$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft File: US3AbkHAiZokofyIXrNG5FMH80c.mft (raw, json) Hash identifier: oLlb89lXvDKqVrntzLrWtsTQmVu8hGcBS1kRA+gsiyc= Subject key identifier: 44:17:72:05:6C:54:53:89:89:3A:3E:01:2A:8F:D7:F3:E4:35:A2:81 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0A03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft Manifest number: 09FB Signing time: Thu 16 Apr 2026 19:45:03 +0000 Manifest this update: Thu 16 Apr 2026 19:45:03 +0000 Manifest next update: Thu 23 Apr 2026 19:45:03 +0000 Files and hashes: 1: US3AbkHAiZokofyIXrNG5FMH80c.crl (hash: CbiASnoB6jea77rhAgsY88XOATbDu9rbmaKst/yt6Ws=) 2: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (hash: TtvgX0HunQnxwePu7sD+x5FU7eZoqly/IQVqoa8h86s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2563 (0xa03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Apr 16 19:45:03 2026 GMT Not After : Apr 23 19:45:03 2026 GMT Subject: CN=69e13c3f-deed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f2:5d:5e:b5:18:48:7b:2a:7f:d2:a2:54:35: fe:9d:ff:1a:87:c9:05:b7:c7:d0:31:1f:4a:da:95: 43:fa:fe:d1:20:b7:6c:78:90:71:98:a7:27:0d:a3: fd:15:23:12:f0:24:7c:f6:d2:1c:e4:56:d7:a1:01: 59:6b:ad:0d:7a:d6:64:04:19:4a:f9:9b:e5:cf:60: bd:71:f1:85:3b:eb:ed:d9:f6:c7:4e:ad:67:a4:5a: e1:58:55:95:54:4b:92:ad:ee:24:0f:bb:0a:9b:ab: cc:b1:99:bd:66:52:16:a5:58:d2:9b:6c:20:f0:1c: b3:9a:41:7c:a2:98:42:a8:19:19:8e:56:fa:0c:40: e0:f8:06:1d:d6:67:a4:88:29:73:75:ec:a8:90:d9: b3:f7:61:bd:b7:d0:61:db:ce:fa:43:5d:31:1b:e7: e4:71:17:51:1f:b2:f7:de:3e:e1:c1:71:af:09:f5: ba:0a:38:e0:c1:6b:a5:89:67:67:89:0e:f0:53:c3: 66:48:0f:f6:58:b5:d8:b3:3e:21:39:55:32:b3:19: 39:f2:f3:8a:08:60:02:2f:30:b9:9c:22:3b:01:38: 90:23:fa:d3:c0:9b:12:4e:2d:4b:0d:1d:3e:59:96: d6:dc:0e:39:d0:28:bf:dd:c4:19:d5:96:76:8c:fa: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:72:05:6C:54:53:89:89:3A:3E:01:2A:8F:D7:F3:E4:35:A2:81 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:7e:9b:8d:5c:fd:d0:b6:b1:30:34:6c:5b:81:ee:e8:11: 03:1f:b3:6c:ae:d0:91:c4:1a:01:5c:6b:26:ab:f1:db:05:3c: 27:a5:ac:06:5f:09:e1:1e:2c:91:c7:6e:12:0b:f6:8f:8c:15: ee:9b:2f:6a:61:36:4c:ad:b6:53:c3:16:0d:4c:56:82:cc:8e: c8:7d:a0:10:39:7b:8c:8f:9d:13:f7:fb:49:46:4c:28:51:ca: 35:75:4c:fe:87:94:08:81:fc:91:33:7a:59:cb:f2:09:49:8d: 4d:71:71:e4:15:7f:bb:09:5b:a5:53:04:92:6d:38:3a:34:da: d7:f5:76:47:33:60:01:e4:c1:9e:30:f7:b9:f0:d6:dd:3d:0b: 7a:f2:87:36:ce:f7:15:e9:e3:df:0b:66:45:6c:61:80:4d:0c: 42:ff:16:ef:11:62:6d:d8:5b:cd:9f:03:b4:42:d5:ce:ae:54: d6:42:dd:8d:f0:6c:36:9b:de:52:01:8a:49:bb:04:25:e3:37: db:52:d8:d2:c7:93:9f:50:8d:27:bf:8f:04:01:bd:14:f4:06: dc:97:d6:a1:a0:55:dc:f0:5a:06:6b:5d:5f:ef:ec:a3:17:e2: 94:1b:7d:51:b5:76:cc:70:f6:98:23:11:7a:2f:3f:0e:62:d7: 8c:6a:53:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjYwNDE2MTk0NTAzWhcNMjYwNDIzMTk0NTAzWjAYMRYwFAYD VQQDEw02OWUxM2MzZi1kZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvJdXrUYSHsqf9KiVDX+nf8ah8kFt8fQMR9K2pVD+v7RILdseJBxmKcnDaP9 FSMS8CR89tIc5FbXoQFZa60NetZkBBlK+Zvlz2C9cfGFO+vt2fbHTq1npFrhWFWV VEuSre4kD7sKm6vMsZm9ZlIWpVjSm2wg8ByzmkF8ophCqBkZjlb6DEDg+AYd1mek iClzdeyokNmz92G9t9Bh2876Q10xG+fkcRdRH7L33j7hwXGvCfW6CjjgwWuliWdn iQ7wU8NmSA/2WLXYsz4hOVUysxk58vOKCGACLzC5nCI7ATiQI/rTwJsSTi1LDR0+ WZbW3A450Ci/3cQZ1ZZ2jPppjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQXcgVs VFOJiTo+ASqP1/PkNaKBMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTRGMi8yQUVERUY5QTk3OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWla b2tvZnlJWHJORzVGTUg4MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM0p+m41c/dC2sTA0bFuB7ugRAx+zbK7QkcQaAVxrJqvx2wU8J6WsBl8J4R4s kcduEgv2j4wV7psvamE2TK22U8MWDUxWgsyOyH2gEDl7jI+dE/f7SUZMKFHKNXVM /oeUCIH8kTN6WcvyCUmNTXFx5BV/uwlbpVMEkm04OjTa1/V2RzNgAeTBnjD3ufDW 3T0LevKHNs73Fenj3wtmRWxhgE0MQv8W7xFibdhbzZ8DtELVzq5U1kLdjfBsNpve UgGKSbsEJeM321LY0seTn1CNJ7+PBAG9FPQG3JfWoaBV3PBaBmtdX+/soxfilBt9 UbV2zHD2mCMRei8/DmLXjGpTYA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:56:50 2026 by rpki-client