FtmUGYzisRFRr7nbu8WNiteA06esSviyYQsgzSFISwiq/nZRLyJTxP7 GAzWudUkzsATw5jHXCL6udf0Gn6YH3xlxglggs0UNbkbfkCUMuai2Z4sesQ03hkB 2CphuoHeZXzIkBQWpGKvzRfkzsaOh+rI7WApjhd2dP6+HBhFektsM073h5+SC6O9 9tOETjbZv/IIBZVyDg2Yp1Zqb8Us4tev7O/lG666+FFbDKN5rX2/jKwN1339Q5eF 0/3D2dIeQ/eplvpz4CEqQ6VTMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUx7d0M GqIB67Edh7u1po75RAoHMB8GA1UdIwQYMBaAFK92ElfeLJ2l8z5xxkGeJnqGLfti MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEQ1NC9EMjg3N0RCNkU5 RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25hWHpQbkhHUVo0bWVvWXQt MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzWVNWOTRzbmFYelBuSEdRWjRtZW9ZdC0ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEQ1NC9EMjg3N0RCNkU5RUIxMUVGQTQ1NDJCMThDNEY5QUUwMi9yM1lTVjk0c25h WHpQbkhHUVo0bWVvWXQtMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABtDVArjK8+7yR/06u7/i7dlaactmz4zxUS5wDF7qaVbeDzV+xwMdP6FZItrH YPFdjLlktPYJRcWAh4LX1GSbB/a9Q26NtZBt5RwCrt5JH3ZJjf5Dwn7HjfVk7sso KXsUR6g9yZ8rJVZWvf+emO7dch02Za919h2W1MDoUeDmulZwr5APKJIKHKXkdIe6 d4bF0dk+ex50kOt1Q6jnbGB2DE2EgvDO1MH6n2vUnjZZA6ch1r0o+6U8s62trwEA bN3VWQd04NAz3p+DNPJpstpvXd3NRcYtB8ipYxtG4R1j9lRyb+UqkAcArdwkW08A 3rIQmYa7kbtfnfnpuvHI4n/4bQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:40:51 2026 by rpki-client