$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: sKjQQA+bnkfLZD6TcOXdRpU6eo4vAeBouF9kPIXkZTY= Subject key identifier: D8:59:88:E0:88:6F:9A:4D:94:73:B6:E7:3F:BD:5A:F7:F5:CF:19:86 Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 0565 Signing time: Sat 04 Apr 2026 23:08:32 +0000 Manifest this update: Sat 04 Apr 2026 23:08:31 +0000 Manifest next update: Sat 11 Apr 2026 23:08:31 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: nw0mp6vSCt3cJgxMp3XaV0y+SLcjJDFd1KaI7QuYunk=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: oiLr2Ru1DYuL64/uOeAPIHRwlt1uV7B6bu1q+HXMs94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Apr 4 23:08:31 2026 GMT Not After : Apr 11 23:08:31 2026 GMT Subject: CN=69d199f0-e78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:da:91:70:95:a7:5c:ca:02:b3:ae:01:5e: 73:a5:3c:82:47:79:07:bf:e1:52:ae:74:31:0d:4b: a8:d2:50:bb:85:05:09:bb:c8:26:25:dc:25:f7:44: e2:77:e9:0c:4d:a7:a4:a9:83:75:07:71:6a:ed:24: 44:eb:93:66:85:4f:36:d6:e0:a4:43:6d:6c:60:3a: be:19:8b:dc:6c:d8:44:5e:1d:62:42:ad:eb:f8:22: 47:c2:f4:e7:8d:7c:da:eb:18:31:03:98:95:3a:db: 98:43:c2:7d:d1:51:34:5e:36:4f:10:80:7c:03:75: 23:39:49:aa:54:85:74:98:49:af:60:2e:90:63:de: 30:6d:3a:e5:d3:f6:6b:04:17:4b:75:e3:e9:7e:d8: 89:10:b8:43:8d:f5:13:fc:68:91:b6:ea:eb:54:16: fd:20:68:4a:30:b7:03:01:77:52:6c:35:5e:4c:13: 68:a4:54:45:67:f2:b0:1b:e6:26:b4:ab:e7:49:8a: e3:d2:12:3a:52:a7:6f:c7:c2:2b:7b:d6:93:06:f1: d1:e7:d7:ac:f8:10:19:38:a0:7e:bc:6e:02:4b:b6: ce:14:e3:bb:c3:9c:e5:a6:92:ec:c5:51:d5:4a:63: 37:9f:2a:97:a1:92:d7:f5:f6:93:3b:fa:c5:5c:9c: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:59:88:E0:88:6F:9A:4D:94:73:B6:E7:3F:BD:5A:F7:F5:CF:19:86 X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b2:11:da:6a:56:60:13:be:cc:34:37:12:24:9f:fb:66:30: b2:e6:4c:6a:8f:ff:3b:20:9f:0a:c1:bb:0c:ad:9d:1c:86:e6: 94:72:fd:fe:22:ba:27:ac:ac:41:c4:7c:29:f0:3f:d1:57:ec: 65:aa:15:21:7a:d0:64:b3:66:84:53:85:b7:e0:d8:ea:7d:a4: 69:8f:cd:4d:1c:35:f7:7a:cb:0b:5f:2b:9c:87:d2:d6:22:a2: 18:25:78:be:19:7e:b7:3f:58:0c:6e:cd:d8:88:cf:93:2b:49: 1b:e1:47:e4:ff:4d:70:d2:06:1e:0f:d9:27:26:1f:1d:7a:a6: d3:c3:ff:57:08:62:66:96:8d:ec:5d:16:14:be:89:f3:68:13: 3b:c3:b0:f4:36:41:ab:0a:8e:ff:56:4d:38:6c:7b:c8:71:64: a0:39:8b:af:a7:ca:e3:23:d0:44:95:4a:df:2d:44:e8:75:7c: d9:f6:dd:9d:fa:08:06:b6:39:42:df:64:04:10:50:a0:9b:51: f3:47:da:21:5f:a8:6c:d6:d3:de:98:2d:1c:9c:dc:39:6f:9a: f0:0c:c2:cb:4f:82:ca:da:39:1e:90:8b:ba:ac:7d:c9:e3:97: f2:48:75:da:7a:94:4a:c0:c0:f8:e8:41:d1:08:e9:ee:69:d5: b9:b9:68:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjYwNDA0MjMwODMxWhcNMjYwNDExMjMwODMxWjAYMRYwFAYD VQQDEw02OWQxOTlmMC1lNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXTakXCVp1zKArOuAV5zpTyCR3kHv+FSrnQxDUuo0lC7hQUJu8gmJdwl90Ti d+kMTaekqYN1B3Fq7SRE65NmhU821uCkQ21sYDq+GYvcbNhEXh1iQq3r+CJHwvTn jXza6xgxA5iVOtuYQ8J90VE0XjZPEIB8A3UjOUmqVIV0mEmvYC6QY94wbTrl0/Zr BBdLdePpftiJELhDjfUT/GiRturrVBb9IGhKMLcDAXdSbDVeTBNopFRFZ/KwG+Ym tKvnSYrj0hI6Uqdvx8Ire9aTBvHR59es+BAZOKB+vG4CS7bOFOO7w5zlppLsxVHV SmM3nyqXoZLX9faTO/rFXJxOdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhZiOCI b5pNlHO25z+9Wvf1zxmGMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXLIR2mpWYBO+zDQ3EiSf+2YwsuZMao//OyCfCsG7DK2dHIbmlHL9/iK6J6ys QcR8KfA/0VfsZaoVIXrQZLNmhFOFt+DY6n2kaY/NTRw193rLC18rnIfS1iKiGCV4 vhl+tz9YDG7N2IjPkytJG+FH5P9NcNIGHg/ZJyYfHXqm08P/VwhiZpaN7F0WFL6J 82gTO8Ow9DZBqwqO/1ZNOGx7yHFkoDmLr6fK4yPQRJVK3y1E6HV82fbdnfoIBrY5 Qt9kBBBQoJtR80faIV+obNbT3pgtHJzcOW+a8AzCy0+Cyto5HpCLuqx9yeOX8kh1 2nqUSsDA+OhB0Qjp7mnVublo1Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:03 2026 by rpki-client