$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft File: 3yKppXt9OorrEk1pDHkXBmtNtZ4.mft (raw, json) Hash identifier: bokPzTwgcUqzA9RyX/lxyO8GHB9T1c3ZqDOloXc95qo= Subject key identifier: D8:17:B8:1F:DA:D9:25:EE:8A:71:09:57:7D:17:9B:87:CB:B0:03:60 Authority key identifier: DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E Certificate issuer: /CN=A91DE19B/serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft Manifest number: 6E Signing time: Fri 17 Apr 2026 07:39:52 +0000 Manifest this update: Fri 17 Apr 2026 07:39:52 +0000 Manifest next update: Fri 24 Apr 2026 07:39:52 +0000 Files and hashes: 1: 3yKppXt9OorrEk1pDHkXBmtNtZ4.crl (hash: MZxyrcULOWPVr+jDiSKtImlwNGzh/ER8M7LNMmKTYxs=) 2: DA06E7EAA37511F09017D760C4F9AE02.roa (hash: jDv+Js4PBwNUeHPmXEMSjePprI/MWg7gMm1K3QYqJ6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE19B, serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Validity Not Before: Apr 17 07:39:52 2026 GMT Not After : Apr 24 07:39:52 2026 GMT Subject: CN=69e1e3c8-721f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:92:cb:f3:07:bc:31:63:62:18:47:99:8e:6f: 28:04:ef:d1:38:9b:42:fc:81:0b:e8:04:4a:59:1a: 14:f4:47:f0:f8:b7:fa:d4:fa:15:77:63:58:fd:01: 74:ab:4b:9c:8e:cb:e1:70:5e:89:0f:47:c5:4d:f0: 35:a9:d6:9b:aa:69:00:c4:43:f2:ae:cc:92:6d:e8: 33:6f:af:fd:d6:d8:eb:40:95:c8:8f:20:a9:6c:6c: 1d:78:5a:84:06:92:70:da:fe:6b:7c:2d:91:99:c3: e2:af:f0:8f:72:8b:ee:4c:91:3d:e9:cc:f7:df:5d: 96:bb:c6:80:56:a8:c6:5a:4f:e0:58:70:a5:40:5d: d5:bd:df:28:5a:2b:c2:94:5e:ff:84:57:06:1e:10: ef:ad:7f:a1:c4:6b:f7:78:ed:f3:f0:2d:f1:d4:ec: f3:9a:32:aa:e5:e5:92:be:0d:72:a6:e4:ea:d8:4a: 62:6b:43:f7:9e:fe:b8:bc:1a:3f:40:41:7a:4a:2a: 7f:0d:a9:34:5b:eb:89:83:69:7c:13:89:7c:a8:f0: 96:c2:f0:36:40:ac:7d:d7:ce:00:51:06:d0:58:cd: c2:b0:eb:0a:d7:3f:03:30:5e:37:6d:70:2e:b4:a2: e1:13:e4:0b:a5:7c:10:2b:fc:85:e0:f8:1f:51:6e: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:B8:1F:DA:D9:25:EE:8A:71:09:57:7D:17:9B:87:CB:B0:03:60 X509v3 Authority Key Identifier: keyid:DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:34:37:84:08:e5:4d:30:12:fe:c5:ee:38:3d:f8:5a:45:45: c4:f1:12:3d:f8:f3:d5:37:ea:71:14:a7:f7:07:5d:1b:42:2a: 2d:7e:fb:f4:ae:49:86:93:43:6b:cd:b1:75:91:8c:3a:bf:ef: 74:54:17:7c:eb:1c:75:e5:94:76:cf:e1:b3:b3:bd:e1:3d:e0: ae:c7:e7:6c:37:a9:6f:ed:92:6b:53:4b:bb:37:f2:d8:0f:64: cf:db:65:d5:98:f9:22:6f:3e:1c:e4:2a:0e:15:be:ae:d5:f4: e9:86:ff:fe:de:b9:81:bd:c5:05:1b:64:8a:95:eb:cc:e0:c8: 16:f3:e1:35:26:9c:78:e0:ce:68:8d:19:6a:d1:6c:8f:a1:33: d0:74:79:01:0e:58:2e:44:bf:4e:ae:d7:9a:b3:78:4a:d5:34: 2a:9f:dc:9e:94:5e:cd:d6:17:d7:4b:76:0e:a2:84:fc:79:dc: 3f:ca:10:93:d0:b5:1a:c1:8b:36:c0:f2:a0:94:bf:8f:28:95: 89:e3:5c:37:76:c5:0e:dd:7a:2e:c1:37:79:87:8d:52:5e:31: 4a:c0:75:65:b5:00:68:15:2a:eb:e5:28:d1:9f:4b:13:12:a1: 88:b1:52:a6:ff:45:29:66:8e:7d:ec:b7:55:aa:08:61:e1:bb: 7d:30:0e:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTE5QjExMC8GA1UEBRMoREYyMkE5QTU3QjdEM0E4QUVCMTI0RDY5MEM3OTE3MDY2 QjREQjU5RTAeFw0yNjA0MTcwNzM5NTJaFw0yNjA0MjQwNzM5NTJaMBgxFjAUBgNV BAMTDTY5ZTFlM2M4LTcyMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdksvzB7wxY2IYR5mObygE79E4m0L8gQvoBEpZGhT0R/D4t/rU+hV3Y1j9AXSr S5yOy+FwXokPR8VN8DWp1puqaQDEQ/KuzJJt6DNvr/3W2OtAlciPIKlsbB14WoQG knDa/mt8LZGZw+Kv8I9yi+5MkT3pzPffXZa7xoBWqMZaT+BYcKVAXdW93yhaK8KU Xv+EVwYeEO+tf6HEa/d47fPwLfHU7POaMqrl5ZK+DXKm5OrYSmJrQ/ee/ri8Gj9A QXpKKn8NqTRb64mDaXwTiXyo8JbC8DZArH3XzgBRBtBYzcKw6wrXPwMwXjdtcC60 ouET5AulfBAr/IXg+B9Rbu+RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2Be4H9rZ Je6KcQlXfRebh8uwA2AwHwYDVR0jBBgwFoAU3yKppXt9OorrEk1pDHkXBmtNtZ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMTlCL0RBQjg1RTI4QTM3 MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29yckVrMXBESGtYQm10TnRa NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3lLcHBYdDlPb3JyRWsxcERIa1hCbXROdFo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MTlCL0RBQjg1RTI4QTM3MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29y ckVrMXBESGtYQm10TnRaNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCJNDeECOVNMBL+xe44PfhaRUXE8RI9+PPVN+pxFKf3B10bQiotfvv0rkmGk0Nr zbF1kYw6v+90VBd86xx15ZR2z+Gzs73hPeCux+dsN6lv7ZJrU0u7N/LYD2TP22XV mPkibz4c5CoOFb6u1fTphv/+3rmBvcUFG2SKlevM4MgW8+E1Jpx44M5ojRlq0WyP oTPQdHkBDlguRL9Orteas3hK1TQqn9yelF7N1hfXS3YOooT8edw/yhCT0LUawYs2 wPKglL+PKJWJ41w3dsUO3XouwTd5h41SXjFKwHVltQBoFSrr5SjRn0sTEqGIsVKm /0UpZo597LdVqghh4bt9MA7w -----END CERTIFICATE-----Generated at Fri Apr 17 21:04:54 2026 by rpki-client