$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft File: 3eQo-rsWskLR46Gm8A_V48OKpY8.mft (raw, json) Hash identifier: Uck9x5VRNVlJ6mZXT3KhR3OISaLmwEc1ODR/2PuJf5Y= Subject key identifier: 46:A2:8B:CC:B4:4F:32:BF:2A:8F:3A:2B:D5:6C:D3:7D:C9:B6:21:69 Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F Certificate issuer: /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft Manifest number: 22 Signing time: Fri 17 Apr 2026 08:34:03 +0000 Manifest this update: Fri 17 Apr 2026 08:34:03 +0000 Manifest next update: Fri 24 Apr 2026 08:34:03 +0000 Files and hashes: 1: 3eQo-rsWskLR46Gm8A_V48OKpY8.crl (hash: 1x8Q0/Hm8pWC3Y3O4pEpKiITbQ+7N7IuNY3+72yhFNs=) 2: 50B86BE40BE411F1BD6D7437333D8C67.roa (hash: QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Validity Not Before: Apr 17 08:34:03 2026 GMT Not After : Apr 24 08:34:03 2026 GMT Subject: CN=69e1f07b-93b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:41:5c:07:01:7e:60:12:13:92:1f:34:15: 65:87:1e:ed:2b:d5:63:8d:de:d4:98:2b:5e:c2:68: 4c:03:51:39:bd:e6:02:86:f2:cc:54:3b:b6:6b:12: 23:73:85:63:37:2a:8d:6d:e1:47:29:1f:e3:3d:10: 39:98:48:78:be:66:a2:1a:29:2b:c7:11:2d:3e:52: 3b:22:6c:ee:fd:f9:26:ce:f2:f7:5e:2d:92:fe:5f: e5:88:09:f4:77:c1:64:2f:7a:4d:42:73:c1:da:b7: 0e:09:e0:eb:11:d5:17:a9:04:7e:b5:1e:4c:41:84: 9f:af:62:46:ca:d1:3f:bb:ab:ff:75:55:16:25:30: 31:d1:78:03:71:0c:d6:36:6d:6e:e5:d0:70:28:73: 61:22:1d:58:d4:06:87:87:09:b6:9f:d5:3b:d3:7f: d7:57:a4:fe:91:35:fa:88:bc:f7:27:7d:40:ee:8a: 7d:79:04:a7:79:b2:a8:d8:5b:c4:bb:ae:c9:bf:e3: b3:f9:3f:be:a0:b2:09:ac:d8:a1:e8:eb:2f:00:78: a8:f2:06:95:ab:8b:58:41:5d:ef:df:19:c8:7d:26: 88:79:c2:91:b4:0f:db:61:e8:c2:ab:6f:9c:30:20: f4:b6:48:5c:fd:b5:a6:b0:7a:00:38:30:2f:b4:96: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A2:8B:CC:B4:4F:32:BF:2A:8F:3A:2B:D5:6C:D3:7D:C9:B6:21:69 X509v3 Authority Key Identifier: keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:31:0a:ed:14:d1:79:b9:f6:a0:16:56:ee:df:66:8e:31: bb:21:4d:c9:da:28:c3:74:44:85:14:e3:59:ac:05:8a:f2:f1: 94:21:60:63:c8:3b:9c:7b:46:8b:46:ea:25:b4:7c:5c:2d:cc: 70:5b:c0:35:71:4b:cb:ba:3d:f8:93:c6:85:5b:77:7d:63:0d: ec:15:d2:1c:52:57:fa:fe:ea:7e:8c:54:a0:da:ce:73:3e:4e: 83:e0:31:16:b2:ac:93:91:b5:08:57:64:fe:36:62:cb:68:fb: 1f:57:38:6d:04:0f:53:f5:9b:9b:2b:b0:31:1c:d9:f5:0d:12: f6:5d:8a:e1:d7:44:06:5f:6b:da:74:0b:4d:8a:17:fd:31:31: 66:24:33:c3:23:12:cf:49:02:59:f2:c6:67:30:21:cd:70:40: 3a:a2:9c:19:16:e7:36:41:e8:6a:12:d9:8c:b8:ae:13:b0:11: 9c:61:54:11:5c:7f:eb:ca:f4:90:60:b3:a4:68:e6:66:47:ac: 38:ad:4b:93:7e:41:21:78:99:c8:de:d5:60:91:c5:6d:f5:ea: 7f:95:de:77:70:2d:a4:e5:68:81:06:88:5c:16:88:5d:2b:bc: 9f:72:bc:58:1a:25:00:c8:0f:bd:ad:fd:54:48:a6:7d:77:83: d4:8e:40:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRERFNDI4RkFCQjE2QjI0MkQxRTNBMUE2RjAwRkQ1RTND MzhBQTU4RjAeFw0yNjA0MTcwODM0MDNaFw0yNjA0MjQwODM0MDNaMBgxFjAUBgNV BAMTDTY5ZTFmMDdiLTkzYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyzEFcBwF+YBITkh80FWWHHu0r1WON3tSYK17CaEwDUTm95gKG8sxUO7ZrEiNz hWM3Ko1t4UcpH+M9EDmYSHi+ZqIaKSvHES0+UjsibO79+SbO8vdeLZL+X+WICfR3 wWQvek1Cc8Hatw4J4OsR1RepBH61HkxBhJ+vYkbK0T+7q/91VRYlMDHReANxDNY2 bW7l0HAoc2EiHVjUBoeHCbaf1TvTf9dXpP6RNfqIvPcnfUDuin15BKd5sqjYW8S7 rsm/47P5P76gsgms2KHo6y8AeKjyBpWri1hBXe/fGch9Joh5wpG0D9th6MKrb5ww IPS2SFz9taawegA4MC+0li11AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURqKLzLRP Mr8qjzor1WzTfcm2IWkwHwYDVR0jBBgwFoAU3eQo+rsWskLR46Gm8A/V48OKpY8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0NDMDMxOTQyMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tMUjQ2R204QV9WNDhPS3BZ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2VRby1yc1dza0xSNDZHbThBX1Y0OE9LcFk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0NDMDMxOTQyMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tM UjQ2R204QV9WNDhPS3BZOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAcTEK7RTRebn2oBZW7t9mjjG7IU3J2ijDdESFFONZrAWK8vGUIWBjyDuce0aL RuoltHxcLcxwW8A1cUvLuj34k8aFW3d9Yw3sFdIcUlf6/up+jFSg2s5zPk6D4DEW sqyTkbUIV2T+NmLLaPsfVzhtBA9T9ZubK7AxHNn1DRL2XYrh10QGX2vadAtNihf9 MTFmJDPDIxLPSQJZ8sZnMCHNcEA6opwZFuc2QehqEtmMuK4TsBGcYVQRXH/ryvSQ YLOkaOZmR6w4rUuTfkEheJnI3tVgkcVt9ep/ld53cC2k5WiBBohcFohdK7yfcrxY GiUAyA+9rf1USKZ9d4PUjkA2 -----END CERTIFICATE-----Generated at Sat Apr 18 00:08:03 2026 by rpki-client