$ rpki-client -vvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json) Hash identifier: pSoyVyLyC2nhNjQGIQMz1qCqh//Q2vuU7z56IjhOaG8= Subject key identifier: D4:EA:CC:B2:07:17:96:3F:6D:5E:F1:92:3D:01:46:B1:38:66:6F:2C Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft Manifest number: 21 Signing time: Fri 17 Apr 2026 08:36:24 +0000 Manifest this update: Fri 17 Apr 2026 08:36:24 +0000 Manifest next update: Fri 24 Apr 2026 08:36:24 +0000 Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: 6FzR8VC4ymgjJ/uw2xJWaHbTJuqDW9eRGfgqYORLQ7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Validity Not Before: Apr 17 08:36:24 2026 GMT Not After : Apr 24 08:36:24 2026 GMT Subject: CN=69e1f108-3796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:75:1a:07:4b:17:69:fc:f0:6a:63:8e:09: a5:a1:f4:c4:f0:63:98:5b:80:e4:f3:1e:c2:d0:cf: 09:4a:65:56:f6:ba:01:a9:56:27:00:97:f6:22:95: 43:86:ad:52:fe:f6:03:7a:30:d6:63:8b:67:87:db: f1:51:88:b6:36:03:75:fb:ec:a5:54:e1:c6:e7:3c: 88:3d:f3:d2:4f:4f:d5:bc:a2:11:7c:f4:41:79:1e: df:3a:f5:08:9e:61:fd:a5:1e:b9:fb:92:48:b9:b3: 35:09:15:51:41:d5:b7:ee:ec:99:3f:ea:c2:f3:7a: d6:7d:54:da:1d:70:39:73:a1:f1:95:fa:7b:e6:be: 75:10:78:36:a2:70:b9:29:97:ce:3a:3e:5c:68:87: d5:7e:9f:91:5f:a1:1b:47:11:6f:d7:33:9a:bf:2d: b3:0c:ef:5e:33:24:c6:6e:48:9d:d1:06:1e:34:a1: 8d:6c:a6:3c:b7:74:f8:7e:6c:6a:1f:a8:62:22:ce: 9d:c7:aa:ee:5e:64:bf:d3:58:da:60:02:d3:98:b6: 53:19:77:56:89:6c:10:71:eb:e5:9d:a8:e4:67:47: 4a:e2:aa:c8:97:68:89:72:c8:77:65:e6:9d:c6:7d: e9:d6:6f:21:03:72:7d:5e:16:c7:4d:92:eb:e7:70: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EA:CC:B2:07:17:96:3F:6D:5E:F1:92:3D:01:46:B1:38:66:6F:2C X509v3 Authority Key Identifier: keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4a:4e:02:64:e4:f4:33:c0:5b:5a:dc:40:38:07:52:14:0e: 54:40:e7:84:ff:c8:06:af:71:ad:1c:ed:89:28:b0:ee:34:1b: 6f:75:26:38:eb:6e:c8:01:fc:b4:2b:94:bc:2c:fa:e5:93:eb: 22:f1:e2:df:71:3d:82:69:25:f3:dd:41:86:8b:e5:f9:f2:00: 89:b3:7d:32:cd:62:6a:c5:46:6f:2f:19:f1:aa:33:31:29:48: 10:a8:37:dd:78:90:b2:b6:2f:7e:12:83:22:65:7b:21:97:c4: 3b:0c:e9:41:13:e3:d4:dc:b1:b7:22:1c:3a:da:13:30:c4:e9: 63:02:d3:7f:bb:51:cd:6a:6d:aa:e0:54:2b:33:85:d8:9e:52: ff:a7:95:f1:fc:59:67:41:a9:43:a4:63:b1:15:7f:ef:3e:83: f9:fc:97:65:a5:65:99:5b:b4:86:4b:1e:74:d7:6d:20:df:cc: e3:26:33:b6:4a:6a:06:34:6e:99:61:c1:97:ce:31:6d:5e:e4: 40:06:b3:06:c4:9f:1a:c7:e7:89:71:fa:fd:a3:14:03:0a:69: 06:dd:ba:4c:ec:88:e8:04:f2:4f:ab:7e:3d:4c:04:91:87:d7: da:7e:25:b8:15:8c:03:40:80:a1:1a:c2:a9:be:59:93:fa:e0: 14:e9:c5:df -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdFRjExMC8GA1UEBRMoREU3REM2NEY5OUY2MjQwNjI0QkExM0QyMTU0OTQ0NEM0 MjRCNTQ2RjAeFw0yNjA0MTcwODM2MjRaFw0yNjA0MjQwODM2MjRaMBgxFjAUBgNV BAMTDTY5ZTFmMTA4LTM3OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4zHUaB0sXafzwamOOCaWh9MTwY5hbgOTzHsLQzwlKZVb2ugGpVicAl/YilUOG rVL+9gN6MNZji2eH2/FRiLY2A3X77KVU4cbnPIg989JPT9W8ohF89EF5Ht869Qie Yf2lHrn7kki5szUJFVFB1bfu7Jk/6sLzetZ9VNodcDlzofGV+nvmvnUQeDaicLkp l846Plxoh9V+n5FfoRtHEW/XM5q/LbMM714zJMZuSJ3RBh40oY1spjy3dPh+bGof qGIizp3Hqu5eZL/TWNpgAtOYtlMZd1aJbBBx6+WdqORnR0riqsiXaIlyyHdl5p3G fenWbyEDcn1eFsdNkuvncPwxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1OrMsgcX lj9tXvGSPQFGsThmbywwHwYDVR0jBBgwFoAU3n3GT5n2JAYkuhPSFUlETEJLVG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0VGLzVDOUM4QUMwMTEz RjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZa3VoUFNGVWxFVEVKTFZH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM24zR1Q1bjJKQVlrdWhQU0ZVbEVURUpMVkc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0VGLzVDOUM4QUMwMTEzRjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZ a3VoUFNGVWxFVEVKTFZHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKSk4CZOT0M8BbWtxAOAdSFA5UQOeE/8gGr3GtHO2JKLDuNBtvdSY4627IAfy0 K5S8LPrlk+si8eLfcT2CaSXz3UGGi+X58gCJs30yzWJqxUZvLxnxqjMxKUgQqDfd eJCyti9+EoMiZXshl8Q7DOlBE+PU3LG3Ihw62hMwxOljAtN/u1HNam2q4FQrM4XY nlL/p5Xx/FlnQalDpGOxFX/vPoP5/JdlpWWZW7SGSx50120g38zjJjO2SmoGNG6Z YcGXzjFtXuRABrMGxJ8ax+eJcfr9oxQDCmkG3bpM7IjoBPJPq349TASRh9fafiW4 FYwDQIChGsKpvlmT+uAU6cXf -----END CERTIFICATE-----Generated at Fri Apr 17 20:34:10 2026 by rpki-client