$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: 876Ba5XT1ObJQU7jWpWYEcUmokdg/2mGHrIgjW86eyw= Subject key identifier: 49:DB:CC:FF:40:E8:85:B6:4D:AA:6B:DB:07:C5:B2:82:F6:FF:4E:37 Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 120D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 1203 Signing time: Thu 16 Apr 2026 17:05:04 +0000 Manifest this update: Thu 16 Apr 2026 17:05:03 +0000 Manifest next update: Thu 23 Apr 2026 17:05:03 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: Plc+VF1IhtbXIzYJAV8f2zBx84LElY2YDn7c+CYqRlA=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4621 (0x120d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Apr 16 17:05:03 2026 GMT Not After : Apr 23 17:05:03 2026 GMT Subject: CN=69e116bf-55a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:19:9c:41:d0:bb:1b:e7:31:82:e6:04:57: ab:95:e4:0c:40:59:43:48:d1:da:47:42:38:b7:91: 1b:6c:42:26:1a:d4:35:fc:ad:1b:5a:78:8b:a0:d6: 2a:40:3d:1c:43:3e:b6:6a:62:37:ec:c9:c6:e6:05: 41:1a:c3:34:cd:04:6f:7c:08:ad:59:a6:a5:e4:ce: c0:c2:f6:99:b1:0c:b3:65:02:90:83:bb:96:55:c2: d3:02:e5:3d:bb:09:5a:7f:ec:6b:83:87:7e:1e:48: 09:8e:29:c4:3f:22:04:64:ea:0a:0f:99:84:68:9e: a9:d3:7b:1e:63:d7:a0:33:d8:79:e3:d1:44:5c:2e: c8:16:5e:67:12:b8:7b:69:e5:08:d9:99:3c:71:00: f2:99:28:f8:94:0f:1f:30:df:b5:b2:61:60:19:7e: 05:90:c0:55:2e:fc:b0:15:f9:66:1b:b1:b3:b1:4d: ca:67:c5:25:da:7d:cf:c2:5b:ff:88:da:0f:2a:92: ab:bc:cf:24:f1:99:08:16:a1:2c:3c:30:e0:9c:02: fa:8f:34:66:50:2f:7a:c4:ba:7a:d5:98:6a:2a:f5: 03:85:f9:54:0c:45:8c:72:d1:7b:5e:92:2c:a8:5c: 0e:f6:e8:d8:a7:57:7e:ce:ee:16:8a:fa:3a:dc:e8: 2d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DB:CC:FF:40:E8:85:B6:4D:AA:6B:DB:07:C5:B2:82:F6:FF:4E:37 X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7a:af:e8:3f:9f:88:8e:62:aa:a8:27:4d:ca:80:b1:5b:7f: 84:be:72:1c:c9:05:a9:bb:28:97:af:99:60:f4:2e:44:2e:5d: 69:cb:80:ad:66:c7:e1:df:13:9d:4a:49:8c:a3:25:70:02:3e: 38:88:2d:60:c7:46:6d:c8:ea:92:d5:b9:9b:3e:3d:e9:07:dd: ba:83:7d:d8:9a:9c:19:33:67:8f:af:8f:bc:17:9b:51:3e:61: cb:7d:aa:fb:5a:4f:4b:5a:65:cf:58:bd:e3:ac:f3:60:80:c2: fa:d1:2e:0c:38:87:bb:88:02:49:46:a2:c5:06:f5:9a:fe:c2: 74:b1:74:13:44:66:09:88:64:09:df:ee:ab:bf:2f:96:26:d5: fd:a4:55:f8:b6:a5:b5:fb:0a:bb:a0:43:ec:db:35:98:e2:00: 45:c9:9f:28:64:8b:77:c3:a3:18:c6:e2:34:18:5b:1d:51:5b: 52:38:a8:a8:ca:55:1b:76:b6:57:b1:58:ec:81:c8:89:95:ce: 8c:0c:0e:b3:ff:15:78:90:e0:cb:63:89:e1:2b:f1:54:fb:ad: 69:f3:10:19:ce:63:5e:6a:d4:f0:63:96:f8:51:d8:2e:22:d7: 88:51:8e:32:fc:9f:f9:b2:7d:9d:2a:ab:f3:e1:8c:b0:d6:b0: a2:a8:a5:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjYwNDE2MTcwNTAzWhcNMjYwNDIzMTcwNTAzWjAYMRYwFAYD VQQDEw02OWUxMTZiZi01NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8kZnEHQuxvnMYLmBFerleQMQFlDSNHaR0I4t5EbbEImGtQ1/K0bWniLoNYq QD0cQz62amI37MnG5gVBGsM0zQRvfAitWaal5M7AwvaZsQyzZQKQg7uWVcLTAuU9 uwlaf+xrg4d+HkgJjinEPyIEZOoKD5mEaJ6p03seY9egM9h549FEXC7IFl5nErh7 aeUI2Zk8cQDymSj4lA8fMN+1smFgGX4FkMBVLvywFflmG7GzsU3KZ8Ul2n3Pwlv/ iNoPKpKrvM8k8ZkIFqEsPDDgnAL6jzRmUC96xLp61ZhqKvUDhflUDEWMctF7XpIs qFwO9ujYp1d+zu4Wivo63Ogt1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnbzP9A 6IW2Tapr2wfFsoL2/043MB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOHqv6D+fiI5iqqgnTcqAsVt/hL5yHMkFqbsol6+ZYPQuRC5dacuArWbH4d8T nUpJjKMlcAI+OIgtYMdGbcjqktW5mz496QfduoN92JqcGTNnj6+PvBebUT5hy32q +1pPS1plz1i946zzYIDC+tEuDDiHu4gCSUaixQb1mv7CdLF0E0RmCYhkCd/uq78v libV/aRV+LaltfsKu6BD7Ns1mOIARcmfKGSLd8OjGMbiNBhbHVFbUjioqMpVG3a2 V7FY7IHIiZXOjAwOs/8VeJDgy2OJ4SvxVPutafMQGc5jXmrU8GOW+FHYLiLXiFGO Mvyf+bJ9nSqr8+GMsNawoqilWg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:35:17 2026 by rpki-client