$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: /BQU0Ca4OD8LIqAIZexohOs978RWD1T8uGmZLXthX2g= Subject key identifier: 7E:BB:80:7B:95:C5:D8:DA:0C:9C:B4:AB:A6:E1:93:A6:4F:C1:46:C0 Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 0213 Signing time: Fri 17 Apr 2026 02:41:26 +0000 Manifest this update: Fri 17 Apr 2026 02:41:25 +0000 Manifest next update: Fri 24 Apr 2026 02:41:25 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: S6ZQGXj/pVRsjK0HN0m+C9UbRQoZKy6ZkGUmXoWNSIQ=) 2: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) 3: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Apr 17 02:41:25 2026 GMT Not After : Apr 24 02:41:25 2026 GMT Subject: CN=69e19dd6-2512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:e7:4a:ee:bf:cc:88:62:c4:27:5b:26:c0: ab:2a:39:8f:ae:0f:48:64:e6:c6:90:e5:18:e2:15: 65:f9:c3:db:34:c0:2b:01:8b:8e:c3:9a:7f:23:24: ef:d2:ae:15:63:f7:8c:07:f2:d2:29:9b:34:52:87: 99:90:c6:7b:51:77:a4:7d:cf:80:70:71:77:09:a2: e7:21:72:61:38:57:b9:e1:8a:ee:fd:59:57:67:f4: 15:6c:93:4c:38:0a:3c:1e:1d:3e:54:e7:6b:0f:71: 40:7a:7e:b3:ad:df:36:53:e7:6e:96:47:66:c1:dd: 6c:a7:71:c2:fc:72:fe:17:2a:77:4a:d1:9e:f4:5a: 82:33:39:28:de:38:fb:74:89:67:3d:37:e7:dc:3a: d6:cb:a5:9d:bc:8a:a7:fa:59:82:55:10:01:db:35: d7:18:8f:83:2c:d3:19:fb:f1:91:c8:42:18:35:ea: 28:b5:cf:02:e4:dd:4b:60:73:88:ab:81:24:c8:85: 2b:59:31:c0:db:25:c6:0c:ca:0f:69:93:ee:25:32: 7e:2a:b7:0f:18:06:ed:ff:e2:ce:d6:b1:c8:9e:ad: f6:7b:8d:a1:bc:81:95:74:98:7f:8d:63:01:45:d1: cb:f9:59:74:5d:0a:e4:94:bc:95:1d:af:fd:55:f9: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:80:7B:95:C5:D8:DA:0C:9C:B4:AB:A6:E1:93:A6:4F:C1:46:C0 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:24:7b:55:92:4f:3e:e9:6a:be:a1:72:79:6e:c0:36:b8:53: 49:f5:d0:47:3a:79:c7:01:f6:75:c6:b6:f4:44:5e:cf:c4:11: b5:ca:8e:b4:22:21:8e:78:32:2b:31:45:31:66:74:95:62:b3: f6:9f:e4:1a:58:6a:bd:48:68:f1:08:1d:54:e2:9b:4d:c5:01: 4e:61:1d:de:33:60:eb:12:dc:d6:02:50:a2:95:f7:c2:5c:2e: 6c:dd:8e:f1:e2:87:1b:93:3c:24:aa:68:2a:79:fd:7b:9f:a9: 9f:1d:b3:1f:37:5c:2a:df:d7:33:15:1a:ff:a3:a7:32:da:58: ad:98:fe:73:48:f1:4b:31:40:4b:9e:f9:c0:8d:11:ce:2c:23: 79:94:5c:d3:ce:ae:f2:40:ca:19:25:07:25:7a:1c:9c:f2:59: 9b:78:11:6f:8d:51:6b:1b:53:c4:47:54:46:46:8a:0d:44:cf: 2c:cf:87:3f:c5:ac:a1:57:8c:af:77:7e:42:51:25:a6:9c:68: 91:fe:e8:16:ff:87:50:57:92:49:98:36:c6:6b:2c:5d:6a:c3: 63:ab:65:04:6f:0b:b6:61:25:0f:63:a2:01:cd:70:09:b6:f9: f2:81:b9:2d:6c:4d:af:8e:c0:2c:6b:b1:5b:1c:d1:d4:d8:8b: 31:35:93:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwNDE3MDI0MTI1WhcNMjYwNDI0MDI0MTI1WjAYMRYwFAYD VQQDEw02OWUxOWRkNi0yNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2/nSu6/zIhixCdbJsCrKjmPrg9IZObGkOUY4hVl+cPbNMArAYuOw5p/IyTv 0q4VY/eMB/LSKZs0UoeZkMZ7UXekfc+AcHF3CaLnIXJhOFe54Yru/VlXZ/QVbJNM OAo8Hh0+VOdrD3FAen6zrd82U+dulkdmwd1sp3HC/HL+Fyp3StGe9FqCMzko3jj7 dIlnPTfn3DrWy6WdvIqn+lmCVRAB2zXXGI+DLNMZ+/GRyEIYNeootc8C5N1LYHOI q4EkyIUrWTHA2yXGDMoPaZPuJTJ+KrcPGAbt/+LO1rHInq32e42hvIGVdJh/jWMB RdHL+Vl0XQrklLyVHa/9VflXiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH67gHuV xdjaDJy0q6bhk6ZPwUbAMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALiR7VZJPPulqvqFyeW7ANrhTSfXQRzp5xwH2dca29ERez8QRtcqOtCIhjngy KzFFMWZ0lWKz9p/kGlhqvUho8QgdVOKbTcUBTmEd3jNg6xLc1gJQopX3wlwubN2O 8eKHG5M8JKpoKnn9e5+pnx2zHzdcKt/XMxUa/6OnMtpYrZj+c0jxSzFAS575wI0R ziwjeZRc086u8kDKGSUHJXocnPJZm3gRb41RaxtTxEdURkaKDUTPLM+HP8WsoVeM r3d+QlElppxokf7oFv+HUFeSSZg2xmssXWrDY6tlBG8LtmElD2OiAc1wCbb58oG5 LWxNr47ALGuxWxzR1NiLMTWTHg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:46:14 2026 by rpki-client