$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft File: _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json) Hash identifier: U5Sv5syF5AU2jhy8cuPG7B42ugIv16nK1uzlLlqPWmM= Subject key identifier: A0:8B:D8:76:FA:64:09:59:31:A4:A0:92:DF:DB:36:6E:30:E2:24:6B Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft Manifest number: 3C Signing time: Sun 05 Apr 2026 07:54:39 +0000 Manifest this update: Sun 05 Apr 2026 07:54:39 +0000 Manifest next update: Sun 12 Apr 2026 07:54:39 +0000 Files and hashes: 1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: k8T0dT7IHegStUPLSYHkMymOQw8eQzuRsESKSI7CunM=) 2: 3A5DE11AE17511F084EED35B3E6F56BC.roa (hash: nGjZghgPTQAKj7m8Hrr253DItDRqZimbCIH9cpE2W6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Validity Not Before: Apr 5 07:54:39 2026 GMT Not After : Apr 12 07:54:39 2026 GMT Subject: CN=69d2153f-f296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:99:08:54:b0:91:f1:1c:1e:46:da:c6:90: 9a:e5:f3:ec:f9:68:a3:a3:2a:77:94:4c:91:63:84: c3:c0:60:5c:de:fb:ec:26:ce:6d:b1:76:80:15:10: 89:15:2f:44:40:6f:4c:d3:7f:1b:04:aa:65:aa:47: 09:fb:8e:56:b9:c5:50:d3:6e:08:38:4a:14:80:93: b1:22:73:0d:7d:3b:c6:06:eb:81:f9:f7:49:94:60: 6c:aa:c2:9a:0a:f1:da:d0:22:fb:0c:5e:5b:06:ed: ab:33:09:1c:12:23:0e:35:a0:3a:2b:90:e5:c0:ca: a1:5c:67:c5:c3:74:36:0a:e7:9f:8a:bc:f6:51:76: 15:3b:52:d9:96:6b:61:72:64:26:c4:2c:8d:9e:f6: a2:0d:46:65:e8:eb:bf:87:f6:40:1a:26:d8:51:e9: 2f:8b:4a:0c:93:c0:5e:75:6a:8f:bf:db:19:05:27: 77:69:04:25:60:fa:ab:68:ce:c2:ab:62:bc:37:e4: b3:69:04:58:56:86:00:39:94:60:63:c2:28:26:5a: 42:80:c8:bf:ed:de:90:4d:53:8f:4b:76:3b:e9:a7: 72:aa:30:d0:8b:bc:29:78:c0:8e:ed:c7:d7:dc:3e: 19:9d:83:1b:e2:5a:e5:bf:1c:27:70:69:f6:da:b9: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:D8:76:FA:64:09:59:31:A4:A0:92:DF:DB:36:6E:30:E2:24:6B X509v3 Authority Key Identifier: keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a2:20:d6:03:40:53:0a:82:30:c3:28:43:95:37:ef:2a:d3: 37:1f:a6:3f:d5:2b:67:ff:fd:41:33:3c:eb:b7:29:4e:38:f1: 2e:54:46:c3:3d:4e:62:2d:56:5d:c0:fe:81:67:ca:0c:a7:88: 97:f4:ee:34:27:e7:e4:aa:48:8a:63:83:b2:0b:60:de:3b:e3: 40:5a:8c:41:1c:40:78:ce:30:44:0e:8a:e4:83:76:7b:63:ce: de:de:51:ac:31:3f:04:5b:9c:7f:64:ef:50:69:72:46:19:e4: f9:3c:c7:96:ef:0c:61:a2:a2:98:0a:3c:09:9a:d1:9c:ce:fb: 60:05:3d:0b:3d:15:8c:c7:b4:36:96:7b:15:fe:e4:e8:05:a4: 50:2a:21:f4:46:bb:70:db:50:9b:3a:6e:9c:12:15:58:00:d9: 05:9b:ca:42:ed:dc:1b:c6:55:42:f1:dd:f4:71:72:a2:e3:d8: 1a:59:66:c6:1f:6b:a1:b7:4a:45:d7:28:66:09:e5:7c:56:00: 64:dc:1e:c2:b4:8c:ff:f0:61:2d:14:82:ab:b3:b5:ad:61:84: 52:b5:60:dd:93:38:42:a0:fd:41:8d:ff:7b:29:7c:5d:aa:74: e2:d0:22:0f:89:a5:dd:d5:d9:95:68:02:21:fe:5c:96:5b:55: e6:0c:25:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUJBMjExMC8GA1UEBRMoRkU5OThBQkJCMTM0QjkzQzFDRTdGODRFOEI5RkJFMURE QTlCNjRBOTAeFw0yNjA0MDUwNzU0MzlaFw0yNjA0MTIwNzU0MzlaMBgxFjAUBgNV BAMTDTY5ZDIxNTNmLWYyOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwZpkIVLCR8RweRtrGkJrl8+z5aKOjKneUTJFjhMPAYFze++wmzm2xdoAVEIkV L0RAb0zTfxsEqmWqRwn7jla5xVDTbgg4ShSAk7Eicw19O8YG64H590mUYGyqwpoK 8drQIvsMXlsG7aszCRwSIw41oDorkOXAyqFcZ8XDdDYK55+KvPZRdhU7UtmWa2Fy ZCbELI2e9qINRmXo67+H9kAaJthR6S+LSgyTwF51ao+/2xkFJ3dpBCVg+qtozsKr Yrw35LNpBFhWhgA5lGBjwigmWkKAyL/t3pBNU49Ldjvpp3KqMNCLvCl4wI7tx9fc PhmdgxviWuW/HCdwafbauR4VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoIvYdvpk CVkxpKCS39s2bjDiJGswHwYDVR0jBBgwFoAU/pmKu7E0uTwc5/hOi5++HdqbZKkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBQkEyL0I0NDM2MEM4RTE3 NDExRjBBNTQxRDAyRDNFNkY1NkJDL19wbUt1N0UwdVR3YzVfaE9pNS0tSGRxYlpL ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3BtS3U3RTB1VHdjNV9oT2k1LS1IZHFiWktrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB QkEyL0I0NDM2MEM4RTE3NDExRjBBNTQxRDAyRDNFNkY1NkJDL19wbUt1N0UwdVR3 YzVfaE9pNS0tSGRxYlpLay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCoiDWA0BTCoIwwyhDlTfvKtM3H6Y/1Stn//1BMzzrtylOOPEuVEbDPU5iLVZd wP6BZ8oMp4iX9O40J+fkqkiKY4OyC2DeO+NAWoxBHEB4zjBEDorkg3Z7Y87e3lGs MT8EW5x/ZO9QaXJGGeT5PMeW7wxhoqKYCjwJmtGczvtgBT0LPRWMx7Q2lnsV/uTo BaRQKiH0Rrtw21CbOm6cEhVYANkFm8pC7dwbxlVC8d30cXKi49gaWWbGH2uht0pF 1yhmCeV8VgBk3B7CtIz/8GEtFIKrs7WtYYRStWDdkzhCoP1Bjf97KXxdqnTi0CIP iaXd1dmVaAIh/lyWW1XmDCWc -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:12 2026 by rpki-client