$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: bJiIOGYgqb50AdP45O0aHzMYMUr2LR8ImOXTtyzJUAU= Subject key identifier: DE:27:6B:AE:79:92:74:E6:6D:09:BB:1E:BC:6D:26:69:5C:1C:00:B7 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0531 Signing time: Thu 16 Apr 2026 23:25:57 +0000 Manifest this update: Thu 16 Apr 2026 23:25:56 +0000 Manifest next update: Thu 23 Apr 2026 23:25:56 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: QNiCOJ1JbYIeR/RLCdjjwr3Vywk7JBeqsT9u5YkXfVk=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Apr 16 23:25:56 2026 GMT Not After : Apr 23 23:25:56 2026 GMT Subject: CN=69e17005-9156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:9a:d9:af:fb:e2:e2:8d:dc:88:34:7f:e1: d8:fd:82:38:43:03:f8:28:52:c8:52:5d:f3:ae:03: b0:bf:3e:79:c5:44:5d:35:5f:4f:32:45:1b:eb:0d: b7:e1:8d:30:74:ba:03:aa:53:38:7d:5d:85:70:bb: 58:c3:cf:36:37:66:6b:44:c7:c7:e4:d6:7b:7f:57: 1a:8d:21:8f:3c:5d:0a:cc:9a:7a:87:40:9e:fe:da: 24:a9:6c:a7:96:f1:20:54:d1:1c:8c:4c:4b:a5:86: 8d:b3:83:b4:e7:5b:c2:b0:b6:21:b1:8f:1b:d6:bc: a0:14:3b:78:a1:c5:2c:53:39:6f:00:56:00:72:68: e1:f4:fc:69:42:73:0e:f5:63:2f:83:fa:bb:5b:7d: 1f:dd:48:e1:eb:95:f7:36:58:31:68:12:da:39:44: 31:f5:cf:94:51:e1:11:a5:13:08:07:97:89:29:f5: 40:86:de:b8:4b:c3:88:fd:91:cd:4f:1c:87:4e:a9: 41:a7:37:df:f1:42:07:3f:86:72:44:06:db:21:f1: 43:ae:5c:af:91:11:ad:9d:b3:40:6f:4b:4d:7d:00: 86:c9:d5:19:5a:d7:45:11:e7:43:89:c9:2a:f8:31: b9:8c:f0:9f:ea:43:6a:05:a5:3d:29:d3:75:df:f2: 7a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:27:6B:AE:79:92:74:E6:6D:09:BB:1E:BC:6D:26:69:5C:1C:00:B7 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1c:ce:f5:fa:63:fa:79:19:aa:0d:94:80:81:54:ed:81:96: d9:64:4e:c5:94:e2:d4:3f:8f:6f:9d:be:b3:ce:1e:06:75:ad: af:89:dd:d4:01:f4:df:b5:08:cb:c5:1c:9a:c3:5e:60:58:7e: 1c:96:7c:eb:84:4f:66:a5:6b:72:b1:94:fb:22:ba:b2:a6:3e: 4e:ee:3d:82:d0:50:6a:f0:99:9e:79:39:28:3b:f6:d8:15:b7: 2f:74:bc:83:13:56:8b:a0:82:b5:d9:e1:a9:bd:94:24:8e:64: ac:36:27:79:f7:a2:38:38:9a:97:e3:70:1f:77:ff:e0:6c:06: 84:51:79:4a:94:35:21:d3:82:68:6e:f0:b4:ab:5d:b3:0b:37: 8b:d0:52:90:b2:ba:20:ae:a4:22:be:15:e3:b1:bb:74:c0:81: 64:e9:33:82:a8:37:b9:2e:5a:e7:93:01:40:ea:16:74:4e:42: 8b:71:58:c8:d3:19:0e:89:30:69:e5:05:88:a8:0b:11:50:1e: be:84:79:8a:81:26:7d:2e:93:74:a4:a0:b3:11:03:f9:5d:a7: 8c:56:5c:b9:bf:84:bd:58:e0:3b:9c:22:5c:d2:bc:ca:c4:ae: 7d:c0:2d:ab:91:ce:be:7c:2f:88:7c:d0:3e:13:99:c5:15:2d: f4:5a:85:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjYwNDE2MjMyNTU2WhcNMjYwNDIzMjMyNTU2WjAYMRYwFAYD VQQDEw02OWUxNzAwNS05MTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uGa2a/74uKN3Ig0f+HY/YI4QwP4KFLIUl3zrgOwvz55xURdNV9PMkUb6w23 4Y0wdLoDqlM4fV2FcLtYw882N2ZrRMfH5NZ7f1cajSGPPF0KzJp6h0Ce/tokqWyn lvEgVNEcjExLpYaNs4O051vCsLYhsY8b1rygFDt4ocUsUzlvAFYAcmjh9PxpQnMO 9WMvg/q7W30f3Ujh65X3NlgxaBLaOUQx9c+UUeERpRMIB5eJKfVAht64S8OI/ZHN TxyHTqlBpzff8UIHP4ZyRAbbIfFDrlyvkRGtnbNAb0tNfQCGydUZWtdFEedDickq +DG5jPCf6kNqBaU9KdN13/J63wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4na655 knTmbQm7HrxtJmlcHAC3MB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHRzO9fpj+nkZqg2UgIFU7YGW2WROxZTi1D+Pb52+s84eBnWtr4nd1AH037UI y8UcmsNeYFh+HJZ864RPZqVrcrGU+yK6sqY+Tu49gtBQavCZnnk5KDv22BW3L3S8 gxNWi6CCtdnhqb2UJI5krDYnefeiODial+NwH3f/4GwGhFF5SpQ1IdOCaG7wtKtd sws3i9BSkLK6IK6kIr4V47G7dMCBZOkzgqg3uS5a55MBQOoWdE5Ci3FYyNMZDokw aeUFiKgLEVAevoR5ioEmfS6TdKSgsxED+V2njFZcub+EvVjgO5wiXNK8ysSufcAt q5HOvnwviHzQPhOZxRUt9FqFmg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:22:13 2026 by rpki-client