$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: XLO0zDbf9wEgUuEjI3zmLqzPDraJW1j10hZhikEqYqE= Subject key identifier: 4C:67:76:FB:EB:47:01:10:E2:6C:88:84:79:45:4A:80:60:F1:64:82 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3543 Signing time: Thu 16 Apr 2026 14:34:42 +0000 Manifest this update: Thu 16 Apr 2026 14:34:42 +0000 Manifest next update: Thu 23 Apr 2026 14:34:42 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: UCJrrUwOtnifoVi+C0deF1e3NF6D+4VMl8MfIt5Jdgg=) 2: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) 3: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Apr 16 14:34:42 2026 GMT Not After : Apr 23 14:34:42 2026 GMT Subject: CN=69e0f382-e899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:8d:be:f9:6f:1a:2c:03:50:2d:6b:81:9c: 98:0f:5f:3b:f0:a0:f3:1f:22:28:db:58:4e:cf:e8: 98:dd:a5:2b:79:6c:a3:24:56:27:48:03:4e:9d:bd: 47:53:87:15:18:b5:e3:04:0f:82:87:1d:7f:e0:b5: 08:14:2f:3f:4e:95:24:6b:3b:69:72:db:1c:26:48: 40:a7:a1:ef:0b:f8:fd:37:4f:b5:b2:b8:de:53:5c: a5:f1:83:7f:65:f4:71:60:88:96:f5:af:19:ce:46: e9:94:96:40:8e:a0:05:28:2a:f8:95:3d:43:49:0f: 1e:d1:60:5e:88:97:15:d7:1e:1d:ee:c6:9c:44:16: 0a:83:1f:f9:a0:50:70:dd:8d:6d:a7:62:56:c3:8b: 7e:65:a9:dd:d1:1a:f8:a2:8a:c7:b9:97:ed:ae:87: 96:9e:12:34:33:71:b1:46:8d:2d:61:e5:be:5b:9c: 0f:ef:1e:7a:6b:b1:a3:86:ab:8c:8d:35:b1:38:49: 46:1e:20:b6:40:85:9f:5a:dc:53:e6:36:30:4a:5a: bc:7b:7a:41:6b:08:c0:2e:fe:02:42:47:47:5e:1e: 68:ee:78:e0:e9:fa:3f:d1:da:dc:2f:2f:dc:47:6d: 80:6e:ba:7f:7f:04:32:4e:7e:ae:68:a5:17:12:ab: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:76:FB:EB:47:01:10:E2:6C:88:84:79:45:4A:80:60:F1:64:82 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:0d:5a:30:65:e3:f8:b9:07:8a:a2:67:54:4a:86:37:c6: 50:14:c6:95:40:34:0b:31:c0:a9:4c:a1:f1:91:b9:fc:9b:fb: 72:94:71:d9:27:d6:7e:6b:ac:7f:e3:8e:1a:10:b9:3a:5c:02: 23:9b:d4:f9:75:6d:53:15:66:a0:47:98:5d:1f:94:3c:3a:16: e8:ca:ea:d9:52:8c:53:a0:1e:ee:1b:0c:70:88:63:d6:b1:5b: cd:92:af:12:a7:06:03:1a:3d:d8:49:37:92:ce:ec:be:9d:39: bb:f8:22:28:45:8b:55:cf:7f:31:eb:32:32:3b:3e:31:a3:8a: f8:0b:fc:eb:6a:ba:55:2a:4b:86:0d:92:61:a7:e5:a0:8d:cc: 66:8b:8b:54:30:1d:a3:02:f8:53:a2:92:81:58:22:14:08:ab: e1:3e:bc:40:fb:a3:ea:9e:ed:d5:d3:c1:b2:2c:a3:37:6f:7a: 59:e2:b6:52:1b:90:a8:bb:4a:15:a6:cd:23:6d:77:76:f1:6e: 46:38:d2:81:cd:58:b9:4b:0a:6d:df:f1:ed:48:e0:ae:55:6b: 9d:ef:ac:ab:ae:21:23:c4:2e:26:15:eb:3c:cc:a8:c9:6c:80: bf:a2:af:3d:d6:30:27:3e:92:bc:ae:60:5d:ce:07:dd:71:01: 18:ba:ee:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwNDE2MTQzNDQyWhcNMjYwNDIzMTQzNDQyWjAYMRYwFAYD VQQDEw02OWUwZjM4Mi1lODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArcmNvvlvGiwDUC1rgZyYD1878KDzHyIo21hOz+iY3aUreWyjJFYnSANOnb1H U4cVGLXjBA+Chx1/4LUIFC8/TpUkaztpctscJkhAp6HvC/j9N0+1srjeU1yl8YN/ ZfRxYIiW9a8ZzkbplJZAjqAFKCr4lT1DSQ8e0WBeiJcV1x4d7sacRBYKgx/5oFBw 3Y1tp2JWw4t+Zand0Rr4oorHuZftroeWnhI0M3GxRo0tYeW+W5wP7x56a7GjhquM jTWxOElGHiC2QIWfWtxT5jYwSlq8e3pBawjALv4CQkdHXh5o7njg6fo/0drcLy/c R22Abrp/fwQyTn6uaKUXEqvnKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExndvvr RwEQ4myIhHlFSoBg8WSCMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASbMNWjBl4/i5B4qiZ1RKhjfGUBTGlUA0CzHAqUyh8ZG5/Jv7cpRx2SfWfmus f+OOGhC5OlwCI5vU+XVtUxVmoEeYXR+UPDoW6Mrq2VKMU6Ae7hsMcIhj1rFbzZKv EqcGAxo92Ek3ks7svp05u/giKEWLVc9/MesyMjs+MaOK+Av862q6VSpLhg2SYafl oI3MZouLVDAdowL4U6KSgVgiFAir4T68QPuj6p7t1dPBsiyjN296WeK2UhuQqLtK FabNI213dvFuRjjSgc1YuUsKbd/x7UjgrlVrne+sq64hI8QuJhXrPMyoyWyAv6Kv PdYwJz6SvK5gXc4H3XEBGLruDQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:59:12 2026 by rpki-client