$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft File: 3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json) Hash identifier: prMwqAYTseMUgOUAelA66o+cEehM40JKGtc0BebiJyw= Subject key identifier: A2:59:03:0F:A1:61:96:F1:A0:CC:93:62:A0:95:F1:95:6C:6C:14:9C Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 Certificate issuer: /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft Manifest number: 29 Signing time: Fri 17 Apr 2026 08:28:54 +0000 Manifest this update: Fri 17 Apr 2026 08:28:53 +0000 Manifest next update: Fri 24 Apr 2026 08:28:53 +0000 Files and hashes: 1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: 2U863EPBh1/w0MuPmcdlRWLr+h+AZykuYZiH7aDYJcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Validity Not Before: Apr 17 08:28:53 2026 GMT Not After : Apr 24 08:28:53 2026 GMT Subject: CN=69e1ef45-640a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:24:1e:d0:53:ab:6c:00:6a:2c:5b:44:63: f3:77:16:59:d9:ef:1e:e9:53:7b:4e:d4:7c:9b:41: 6c:54:12:7a:9a:e8:3d:02:dd:c0:39:86:af:94:30: 42:2d:02:c6:65:ed:f5:ab:22:0b:e6:a2:88:cb:d3: 2e:04:0d:33:13:49:38:02:54:e7:b8:1b:28:cb:5d: 89:59:25:0e:a5:f9:8d:25:d0:9c:9b:e0:2b:60:47: 41:1d:2a:1e:20:5d:8a:47:33:61:4d:e0:c1:81:59: 53:02:09:44:9a:73:13:31:4d:56:0a:3b:9c:dd:5a: 33:d3:97:0e:74:89:a2:e3:27:a0:1c:3a:8f:66:5a: b9:36:33:a6:4c:2d:84:22:51:fb:ed:94:c3:69:e0: 52:33:3b:29:c4:59:ec:bf:82:18:f7:85:1e:3b:b5: e7:0a:93:e3:80:e6:1e:9b:59:e2:ad:49:b7:85:13: 4f:d0:35:c0:e1:3c:8a:fd:d2:57:25:ec:3a:2d:0b: cc:ae:6e:bd:a1:42:10:a5:46:f0:81:6c:d4:42:b3: c5:c1:1c:ab:b4:b9:2f:27:99:bd:e8:21:7d:f0:7b: 10:b7:24:21:58:09:da:fe:75:3f:5f:17:04:fe:53: 4a:f3:be:2b:2e:b1:3a:3b:e3:36:14:94:3c:09:9c: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:59:03:0F:A1:61:96:F1:A0:CC:93:62:A0:95:F1:95:6C:6C:14:9C X509v3 Authority Key Identifier: keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:59:0b:19:35:34:92:a1:ed:73:fa:14:08:6a:7e:07:2d:bf: cb:fa:ff:96:ef:16:d1:d4:bc:67:93:ec:76:25:70:ae:ca:99: c9:ef:06:9a:75:c9:da:fc:09:25:f8:90:81:82:78:14:b5:b8: 4e:10:c6:d4:07:a2:b1:5c:9b:af:71:f9:22:89:0d:e6:87:8e: 86:d9:e4:72:49:df:00:5b:b4:fd:34:c0:b5:00:5e:62:49:76: 9e:31:12:32:10:02:ad:44:2f:cc:de:9f:b0:e2:0a:cc:fc:41: 2e:66:bc:ea:c7:32:5c:bd:53:4a:68:a6:a9:3c:0f:5a:e3:ef: 4f:98:ac:a1:f6:8a:12:2d:a5:b2:ab:c6:21:b2:af:97:b5:26: 9d:38:35:f7:fe:b8:0e:55:7f:50:5c:f0:3e:15:a5:7c:65:30: f4:d3:66:11:eb:bc:56:5f:c8:dd:7f:d2:9d:25:2b:6f:ca:70: bf:7c:2e:25:24:d1:87:25:1f:de:c9:9a:21:d4:88:d7:21:1b: 42:07:0d:df:fd:99:98:6b:43:bf:31:77:00:36:7c:04:cb:d6: bc:d5:ab:ab:50:7a:fa:2a:45:18:3e:68:07:0b:11:6c:67:4e: 1a:69:28:be:d3:a7:02:eb:8e:a5:1c:66:66:56:a0:f2:41:23: c6:af:b0:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoREQwQUQyREU0QTc0NEQxQTMzQjExQkI2QUJEN0U2RUFD RUZEQzA4NTAeFw0yNjA0MTcwODI4NTNaFw0yNjA0MjQwODI4NTNaMBgxFjAUBgNV BAMTDTY5ZTFlZjQ1LTY0MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ1iQe0FOrbABqLFtEY/N3FlnZ7x7pU3tO1HybQWxUEnqa6D0C3cA5hq+UMEIt AsZl7fWrIgvmoojL0y4EDTMTSTgCVOe4GyjLXYlZJQ6l+Y0l0Jyb4CtgR0EdKh4g XYpHM2FN4MGBWVMCCUSacxMxTVYKO5zdWjPTlw50iaLjJ6AcOo9mWrk2M6ZMLYQi UfvtlMNp4FIzOynEWey/ghj3hR47tecKk+OA5h6bWeKtSbeFE0/QNcDhPIr90lcl 7DotC8yubr2hQhClRvCBbNRCs8XBHKu0uS8nmb3oIX3wexC3JCFYCdr+dT9fFwT+ U0rzvisusTo74zYUlDwJnDfpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUolkDD6Fh lvGgzJNioJXxlWxsFJwwHwYDVR0jBBgwFoAU3QrS3kp0TRozsRu2q9fm6s79wIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzY1MEQwMEY2MDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJvenNSdTJxOWZtNnM3OXdJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1FyUzNrcDBUUm96c1J1MnE5Zm02czc5d0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzY1MEQwMEY2MDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJv enNSdTJxOWZtNnM3OXdJVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfWQsZNTSSoe1z+hQIan4HLb/L+v+W7xbR1Lxnk+x2JXCuypnJ7waadcna/Akl +JCBgngUtbhOEMbUB6KxXJuvcfkiiQ3mh46G2eRySd8AW7T9NMC1AF5iSXaeMRIy EAKtRC/M3p+w4grM/EEuZrzqxzJcvVNKaKapPA9a4+9PmKyh9ooSLaWyq8Yhsq+X tSadODX3/rgOVX9QXPA+FaV8ZTD002YR67xWX8jdf9KdJStvynC/fC4lJNGHJR/e yZoh1IjXIRtCBw3f/ZmYa0O/MXcANnwEy9a81aurUHr6KkUYPmgHCxFsZ04aaSi+ 06cC646lHGZmVqDyQSPGr7Bo -----END CERTIFICATE-----Generated at Fri Apr 17 13:24:22 2026 by rpki-client