$ rpki-client -vvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft File: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json) Hash identifier: rGUBd1cEwSGrLRB3nAyRfbl5uMEin6lK0KZgpzhRxUE= Subject key identifier: 29:E6:C0:61:7C:A1:83:10:49:A0:99:2C:46:67:85:E9:73:AC:D4:BE Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 Certificate issuer: /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Certificate serial: 0C9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft Manifest number: 0C8E Signing time: Sat 04 Apr 2026 18:24:22 +0000 Manifest this update: Sat 04 Apr 2026 18:24:22 +0000 Manifest next update: Sat 11 Apr 2026 18:24:22 +0000 Files and hashes: 1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: dkcdPK+5xJofi2sQkhMjJ+79yIrokoXoXYBcJuQly3c=) 2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: jtNA4DSxailzGixhCLBv/XtkHLhwf6qcSCB3BjEuN/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3229 (0xc9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266 Validity Not Before: Apr 4 18:24:22 2026 GMT Not After : Apr 11 18:24:22 2026 GMT Subject: CN=69d15756-c141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:f4:f7:a2:96:c6:16:10:b2:21:c3:bc:3b: 98:fb:35:b7:d1:17:73:b9:da:8d:c7:4f:12:d1:7d: d6:05:4d:4c:c0:6e:a4:5b:ce:c0:5f:ad:b2:e1:f8: f1:5d:7f:b9:56:ec:12:81:74:3b:79:89:48:0a:75: fb:56:6b:80:4f:3d:a4:47:35:27:9a:2b:e6:7d:2a: 4a:83:5b:fd:e1:e8:3f:64:1e:35:6e:ed:cc:ef:59: 9e:2a:17:8e:68:b2:4e:89:4a:4b:86:8b:52:6b:2c: 70:f3:a2:f8:16:61:31:0e:9b:00:ea:27:45:7f:26: e6:ca:92:e3:2a:c6:cc:7d:19:c1:48:ad:c2:97:03: 1d:58:99:dd:cd:25:04:99:27:b8:dc:6b:6c:f7:6c: 46:9e:3a:cd:15:78:fb:08:56:e6:a7:51:54:5c:1b: 52:b3:15:b9:74:14:f6:bf:3a:ef:c3:1d:e2:d2:c4: ac:4f:3c:70:f6:9a:1c:8a:04:28:83:d3:a5:70:f5: 25:dd:49:b2:14:fc:09:25:c8:fa:24:78:70:93:d4: a0:f5:9e:88:93:d7:27:93:22:a1:5d:1a:a4:0c:15: 88:e2:70:59:86:7f:c3:6c:41:87:4b:07:3c:d7:84: 6f:5c:c0:9d:98:ff:e4:fb:ce:84:fc:7a:31:49:dd: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E6:C0:61:7C:A1:83:10:49:A0:99:2C:46:67:85:E9:73:AC:D4:BE X509v3 Authority Key Identifier: keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:39:76:12:e1:63:f8:be:7e:2a:9f:ee:09:ac:a1:90:83:0d: 14:6a:4f:44:3a:54:c0:20:75:3f:31:95:96:3d:9b:45:14:7a: d6:03:10:db:80:f7:40:0f:f3:40:ff:52:31:f9:80:a1:cc:f6: 77:1b:37:75:20:09:85:fb:27:eb:64:76:31:f5:ea:9b:c2:1e: 21:d2:a5:03:6f:33:12:06:15:c3:d9:26:78:98:aa:12:dd:ca: a3:6a:2d:ca:46:0d:e6:4b:b9:d2:58:1f:e8:41:86:aa:10:34: b2:cb:a2:bc:3f:23:af:51:12:21:eb:bd:2a:fc:c8:63:20:eb: 1e:ed:69:57:79:1b:d3:e8:b4:a7:4e:44:a1:eb:4e:05:d1:bb: 0d:af:70:3f:f5:85:f7:e8:29:b6:7e:7b:bc:f0:5c:9f:a8:f9: 3d:cf:41:07:5b:08:4e:a7:a3:77:cf:d5:c4:5f:8d:48:3a:78: 0f:e6:dc:4f:6d:c3:dd:0e:df:dc:e9:f2:95:ca:db:fb:18:48: 3a:04:27:6b:45:47:df:ac:b4:14:b4:49:aa:59:1a:a1:26:d0: 6a:19:da:2c:d8:95:01:71:0b:e9:af:03:07:bd:f5:1f:6d:05: b3:77:f9:ca:62:79:12:82:03:eb:e8:28:b9:f8:48:ca:01:85: 8a:2b:fe:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4QjcxMTAvBgNVBAUTKERDMDMyQzVERDA0MkVEM0U4REUyQTcxMEZCMjY4MThB OTU3MzQyNjYwHhcNMjYwNDA0MTgyNDIyWhcNMjYwNDExMTgyNDIyWjAYMRYwFAYD VQQDEw02OWQxNTc1Ni1jMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lP096KWxhYQsiHDvDuY+zW30RdzudqNx08S0X3WBU1MwG6kW87AX62y4fjx XX+5VuwSgXQ7eYlICnX7VmuATz2kRzUnmivmfSpKg1v94eg/ZB41bu3M71meKheO aLJOiUpLhotSayxw86L4FmExDpsA6idFfybmypLjKsbMfRnBSK3ClwMdWJndzSUE mSe43Gts92xGnjrNFXj7CFbmp1FUXBtSsxW5dBT2vzrvwx3i0sSsTzxw9pocigQo g9OlcPUl3UmyFPwJJcj6JHhwk9Sg9Z6Ik9cnkyKhXRqkDBWI4nBZhn/DbEGHSwc8 14RvXMCdmP/k+86E/HoxSd36OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCnmwGF8 oYMQSaCZLEZnhelzrNS+MB8GA1UdIwQYMBaAFNwDLF3QQu0+jeKnEPsmgYqVc0Jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzhCNy82NjlCNDU1MjE3 NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdUNk40cWNRLXlhQmlwVnpR bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNBTXNYZEJDN1Q2TjRxY1EteWFCaXBWelFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzhCNy82NjlCNDU1MjE3NTkxMUVBOEI0QTgwNEZDNEY5QUUwMi8zQU1zWGRCQzdU Nk40cWNRLXlhQmlwVnpRbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABTl2EuFj+L5+Kp/uCayhkIMNFGpPRDpUwCB1PzGVlj2bRRR61gMQ24D3QA/z QP9SMfmAocz2dxs3dSAJhfsn62R2MfXqm8IeIdKlA28zEgYVw9kmeJiqEt3Ko2ot ykYN5ku50lgf6EGGqhA0ssuivD8jr1ESIeu9KvzIYyDrHu1pV3kb0+i0p05EoetO BdG7Da9wP/WF9+gptn57vPBcn6j5Pc9BB1sITqejd8/VxF+NSDp4D+bcT23D3Q7f 3Onylcrb+xhIOgQna0VH36y0FLRJqlkaoSbQahnaLNiVAXEL6a8DB731H20Fs3f5 ymJ5EoID6+goufhIygGFiiv+LQ== -----END CERTIFICATE-----Generated at Mon Apr 6 11:34:58 2026 by rpki-client