$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft File: 3FfpX2KSEzop44hINlCWI10ZN8o.mft (raw, json) Hash identifier: 1RUXhqEnVZ6gj4LNyzsilELaWs+/bk/bWDlIhkOqpLE= Subject key identifier: 93:DC:5C:C9:F6:DB:38:89:1E:1F:59:F0:01:DA:7C:3D:97:81:DA:33 Authority key identifier: DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA Certificate issuer: /CN=A914E1E3/serialNumber=DC57E95F6292133A29E38848365096235D1937CA Certificate serial: 1DAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft Manifest number: 1DA2 Signing time: Thu 16 Apr 2026 16:04:35 +0000 Manifest this update: Thu 16 Apr 2026 16:04:35 +0000 Manifest next update: Thu 23 Apr 2026 16:04:35 +0000 Files and hashes: 1: 3FfpX2KSEzop44hINlCWI10ZN8o.crl (hash: NQnHB1jGYyMzLe09SehooIwWauKOzm0WQK2OIfZOXfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7599 (0x1daf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1E3, serialNumber=DC57E95F6292133A29E38848365096235D1937CA Validity Not Before: Apr 16 16:04:35 2026 GMT Not After : Apr 23 16:04:35 2026 GMT Subject: CN=69e10893-1a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:54:0f:60:c2:8b:39:ce:64:84:39:1a:02: e8:e3:dd:93:b5:26:fa:41:2c:65:70:b3:eb:81:cb: 58:5e:ed:63:ac:fa:cc:51:06:57:2e:eb:ca:eb:99: 5e:e5:24:13:0e:78:c2:b0:c1:23:c6:f4:59:ff:27: 8a:de:59:03:ff:ab:ee:8f:4a:f7:d8:94:75:54:43: da:2c:1e:89:d4:48:f6:38:f6:96:fc:96:81:92:e2: cd:e7:2d:6c:57:f8:28:9b:3a:44:97:d9:2e:70:f8: 35:e8:0f:93:49:17:67:19:3b:10:85:a4:d2:6d:aa: 33:40:1e:8b:e2:29:19:6d:cf:b4:92:b7:54:c5:b9: c2:2c:ec:c1:e3:71:20:52:ca:8d:27:61:3a:46:77: 0c:34:05:6d:0a:13:40:9e:7b:1f:6d:b0:3f:bd:92: d0:52:d7:8b:be:45:b6:c5:98:a1:ef:a0:12:08:dc: 2f:73:80:64:d1:73:1d:10:06:17:22:12:17:74:4a: 75:bd:ea:2e:98:eb:f9:8e:60:10:32:8f:c9:3b:19: 17:02:28:66:14:c1:b1:d6:20:11:98:f2:61:a7:77: f2:61:2b:e7:f6:9c:53:c2:9b:4d:43:16:9c:22:16: 75:a3:07:5f:06:47:c6:9f:e1:9c:b7:ea:a3:c2:c2: 40:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DC:5C:C9:F6:DB:38:89:1E:1F:59:F0:01:DA:7C:3D:97:81:DA:33 X509v3 Authority Key Identifier: keyid:DC:57:E9:5F:62:92:13:3A:29:E3:88:48:36:50:96:23:5D:19:37:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FfpX2KSEzop44hINlCWI10ZN8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1E3/021AE92ABDE311E684CE0B54C4F9AE02/3FfpX2KSEzop44hINlCWI10ZN8o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e8:0a:d4:06:b5:df:47:af:ea:45:75:c5:f6:55:96:d1:05: 1d:62:bc:52:a1:af:af:da:34:e7:22:b0:f3:b2:f6:08:f9:cd: a6:19:71:7b:a4:dd:27:06:6c:8c:b3:73:12:ae:cb:69:8b:6d: 15:0b:9c:5c:cf:e1:d6:c8:c4:0d:fe:d4:6b:cf:b5:64:1a:b2: 93:e9:0a:aa:64:fd:28:e4:89:9c:ae:dd:49:e4:85:a7:f9:25: 15:13:ec:91:13:86:d0:90:f4:42:95:8d:3e:37:83:8f:a7:c4: 70:06:3c:5f:ac:a3:64:f0:91:51:f4:e3:59:0f:db:02:00:0a: 48:ba:85:57:0d:06:86:96:f4:1c:36:20:2a:cf:8e:f1:c5:2e: 96:70:ff:60:43:6d:9f:23:c4:70:59:55:a0:ca:f6:e5:89:9e: 84:84:6c:5e:38:a1:b5:37:06:b5:f0:f8:3e:0a:89:24:4b:d6: 4d:ac:dc:08:9d:00:f4:d8:48:10:58:36:ba:73:0d:05:18:24: 5c:30:cd:47:f7:c1:a2:83:b2:62:b1:8f:c8:00:eb:7b:5a:36: 6b:8f:a9:0a:76:c6:83:0b:51:ae:82:4f:5c:57:6b:2b:0e:36: cc:4a:e6:3a:e1:cb:76:a8:0b:e1:e3:58:ca:5a:0b:b6:bd:3e: 7f:c7:04:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRTMxMTAvBgNVBAUTKERDNTdFOTVGNjI5MjEzM0EyOUUzODg0ODM2NTA5NjIz NUQxOTM3Q0EwHhcNMjYwNDE2MTYwNDM1WhcNMjYwNDIzMTYwNDM1WjAYMRYwFAYD VQQDEw02OWUxMDg5My0xYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOtUD2DCiznOZIQ5GgLo492TtSb6QSxlcLPrgctYXu1jrPrMUQZXLuvK65le 5SQTDnjCsMEjxvRZ/yeK3lkD/6vuj0r32JR1VEPaLB6J1Ej2OPaW/JaBkuLN5y1s V/gomzpEl9kucPg16A+TSRdnGTsQhaTSbaozQB6L4ikZbc+0krdUxbnCLOzB43Eg UsqNJ2E6RncMNAVtChNAnnsfbbA/vZLQUteLvkW2xZih76ASCNwvc4Bk0XMdEAYX IhIXdEp1veoumOv5jmAQMo/JOxkXAihmFMGx1iARmPJhp3fyYSvn9pxTwptNQxac IhZ1owdfBkfGn+Gct+qjwsJAawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPcXMn2 2ziJHh9Z8AHafD2XgdozMB8GA1UdIwQYMBaAFNxX6V9ikhM6KeOISDZQliNdGTfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFFMy8wMjFBRTkyQUJE RTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6b3A0NGhJTmxDV0kxMFpO OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZnBYMktTRXpvcDQ0aElObENXSTEwWk44by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFFMy8wMjFBRTkyQUJERTMxMUU2ODRDRTBCNTRDNEY5QUUwMi8zRmZwWDJLU0V6 b3A0NGhJTmxDV0kxMFpOOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMOgK1Aa130ev6kV1xfZVltEFHWK8UqGvr9o05yKw87L2CPnNphlxe6TdJwZs jLNzEq7LaYttFQucXM/h1sjEDf7Ua8+1ZBqyk+kKqmT9KOSJnK7dSeSFp/klFRPs kROG0JD0QpWNPjeDj6fEcAY8X6yjZPCRUfTjWQ/bAgAKSLqFVw0Ghpb0HDYgKs+O 8cUulnD/YENtnyPEcFlVoMr25YmehIRsXjihtTcGtfD4PgqJJEvWTazcCJ0A9NhI EFg2unMNBRgkXDDNR/fBooOyYrGPyADre1o2a4+pCnbGgwtRroJPXFdrKw42zErm OuHLdqgL4eNYyloLtr0+f8cEaA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:48:39 2026 by rpki-client