$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: Ry87ksNl3A9pA5h18X0vq0ZDznVuihOi6kswedznx4U= Subject key identifier: E7:DC:F2:B1:A1:A9:1A:47:44:89:3D:47:4F:84:35:46:88:C7:56:FC Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 021B Signing time: Fri 17 Apr 2026 01:54:37 +0000 Manifest this update: Fri 17 Apr 2026 01:54:37 +0000 Manifest next update: Fri 24 Apr 2026 01:54:37 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: 02bluscitDyvlhc4nZR3vn6w6/Vl4ZaXsREQ4drljPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Apr 17 01:54:37 2026 GMT Not After : Apr 24 01:54:37 2026 GMT Subject: CN=69e192dd-1539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:22:4f:a2:d7:be:1a:b8:6a:f4:72:4b:b5: d1:2a:37:dd:9e:b4:41:09:47:42:f0:fe:61:69:43: 41:d5:fe:46:e7:e9:0d:4e:34:52:a7:4c:c5:d7:c0: 85:ee:fa:54:68:50:c2:c7:0e:4a:5e:35:cc:03:28: f1:b5:60:b0:c9:6e:8d:de:61:c5:86:87:ba:7c:d4: e5:ec:53:f6:3e:a0:67:72:db:59:00:0f:d8:82:84: 7d:f2:dc:10:73:ef:94:31:1a:bf:a6:17:76:87:fa: 08:10:1f:c4:e1:9e:6a:af:8f:2e:df:96:45:31:a1: e3:5b:22:dc:af:18:04:e2:9d:43:90:30:c4:d7:2e: 19:cb:bf:b5:f1:c4:b9:23:80:d1:b8:c4:1c:cd:56: 8b:d5:f3:c3:97:8e:23:aa:90:0f:62:ee:83:ff:86: c4:b9:14:31:98:91:96:2b:cb:1f:13:98:24:54:87: a9:d2:71:72:c4:36:0f:c6:9f:78:eb:f8:24:61:c5: 21:f0:2a:47:fc:4e:2c:16:6c:ea:cc:fc:a3:1f:6d: 9f:14:90:56:69:01:9a:5f:56:58:60:2f:25:cc:b6: 32:8a:c2:86:69:4c:85:72:73:b6:2a:42:3e:b3:d5: 63:d7:76:d4:c5:70:20:01:d5:c6:c5:36:b0:90:d8: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DC:F2:B1:A1:A9:1A:47:44:89:3D:47:4F:84:35:46:88:C7:56:FC X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:e5:75:56:83:d0:40:8e:a4:c5:a6:f3:55:ba:07:41:e4:8a: 57:bd:c3:d4:58:02:8c:a7:4d:26:b4:00:26:2f:de:9d:b2:2a: aa:80:ee:a4:a6:16:0d:50:e0:0c:cc:33:58:e9:76:0c:25:b5: 96:d4:7a:76:dd:0c:a1:07:5d:5e:f3:7e:0a:10:4e:3a:a6:6d: 62:44:e5:db:dc:2b:58:f5:7b:49:56:f2:ee:57:ff:80:d1:aa: ed:df:be:bc:83:d8:87:f9:d7:87:5c:26:9a:10:6f:5a:6c:16: 45:29:06:fa:6d:ab:cd:4d:7d:1d:a9:9a:3d:30:eb:ce:32:d1: e5:2e:e2:57:9d:34:54:43:1e:b6:2c:59:49:a4:52:81:33:a7: fe:6e:86:47:ac:22:ee:00:0d:42:e5:5e:74:0c:c6:ff:49:06: 13:b1:01:6f:2e:e5:84:2a:c9:8d:db:57:54:e5:58:80:66:f6: 06:d7:83:af:9c:7a:da:d0:7c:d9:48:e5:ee:25:50:4d:75:2b: a7:16:4f:e9:01:39:95:38:51:02:71:8b:43:de:e4:e6:58:44: e4:15:45:53:7b:c3:3b:06:86:97:92:04:f5:30:6f:ed:6e:09: c3:0c:f3:c2:10:42:5b:c0:b0:68:c2:a3:38:2b:fb:88:76:3a: 82:71:06:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjYwNDE3MDE1NDM3WhcNMjYwNDI0MDE1NDM3WjAYMRYwFAYD VQQDEw02OWUxOTJkZC0xNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn60iT6LXvhq4avRyS7XRKjfdnrRBCUdC8P5haUNB1f5G5+kNTjRSp0zF18CF 7vpUaFDCxw5KXjXMAyjxtWCwyW6N3mHFhoe6fNTl7FP2PqBncttZAA/YgoR98twQ c++UMRq/phd2h/oIEB/E4Z5qr48u35ZFMaHjWyLcrxgE4p1DkDDE1y4Zy7+18cS5 I4DRuMQczVaL1fPDl44jqpAPYu6D/4bEuRQxmJGWK8sfE5gkVIep0nFyxDYPxp94 6/gkYcUh8CpH/E4sFmzqzPyjH22fFJBWaQGaX1ZYYC8lzLYyisKGaUyFcnO2KkI+ s9Vj13bUxXAgAdXGxTawkNhi5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfc8rGh qRpHRIk9R0+ENUaIx1b8MB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkeV1VoPQQI6kxabzVboHQeSKV73D1FgCjKdNJrQAJi/enbIqqoDupKYWDVDg DMwzWOl2DCW1ltR6dt0MoQddXvN+ChBOOqZtYkTl29wrWPV7SVby7lf/gNGq7d++ vIPYh/nXh1wmmhBvWmwWRSkG+m2rzU19HamaPTDrzjLR5S7iV500VEMetixZSaRS gTOn/m6GR6wi7gANQuVedAzG/0kGE7EBby7lhCrJjdtXVOVYgGb2BteDr5x62tB8 2Ujl7iVQTXUrpxZP6QE5lThRAnGLQ97k5lhE5BVFU3vDOwaGl5IE9TBv7W4Jwwzz whBCW8CwaMKjOCv7iHY6gnEG/g== -----END CERTIFICATE-----Generated at Fri Apr 17 08:10:56 2026 by rpki-client