$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: xTDO5vzwclH40OlGvweafDRHYq8ognKKhVjkIwOKzBc= Subject key identifier: F7:48:D9:D5:52:08:45:AB:22:19:E8:C6:27:B2:46:E4:EA:B2:88:18 Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 0887 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 0860 Signing time: Thu 16 Apr 2026 20:46:39 +0000 Manifest this update: Thu 16 Apr 2026 20:46:39 +0000 Manifest next update: Thu 23 Apr 2026 20:46:39 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: LEeZoBpv4xIbf6NBjEz8dHQkSu83x6ZvMHhsTw/Wf5w=) 2: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: F6LSRzHnrTo7J01sXjb7AoMVO+sTd3XP3ZGtjca+Bu8=) 3: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: ySJ9f4a7cg7BoSELqx9I/0KDLVkwX9/nfnRYeM6OTmg=) 4: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: mEYTlHG5kpWGqAptPr16SuSTKtrgl88+S1qWS3rlZ1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2183 (0x887) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Apr 16 20:46:39 2026 GMT Not After : Apr 23 20:46:39 2026 GMT Subject: CN=69e14aaf-4e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:52:bf:e4:09:17:1c:11:a6:53:39:ed:e8: 7e:1b:62:39:82:7e:ff:9e:2a:f2:4d:ea:0d:80:10: b8:b3:2f:77:b9:60:a5:85:30:fb:2f:95:2d:70:e4: e4:6c:59:c8:db:d7:47:13:48:34:d9:4c:b0:30:c1: b9:a5:f1:4f:32:de:70:1b:07:a4:d5:54:59:c5:18: e4:73:62:66:2b:46:74:38:69:c6:e5:9b:57:d3:4e: d0:e4:ab:36:c3:ac:a4:45:9a:1e:5e:28:39:94:d4: 2f:b0:41:11:89:25:2c:0b:74:78:c9:17:09:12:cd: f0:74:55:81:3b:09:1c:f4:73:84:fd:36:4c:5e:6a: 2b:76:da:7c:78:6c:e5:ea:72:5a:60:c4:34:e3:e3: a1:4c:01:8b:4d:4e:60:55:2a:e3:5d:f2:46:6b:c4: c7:7f:37:40:d8:ce:1e:cd:d7:7e:7d:a4:e6:5a:b5: e1:2b:c5:b0:4d:3d:6d:64:be:92:c5:2c:99:06:df: 0d:e7:79:d9:c3:86:5a:bd:ac:52:e6:27:25:9c:f1: b6:8a:32:43:d1:f6:19:67:2e:50:9c:e1:ad:f9:e9: d3:7a:c3:12:e4:62:e2:2c:92:4f:76:5f:2f:a0:12: 1c:41:ff:66:2d:9a:0b:a1:ff:13:d8:0f:1b:f0:83: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:48:D9:D5:52:08:45:AB:22:19:E8:C6:27:B2:46:E4:EA:B2:88:18 X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2d:d0:ac:2e:43:80:5f:48:cb:10:5b:83:da:3f:b2:54:9e: 72:1b:29:94:ad:3a:d5:7b:66:c4:84:fb:3d:38:3e:f2:d8:4f: a4:0a:c5:d8:95:18:f5:90:c0:fa:5c:b0:ff:02:d9:3c:7b:95: 57:91:7f:ab:d2:e5:73:ce:e9:e4:15:eb:dc:03:10:28:dd:29: 90:7a:77:4d:35:75:9c:3b:a4:25:d4:e7:ac:09:89:e1:4e:66: c3:6b:4f:69:41:09:53:43:41:04:3a:cf:5a:ce:49:11:a9:69: 45:de:f9:f2:ee:d5:a8:51:d3:c1:e8:6b:5e:51:63:0d:ce:70: 12:9a:19:bd:76:ad:17:fd:e4:70:ab:c2:76:e6:f4:77:e0:d6: 13:31:7e:4c:73:80:ac:6c:70:e8:da:58:c0:9f:df:70:90:bd: 4c:ff:e4:5c:fe:d9:11:68:e2:cb:aa:12:75:a8:43:1a:13:0f: 1d:ed:bc:32:e3:32:3e:b2:e1:01:b6:fa:f5:1a:6f:ef:c6:5a: 07:0b:e5:3e:da:1c:cd:cf:d4:68:96:a7:5c:0e:91:d8:05:19: d0:4f:dc:d9:4b:85:65:a1:87:ef:3b:ba:ce:fc:4d:61:1b:7d: d6:8b:90:c9:1a:5a:09:97:41:b9:bd:98:eb:a3:bc:7e:26:1a: aa:99:0f:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwNDE2MjA0NjM5WhcNMjYwNDIzMjA0NjM5WjAYMRYwFAYD VQQDEw02OWUxNGFhZi00ZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C9Sv+QJFxwRplM57eh+G2I5gn7/niryTeoNgBC4sy93uWClhTD7L5UtcOTk bFnI29dHE0g02UywMMG5pfFPMt5wGwek1VRZxRjkc2JmK0Z0OGnG5ZtX007Q5Ks2 w6ykRZoeXig5lNQvsEERiSUsC3R4yRcJEs3wdFWBOwkc9HOE/TZMXmordtp8eGzl 6nJaYMQ04+OhTAGLTU5gVSrjXfJGa8THfzdA2M4ezdd+faTmWrXhK8WwTT1tZL6S xSyZBt8N53nZw4ZavaxS5iclnPG2ijJD0fYZZy5QnOGt+enTesMS5GLiLJJPdl8v oBIcQf9mLZoLof8T2A8b8IPL8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdI2dVS CEWrIhnoxieyRuTqsogYMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvS3QrC5DgF9IyxBbg9o/slSechsplK061XtmxIT7PTg+8thPpArF2JUY9ZDA +lyw/wLZPHuVV5F/q9Llc87p5BXr3AMQKN0pkHp3TTV1nDukJdTnrAmJ4U5mw2tP aUEJU0NBBDrPWs5JEalpRd758u7VqFHTwehrXlFjDc5wEpoZvXatF/3kcKvCdub0 d+DWEzF+THOArGxw6NpYwJ/fcJC9TP/kXP7ZEWjiy6oSdahDGhMPHe28MuMyPrLh Abb69Rpv78ZaBwvlPtoczc/UaJanXA6R2AUZ0E/c2UuFZaGH7zu6zvxNYRt91ouQ yRpaCZdBub2Y66O8fiYaqpkPdQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:00:56 2026 by rpki-client