$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft File: 3dzECt5nfyP4p5ukFo729r7wZcc.mft (raw, json) Hash identifier: UF/ptO2ilRHYYAtwN+g+Y8rl2++6nGIM8oofoV7wRJc= Subject key identifier: 8E:A0:28:7B:A0:53:EA:19:21:D0:53:5A:D2:E6:9B:EB:B0:98:1C:2B Authority key identifier: DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 Certificate issuer: /CN=A91CB2E2/serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 07:29:28 +0000 Manifest this update: Fri 17 Apr 2026 07:29:27 +0000 Manifest next update: Fri 24 Apr 2026 07:29:27 +0000 Files and hashes: 1: 3dzECt5nfyP4p5ukFo729r7wZcc.crl (hash: hulOYEPU5a0GBf+DLIEeb9CNEAVT/np8ZjVHrZKgO2g=) 2: 240EF95E896311F0B911053BC4F9AE02.roa (hash: bgfPYSTEsSkfhGSuxOoFNVtQR8SOazKoHfsSU4GrHl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB2E2, serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Validity Not Before: Apr 17 07:29:27 2026 GMT Not After : Apr 24 07:29:27 2026 GMT Subject: CN=69e1e157-c078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:36:11:59:ef:5d:f2:dc:8b:4f:e4:da:3f: d8:7e:c0:35:1c:1f:29:89:4a:c7:19:fe:90:46:b4: 48:b0:28:f3:d8:ed:8a:ae:83:f9:a5:47:dc:b5:b7: 9e:1b:74:dd:94:66:b3:73:7f:21:dd:4a:0f:78:89: 15:13:77:a3:e0:77:eb:bd:2f:17:e5:82:c6:71:e9: 3b:5c:59:36:59:98:72:91:77:fb:ae:05:08:62:a0: 28:41:09:9d:48:23:d9:9f:d8:70:fd:68:c3:f9:e7: 1a:f8:74:4f:7a:f2:50:a4:1d:d6:bd:66:10:05:69: dd:e0:60:d1:e5:fb:f3:72:e7:56:e4:83:80:1b:92: 26:ee:80:0d:ad:c9:0e:ae:dd:c9:1e:93:08:1e:62: 82:0d:41:2c:6a:b2:5a:a6:6d:64:95:c4:15:64:b3: 4f:0d:4d:dd:ee:8f:bd:92:2e:00:13:45:4a:c9:0f: 09:50:2e:11:31:d3:5b:b7:69:eb:ad:96:cc:d6:49: 3e:a5:b4:88:e5:43:d5:68:23:bd:49:66:d2:ab:e1: 70:bb:8e:83:67:8b:11:21:6d:f2:68:f5:1a:0b:2c: af:19:6d:e4:07:69:7d:85:96:6d:06:aa:ff:95:ac: e4:b5:cd:fd:70:57:99:9a:11:58:e6:de:62:46:23: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:28:7B:A0:53:EA:19:21:D0:53:5A:D2:E6:9B:EB:B0:98:1C:2B X509v3 Authority Key Identifier: keyid:DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:df:05:76:fe:aa:dd:8f:99:68:a6:1d:2f:7f:be:1a:97:4a: f7:55:75:46:11:6e:94:88:3e:49:26:06:d7:68:a0:97:79:0d: 07:9d:7b:8b:ed:33:e3:f9:64:c6:66:17:89:82:07:55:ae:59: a1:90:49:49:90:f6:29:a5:1d:6b:4a:6b:f5:a7:84:90:5c:4a: 62:f2:b1:dc:6b:e0:56:8f:82:b3:df:9e:82:16:83:21:55:61: 54:62:5b:29:e3:db:08:35:8f:6a:57:f8:33:46:6e:c0:19:15: 79:2e:3d:80:06:59:88:4e:2c:0f:bb:04:63:8c:a3:84:62:2f: 7e:0f:05:d4:df:06:35:26:14:1e:c1:cd:6f:33:b1:66:1e:a0: 7e:7c:91:40:c4:22:03:d9:82:9a:26:7b:01:e8:f3:c1:75:3d: ca:c9:49:ff:ee:e8:85:61:6c:71:e6:03:dc:68:58:ad:36:b0: 2e:60:af:4a:5f:2d:7d:e5:6e:9f:20:43:0e:f5:88:70:5f:7b: e7:54:03:c7:82:0b:b8:70:c7:88:3f:20:d2:0e:09:5c:44:86: 0b:d3:29:c0:b4:bb:a9:c2:50:b6:e6:0e:8f:56:a0:83:35:0b: 29:50:e1:d1:c9:44:e1:1e:17:09:e7:59:2e:dd:f1:28:6f:ca: 28:a8:3d:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjJFMjExMC8GA1UEBRMoREREQ0M0MEFERTY3N0YyM0Y4QTc5QkE0MTY4RUY2RjZC RUYwNjVDNzAeFw0yNjA0MTcwNzI5MjdaFw0yNjA0MjQwNzI5MjdaMBgxFjAUBgNV BAMTDTY5ZTFlMTU3LWMwNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2xTYRWe9d8tyLT+TaP9h+wDUcHymJSscZ/pBGtEiwKPPY7Yqug/mlR9y1t54b dN2UZrNzfyHdSg94iRUTd6Pgd+u9LxflgsZx6TtcWTZZmHKRd/uuBQhioChBCZ1I I9mf2HD9aMP55xr4dE968lCkHda9ZhAFad3gYNHl+/Ny51bkg4AbkibugA2tyQ6u 3ckekwgeYoINQSxqslqmbWSVxBVks08NTd3uj72SLgATRUrJDwlQLhEx01u3aeut lszWST6ltIjlQ9VoI71JZtKr4XC7joNnixEhbfJo9RoLLK8ZbeQHaX2Flm0Gqv+V rOS1zf1wV5maEVjm3mJGI/tLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjqAoe6BT 6hkh0FNa0uab67CYHCswHwYDVR0jBBgwFoAU3dzECt5nfyP4p5ukFo729r7wZccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMkUyLzQxMUM2M0IwODk1 OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQNHA1dWtGbzcyOXI3d1pj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2R6RUN0NW5meVA0cDV1a0ZvNzI5cjd3WmNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MkUyLzQxMUM2M0IwODk1OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQ NHA1dWtGbzcyOXI3d1pjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCt3wV2/qrdj5loph0vf74al0r3VXVGEW6UiD5JJgbXaKCXeQ0HnXuL7TPj+WTG ZheJggdVrlmhkElJkPYppR1rSmv1p4SQXEpi8rHca+BWj4Kz356CFoMhVWFUYlsp 49sINY9qV/gzRm7AGRV5Lj2ABlmITiwPuwRjjKOEYi9+DwXU3wY1JhQewc1vM7Fm HqB+fJFAxCID2YKaJnsB6PPBdT3KyUn/7uiFYWxx5gPcaFitNrAuYK9KXy195W6f IEMO9YhwX3vnVAPHggu4cMeIPyDSDglcRIYL0ynAtLupwlC25g6PVqCDNQspUOHR yUThHhcJ51ku3fEob8ooqD3Y -----END CERTIFICATE-----Generated at Sun Apr 19 08:16:06 2026 by rpki-client