$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 6ff2agNb/F2yqd6vVlZ10XQZ9JlIgYYwHcspjcX6kOM= Subject key identifier: 10:5D:55:54:E3:EA:E7:96:A3:C8:A5:8E:9E:E0:1C:53:09:A7:E8:EB Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 0127 Signing time: Fri 17 Apr 2026 05:19:43 +0000 Manifest this update: Fri 17 Apr 2026 05:19:43 +0000 Manifest next update: Fri 24 Apr 2026 05:19:43 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: sE3z39htB598rbk4V48+FzP4UPL36Tt43SO9tb2Rz1o=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 3r7oWvZZSCAzRuaEEZfRdRU+m7LuuIxoldkPQaUgKhQ=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: cb0xCHL1dV5N7XyIruiC/PJxxp8M1xlcJSMtvdRnQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Apr 17 05:19:43 2026 GMT Not After : Apr 24 05:19:43 2026 GMT Subject: CN=69e1c2ef-585d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:ae:09:09:07:b5:77:ba:58:de:dc:9a:8f: 4a:f4:79:af:c7:9e:6f:37:9b:79:0a:30:d5:dd:01: 1e:59:7b:74:c7:01:3a:8d:16:3b:90:1a:75:d5:f8: da:ad:d6:7e:b9:47:ac:11:29:d1:ba:68:4d:b1:43: 4c:76:55:71:91:2f:19:95:e2:d3:33:fe:aa:35:aa: 3d:9b:40:8c:86:fa:47:4e:02:23:ce:02:4c:c3:3d: 33:46:0e:ac:25:af:68:37:12:e4:33:cd:51:7b:e3: df:76:96:5e:83:2e:e5:d5:68:97:11:77:8e:40:75: a2:40:b7:08:08:af:41:95:bc:93:0b:b1:d2:fb:92: a7:05:fe:d9:c2:ba:3d:9a:f6:60:23:63:5d:27:67: ce:74:b7:cb:94:1d:05:e1:c2:e0:e8:95:80:4c:ec: ab:26:5c:c4:9b:73:b7:d5:6b:3c:66:e3:2c:58:50: e7:08:56:ef:5e:8b:51:f0:ff:4d:5b:da:45:8a:e5: ef:90:ff:52:0a:9d:bb:32:25:f2:11:c6:f0:76:cc: 0c:d3:6f:d2:d0:5a:85:f8:3d:4e:24:47:13:39:db: 18:20:07:18:0b:68:b9:b7:93:2d:a1:92:3b:94:01: 7d:4d:81:1a:1e:33:6e:6e:2f:04:e8:b6:4b:23:82: 8f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5D:55:54:E3:EA:E7:96:A3:C8:A5:8E:9E:E0:1C:53:09:A7:E8:EB X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e5:58:be:a6:31:ed:43:50:11:37:d8:d5:e4:56:8a:88:59: e1:5a:6b:b7:ba:9f:f0:e7:18:7b:48:af:63:5c:69:4f:4b:86: 66:e4:7b:0a:b7:5e:fb:28:92:70:32:b4:8e:70:c4:a9:10:2f: 51:2a:d6:6b:1d:86:30:1e:d1:83:e2:08:07:4e:59:3f:b1:fc: 58:eb:71:97:09:d9:a8:6f:b2:5a:12:5f:b6:1b:d4:e8:5a:28: 04:fd:1d:dd:aa:84:b7:79:0e:26:32:2f:54:e5:3a:e6:df:d6: fd:53:62:5e:a6:61:9e:29:19:02:c3:b7:7a:a8:bc:6e:2f:ea: 0e:9e:14:3f:6e:b6:c7:26:31:47:f8:63:c1:11:fc:43:82:7b: f1:67:3b:5a:76:df:6b:b1:5d:18:42:99:59:09:4e:de:c2:43: 7c:cf:d4:a5:d5:b3:41:c5:72:b0:02:49:68:b7:7d:86:42:c0: 27:30:e9:81:c3:5d:54:59:b0:d7:5c:ac:b6:e8:95:b0:cd:5a: 8b:a9:02:d8:70:19:49:a6:93:c7:e8:6c:d6:a9:99:31:7f:bd: 23:c8:16:1d:d2:66:15:6e:45:2d:5c:36:c9:bb:6f:00:fb:6c: 31:42:0a:0c:ab:e8:1f:9f:06:a8:84:2c:1c:1e:2a:93:ee:e9: 2e:dc:70:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYwNDE3MDUxOTQzWhcNMjYwNDI0MDUxOTQzWjAYMRYwFAYD VQQDEw02OWUxYzJlZi01ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumCuCQkHtXe6WN7cmo9K9Hmvx55vN5t5CjDV3QEeWXt0xwE6jRY7kBp11fja rdZ+uUesESnRumhNsUNMdlVxkS8ZleLTM/6qNao9m0CMhvpHTgIjzgJMwz0zRg6s Ja9oNxLkM81Re+PfdpZegy7l1WiXEXeOQHWiQLcICK9BlbyTC7HS+5KnBf7Zwro9 mvZgI2NdJ2fOdLfLlB0F4cLg6JWATOyrJlzEm3O31Ws8ZuMsWFDnCFbvXotR8P9N W9pFiuXvkP9SCp27MiXyEcbwdswM02/S0FqF+D1OJEcTOdsYIAcYC2i5t5MtoZI7 lAF9TYEaHjNubi8E6LZLI4KP3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBdVVTj 6ueWo8iljp7gHFMJp+jrMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXOVYvqYx7UNQETfY1eRWiohZ4Vprt7qf8OcYe0ivY1xpT0uGZuR7Crde+yiS cDK0jnDEqRAvUSrWax2GMB7Rg+IIB05ZP7H8WOtxlwnZqG+yWhJfthvU6FooBP0d 3aqEt3kOJjIvVOU65t/W/VNiXqZhnikZAsO3eqi8bi/qDp4UP262xyYxR/hjwRH8 Q4J78Wc7Wnbfa7FdGEKZWQlO3sJDfM/UpdWzQcVysAJJaLd9hkLAJzDpgcNdVFmw 11ystuiVsM1ai6kC2HAZSaaTx+hs1qmZMX+9I8gWHdJmFW5FLVw2ybtvAPtsMUIK DKvoH58GqIQsHB4qk+7pLtxw5Q== -----END CERTIFICATE-----Generated at Fri Apr 17 13:20:57 2026 by rpki-client