$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: atS26P/66ezoIzczxvXHMIvqeOuZDLUKllxtmkfsrho= Subject key identifier: 2A:02:1B:5C:FF:C1:9B:72:BA:D9:15:44:96:C1:FD:C9:49:81:93:AA Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2D8E Signing time: Thu 16 Apr 2026 16:41:24 +0000 Manifest this update: Thu 16 Apr 2026 16:41:24 +0000 Manifest next update: Thu 23 Apr 2026 16:41:24 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: VMh2K3tuB4+N6SHlo+n2KJdwd0GT84U5vlbJYmOxQb0=) 2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=) 3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Apr 16 16:41:24 2026 GMT Not After : Apr 23 16:41:24 2026 GMT Subject: CN=69e11134-7c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:f3:65:f5:0c:e8:e8:45:9f:4d:f6:7a:68: a1:ba:2c:c4:0b:fb:42:57:70:6a:b2:bf:9b:84:0d: 01:46:59:21:fb:c9:99:46:50:61:0c:8d:f3:fe:8c: 5a:02:4f:e8:4f:b3:6d:a6:60:c9:94:a4:00:7a:8a: 27:d3:5e:9a:cd:f4:41:e4:69:a9:ee:a6:e7:1e:aa: 8d:7c:cf:c6:f6:6d:f9:87:73:e5:e2:b2:2e:f3:66: 5e:14:86:11:7f:4f:5b:f1:4f:ad:6f:a9:1a:81:3f: 46:60:93:46:ad:fe:e4:38:52:b9:50:88:b8:31:9b: 77:3a:bf:55:aa:df:b9:16:f8:5e:c0:a6:14:fd:2f: 5c:90:94:9e:da:fb:6c:88:15:e5:66:cd:13:51:98: f0:01:e9:5c:93:dc:74:70:e5:0d:12:be:84:dd:d1: 57:0e:0f:50:84:4a:af:4c:9b:1c:a2:69:90:67:39: 55:4a:68:3a:01:40:0a:ff:f1:07:07:91:63:a5:07: ea:de:72:fa:30:35:10:91:74:ef:29:0c:11:4c:ae: fa:57:70:ae:a5:c6:34:a3:5c:4c:3e:8b:1f:eb:74: ac:d8:89:38:3c:3d:94:e1:39:d9:74:db:48:85:44: 5b:cd:a4:dc:36:15:96:68:9b:ed:93:81:51:73:12: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:02:1B:5C:FF:C1:9B:72:BA:D9:15:44:96:C1:FD:C9:49:81:93:AA X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d4:8e:6b:41:0d:9e:91:ed:b5:77:ed:7e:8f:48:5f:9e:7e: 3e:2e:89:09:dd:15:66:0e:32:fd:3d:38:0f:29:5f:7f:ab:bd: 59:41:b9:33:76:d0:d4:0f:80:94:9c:d7:34:4a:b4:8c:87:ec: 2c:e3:08:b4:05:f8:df:25:1c:4b:12:eb:f0:35:98:d1:21:88: f2:90:ca:59:fe:20:13:5b:1a:7b:c3:f9:4a:b5:38:a2:3d:e2: 36:21:d7:cb:b3:05:1a:e5:8c:1e:48:71:82:e6:42:b1:cf:9d: f9:05:4d:8b:e9:77:f3:96:c1:f4:35:27:52:83:00:99:13:cc: 82:16:68:e8:c0:e3:f5:5f:31:0e:c2:30:13:3c:32:5a:18:1e: 7f:eb:c7:9f:ed:9c:a7:fb:0d:33:c8:b3:d8:56:f5:07:21:e6: e5:d5:38:5a:99:9c:74:8a:e8:7a:35:86:30:af:ec:2f:75:1c: af:83:b6:2e:84:58:46:e4:41:bf:b8:d1:57:d7:32:e6:4d:21: 2c:cb:0b:4f:c4:bf:fe:6a:72:fd:38:3a:0c:b3:e5:10:c3:28: 7e:a0:59:87:a7:78:f4:31:b1:9e:ba:03:bf:02:e3:81:9f:67: b0:ae:7b:84:c2:99:6e:7b:81:95:cf:aa:a1:db:50:ec:8b:a8: 21:4f:5b:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjYwNDE2MTY0MTI0WhcNMjYwNDIzMTY0MTI0WjAYMRYwFAYD VQQDEw02OWUxMTEzNC03YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve7zZfUM6OhFn032emihuizEC/tCV3Bqsr+bhA0BRlkh+8mZRlBhDI3z/oxa Ak/oT7NtpmDJlKQAeoon016azfRB5Gmp7qbnHqqNfM/G9m35h3Pl4rIu82ZeFIYR f09b8U+tb6kagT9GYJNGrf7kOFK5UIi4MZt3Or9Vqt+5FvhewKYU/S9ckJSe2vts iBXlZs0TUZjwAelck9x0cOUNEr6E3dFXDg9QhEqvTJscommQZzlVSmg6AUAK//EH B5FjpQfq3nL6MDUQkXTvKQwRTK76V3CupcY0o1xMPosf63Ss2Ik4PD2U4TnZdNtI hURbzaTcNhWWaJvtk4FRcxJBkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoCG1z/ wZtyutkVRJbB/clJgZOqMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA9SOa0ENnpHttXftfo9IX55+Pi6JCd0VZg4y/T04Dylff6u9WUG5M3bQ1A+A lJzXNEq0jIfsLOMItAX43yUcSxLr8DWY0SGI8pDKWf4gE1sae8P5SrU4oj3iNiHX y7MFGuWMHkhxguZCsc+d+QVNi+l385bB9DUnUoMAmRPMghZo6MDj9V8xDsIwEzwy Whgef+vHn+2cp/sNM8iz2Fb1ByHm5dU4WpmcdIroejWGMK/sL3Ucr4O2LoRYRuRB v7jRV9cy5k0hLMsLT8S//mpy/Tg6DLPlEMMofqBZh6d49DGxnroDvwLjgZ9nsK57 hMKZbnuBlc+qodtQ7IuoIU9beg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:55 2026 by rpki-client