$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: qWw87dUxhwnx7wvv+vjKIOi6AyneVbOlPCw/qdkAhco= Subject key identifier: 04:3C:7C:79:C5:39:DD:F7:29:48:0C:5A:94:28:8B:D4:5B:14:3E:40 Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0CF1 Signing time: Thu 16 Apr 2026 18:07:14 +0000 Manifest this update: Thu 16 Apr 2026 18:07:13 +0000 Manifest next update: Thu 23 Apr 2026 18:07:13 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: 7QJDCWKgGZ500nnUq12JQkcn41AoWYJuAONG/J3NcjA=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Apr 16 18:07:13 2026 GMT Not After : Apr 23 18:07:13 2026 GMT Subject: CN=69e12552-5024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a5:bd:7e:ae:63:85:2b:47:aa:f4:d6:0a:50: 85:d2:22:f4:3f:fd:61:33:9e:44:f8:fe:e5:36:51: 40:d9:46:4a:8b:f7:fe:52:fb:1d:e8:6c:ea:f4:88: 0d:15:6f:d8:4f:68:b4:b6:10:c4:33:24:fd:00:5a: 99:20:ad:96:b0:61:04:c7:34:c8:ab:72:da:26:a0: 96:eb:f1:ce:74:64:d6:72:92:a4:b4:64:47:7c:1a: 89:f2:e1:67:55:c5:94:85:e7:b9:b9:87:d6:61:8d: 44:09:c3:cc:46:c4:15:1d:b0:3c:1e:3f:90:19:a0: d0:2a:f0:2c:da:2f:42:a6:df:f0:de:da:a8:bc:7a: ab:95:54:cd:dd:d3:6e:90:86:51:c6:20:d6:a1:ef: 40:0e:ff:e4:cd:5e:d5:de:1b:fd:b9:b8:92:96:3b: 79:f6:bb:de:ed:64:cc:dc:55:14:22:bd:ec:6a:40: af:d3:8a:d0:bf:6e:5c:46:23:55:87:7c:9c:1e:10: fd:6e:83:f1:28:c4:c6:ed:74:81:f4:87:72:8b:61: d8:01:8b:d0:ab:61:cd:04:17:6c:43:93:6d:ce:10: 77:fa:90:4f:33:bf:c4:02:07:03:01:2c:47:3b:b3: 85:b5:78:91:26:60:e6:66:2b:7a:54:0a:45:f3:f7: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3C:7C:79:C5:39:DD:F7:29:48:0C:5A:94:28:8B:D4:5B:14:3E:40 X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:31:0e:a8:f1:1b:74:96:4c:85:96:50:fc:be:90:cc:9a:3b: bc:d4:b5:9c:a4:cd:99:6d:4f:98:96:5e:26:52:49:21:30:d3: 4f:fe:dd:e9:1f:09:dc:40:4f:15:d5:11:2f:84:58:4e:73:66: a7:ae:55:00:bb:67:fe:27:9c:87:7f:d5:50:ff:de:f1:da:db: 07:7c:f3:7d:f5:28:fb:7d:21:34:39:a9:1c:f7:c9:95:c7:0c: 11:1b:33:33:03:50:c3:8f:c1:0c:66:8a:b9:70:73:19:e8:30: 3d:d4:41:d1:a6:5d:de:76:08:95:79:19:e3:cf:a0:10:85:2c: 4a:66:6c:09:98:fb:55:81:75:63:93:1e:45:3e:c0:50:c6:20: 42:36:cf:b6:15:b6:84:00:53:74:5f:fa:c2:29:37:3a:87:5e: 3f:85:47:82:35:e4:0c:11:3d:80:a6:78:14:26:d4:c9:80:07: a7:98:6f:07:8b:d9:58:3b:16:28:cd:0c:cb:ea:db:03:aa:ed: ff:b4:ed:8d:f6:6e:83:67:dd:96:3b:7b:a0:50:b2:f1:e1:20: 7e:a4:48:4a:f1:b6:80:76:04:8a:a1:cb:40:f7:4b:41:d7:43: 81:be:e7:33:a2:72:64:0c:05:0e:4b:a3:b7:4a:bd:ce:79:f1: ad:01:2a:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjYwNDE2MTgwNzEzWhcNMjYwNDIzMTgwNzEzWjAYMRYwFAYD VQQDEw02OWUxMjU1Mi01MDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qW9fq5jhStHqvTWClCF0iL0P/1hM55E+P7lNlFA2UZKi/f+Uvsd6Gzq9IgN FW/YT2i0thDEMyT9AFqZIK2WsGEExzTIq3LaJqCW6/HOdGTWcpKktGRHfBqJ8uFn VcWUhee5uYfWYY1ECcPMRsQVHbA8Hj+QGaDQKvAs2i9Cpt/w3tqovHqrlVTN3dNu kIZRxiDWoe9ADv/kzV7V3hv9ubiSljt59rve7WTM3FUUIr3sakCv04rQv25cRiNV h3ycHhD9boPxKMTG7XSB9Idyi2HYAYvQq2HNBBdsQ5NtzhB3+pBPM7/EAgcDASxH O7OFtXiRJmDmZit6VApF8/f+6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQ8fHnF Od33KUgMWpQoi9RbFD5AMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgDEOqPEbdJZMhZZQ/L6QzJo7vNS1nKTNmW1PmJZeJlJJITDTT/7d6R8J3EBP FdURL4RYTnNmp65VALtn/iech3/VUP/e8drbB3zzffUo+30hNDmpHPfJlccMERsz MwNQw4/BDGaKuXBzGegwPdRB0aZd3nYIlXkZ48+gEIUsSmZsCZj7VYF1Y5MeRT7A UMYgQjbPthW2hABTdF/6wik3OodeP4VHgjXkDBE9gKZ4FCbUyYAHp5hvB4vZWDsW KM0My+rbA6rt/7TtjfZug2fdljt7oFCy8eEgfqRISvG2gHYEiqHLQPdLQddDgb7n M6JyZAwFDkujt0q9znnxrQEqhA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:08:49 2026 by rpki-client