$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: RLSZB/tUpdvf7RAFydMIsv217wRvQSh/ErKDOUQaAEc= Subject key identifier: EE:E4:68:11:B6:3A:31:DA:7A:4D:D2:81:5F:20:6B:B3:0C:51:6B:EE Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: 0136 Signing time: Fri 17 Apr 2026 05:10:46 +0000 Manifest this update: Fri 17 Apr 2026 05:10:45 +0000 Manifest next update: Fri 24 Apr 2026 05:10:45 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: +pGGgacafqzBJ3KimAG3+z0ocfOxchl/STMgtJ8l5ns=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: rjCr6k0hES4hJ4HPyOEdmEOZBWpRclb2qE3oqjX2XnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Apr 17 05:10:45 2026 GMT Not After : Apr 24 05:10:45 2026 GMT Subject: CN=69e1c0d5-6974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:4f:0e:98:78:b6:08:51:70:c6:7f:5e:1a: a2:fb:28:51:31:86:c4:e4:e3:af:c7:05:5e:4d:a9: d3:9b:16:7b:89:0f:83:76:cb:86:fd:c0:0a:2a:e4: 68:32:8f:8f:91:7c:dd:22:af:de:c5:7d:e2:93:d1: 70:9e:89:7c:11:58:0b:4d:6c:82:8b:44:10:0a:ed: ef:1d:df:8d:02:54:72:93:4b:22:3b:bc:08:24:b1: 10:b8:b3:da:da:b6:52:19:49:91:79:d8:9e:b1:f5: f7:41:8c:31:b0:ec:26:d6:b8:a9:44:9c:5e:63:93: 6a:17:dc:dc:b0:8e:d8:cf:b0:72:60:70:19:16:37: 78:92:ac:eb:ec:45:d6:b9:b4:03:39:8b:69:4d:a4: ed:8c:ef:bc:6f:03:6d:a0:0a:69:fb:20:ab:88:fb: c5:36:64:f4:82:bd:ec:8e:54:23:23:6b:8c:4f:f4: cd:18:16:81:d6:55:a7:5e:42:ad:36:a4:53:b5:d9: af:fe:bd:e6:ab:d0:60:ff:d3:7c:c6:b7:66:7a:e4: ec:12:8c:20:9c:b2:47:4f:28:85:fb:14:43:7c:48: a2:2b:ce:2c:18:bb:d0:38:f7:6f:34:59:28:56:c6: cf:fb:0c:10:03:66:0b:12:ec:29:3f:8f:a9:b9:6d: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E4:68:11:B6:3A:31:DA:7A:4D:D2:81:5F:20:6B:B3:0C:51:6B:EE X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b4:08:e3:d2:f0:0e:86:23:10:e2:3d:e4:f8:3a:2f:24:85: 91:42:af:ea:b8:40:a4:f9:2c:1d:62:79:b4:c7:44:39:a4:62: 79:4c:46:11:43:b4:03:48:a3:c6:16:43:5b:e2:0a:45:24:a1: f2:42:42:12:a5:29:6a:29:c9:53:53:3e:88:30:da:17:f2:c6: 0d:61:02:c8:d2:9d:69:4f:48:81:b7:d7:82:27:cf:dd:ff:66: b1:bf:9d:9b:8b:ec:86:40:c9:48:2e:c4:c9:ce:d1:eb:bb:34: 8c:5d:50:e5:a1:99:dd:ac:57:40:02:83:f8:a4:3e:b3:f6:9b: b3:47:67:fc:94:ae:03:22:40:23:90:4c:e4:b4:07:7f:b5:60: c5:f0:73:d2:c9:66:11:e9:bb:21:36:d2:7e:eb:cf:de:c4:d6: 46:fe:72:f1:61:3e:0a:88:1e:f3:be:47:1a:18:da:3c:b5:a2: 01:6e:84:eb:6e:55:2c:d7:c6:d7:1a:4b:7b:8b:24:db:69:1a: 1a:ad:52:1f:43:3e:36:fc:89:14:9e:60:a4:cb:f3:f1:b6:54: af:06:7c:89:3e:2a:1f:8f:a2:b2:06:d8:0e:26:86:10:6a:bd: 36:95:67:06:76:64:74:03:22:0a:07:15:33:35:a3:e3:46:a8: 98:d8:de:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjYwNDE3MDUxMDQ1WhcNMjYwNDI0MDUxMDQ1WjAYMRYwFAYD VQQDEw02OWUxYzBkNS02OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApb1PDph4tghRcMZ/Xhqi+yhRMYbE5OOvxwVeTanTmxZ7iQ+DdsuG/cAKKuRo Mo+PkXzdIq/exX3ik9Fwnol8EVgLTWyCi0QQCu3vHd+NAlRyk0siO7wIJLEQuLPa 2rZSGUmRediesfX3QYwxsOwm1ripRJxeY5NqF9zcsI7Yz7ByYHAZFjd4kqzr7EXW ubQDOYtpTaTtjO+8bwNtoApp+yCriPvFNmT0gr3sjlQjI2uMT/TNGBaB1lWnXkKt NqRTtdmv/r3mq9Bg/9N8xrdmeuTsEowgnLJHTyiF+xRDfEiiK84sGLvQOPdvNFko VsbP+wwQA2YLEuwpP4+puW0ltQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7kaBG2 OjHaek3SgV8ga7MMUWvuMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZLQI49LwDoYjEOI95Pg6LySFkUKv6rhApPksHWJ5tMdEOaRieUxGEUO0A0ij xhZDW+IKRSSh8kJCEqUpainJU1M+iDDaF/LGDWECyNKdaU9IgbfXgifP3f9msb+d m4vshkDJSC7Eyc7R67s0jF1Q5aGZ3axXQAKD+KQ+s/abs0dn/JSuAyJAI5BM5LQH f7VgxfBz0slmEem7ITbSfuvP3sTWRv5y8WE+Coge875HGhjaPLWiAW6E625VLNfG 1xpLe4sk22kaGq1SH0M+NvyJFJ5gpMvz8bZUrwZ8iT4qH4+isgbYDiaGEGq9NpVn BnZkdAMiCgcVMzWj40aomNjeXg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:10:16 2026 by rpki-client