$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: J8TEp0dZ83rB2Epo7X6XuAogt1rBsBjclUvzBgJk9l8= Subject key identifier: 07:93:F5:9E:1D:20:5C:B4:8C:93:65:85:77:FE:B6:0E:3F:DF:C4:CC Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 15C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 15B9 Signing time: Thu 16 Apr 2026 16:41:08 +0000 Manifest this update: Thu 16 Apr 2026 16:41:08 +0000 Manifest next update: Thu 23 Apr 2026 16:41:08 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: 7FnR7ZlSDttVlEzKxHKi8g6qN/fXAMMRHEPvjyMfhdo=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5571 (0x15c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Apr 16 16:41:08 2026 GMT Not After : Apr 23 16:41:08 2026 GMT Subject: CN=69e11124-e8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:2d:99:35:ad:c7:29:ca:c2:18:9a:8d:c1: ae:d0:a9:df:20:cd:31:cf:bb:be:a5:7d:b9:a7:95: 21:33:19:df:12:7a:b6:d0:43:50:ba:dc:12:24:a9: 15:35:66:8f:c8:35:3f:45:df:6e:3f:07:6d:9a:bc: 10:fe:1a:3d:02:34:84:8a:40:8d:1a:21:01:f7:7f: 93:0b:90:d9:a5:10:f0:74:c7:10:c8:57:56:d4:da: 97:20:43:97:84:b5:ef:9c:b6:90:24:e8:79:cd:e1: 92:9b:2d:02:04:c0:ff:4c:b9:47:be:26:33:f0:36: d0:b0:24:10:08:8d:8e:5f:6c:e0:32:f8:89:76:96: 2b:2c:0f:67:58:8c:e7:0d:dc:c0:59:fb:cd:05:0c: 7e:64:44:05:f2:2d:34:20:0b:24:20:76:03:be:ae: 28:bb:d8:12:28:23:60:ab:af:24:1e:a0:39:72:57: a9:1c:12:17:4b:1e:3c:1e:b3:76:09:78:2a:34:70: a4:5e:fa:3b:25:91:ad:90:32:3c:27:23:c7:a4:92: 8b:3a:2b:37:ca:2d:e2:af:2d:e9:75:26:0c:88:fe: 27:31:14:f4:7a:74:a5:5e:ef:07:a0:38:39:65:bf: 96:86:ab:65:96:78:6b:f4:fc:db:f6:bb:b0:bb:6d: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:F5:9E:1D:20:5C:B4:8C:93:65:85:77:FE:B6:0E:3F:DF:C4:CC X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a5:9d:14:bc:e7:49:62:4a:5b:c9:77:ed:ec:71:cb:55:5b: ef:43:14:9f:62:e4:15:d2:57:48:f0:e5:07:d1:bf:45:d6:2d: 91:b4:74:be:c2:ea:b2:52:cb:0f:2f:33:11:46:d6:d5:1f:c1: 4e:63:55:9a:6d:93:20:12:61:2c:d2:79:b2:bc:e9:9b:ff:b2: 5c:eb:bd:cd:8b:5a:5a:c8:d2:1a:6a:94:b2:0f:da:b0:8c:93: 05:54:bf:9e:13:d2:07:2c:29:c7:de:88:f2:a6:7a:1b:12:f2: c7:0d:10:63:19:8c:3a:f9:0f:79:43:f9:5a:88:35:3d:44:67: 60:b1:12:69:73:c6:e6:84:70:a1:eb:6b:99:f0:7c:91:19:7b: 04:cc:56:c5:46:1c:94:15:88:82:a4:2d:54:68:b2:70:86:a8: 47:18:ce:f9:5b:e6:45:fa:fb:eb:94:1f:68:ce:78:be:04:f1: 5c:a1:eb:1a:61:96:d8:e5:3f:47:0e:14:20:fc:03:9c:25:a2: fa:21:d1:98:3b:21:bf:3f:19:0c:fc:be:be:73:11:d9:53:3d: 3f:64:ad:d3:e7:6d:eb:e9:b7:0b:49:ee:6e:5d:49:75:86:7e: 3e:48:ef:44:e0:d5:9b:de:76:86:65:c5:be:cb:51:d4:eb:11: 1b:df:e5:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjYwNDE2MTY0MTA4WhcNMjYwNDIzMTY0MTA4WjAYMRYwFAYD VQQDEw02OWUxMTEyNC1lOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpwtmTWtxynKwhiajcGu0KnfIM0xz7u+pX25p5UhMxnfEnq20ENQutwSJKkV NWaPyDU/Rd9uPwdtmrwQ/ho9AjSEikCNGiEB93+TC5DZpRDwdMcQyFdW1NqXIEOX hLXvnLaQJOh5zeGSmy0CBMD/TLlHviYz8DbQsCQQCI2OX2zgMviJdpYrLA9nWIzn DdzAWfvNBQx+ZEQF8i00IAskIHYDvq4ou9gSKCNgq68kHqA5clepHBIXSx48HrN2 CXgqNHCkXvo7JZGtkDI8JyPHpJKLOis3yi3iry3pdSYMiP4nMRT0enSlXu8HoDg5 Zb+Whqtllnhr9Pzb9ruwu23vUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeT9Z4d IFy0jJNlhXf+tg4/38TMMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJaWdFLznSWJKW8l37exxy1Vb70MUn2LkFdJXSPDlB9G/RdYtkbR0vsLqslLL Dy8zEUbW1R/BTmNVmm2TIBJhLNJ5srzpm/+yXOu9zYtaWsjSGmqUsg/asIyTBVS/ nhPSBywpx96I8qZ6GxLyxw0QYxmMOvkPeUP5Wog1PURnYLESaXPG5oRwoetrmfB8 kRl7BMxWxUYclBWIgqQtVGiycIaoRxjO+VvmRfr765QfaM54vgTxXKHrGmGW2OU/ Rw4UIPwDnCWi+iHRmDshvz8ZDPy+vnMR2VM9P2St0+dt6+m3C0nubl1JdYZ+Pkjv RODVm952hmXFvstR1OsRG9/l6w== -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:54 2026 by rpki-client