$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: HYaghYo5cYabCiXqOH4TzAEm9+PSrFEKxopFok7Es3Y= Subject key identifier: 72:B4:00:DB:42:54:F9:3B:62:A0:6B:BD:C0:74:30:70:B4:E1:7E:B7 Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 34 Signing time: Fri 17 Apr 2026 08:20:11 +0000 Manifest this update: Fri 17 Apr 2026 08:20:10 +0000 Manifest next update: Fri 24 Apr 2026 08:20:10 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: IZaAOVI9tytlDevi+YYTs2Rkq7txrKhNwpsYImVCNcM=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Apr 17 08:20:10 2026 GMT Not After : Apr 24 08:20:10 2026 GMT Subject: CN=69e1ed3b-74b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:96:89:14:af:c6:57:65:a2:d5:2d:a0:cf: 82:e7:61:10:30:29:75:da:2d:77:c6:81:e5:c9:c7: 19:9a:aa:6d:b2:5c:21:78:aa:da:c1:75:30:e5:9c: 06:8d:59:d2:f2:9f:59:97:88:c4:53:4c:ac:cc:49: 7d:8f:55:25:57:23:41:9d:4c:cc:54:6d:6e:fe:cb: a1:b3:e3:bc:b7:29:40:90:b1:42:b7:d7:ce:f4:54: 36:23:28:65:a6:88:11:3b:c1:14:02:fa:ca:2b:6c: 49:d5:4e:4a:69:6f:1a:f6:60:da:6d:ba:49:e2:2e: 86:03:5e:74:57:0f:8b:f5:cd:7e:48:59:9c:67:05: 97:c7:22:4d:9f:e8:79:21:28:8d:e5:c8:11:ae:af: 06:01:59:00:fe:fa:c4:f1:df:d2:6f:d7:2d:e2:7d: 1a:b0:92:0a:7c:41:a6:63:68:8f:69:cf:c5:2f:55: a5:82:2f:59:de:6b:b9:29:1f:4f:a9:5b:76:9e:35: 3b:bf:5c:6c:33:b8:b5:8a:fe:d8:42:b1:a6:34:2d: 9b:a6:4a:a4:ea:b3:1d:60:5d:a1:02:eb:9c:73:63: dc:eb:ac:c9:6f:44:e4:8b:75:97:92:72:29:43:8a: c5:96:1a:4a:97:0b:18:9d:75:28:53:78:22:d1:71: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B4:00:DB:42:54:F9:3B:62:A0:6B:BD:C0:74:30:70:B4:E1:7E:B7 X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e5:a0:c5:35:03:0b:4d:fb:b4:a7:55:61:63:bb:59:f4:3a: 8e:f9:e4:66:77:7b:cf:1b:0e:15:bb:ce:5c:47:43:66:95:19: eb:d4:80:3b:e2:90:de:db:7f:a2:91:12:76:8a:ad:14:e1:8e: 44:bd:e2:05:bf:e4:8c:be:59:25:66:1a:cf:2d:ad:84:2f:85: e1:9c:ca:4b:c3:b8:34:b2:32:91:68:67:97:b7:05:ac:e5:d3: 8c:05:de:7e:7b:61:1f:95:29:11:c1:79:8a:8f:91:77:cc:76: 24:89:13:60:4a:3d:16:a6:a7:82:f2:1e:d7:b5:b3:ce:76:e4: b4:8f:17:c7:5b:92:ad:4d:7a:cb:22:e6:75:1b:80:ef:7d:86: 36:ff:00:41:d1:d3:e2:0c:fd:84:d2:5e:ad:e2:a2:7e:ce:00: 6d:12:6f:fe:8e:04:af:9c:59:28:21:11:a5:03:1a:53:9d:e5: bd:56:56:30:95:18:39:6c:a5:1c:45:33:c6:37:0a:26:3a:03: dc:b8:41:25:c0:ba:34:99:ff:4b:95:81:e3:13:85:f4:2e:55: 3d:d8:43:2c:6b:25:62:47:d1:86:a4:b4:59:bb:c3:87:3b:e5: 5c:54:a4:36:7c:10:73:8b:cb:3a:f9:70:5f:3f:4a:7c:75:43: f6:49:b4:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjA0MTcwODIwMTBaFw0yNjA0MjQwODIwMTBaMBgxFjAUBgNV BAMTDTY5ZTFlZDNiLTc0YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDglZaJFK/GV2Wi1S2gz4LnYRAwKXXaLXfGgeXJxxmaqm2yXCF4qtrBdTDlnAaN WdLyn1mXiMRTTKzMSX2PVSVXI0GdTMxUbW7+y6Gz47y3KUCQsUK31870VDYjKGWm iBE7wRQC+sorbEnVTkppbxr2YNptukniLoYDXnRXD4v1zX5IWZxnBZfHIk2f6Hkh KI3lyBGurwYBWQD++sTx39Jv1y3ifRqwkgp8QaZjaI9pz8UvVaWCL1nea7kpH0+p W3aeNTu/XGwzuLWK/thCsaY0LZumSqTqsx1gXaEC65xzY9zrrMlvROSLdZeScilD isWWGkqXCxiddShTeCLRcQV/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcrQA20JU +TtioGu9wHQwcLThfrcwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCK5aDFNQMLTfu0p1VhY7tZ9DqO+eRmd3vPGw4Vu85cR0NmlRnr1IA74pDe23+i kRJ2iq0U4Y5EveIFv+SMvlklZhrPLa2EL4XhnMpLw7g0sjKRaGeXtwWs5dOMBd5+ e2EflSkRwXmKj5F3zHYkiRNgSj0WpqeC8h7XtbPOduS0jxfHW5KtTXrLIuZ1G4Dv fYY2/wBB0dPiDP2E0l6t4qJ+zgBtEm/+jgSvnFkoIRGlAxpTneW9VlYwlRg5bKUc RTPGNwomOgPcuEElwLo0mf9LlYHjE4X0LlU92EMsayViR9GGpLRZu8OHO+VcVKQ2 fBBzi8s6+XBfP0p8dUP2SbTr -----END CERTIFICATE-----Generated at Fri Apr 17 11:49:57 2026 by rpki-client