$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: zIT1y0+i5tvPLL2VH3iOAQDpeFgV8hIvq8ZNC314/RA= Subject key identifier: 38:39:B8:6B:20:09:49:86:EE:47:DD:55:6E:33:B2:8A:31:F5:4D:14 Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 48 Signing time: Fri 17 Apr 2026 08:09:14 +0000 Manifest this update: Fri 17 Apr 2026 08:09:14 +0000 Manifest next update: Fri 24 Apr 2026 08:09:14 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: Hef4R9O8xKv1Axm8dirg8sb8MnooC79s70bmXwbXQWI=) 2: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=) 3: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=) 4: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Apr 17 08:09:14 2026 GMT Not After : Apr 24 08:09:14 2026 GMT Subject: CN=69e1eaaa-1f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ef:99:89:c0:86:17:14:b4:cb:ed:48:b3:57: 73:1d:80:a1:0f:9a:6b:8f:ea:63:6f:08:43:cc:91: e7:11:13:d0:81:60:4e:64:2e:98:c8:fe:db:b7:01: 73:8c:e5:18:e4:3e:2b:b5:bb:62:68:36:58:cb:52: 7c:d9:c9:ca:db:7d:bc:2d:58:56:a8:ad:4c:d5:d3: 21:fd:0e:99:3a:d8:00:5f:7c:6f:56:1f:e4:9a:fa: 16:28:93:43:06:7e:35:c1:0a:71:1c:c4:a0:d5:47: 0f:e6:53:46:88:9d:59:8a:ce:76:2a:6c:5a:25:0c: 63:7c:e8:c6:89:1f:c4:07:cc:dd:ad:8b:1e:c1:2d: 98:2a:7b:ec:65:bb:0d:d5:7f:61:46:64:21:9c:d4: a1:01:4e:cd:03:c4:16:23:38:4c:81:25:aa:49:72: 5d:f6:22:a0:1e:83:b8:b7:52:41:a2:85:19:de:7b: 74:6c:37:d7:bb:38:54:3b:ef:47:66:9c:1a:ff:01: 75:76:82:04:c3:66:fe:ab:d7:55:e6:d4:d8:08:1f: 5f:d4:07:3f:85:49:dd:82:a6:49:75:66:05:4d:40: 05:fa:49:f0:f3:e9:e7:b1:cd:6b:00:a0:ce:05:c3: 05:fb:da:f9:6e:58:df:16:cc:9b:91:15:0f:54:34: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:39:B8:6B:20:09:49:86:EE:47:DD:55:6E:33:B2:8A:31:F5:4D:14 X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:8b:0c:4d:6e:93:3f:cd:a4:21:f1:8d:fe:08:be:99:d8:00: 44:ea:13:ad:db:e8:81:d4:4d:9f:60:eb:91:e3:24:36:10:00: 5a:9e:a4:f4:80:bc:d4:0f:a1:eb:6a:5f:c0:11:5a:a0:bc:d2: 78:a8:84:b6:2e:73:17:60:7c:a9:d0:a6:16:c0:25:df:94:63: 82:b2:53:97:4f:a5:b7:79:69:b1:f5:5f:64:0b:c4:68:6b:77: fb:3d:2e:8e:c2:09:6c:45:a5:31:5d:62:d6:ff:7b:06:9c:6f: 98:78:e1:0f:57:ba:18:a3:eb:30:20:c4:1c:53:b4:86:4e:84: c5:0c:96:4a:58:c5:60:7d:b9:39:46:5e:e2:eb:43:7a:aa:c3: d9:33:f3:37:16:77:33:d7:b1:30:a8:7c:11:28:f6:c2:7b:05: 51:2c:3d:ea:75:0c:3c:f2:2e:1b:e2:cd:1a:bf:24:07:ff:e0: 86:36:4e:6e:80:99:7c:a4:5d:e8:e7:f7:73:45:b7:1d:a4:3b: 34:3e:4c:39:a7:7e:52:9e:16:96:d1:88:8f:ea:f9:49:d0:a5: 1c:ad:a8:20:53:0d:11:5e:eb:ff:8a:f1:76:fd:19:a8:d1:59: 3e:77:bc:98:c8:f4:62:ea:a3:b3:00:4b:f8:4c:02:c7:2a:9f: 00:38:f8:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNjA0MTcwODA5MTRaFw0yNjA0MjQwODA5MTRaMBgxFjAUBgNV BAMTDTY5ZTFlYWFhLTFmM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDy75mJwIYXFLTL7UizV3MdgKEPmmuP6mNvCEPMkecRE9CBYE5kLpjI/tu3AXOM 5RjkPiu1u2JoNljLUnzZycrbfbwtWFaorUzV0yH9Dpk62ABffG9WH+Sa+hYok0MG fjXBCnEcxKDVRw/mU0aInVmKznYqbFolDGN86MaJH8QHzN2tix7BLZgqe+xluw3V f2FGZCGc1KEBTs0DxBYjOEyBJapJcl32IqAeg7i3UkGihRnee3RsN9e7OFQ770dm nBr/AXV2ggTDZv6r11Xm1NgIH1/UBz+FSd2Cpkl1ZgVNQAX6SfDz6eexzWsAoM4F wwX72vluWN8WzJuRFQ9UNLitAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUODm4ayAJ SYbuR91VbjOyijH1TRQwHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q bkprdnR0WUx3bzNlN0pMMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCWiwxNbpM/zaQh8Y3+CL6Z2ABE6hOt2+iB1E2fYOuR4yQ2EABanqT0gLzUD6Hr al/AEVqgvNJ4qIS2LnMXYHyp0KYWwCXflGOCslOXT6W3eWmx9V9kC8Roa3f7PS6O wglsRaUxXWLW/3sGnG+YeOEPV7oYo+swIMQcU7SGToTFDJZKWMVgfbk5Rl7i60N6 qsPZM/M3Fncz17EwqHwRKPbCewVRLD3qdQw88i4b4s0avyQH/+CGNk5ugJl8pF3o 5/dzRbcdpDs0Pkw5p35SnhaW0YiP6vlJ0KUcraggUw0RXuv/ivF2/Rmo0Vk+d7yY yPRi6qOzAEv4TALHKp8AOPgc -----END CERTIFICATE-----Generated at Fri Apr 17 19:06:40 2026 by rpki-client