$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: WztfDZE0oreTo1hv3B2k4TYqCF8JAgtfGwfRDmcLnpA= Subject key identifier: 05:20:6A:A5:61:6A:15:D3:2F:E5:68:79:56:22:EA:3E:05:AA:6E:FE Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0AEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0AE0 Signing time: Thu 16 Apr 2026 19:19:56 +0000 Manifest this update: Thu 16 Apr 2026 19:19:56 +0000 Manifest next update: Thu 23 Apr 2026 19:19:56 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: TGInhg+l4obgqJJnXEsJaqtf5p4vmwT5sxyEfclCueY=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2798 (0xaee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Apr 16 19:19:56 2026 GMT Not After : Apr 23 19:19:56 2026 GMT Subject: CN=69e1365c-60a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:28:7c:60:2f:3a:08:3f:a4:da:2b:50:b6: 64:22:59:8e:17:f9:ea:df:89:0b:f4:1d:69:b7:6a: c7:b5:12:e6:6c:29:19:d7:1f:7f:a6:d8:00:d2:ee: 01:8e:83:c0:cb:ab:b2:ac:ab:5f:97:b4:d6:ed:84: b9:e6:02:6f:9d:c7:d2:f5:30:2c:9e:3c:df:f0:18: bd:b5:4f:5e:26:71:0d:ad:ca:23:a6:1d:aa:17:5e: c4:f5:f0:89:7a:13:70:1b:19:f3:ba:38:1a:0c:2f: 0f:fb:28:9f:16:24:a1:50:c9:25:18:09:24:9f:b4: 2c:a3:47:30:44:2e:96:a6:0b:d1:1a:9f:bc:3a:b2: 89:bf:4f:4f:a9:05:36:4f:ff:0e:63:31:92:6d:83: 4b:13:ed:33:66:80:fe:15:d3:f1:b7:fa:48:7e:70: c6:37:02:75:03:a1:35:5b:63:9a:31:cd:dd:7e:3f: c6:13:16:e1:e0:9c:ad:d2:b8:a5:78:12:c1:d8:c4: 9e:49:5d:7b:34:24:e4:58:19:f5:ed:aa:e4:8d:08: c3:78:26:ca:d2:8e:1f:19:ce:83:ad:fe:b9:f0:dc: 20:86:2d:c1:ca:67:0e:8a:cc:87:04:50:a6:da:69: 91:78:03:54:cc:8d:78:13:af:4c:66:84:9b:e7:d9: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:20:6A:A5:61:6A:15:D3:2F:E5:68:79:56:22:EA:3E:05:AA:6E:FE X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:86:6e:83:3f:d1:be:1b:4f:86:fb:83:7e:e0:d8:fe:c5:a6: 04:a0:8e:c0:78:8d:f3:74:69:38:ee:96:2b:c6:85:58:93:cd: 45:de:3e:0a:ea:41:68:6e:69:5c:cc:f8:b3:d1:d3:3c:48:0b: fc:4d:13:fa:06:b8:84:64:36:19:30:57:dd:37:2f:2f:e2:07: 3b:b0:85:de:42:f7:ba:8b:74:2e:af:f1:79:7a:b9:29:fe:5a: d9:4f:71:dd:95:e3:f6:0a:61:fa:8e:1a:19:85:e7:6b:76:aa: f4:6f:1d:40:19:d9:7a:19:af:34:ec:c4:64:fe:c4:d2:31:0a: af:d5:9a:dc:83:a6:05:27:ef:4c:90:39:88:b8:1d:d0:75:2c: 33:ba:0e:fd:99:3c:19:39:55:b5:fc:3b:db:ab:17:e7:08:82: 40:23:25:87:1e:a6:e3:3c:7f:5e:8c:c3:30:08:af:46:af:a4: ce:0e:f6:98:c2:55:de:2b:72:6c:f6:50:7d:09:50:19:da:b1: c9:da:d0:90:ea:4c:ff:44:12:d3:8a:bd:1f:53:68:4e:88:ff: f3:7a:27:a7:2a:e1:9e:2d:69:b1:a5:bb:31:10:4b:8a:b5:e6: a5:65:fb:f1:59:38:20:e4:50:1a:f3:af:bf:12:1d:15:84:af: b2:f0:f0:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjYwNDE2MTkxOTU2WhcNMjYwNDIzMTkxOTU2WjAYMRYwFAYD VQQDEw02OWUxMzY1Yy02MGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbYofGAvOgg/pNorULZkIlmOF/nq34kL9B1pt2rHtRLmbCkZ1x9/ptgA0u4B joPAy6uyrKtfl7TW7YS55gJvncfS9TAsnjzf8Bi9tU9eJnENrcojph2qF17E9fCJ ehNwGxnzujgaDC8P+yifFiShUMklGAkkn7Qso0cwRC6WpgvRGp+8OrKJv09PqQU2 T/8OYzGSbYNLE+0zZoD+FdPxt/pIfnDGNwJ1A6E1W2OaMc3dfj/GExbh4Jyt0ril eBLB2MSeSV17NCTkWBn17arkjQjDeCbK0o4fGc6Drf658Nwghi3BymcOisyHBFCm 2mmReANUzI14E69MZoSb59k15wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUgaqVh ahXTL+VoeVYi6j4Fqm7+MB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhIZugz/RvhtPhvuDfuDY/sWmBKCOwHiN83RpOO6WK8aFWJPNRd4+CupBaG5p XMz4s9HTPEgL/E0T+ga4hGQ2GTBX3TcvL+IHO7CF3kL3uot0Lq/xeXq5Kf5a2U9x 3ZXj9gph+o4aGYXna3aq9G8dQBnZehmvNOzEZP7E0jEKr9Wa3IOmBSfvTJA5iLgd 0HUsM7oO/Zk8GTlVtfw726sX5wiCQCMlhx6m4zx/XozDMAivRq+kzg72mMJV3ity bPZQfQlQGdqxydrQkOpM/0QS04q9H1NoToj/83onpyrhni1psaW7MRBLirXmpWX7 8Vk4IORQGvOvvxIdFYSvsvDwVw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:42:24 2026 by rpki-client