$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft File: 3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json) Hash identifier: 69tyMBOCKQ4nhuKRmyYhOxljlMtUVQ6qoRuY+dV2C5o= Subject key identifier: 20:00:A4:33:B0:D6:91:E2:72:45:22:C5:2E:A4:69:81:92:A8:77:EA Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE Certificate issuer: /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft Manifest number: 021C Signing time: Thu 16 Apr 2026 15:15:15 +0000 Manifest this update: Thu 16 Apr 2026 15:15:15 +0000 Manifest next update: Thu 23 Apr 2026 15:15:15 +0000 Files and hashes: 1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: +XYl05UP9kXYJyCRd7hZH64wWeF4ODIqhk65E+5f32Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE Validity Not Before: Apr 16 15:15:15 2026 GMT Not After : Apr 23 15:15:15 2026 GMT Subject: CN=69e0fd03-b39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c1:07:5a:d2:41:4a:db:a9:38:84:49:76:46: 1e:14:99:2a:16:88:28:b4:ee:d4:f7:e7:af:9e:a9: f7:02:4a:66:47:48:f6:c2:c2:e6:98:79:8f:e6:44: 1e:36:6a:b2:b4:38:9f:01:fd:76:49:e4:22:b6:23: 34:08:b7:12:66:a7:1d:05:89:4d:1d:4a:2b:3d:94: d1:52:a4:74:bf:33:97:ec:92:d4:17:d6:66:80:55: 8c:bb:ec:af:d4:20:a0:26:39:d3:59:9e:32:25:3b: 6a:a4:e1:c1:27:37:ba:be:e8:8e:f9:cc:06:b1:09: ed:98:e1:58:2f:b4:3c:73:2e:d1:77:24:35:9d:f3: b5:00:d8:df:42:29:93:ef:c9:d8:6d:89:05:ec:d4: 1f:38:6c:db:95:08:77:ab:1e:c7:86:4c:10:36:28: db:8d:69:a7:47:62:18:19:a6:02:57:ec:fc:fc:d1: b8:33:66:e8:14:16:18:60:87:1f:02:0c:10:a0:e9: 38:f2:30:fb:21:c4:bd:48:31:9d:2d:f8:3a:59:d9: 1a:80:0a:22:57:37:d2:51:22:94:6f:7f:a2:3e:68: c3:8e:ad:c6:b3:f3:b4:37:19:bb:9a:1e:18:43:23: 4c:a4:3a:ca:22:e9:05:17:05:e7:ee:e3:ff:fa:68: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:A4:33:B0:D6:91:E2:72:45:22:C5:2E:A4:69:81:92:A8:77:EA X509v3 Authority Key Identifier: keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c4:10:39:e7:f0:75:dc:46:bc:da:7f:5a:2f:5c:fe:9c:04: f3:db:1d:c2:ca:53:aa:93:3e:7b:b6:52:b0:4e:fd:24:5e:ac: b2:97:46:67:60:89:41:30:67:77:f9:68:ed:fa:04:7d:fa:62: 28:6f:ac:ce:64:98:da:c3:a9:35:f6:43:b7:12:5b:42:55:74: b4:88:71:c8:89:50:6c:49:4f:a5:48:f3:34:a8:94:9f:59:86: 40:08:fb:99:89:09:96:7d:b9:a4:fd:d3:64:39:8d:6e:12:aa: 6b:75:0f:92:26:2d:9f:3f:68:39:e4:88:c9:9c:be:6d:cb:25: 1a:17:c7:8a:f1:33:cd:f1:66:ec:76:bb:08:0d:c9:92:b8:b1: fb:f7:e3:35:57:46:f8:d5:72:14:41:db:b2:76:46:1e:49:fd: d2:04:ed:a7:62:6f:f6:04:43:32:b4:e4:8e:0c:73:ca:87:2c: 24:df:fd:f0:e3:72:76:22:ac:f4:8a:c5:d0:32:78:bc:70:ce: ff:01:34:47:52:03:c1:a6:da:b5:03:d2:3a:2c:a8:34:80:07: e2:89:ec:a8:fa:c3:01:74:61:19:7d:d2:c8:15:e4:95:09:99: 16:7b:97:c2:75:13:cf:11:d1:1c:b0:ca:ea:9c:88:69:57:ee: bf:6c:2a:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEREMjM1RDM3MDg5MDlCMzNENTg5NEI0Q0NEQzkxMDVD NjFGRDE2QUUwHhcNMjYwNDE2MTUxNTE1WhcNMjYwNDIzMTUxNTE1WjAYMRYwFAYD VQQDEw02OWUwZmQwMy1iMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsEHWtJBStupOIRJdkYeFJkqFogotO7U9+evnqn3AkpmR0j2wsLmmHmP5kQe NmqytDifAf12SeQitiM0CLcSZqcdBYlNHUorPZTRUqR0vzOX7JLUF9ZmgFWMu+yv 1CCgJjnTWZ4yJTtqpOHBJze6vuiO+cwGsQntmOFYL7Q8cy7RdyQ1nfO1ANjfQimT 78nYbYkF7NQfOGzblQh3qx7HhkwQNijbjWmnR2IYGaYCV+z8/NG4M2boFBYYYIcf AgwQoOk48jD7IcS9SDGdLfg6WdkagAoiVzfSUSKUb3+iPmjDjq3Gs/O0Nxm7mh4Y QyNMpDrKIukFFwXn7uP/+mgszwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCAApDOw 1pHickUixS6kaYGSqHfqMB8GA1UdIwQYMBaAFN0jXTcIkJsz1YlLTM3JEFxh/Rau MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9EMDYxMTcxNjBC MkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16UFZpVXRNemNrUVhHSDlG cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNTTmROd2lRbXpQVmlVdE16Y2tRWEdIOUZxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9EMDYxMTcxNjBCMkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16 UFZpVXRNemNrUVhHSDlGcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8QQOefwddxGvNp/Wi9c/pwE89sdwspTqpM+e7ZSsE79JF6sspdGZ2CJQTBn d/lo7foEffpiKG+szmSY2sOpNfZDtxJbQlV0tIhxyIlQbElPpUjzNKiUn1mGQAj7 mYkJln25pP3TZDmNbhKqa3UPkiYtnz9oOeSIyZy+bcslGhfHivEzzfFm7Ha7CA3J krix+/fjNVdG+NVyFEHbsnZGHkn90gTtp2Jv9gRDMrTkjgxzyocsJN/98ONydiKs 9IrF0DJ4vHDO/wE0R1IDwabatQPSOiyoNIAH4onsqPrDAXRhGX3SyBXklQmZFnuX wnUTzxHRHLDK6pyIaVfuv2wqnw== -----END CERTIFICATE-----Generated at Fri Apr 17 04:26:07 2026 by rpki-client