$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: JPAxvlGarypOEsCaZEMKrA50q5Vg2yaFT8P9aT3wAtI= Subject key identifier: EA:F3:59:1E:AC:B2:5C:2F:D4:44:6F:B6:AD:53:3F:BF:8C:5A:2B:52 Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1F4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1F32 Signing time: Sat 04 Apr 2026 15:56:48 +0000 Manifest this update: Sat 04 Apr 2026 15:56:47 +0000 Manifest next update: Sat 11 Apr 2026 15:56:47 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: /LAvQRA+zEC0194pc40uHy9zGYQ0IeiFHshUNatqMZg=) 2: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: ZQGkVblUeaBQpEuqoVPq5XzQKgpGACzTE5sIWyJcuEI=) 3: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: 7/gwqGUBAOb3hEJ8slgdeW3dddqMQy1lCsCPeg2AjSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8015 (0x1f4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Apr 4 15:56:47 2026 GMT Not After : Apr 11 15:56:47 2026 GMT Subject: CN=69d134c0-d0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:2a:1f:38:d8:bc:03:dc:50:5f:87:11:2d: 56:bb:14:88:63:92:a8:74:ec:02:ec:d1:26:06:f4: a5:ed:35:c1:f8:4e:71:ee:1d:96:22:81:57:56:02: 5f:5d:54:5e:9f:84:b6:1d:73:77:5b:9a:4a:26:3d: 55:5c:d4:c2:09:e4:2e:39:47:0e:c0:bf:7e:dc:d9: 5a:f7:31:ee:fc:a6:b9:85:2d:50:8e:4f:b5:6b:6e: ef:2f:c1:b9:a8:c7:da:fc:8a:6d:24:68:30:ff:dc: 2f:11:eb:11:04:f2:85:48:fe:e8:2a:c4:ca:7f:22: 43:4c:64:c7:bb:0c:f6:c1:48:d5:d1:60:23:58:71: 0e:bf:4d:02:aa:d2:d1:58:a2:c2:70:d1:ec:f0:a6: a4:33:65:45:b6:05:a4:8b:98:40:a9:ab:c9:c5:e6: 5f:0b:f5:f4:a1:a0:d4:f0:07:2e:c6:52:19:c2:78: 92:ce:ad:e4:02:3e:e3:af:8d:d4:9d:f9:34:70:83: cd:dd:08:d5:c4:a1:e8:c1:e7:8d:92:74:b3:d0:23: 04:d3:be:2b:a0:74:c2:eb:7b:fd:1e:99:a9:ce:68: 1d:c1:f7:31:84:00:ca:e0:5f:d2:f8:95:9c:80:ac: 91:c4:b5:99:fa:77:53:21:f6:fa:2b:f9:c9:a1:f4: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F3:59:1E:AC:B2:5C:2F:D4:44:6F:B6:AD:53:3F:BF:8C:5A:2B:52 X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0d:ac:e0:d2:40:a6:57:ee:38:40:2c:23:cc:2b:6e:b3:21: 8f:7b:6d:55:f0:f3:09:2b:f6:30:6d:9b:61:65:5b:9a:60:0f: d8:7b:24:03:5f:71:6a:2f:27:07:b4:2b:57:2c:d8:97:ce:7b: 85:70:0c:27:ae:20:d2:7e:a4:64:70:c1:5c:d4:53:92:56:8c: e6:83:66:92:a4:b8:3a:fd:72:91:af:aa:1a:48:44:b0:d6:ab: c3:86:52:4e:5a:68:91:23:7d:fc:33:66:5d:35:3b:65:31:60: b9:c4:44:80:43:c2:b7:a9:c8:d2:6a:e1:64:7b:7e:ac:f7:ad: e0:eb:a8:0c:3c:78:58:96:6d:08:ea:e4:cf:b7:08:36:c3:f2: 75:8e:78:91:a6:65:75:9e:0e:92:2d:4b:78:8e:64:77:01:f8: 36:8e:b4:a1:fa:8d:3d:a6:ed:8f:3b:93:ca:ed:3a:a0:81:3f: 6d:87:46:b6:bd:df:84:f6:94:ef:42:42:5e:6d:60:7b:2b:25: eb:2b:39:00:e3:b4:93:3c:8e:9e:6d:fe:58:b4:5e:05:1f:84: 41:68:b0:ca:d1:d0:ba:e3:d4:b9:dc:c3:70:7c:9d:f7:42:58: 13:60:ba:15:b6:32:ac:96:87:b4:22:7f:a6:8c:86:4b:9a:03: 68:a7:88:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjYwNDA0MTU1NjQ3WhcNMjYwNDExMTU1NjQ3WjAYMRYwFAYD VQQDEw02OWQxMzRjMC1kMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4MqHzjYvAPcUF+HES1WuxSIY5KodOwC7NEmBvSl7TXB+E5x7h2WIoFXVgJf XVRen4S2HXN3W5pKJj1VXNTCCeQuOUcOwL9+3Nla9zHu/Ka5hS1Qjk+1a27vL8G5 qMfa/IptJGgw/9wvEesRBPKFSP7oKsTKfyJDTGTHuwz2wUjV0WAjWHEOv00CqtLR WKLCcNHs8KakM2VFtgWki5hAqavJxeZfC/X0oaDU8AcuxlIZwniSzq3kAj7jr43U nfk0cIPN3QjVxKHoweeNknSz0CME074roHTC63v9HpmpzmgdwfcxhADK4F/S+JWc gKyRxLWZ+ndTIfb6K/nJofR66QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOrzWR6s slwv1ERvtq1TP7+MWitSMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWw2s4NJAplfuOEAsI8wrbrMhj3ttVfDzCSv2MG2bYWVbmmAP2HskA19xai8n B7QrVyzYl857hXAMJ64g0n6kZHDBXNRTklaM5oNmkqS4Ov1yka+qGkhEsNarw4ZS TlpokSN9/DNmXTU7ZTFgucREgEPCt6nI0mrhZHt+rPet4OuoDDx4WJZtCOrkz7cI NsPydY54kaZldZ4Oki1LeI5kdwH4No60ofqNPabtjzuTyu06oIE/bYdGtr3fhPaU 70JCXm1geysl6ys5AOO0kzyOnm3+WLReBR+EQWiwytHQuuPUudzDcHyd90JYE2C6 FbYyrJaHtCJ/poyGS5oDaKeIEA== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:30 2026 by rpki-client