$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: w/sHYNXFLl5BZtgiRYQ0axneROw3Q25jz9PB6y+KzD0= Subject key identifier: B9:02:7A:6C:38:75:10:1E:81:23:D8:14:A6:1E:E4:79:63:FE:56:3F Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: 0102 Signing time: Sun 05 Apr 2026 05:52:38 +0000 Manifest this update: Sun 05 Apr 2026 05:52:38 +0000 Manifest next update: Sun 12 Apr 2026 05:52:38 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: +L5om5ko2ai3GmTayPZS9Ud+j+NfmcEK4eFOk6YFJjs=) 2: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=) 3: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: Apr 5 05:52:38 2026 GMT Not After : Apr 12 05:52:38 2026 GMT Subject: CN=69d1f8a6-c505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:25:b8:f5:8a:39:76:32:3c:13:c3:38:6b: bd:b8:e6:7a:d9:86:00:2a:98:7e:98:89:4f:39:b0: b7:4d:96:d1:87:78:d9:45:f0:34:73:27:aa:a0:98: b0:8b:b4:60:0a:2f:7e:3b:17:d9:61:4c:66:99:6b: 25:05:d1:1d:26:c0:db:2c:6f:51:59:64:e4:4f:5d: 7f:05:b3:68:e8:b6:9e:01:e1:c1:e6:ee:7a:af:6a: a0:53:0d:8d:4d:34:9b:e2:d4:23:67:bb:31:1b:a5: 30:a6:10:92:1d:a8:b4:0e:f4:89:03:64:99:96:e3: d0:4f:89:ad:00:43:c0:e7:36:0d:e9:55:d0:8a:aa: ae:80:88:b1:13:75:63:c3:ad:38:8a:d8:36:9e:f0: 5b:98:17:ce:11:9a:32:3e:a4:59:1a:8d:0f:04:71: 18:13:9d:82:0e:d8:b7:dd:dd:02:33:3f:61:7a:64: d9:f9:39:16:9e:6d:86:08:2f:ee:42:f1:50:e5:be: 80:c9:6d:54:3a:e6:db:4c:5e:e0:09:6a:b0:e8:fe: 44:09:5d:05:19:5a:54:10:eb:16:bd:57:9d:9b:80: d2:7e:ea:c4:18:15:bc:d4:96:ca:78:87:d3:cf:c6: 7e:bd:75:1b:ec:e1:9e:28:e2:b1:3e:be:5c:06:f8: ce:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:02:7A:6C:38:75:10:1E:81:23:D8:14:A6:1E:E4:79:63:FE:56:3F X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9e:35:35:09:bf:5d:65:28:24:46:47:b9:41:25:bc:51:d2: 43:ed:f8:a9:f4:a3:a1:b6:d3:e5:12:59:f5:47:6c:f1:2f:ba: 5c:b1:96:55:e2:a0:ed:42:1b:ec:85:05:b1:9c:a4:92:92:7e: 88:a3:91:95:0e:3d:f5:62:3a:be:c1:4f:81:1e:8f:35:5a:26: 98:59:75:ac:37:eb:77:e7:38:0e:0a:6b:ed:55:d7:03:d9:cb: 16:a0:e6:6c:f8:dc:af:10:c0:ff:46:e3:f3:84:38:6d:79:ce: 45:14:58:90:21:fa:f8:ab:05:17:46:3c:df:65:25:de:6b:7c: eb:9f:3d:83:59:ee:0c:4c:a8:01:10:f2:2e:9c:d3:19:75:38: 62:16:fd:8e:b1:76:ef:e7:20:6d:d0:c7:04:5a:75:87:36:69: 6b:cb:50:fe:3d:6f:9b:bb:54:7d:fc:83:a2:48:19:23:34:86: fd:68:62:0e:df:23:c5:3b:3d:f9:18:aa:cd:a5:a6:c4:93:9d: 43:e1:bb:be:c2:c0:04:6d:41:3f:11:79:84:23:8b:3f:d6:9a: b7:a8:bd:ab:97:14:d5:70:fd:ed:6e:91:1b:f8:68:33:a3:13: ae:b9:72:f3:4d:f1:2a:09:a1:d2:bf:af:09:9e:91:af:a9:8b: 81:53:33:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4 QTZFRENGQjkwHhcNMjYwNDA1MDU1MjM4WhcNMjYwNDEyMDU1MjM4WjAYMRYwFAYD VQQDEw02OWQxZjhhNi1jNTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulIluPWKOXYyPBPDOGu9uOZ62YYAKph+mIlPObC3TZbRh3jZRfA0cyeqoJiw i7RgCi9+OxfZYUxmmWslBdEdJsDbLG9RWWTkT11/BbNo6LaeAeHB5u56r2qgUw2N TTSb4tQjZ7sxG6UwphCSHai0DvSJA2SZluPQT4mtAEPA5zYN6VXQiqqugIixE3Vj w604itg2nvBbmBfOEZoyPqRZGo0PBHEYE52CDti33d0CMz9hemTZ+TkWnm2GCC/u QvFQ5b6AyW1UOubbTF7gCWqw6P5ECV0FGVpUEOsWvVedm4DSfurEGBW81JbKeIfT z8Z+vXUb7OGeKOKxPr5cBvjOSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkCemw4 dRAegSPYFKYe5Hlj/lY/MB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5 dXFKN18tUC1XbnVLYnR6N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkp41NQm/XWUoJEZHuUElvFHSQ+34qfSjobbT5RJZ9Uds8S+6XLGWVeKg7UIb 7IUFsZykkpJ+iKORlQ499WI6vsFPgR6PNVommFl1rDfrd+c4Dgpr7VXXA9nLFqDm bPjcrxDA/0bj84Q4bXnORRRYkCH6+KsFF0Y832Ul3mt86589g1nuDEyoARDyLpzT GXU4Yhb9jrF27+cgbdDHBFp1hzZpa8tQ/j1vm7tUffyDokgZIzSG/WhiDt8jxTs9 +RiqzaWmxJOdQ+G7vsLABG1BPxF5hCOLP9aat6i9q5cU1XD97W6RG/hoM6MTrrly 803xKgmh0r+vCZ6Rr6mLgVMzOQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:48:02 2026 by rpki-client