$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: JpYSb/1ykfSs459sRqmkjvV5dr4hdMkyYdRjZKsd5Tw= Subject key identifier: 42:9A:DA:DF:5D:A5:4C:C3:C2:74:5A:3B:3B:43:97:D4:57:16:40:BE Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 0210 Signing time: Fri 17 Apr 2026 02:46:10 +0000 Manifest this update: Fri 17 Apr 2026 02:46:09 +0000 Manifest next update: Fri 24 Apr 2026 02:46:09 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: /25agqkzRYrSJYZjZpOrbfHMokVsTYts5ootv5A1VcM=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: jH3pUBKK5O5PFYi47D0568PqN1VNWUwbSLEuD5F8T1Q=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: zz0/+1mPK1uuhtSz3L6I5TM++EHZrh4Brc7QpBBGUqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Apr 17 02:46:09 2026 GMT Not After : Apr 24 02:46:09 2026 GMT Subject: CN=69e19ef1-b5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:a5:43:6a:d7:47:c0:d3:6d:83:73:1a:d7: 5a:02:65:d4:b5:b1:ad:28:a2:50:15:d9:b6:89:af: b2:28:fc:c8:07:6f:7e:43:9e:2b:48:51:a6:22:8d: 57:4b:5f:71:f9:70:f3:b9:37:fd:6a:54:84:ee:1f: e3:48:bc:f1:e8:40:98:3c:7d:5f:60:57:ba:1f:ed: c8:a3:d5:f5:12:30:a1:28:34:31:d5:b2:75:08:09: 28:11:fe:82:a3:2a:26:d6:f4:b7:ae:76:db:3a:cf: 65:10:4b:f1:2a:4a:6a:fa:b8:eb:9e:2e:aa:52:fc: 13:d6:3f:93:b0:4b:ce:f5:34:a6:b1:0f:40:83:79: 64:47:0b:e3:d1:9e:e9:9f:91:19:9f:a3:e7:1b:db: ab:91:44:fd:83:7f:dc:70:44:41:c0:eb:72:02:ea: 57:b5:24:4f:d4:ba:d3:f7:9e:f7:56:7c:7c:bd:4d: 8c:83:53:6f:9f:fe:3c:1b:25:c9:1f:09:7c:32:90: 56:80:b1:28:cf:43:fc:70:ac:0b:70:4f:cc:9b:17: 38:e8:6d:dc:3e:5c:8e:68:ba:34:1b:98:41:10:6d: 62:5c:25:32:f2:35:f3:6b:25:eb:ca:13:e9:0c:28: 78:12:12:93:6e:66:2a:87:31:5c:25:0c:83:b2:c6: 76:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9A:DA:DF:5D:A5:4C:C3:C2:74:5A:3B:3B:43:97:D4:57:16:40:BE X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6f:d1:db:d8:0f:cc:00:56:16:0a:eb:a5:f9:5c:88:2e:f2: 5a:89:a7:4b:bb:31:a6:61:54:59:5f:5f:c0:0d:78:e2:7c:e2: 41:ad:56:ce:be:71:d5:9d:6b:68:1e:09:93:79:a6:15:45:22: 20:74:19:6a:03:be:1d:c4:64:42:47:df:24:9d:c0:51:d5:55: 1d:ec:9c:96:b4:8a:08:2a:4f:de:f4:64:13:89:83:2e:68:e8: 4a:59:44:22:da:6f:64:ad:cb:40:07:b8:8f:7d:20:2c:4b:d7: 0e:98:64:12:67:7e:5e:b5:06:e2:3c:9b:f2:18:80:22:00:0d: 0f:21:c5:e9:34:29:94:44:4d:36:1e:99:fa:63:ec:e4:2b:5f: f6:a7:d3:76:03:ba:16:c0:dc:11:b9:f0:fd:79:aa:11:1d:71: 6c:23:55:a7:4e:af:3d:38:b5:8c:94:98:c7:e5:af:97:f8:7b: 45:fe:c3:e9:0c:e1:aa:74:d8:9f:94:99:31:36:a2:6f:41:f0: b2:eb:26:77:90:d6:08:88:00:71:34:f6:47:9e:e3:86:f9:28: e9:cd:1b:f4:0a:b1:92:5b:5e:ba:6d:fa:6b:31:2d:a8:28:4e: 05:00:27:fb:49:ee:f7:ef:54:1c:aa:47:3d:58:3a:e6:90:c4: e7:25:2d:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjYwNDE3MDI0NjA5WhcNMjYwNDI0MDI0NjA5WjAYMRYwFAYD VQQDEw02OWUxOWVmMS1iNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkzalQ2rXR8DTbYNzGtdaAmXUtbGtKKJQFdm2ia+yKPzIB29+Q54rSFGmIo1X S19x+XDzuTf9alSE7h/jSLzx6ECYPH1fYFe6H+3Io9X1EjChKDQx1bJ1CAkoEf6C oyom1vS3rnbbOs9lEEvxKkpq+rjrni6qUvwT1j+TsEvO9TSmsQ9Ag3lkRwvj0Z7p n5EZn6PnG9urkUT9g3/ccERBwOtyAupXtSRP1LrT9573Vnx8vU2Mg1Nvn/48GyXJ Hwl8MpBWgLEoz0P8cKwLcE/Mmxc46G3cPlyOaLo0G5hBEG1iXCUy8jXzayXryhPp DCh4EhKTbmYqhzFcJQyDssZ2GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKa2t9d pUzDwnRaOztDl9RXFkC+MB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOW/R29gPzABWFgrrpflciC7yWomnS7sxpmFUWV9fwA144nziQa1Wzr5x1Z1r aB4Jk3mmFUUiIHQZagO+HcRkQkffJJ3AUdVVHeyclrSKCCpP3vRkE4mDLmjoSllE ItpvZK3LQAe4j30gLEvXDphkEmd+XrUG4jyb8hiAIgANDyHF6TQplERNNh6Z+mPs 5Ctf9qfTdgO6FsDcEbnw/XmqER1xbCNVp06vPTi1jJSYx+Wvl/h7Rf7D6QzhqnTY n5SZMTaib0Hwsusmd5DWCIgAcTT2R57jhvko6c0b9Aqxklteum36azEtqChOBQAn +0nu9+9UHKpHPVg65pDE5yUtjA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:33:45 2026 by rpki-client