$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: iWfdp5esWbozL6houkFMUdDsD3OnUmstDeWo+odq1+I= Subject key identifier: 64:74:C1:51:86:E0:89:F2:87:CC:72:A6:4D:D1:82:0D:E4:31:C0:D2 Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 301A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2FE9 Signing time: Sat 04 Apr 2026 15:25:20 +0000 Manifest this update: Sat 04 Apr 2026 15:25:20 +0000 Manifest next update: Sat 11 Apr 2026 15:25:20 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: zL5+nfbtJ/dMNpPfa/iEeQVR2Vgyay+5bf2r7nd3HbQ=) 2: 502355A2B13D11E59299870AC4F9AE02.roa (hash: LrI3Z2LgNfplNkM9E8legPgtdB8Kjo/oM53Ll6nVUjM=) 3: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: whabSfJZZUmEcENnSL6elVe6Rz4BQWYC8eWUhtMr2Qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12314 (0x301a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Apr 4 15:25:20 2026 GMT Not After : Apr 11 15:25:20 2026 GMT Subject: CN=69d12d60-a852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8d:2c:1e:c5:b4:58:20:72:dc:c2:74:bd:a3: f3:21:29:be:5b:88:19:c8:3e:8f:23:89:82:54:84: 94:db:a6:cb:4a:0f:6f:94:33:d5:34:89:f4:c2:c0: 7a:f9:e8:6a:db:8b:27:90:e9:fa:35:3d:b9:5c:63: 73:62:28:9d:cc:2f:7e:be:ae:e1:fd:a2:6e:7b:50: 0a:ec:2e:bc:a5:91:1c:3b:fe:d3:dd:81:65:33:71: 7e:2c:ea:22:00:5d:fa:fa:5b:49:85:6b:ea:77:a9: d2:89:e3:03:3c:f6:1b:85:d4:2f:3a:8e:c0:50:2d: bb:de:f4:2c:b5:0d:04:cc:77:50:00:af:33:ee:31: d8:69:64:14:80:97:43:4d:22:85:ac:e1:d8:9d:bb: 8d:de:99:15:ee:6e:6d:f1:85:13:5b:d5:8e:ae:aa: 86:4c:ae:d1:46:a9:85:98:3f:04:c1:ec:3b:e4:1a: ca:f4:e0:ef:81:f8:ed:62:86:67:a2:d5:7f:0b:9f: df:8d:95:9b:83:f3:69:1b:11:8a:98:f1:6b:e0:d5: 61:4f:12:f4:59:3c:a1:6d:7b:37:70:51:35:5f:43: 10:34:88:48:e7:31:ce:8b:31:32:e1:3f:08:e1:3a: 45:12:e4:f1:22:cc:4f:fa:96:45:5a:1d:9f:3e:f5: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:74:C1:51:86:E0:89:F2:87:CC:72:A6:4D:D1:82:0D:E4:31:C0:D2 X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:b7:4c:74:fe:39:04:d9:38:f8:9f:29:94:64:6f:0c:14:0a: d2:92:9b:1a:93:b3:18:f1:96:09:54:64:d2:7a:15:80:e6:b8: f1:e3:d3:4a:ea:ce:5d:90:50:8d:1c:36:e1:5c:40:40:11:77: 0a:f3:a8:f9:bf:c2:f5:fe:ba:3e:a3:63:7e:25:7a:d8:62:dc: d8:d1:64:48:9a:15:20:13:00:ed:88:d7:94:2d:5c:7e:7c:1f: 31:6b:6c:88:cc:d0:69:3e:10:44:a6:47:01:eb:75:b1:ef:78: b5:9c:5d:61:e2:5e:66:9e:8c:27:88:82:49:2b:4a:90:28:a5: 31:8a:6d:bd:20:73:57:65:7b:ef:00:96:63:d9:aa:1b:a2:f4: 1a:ee:b9:ad:3d:51:9a:da:e4:86:53:1f:92:29:1e:ae:8d:82: 45:1f:40:e3:df:25:35:e1:64:bd:44:97:94:6b:30:27:ff:a8: 32:c2:52:7c:fc:8e:ff:91:0d:1c:ba:a9:08:78:dd:99:46:e2: e8:99:b1:2c:13:ef:af:22:1c:59:28:c2:d5:ab:fd:7b:b4:81: 8a:7a:11:39:e6:93:a4:fd:e6:89:00:37:8a:bb:58:c7:aa:52: 64:ef:34:46:a0:f7:4d:cc:7f:7b:0f:27:a4:d2:10:7f:12:b2: d0:9a:38:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjYwNDA0MTUyNTIwWhcNMjYwNDExMTUyNTIwWjAYMRYwFAYD VQQDEw02OWQxMmQ2MC1hODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6I0sHsW0WCBy3MJ0vaPzISm+W4gZyD6PI4mCVISU26bLSg9vlDPVNIn0wsB6 +ehq24snkOn6NT25XGNzYiidzC9+vq7h/aJue1AK7C68pZEcO/7T3YFlM3F+LOoi AF36+ltJhWvqd6nSieMDPPYbhdQvOo7AUC273vQstQ0EzHdQAK8z7jHYaWQUgJdD TSKFrOHYnbuN3pkV7m5t8YUTW9WOrqqGTK7RRqmFmD8Ewew75BrK9ODvgfjtYoZn otV/C5/fjZWbg/NpGxGKmPFr4NVhTxL0WTyhbXs3cFE1X0MQNIhI5zHOizEy4T8I 4TpFEuTxIsxP+pZFWh2fPvVoDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGR0wVGG 4Inyh8xypk3Rgg3kMcDSMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyLdMdP45BNk4+J8plGRvDBQK0pKbGpOzGPGWCVRk0noVgOa48ePTSurOXZBQ jRw24VxAQBF3CvOo+b/C9f66PqNjfiV62GLc2NFkSJoVIBMA7YjXlC1cfnwfMWts iMzQaT4QRKZHAet1se94tZxdYeJeZp6MJ4iCSStKkCilMYptvSBzV2V77wCWY9mq G6L0Gu65rT1RmtrkhlMfkikero2CRR9A498lNeFkvUSXlGswJ/+oMsJSfPyO/5EN HLqpCHjdmUbi6JmxLBPvryIcWSjC1av9e7SBinoROeaTpP3miQA3irtYx6pSZO80 RqD3Tcx/ew8npNIQfxKy0Jo4Qw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:02 2026 by rpki-client