$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: LvpmkGAw+V/LzGFS9cOJM/SKbrlkWlTkqWuE36DP4wM= Subject key identifier: 97:EA:0B:61:9B:71:42:29:FE:CC:25:4B:07:63:3E:58:4E:27:EB:5C Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 018A Signing time: Tue 21 Apr 2026 04:14:01 +0000 Manifest this update: Tue 21 Apr 2026 04:14:01 +0000 Manifest next update: Tue 28 Apr 2026 04:14:01 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: ITw3fE/SViKMx1fePScMs0LkzRjOXijMlCzqJCmKheM=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=) 3: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=) 4: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Apr 21 04:14:01 2026 GMT Not After : Apr 28 04:14:01 2026 GMT Subject: CN=69e6f989-a186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a9:34:48:14:d0:2a:bd:9b:13:a3:a6:b4:45: 3b:98:ae:4d:01:89:dd:6e:4e:48:08:e3:dc:0a:16: 27:9e:9d:98:c0:b8:7f:1e:c7:a1:75:c6:6b:d0:f5: 0e:0b:40:89:fb:25:7c:fb:60:ca:cc:43:d4:db:fa: ec:3d:e9:68:69:6a:f1:fa:3c:14:b2:bb:00:29:db: 1f:ba:b0:18:17:d1:5d:fa:cb:c0:09:a9:15:74:bf: 68:40:dc:ff:01:58:8b:43:6d:ae:2b:4f:6f:6b:f9: 44:a8:dd:2c:5f:66:40:8e:8d:b4:9a:a1:35:f1:1d: ff:50:fa:57:32:b2:93:7a:e9:50:b5:91:29:07:6c: 6d:81:e7:69:cf:de:96:b2:91:87:b8:0d:90:e5:2d: c0:3c:f5:2d:13:58:7a:24:c5:6e:1c:26:e8:67:73: c3:cb:56:b8:86:b2:df:8d:55:bc:38:a4:94:f1:fb: 0f:05:e5:46:5a:25:17:21:5e:70:70:8b:0d:4e:01: 8a:99:ed:59:18:54:41:eb:51:d4:4c:80:9b:bf:02: 9e:1a:43:1d:18:b1:a3:87:ec:84:8b:53:a0:a3:67: 28:01:8d:49:39:8b:26:55:7f:45:ba:b9:9a:9d:e9: dd:56:40:6e:d7:81:4e:96:41:47:08:02:9e:09:d1: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EA:0B:61:9B:71:42:29:FE:CC:25:4B:07:63:3E:58:4E:27:EB:5C X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:73:6e:de:7c:70:a2:32:20:e3:8c:64:99:5d:f9:c1:d2:e9: 6f:95:5a:3d:b6:6d:72:69:2e:f2:c9:e1:e5:3a:30:7f:bc:1d: ec:33:15:00:64:cb:d6:30:25:5f:7f:f4:0b:af:2e:18:03:41: 4e:6b:6b:60:0f:93:bb:a5:8c:a7:b2:da:2b:35:78:92:aa:35: a8:d4:fa:e1:38:54:ae:4a:fc:89:e7:50:c4:16:d1:7f:a3:72: df:8a:9a:46:fc:34:4b:6b:fb:bf:1f:dd:50:7a:3a:c7:4a:d4: 65:04:13:4f:0e:d8:3b:c1:9d:4b:1d:2c:29:4e:2e:43:bd:e3: fb:12:34:c1:ef:17:35:87:40:c3:c5:d6:2d:1f:1b:61:34:9b: b5:14:f7:1b:84:0f:f2:55:d6:7a:fd:46:d3:2a:22:80:13:20: 26:0f:8c:43:37:9a:99:94:3c:e1:4f:1b:25:46:7e:f4:85:9d: fc:27:7f:22:d0:6f:52:9a:c0:3c:80:50:d0:ae:86:47:b2:4b: 66:7a:9d:8b:fc:4a:61:fc:04:bd:df:2d:b2:67:f2:90:6d:84: a0:4e:74:b5:8e:f0:3f:ff:54:00:07:6e:66:3b:11:88:26:18: a5:9f:1a:32:0d:5a:c3:63:f7:3e:f7:96:71:64:4c:81:6a:70: 22:71:95:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjYwNDIxMDQxNDAxWhcNMjYwNDI4MDQxNDAxWjAYMRYwFAYD VQQDEw02OWU2Zjk4OS1hMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36k0SBTQKr2bE6OmtEU7mK5NAYndbk5ICOPcChYnnp2YwLh/HsehdcZr0PUO C0CJ+yV8+2DKzEPU2/rsPeloaWrx+jwUsrsAKdsfurAYF9Fd+svACakVdL9oQNz/ AViLQ22uK09va/lEqN0sX2ZAjo20mqE18R3/UPpXMrKTeulQtZEpB2xtgedpz96W spGHuA2Q5S3APPUtE1h6JMVuHCboZ3PDy1a4hrLfjVW8OKSU8fsPBeVGWiUXIV5w cIsNTgGKme1ZGFRB61HUTICbvwKeGkMdGLGjh+yEi1Ogo2coAY1JOYsmVX9Furma nendVkBu14FOlkFHCAKeCdHK1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfqC2Gb cUIp/swlSwdjPlhOJ+tcMB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfXNu3nxwojIg44xkmV35wdLpb5VaPbZtcmku8snh5Towf7wd7DMVAGTL1jAl X3/0C68uGANBTmtrYA+Tu6WMp7LaKzV4kqo1qNT64ThUrkr8iedQxBbRf6Ny34qa Rvw0S2v7vx/dUHo6x0rUZQQTTw7YO8GdSx0sKU4uQ73j+xI0we8XNYdAw8XWLR8b YTSbtRT3G4QP8lXWev1G0yoigBMgJg+MQzeamZQ84U8bJUZ+9IWd/Cd/ItBvUprA PIBQ0K6GR7JLZnqdi/xKYfwEvd8tsmfykG2EoE50tY7wP/9UAAduZjsRiCYYpZ8a Mg1aw2P3PveWcWRMgWpwInGVig== -----END CERTIFICATE-----Generated at Wed Apr 22 00:13:46 2026 by rpki-client