$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft File: 3xhzEfoJx3m4sV2UekbU9O3MUFM.mft (raw, json) Hash identifier: m8x8ZMRIY6VEc+Vk3EnkpPjemgR1OoA6IMl8PAd+BGM= Subject key identifier: 89:22:A3:F0:2B:DC:61:9A:26:7D:D2:BF:F6:C9:15:DD:D2:98:38:17 Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 Certificate issuer: /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft Manifest number: B0 Signing time: Sun 05 Apr 2026 06:29:30 +0000 Manifest this update: Sun 05 Apr 2026 06:29:29 +0000 Manifest next update: Sun 12 Apr 2026 06:29:29 +0000 Files and hashes: 1: 3xhzEfoJx3m4sV2UekbU9O3MUFM.crl (hash: KbAN2yNFbRYIEVZFcTCEZDlqoR28JkAYHrNmSRaVeFM=) 2: F1940290212911F087425013C4F9AE02.roa (hash: aIejdLAewgudU6U+kv+7+KGIiYEWb/Zyhioe0M0XWcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053 Validity Not Before: Apr 5 06:29:29 2026 GMT Not After : Apr 12 06:29:29 2026 GMT Subject: CN=69d2014a-8a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:17:aa:2c:ba:41:c6:86:2f:8e:4f:30:29: 40:9f:08:a6:dc:0b:83:40:27:8f:b7:5c:5a:6d:8d: 25:af:4c:db:27:ef:32:4d:1b:cb:bf:7d:46:1c:14: 1a:7a:b6:2a:78:8a:bd:db:c1:f7:0c:a2:fa:0b:b7: c7:bd:b9:29:63:bc:dc:76:b1:e3:52:96:0f:ea:65: cf:b6:4b:86:5b:16:c2:85:c5:37:64:a2:3a:fb:01: ce:b1:fb:ad:f4:a8:24:f5:dd:d5:f2:67:6e:dc:1b: c4:29:39:37:f1:43:b9:c9:9f:50:3d:7f:af:94:54: 31:4e:94:bf:e5:5a:99:24:c1:4d:46:a4:db:33:1b: ee:2b:67:29:c4:c1:a9:b4:28:82:55:c8:76:67:9e: 9d:e7:00:9c:4d:cf:30:c1:3c:76:5e:87:7d:cd:41: 63:3e:df:8b:fa:e9:b2:fa:3c:ff:ce:34:5d:b0:2c: ab:52:69:da:4d:f7:7c:38:03:d8:ee:79:b5:08:53: de:6d:84:e4:16:5d:7c:16:5a:95:15:bd:91:47:fe: a7:65:18:6e:a4:9e:61:86:6a:d1:0a:c7:21:c8:0e: a2:4f:1f:36:91:2c:07:43:4d:56:3c:37:9a:74:86: 80:85:af:73:4f:a5:50:ac:77:94:37:6a:f4:a0:37: df:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:22:A3:F0:2B:DC:61:9A:26:7D:D2:BF:F6:C9:15:DD:D2:98:38:17 X509v3 Authority Key Identifier: keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b2:46:ac:a6:0e:2d:db:44:af:4d:1b:1f:aa:ff:14:9a:50: 20:80:c4:19:f1:e5:08:11:c9:0d:6b:13:38:4b:c4:fc:99:b7: 95:a0:8e:37:51:45:5b:0d:09:da:75:80:d9:06:c2:80:10:cf: 42:5a:52:1c:a1:00:a4:0b:fc:df:ba:f1:5d:7f:2f:45:99:aa: b0:e3:3c:06:69:73:b2:68:ee:48:c5:f7:1e:78:f1:26:c2:22: 7b:c6:85:2c:d6:11:f1:bf:58:22:6e:f2:3c:8c:70:6b:ad:4e: 8a:f2:55:b3:d9:ae:1c:2e:eb:b3:02:37:2d:2c:be:c8:89:2b: 3a:b7:5a:1b:01:89:20:07:b7:3b:11:fc:8f:d6:47:65:31:4d: 4f:a9:38:d0:a4:26:25:28:e5:73:42:b6:4d:81:bf:63:26:c0: bc:ac:a8:f3:a9:7f:fe:f1:4d:61:0a:0b:5d:2f:85:28:5c:d5: c4:ae:cd:83:88:67:43:5e:4a:26:e0:97:26:b2:96:eb:b1:cd: 21:d4:31:09:bb:9d:d7:c1:fa:38:55:95:c4:f1:0c:51:80:f4: ce:86:00:73:a3:50:a4:b3:0e:13:16:2a:e2:dc:40:ee:6f:49: 8e:65:d8:54:8c:93:75:70:e2:4f:bf:96:00:3c:8b:30:14:68: 1b:77:c7:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBMDUxMTAvBgNVBAUTKERGMTg3MzExRkEwOUM3NzlCOEIxNUQ5NDdBNDZENEY0 RURDQzUwNTMwHhcNMjYwNDA1MDYyOTI5WhcNMjYwNDEyMDYyOTI5WjAYMRYwFAYD VQQDEw02OWQyMDE0YS04YTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVkXqiy6QcaGL45PMClAnwim3AuDQCePt1xabY0lr0zbJ+8yTRvLv31GHBQa erYqeIq928H3DKL6C7fHvbkpY7zcdrHjUpYP6mXPtkuGWxbChcU3ZKI6+wHOsfut 9Kgk9d3V8mdu3BvEKTk38UO5yZ9QPX+vlFQxTpS/5VqZJMFNRqTbMxvuK2cpxMGp tCiCVch2Z56d5wCcTc8wwTx2Xod9zUFjPt+L+umy+jz/zjRdsCyrUmnaTfd8OAPY 7nm1CFPebYTkFl18FlqVFb2RR/6nZRhupJ5hhmrRCschyA6iTx82kSwHQ01WPDea dIaAha9zT6VQrHeUN2r0oDffJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkio/Ar 3GGaJn3Sv/bJFd3SmDgXMB8GA1UdIwQYMBaAFN8YcxH6Ccd5uLFdlHpG1PTtzFBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUEwNS80REMxRDkyNjIx MjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngzbTRzVjJVZWtiVTlPM01V Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUEwNS80REMxRDkyNjIxMjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngz bTRzVjJVZWtiVTlPM01VRk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMrJGrKYOLdtEr00bH6r/FJpQIIDEGfHlCBHJDWsTOEvE/Jm3laCON1FFWw0J 2nWA2QbCgBDPQlpSHKEApAv837rxXX8vRZmqsOM8BmlzsmjuSMX3HnjxJsIie8aF LNYR8b9YIm7yPIxwa61OivJVs9muHC7rswI3LSy+yIkrOrdaGwGJIAe3OxH8j9ZH ZTFNT6k40KQmJSjlc0K2TYG/YybAvKyo86l//vFNYQoLXS+FKFzVxK7Ng4hnQ15K JuCXJrKW67HNIdQxCbud18H6OFWVxPEMUYD0zoYAc6NQpLMOExYq4txA7m9JjmXY VIyTdXDiT7+WADyLMBRoG3fHDg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:20 2026 by rpki-client