$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: n2liwO122sxt3853OLgYxUVqSsZHzpduUz6YjhU1od8= Subject key identifier: 92:68:70:C1:4A:C0:40:F6:8E:5A:FB:D8:0A:9B:CE:E1:D3:F1:D5:44 Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 09F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 09E7 Signing time: Sat 04 Apr 2026 19:40:40 +0000 Manifest this update: Sat 04 Apr 2026 19:40:39 +0000 Manifest next update: Sat 11 Apr 2026 19:40:39 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: 7nTU3AsHZzFiGo7tZ9iPAZOlHMdLzuZwwN0fP+TaFcs=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: FGKFmIxlRTKcHWAwWVQZRDo1BFONYcqJI1h8vC0VRSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: Apr 4 19:40:39 2026 GMT Not After : Apr 11 19:40:39 2026 GMT Subject: CN=69d16937-d8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:6e:85:b0:08:2a:92:b7:05:91:47:07:3f: 60:25:d4:c4:02:f6:03:05:6e:36:71:61:be:56:60: b6:5c:57:ac:7a:fe:b2:ad:46:5a:6b:8d:5b:f9:ca: e5:08:6e:92:f4:da:6b:cf:a0:66:a6:db:6b:6f:13: e5:35:5e:33:dc:3e:6d:38:ae:5f:bb:99:ba:9a:89: 45:7d:8e:9d:f3:25:58:5d:0e:e5:17:fd:bb:aa:f7: 1c:50:e2:29:29:31:8e:68:b5:6d:ed:70:12:ed:8b: e1:4c:96:bb:0b:05:ee:e5:e6:d4:70:6a:86:04:35: fd:5b:43:68:2c:83:ef:ce:c0:de:8f:fe:22:5e:e6: 11:37:cf:a3:43:0b:ea:11:a1:22:ff:40:e7:4f:0e: 8d:8c:1b:88:50:ea:2a:38:f0:59:ed:a0:3e:80:0c: c5:3e:70:e2:83:97:8a:28:9e:ce:66:72:46:b4:9e: 64:a0:0a:d9:44:c4:fe:a7:e9:59:6b:c8:2c:9a:b2: 8b:d2:a9:59:58:9f:f8:8e:54:7e:14:e8:c6:52:ff: 4f:55:e7:cf:72:96:bd:81:6a:8d:ff:d9:b6:30:e6: 09:90:f7:67:60:2d:4f:65:b4:08:5d:22:1e:f4:77: 90:67:fd:b0:ed:72:30:70:a5:b1:5f:71:30:a4:bc: 08:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:68:70:C1:4A:C0:40:F6:8E:5A:FB:D8:0A:9B:CE:E1:D3:F1:D5:44 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:59:bc:89:ac:58:e2:18:6c:fe:5c:5e:a1:8a:7b:1b:2c:f4: 1a:12:f1:3a:a0:b1:10:6a:cb:a9:6c:44:2c:6c:60:4c:ca:69: 74:84:a7:91:a3:6a:ae:2b:1a:31:9d:e1:54:6b:7d:33:ea:5d: da:c3:b2:63:0d:49:7d:82:95:5b:56:59:12:5d:d5:fb:19:b7: 52:c2:f9:30:b3:96:62:b6:55:a9:d7:a3:99:fe:73:8c:ec:b1: 01:2d:2e:4e:c5:5c:5c:6c:0c:cc:e2:93:92:f3:f0:ed:ba:a1: 32:9d:1a:0b:98:53:b0:ee:0d:4f:34:5a:ef:db:0d:ab:9d:90: 6a:7a:39:fb:05:27:f2:02:32:2e:85:b3:12:97:fc:37:07:0d: 16:05:e3:62:f1:72:96:6c:cc:6c:15:e3:8f:ff:a7:06:0a:e8: 65:38:33:c9:67:7d:da:93:db:7f:bc:fe:4d:76:b4:91:ee:a5: d8:f3:f7:9c:91:50:be:50:63:4e:7e:1d:b1:e0:2a:7c:af:f4: 07:ea:e6:94:b7:ba:c6:8f:be:6a:c8:6c:b7:b8:48:96:22:b3: bb:a0:14:22:c6:55:fc:0d:cd:5b:86:23:5d:94:bb:35:00:06: 95:69:9c:e8:2f:ec:dd:74:bd:40:fd:04:83:d6:90:9f:4c:29: 88:68:53:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjYwNDA0MTk0MDM5WhcNMjYwNDExMTk0MDM5WjAYMRYwFAYD VQQDEw02OWQxNjkzNy1kOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjjpuhbAIKpK3BZFHBz9gJdTEAvYDBW42cWG+VmC2XFesev6yrUZaa41b+crl CG6S9Nprz6BmpttrbxPlNV4z3D5tOK5fu5m6molFfY6d8yVYXQ7lF/27qvccUOIp KTGOaLVt7XAS7YvhTJa7CwXu5ebUcGqGBDX9W0NoLIPvzsDej/4iXuYRN8+jQwvq EaEi/0DnTw6NjBuIUOoqOPBZ7aA+gAzFPnDig5eKKJ7OZnJGtJ5koArZRMT+p+lZ a8gsmrKL0qlZWJ/4jlR+FOjGUv9PVefPcpa9gWqN/9m2MOYJkPdnYC1PZbQIXSIe 9HeQZ/2w7XIwcKWxX3EwpLwI/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJocMFK wED2jlr72AqbzuHT8dVEMB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl1m8iaxY4hhs/lxeoYp7Gyz0GhLxOqCxEGrLqWxELGxgTMppdISnkaNqrisa MZ3hVGt9M+pd2sOyYw1JfYKVW1ZZEl3V+xm3UsL5MLOWYrZVqdejmf5zjOyxAS0u TsVcXGwMzOKTkvPw7bqhMp0aC5hTsO4NTzRa79sNq52Qano5+wUn8gIyLoWzEpf8 NwcNFgXjYvFylmzMbBXjj/+nBgroZTgzyWd92pPbf7z+TXa0ke6l2PP3nJFQvlBj Tn4dseAqfK/0B+rmlLe6xo++ashst7hIliKzu6AUIsZV/A3NW4YjXZS7NQAGlWmc 6C/s3XS9QP0Eg9aQn0wpiGhTsg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:43 2026 by rpki-client