$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json) Hash identifier: QJYtUBkWkYr84dw12xPYmlxoAvYsx/ZZpEHP0nP5FnQ= Subject key identifier: AA:10:A0:AD:A2:26:D7:A1:E4:DA:95:8F:FC:4C:96:09:9A:06:8D:3A Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft Manifest number: 020A Signing time: Sun 05 Apr 2026 02:36:01 +0000 Manifest this update: Sun 05 Apr 2026 02:36:00 +0000 Manifest next update: Sun 12 Apr 2026 02:36:00 +0000 Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: 27AWfJh7liuMnAxSsi6SKkQgpNgcEx9oCnR9SmabcT8=) 2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: DcXA2eAZGbJr4/hnQ1XPdT8g+RnlXIW8GnA5M9/Nm2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: Apr 5 02:36:00 2026 GMT Not After : Apr 12 02:36:00 2026 GMT Subject: CN=69d1ca90-b382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:b6:57:79:19:48:e5:13:78:35:40:76:2b: b7:26:dc:99:21:48:db:d4:81:d3:d8:5c:67:5c:ab: 43:f9:38:d0:6d:59:06:dd:be:41:ac:61:56:13:e5: 0d:80:e7:47:1d:92:2b:e9:cc:4d:88:02:aa:80:6b: 72:f1:d7:9c:bc:e7:52:d4:6c:23:a4:16:db:ec:75: 13:03:3c:b3:f1:a8:80:b4:1a:ab:e1:d3:85:89:f6: d4:6e:d8:0c:76:bb:70:d9:d6:62:6c:8e:01:ec:2c: d1:a3:56:ee:48:f5:ac:4a:ad:c1:56:23:30:1a:ce: 95:cf:0d:02:51:de:eb:d4:da:1a:d9:41:bb:28:a1: 61:5d:0c:06:d9:ff:fe:67:2a:49:60:a1:99:76:a4: e5:99:c0:d1:d5:a9:ed:55:80:03:a2:4c:4f:6c:a1: d8:82:55:45:f1:42:2e:40:8e:11:67:eb:e5:3d:b4: 2b:79:60:d3:ea:0a:46:b5:df:ed:3e:20:8a:76:ad: 28:22:bf:1a:29:11:85:03:d2:86:13:9a:31:90:7a: 9e:6e:d0:c4:ee:16:fc:5d:19:c0:a5:06:7c:ba:05: ac:56:27:9b:ef:c1:a8:89:eb:61:38:16:e0:e7:74: 4c:9c:a7:6e:d2:97:fc:74:a6:af:01:f1:7d:9f:99: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:A0:AD:A2:26:D7:A1:E4:DA:95:8F:FC:4C:96:09:9A:06:8D:3A X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:18:7e:d0:a2:a7:c2:6a:19:3c:c2:ec:5c:47:64:93:a4:3e: 6f:b2:79:b1:ac:b6:be:43:5d:73:fe:d8:a0:d8:c0:b8:1f:87: d8:03:87:a6:6c:62:22:d4:52:7a:5c:01:ed:99:95:7d:0c:5d: 35:7a:28:62:d5:54:0b:d1:b3:f8:51:76:f9:37:c3:c2:e2:ae: 11:dc:c8:91:dc:8f:06:54:1e:90:d4:c1:ee:a1:d1:3e:8d:11: 57:a7:f5:ef:a7:bf:47:8e:80:ba:28:32:24:c9:2f:33:b2:e2: bb:06:95:e8:05:2d:db:e1:88:ab:35:f9:b5:e4:b8:18:83:21: cb:53:fb:98:a3:ae:57:02:e7:ac:b6:61:b1:61:75:ea:45:c9: fa:5c:6d:23:90:12:f2:9b:44:fa:09:ee:09:fa:c4:18:30:d9: f9:e8:4f:5b:e1:de:8d:27:0e:fc:78:63:e7:f2:86:3b:a3:8c: ae:1f:3e:6f:b7:7d:f6:d3:4c:7d:19:32:a4:d8:28:02:f0:c2: bf:f8:c6:8a:3e:1b:d2:26:b6:a2:46:59:a7:05:cd:e2:a3:73: 1c:4c:e2:12:8f:f8:e6:9a:ec:68:23:ae:ea:5a:60:d4:ac:01: ff:56:e1:11:00:43:94:f2:c6:3e:2c:13:e6:9e:35:95:47:66: 35:e5:fe:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjYwNDA1MDIzNjAwWhcNMjYwNDEyMDIzNjAwWjAYMRYwFAYD VQQDEw02OWQxY2E5MC1iMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnu2V3kZSOUTeDVAdiu3JtyZIUjb1IHT2FxnXKtD+TjQbVkG3b5BrGFWE+UN gOdHHZIr6cxNiAKqgGty8decvOdS1GwjpBbb7HUTAzyz8aiAtBqr4dOFifbUbtgM drtw2dZibI4B7CzRo1buSPWsSq3BViMwGs6Vzw0CUd7r1Noa2UG7KKFhXQwG2f/+ ZypJYKGZdqTlmcDR1antVYADokxPbKHYglVF8UIuQI4RZ+vlPbQreWDT6gpGtd/t PiCKdq0oIr8aKRGFA9KGE5oxkHqebtDE7hb8XRnApQZ8ugWsVieb78GoiethOBbg 53RMnKdu0pf8dKavAfF9n5nRRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoQoK2i Jteh5NqVj/xMlgmaBo06MB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzE2Ri8xNUU0RERDMDFENTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4 RkRadzRsSHJ0Mk85dEp2OVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxh+0KKnwmoZPMLsXEdkk6Q+b7J5say2vkNdc/7YoNjAuB+H2AOHpmxiItRS elwB7ZmVfQxdNXooYtVUC9Gz+FF2+TfDwuKuEdzIkdyPBlQekNTB7qHRPo0RV6f1 76e/R46AuigyJMkvM7LiuwaV6AUt2+GIqzX5teS4GIMhy1P7mKOuVwLnrLZhsWF1 6kXJ+lxtI5AS8ptE+gnuCfrEGDDZ+ehPW+HejScO/Hhj5/KGO6OMrh8+b7d99tNM fRkypNgoAvDCv/jGij4b0ia2okZZpwXN4qNzHEziEo/45prsaCOu6lpg1KwB/1bh EQBDlPLGPiwT5p41lUdmNeX+eQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:04 2026 by rpki-client