$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: CJz9600IFlniwEcBVcilbkOLWOSE5QYnXZT0wiexzhM= Subject key identifier: B6:FD:43:6C:F3:17:D2:27:BE:BA:15:71:C6:C9:89:98:33:62:E3:8D Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D3F Signing time: Sat 04 Apr 2026 15:28:08 +0000 Manifest this update: Sat 04 Apr 2026 15:28:08 +0000 Manifest next update: Sat 11 Apr 2026 15:28:08 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: V8sNaQCgeAvutqRJTA9T6uq8X16Bqna5NYjCddfPKNU=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: 9I/UF8wVS9sTnXr5fHjV7Fm4AlFC8LAa0hnWMtmsfp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11611 (0x2d5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Apr 4 15:28:08 2026 GMT Not After : Apr 11 15:28:08 2026 GMT Subject: CN=69d12e08-362c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:66:06:78:e9:d2:58:5e:70:0e:56:c8:c7: 2a:79:44:43:68:11:59:b1:2d:1c:ca:d0:37:49:2f: 6b:4c:0b:de:95:e7:1c:31:2e:ac:30:bc:33:8b:eb: 56:e7:04:42:fa:9c:16:48:05:fb:cc:f9:07:30:3f: cb:98:73:de:11:ef:51:cc:e9:d9:84:96:d3:df:60: 00:f9:ce:14:25:23:75:f7:a5:0a:18:be:02:22:05: 8a:c1:f6:c6:3e:16:a1:26:b6:9d:1e:94:fd:7b:dd: f8:f7:7b:be:c3:ef:97:0e:b3:32:47:91:79:8e:19: d5:f3:84:bd:b6:28:68:84:e0:35:ee:47:d9:c6:00: 51:60:bd:6e:a4:17:c8:86:c0:28:71:00:cf:2d:cf: b4:74:0b:3d:0f:a6:e9:ea:99:e4:bb:27:f6:55:55: 2b:5e:21:da:d3:bc:1a:35:34:1c:df:44:5e:05:b3: f7:be:ba:e9:2b:c6:b0:47:06:59:8e:cd:02:1c:dc: 6f:02:6b:5f:85:56:90:5a:c1:d9:60:4a:40:1e:23: f0:dc:0f:08:26:af:a1:3c:4b:c1:50:5b:b0:4b:ee: 9a:02:d3:a9:6f:95:1a:eb:d8:ea:b3:19:13:84:49: f0:43:92:2b:51:3e:e9:1d:84:d3:35:fe:ea:80:e5: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FD:43:6C:F3:17:D2:27:BE:BA:15:71:C6:C9:89:98:33:62:E3:8D X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8b:bd:f4:cf:52:03:25:82:22:3a:91:87:81:d4:27:d0:02: d0:20:c8:ab:f2:8c:56:e5:5f:3b:35:2d:7c:2a:f8:de:c9:f8: 12:e2:89:94:d3:2b:84:6d:b8:06:60:b1:f3:30:a0:49:cb:f2: 31:67:20:f4:55:0a:e6:6f:6f:87:1a:6d:e5:15:a8:45:92:10: 1d:0c:3a:ed:58:cd:58:f7:5d:ba:be:c6:44:16:69:22:a7:96: 8f:f3:8d:7f:23:e6:7f:20:1e:e0:f3:04:2c:0a:a4:1c:7d:4d: 14:6d:16:04:df:d2:c6:0c:d3:a7:d7:ba:2c:f3:bb:de:94:44: b6:ab:54:2c:c8:fb:9e:f7:4f:0c:0e:2b:db:e5:f5:d6:28:4a: 6d:c9:e8:a2:74:33:6f:ad:e6:0a:dd:d2:e0:ca:57:b2:d1:b6: 82:f2:1e:66:30:df:37:46:75:1b:ca:63:22:2c:36:a2:07:ac: 83:49:35:ca:fe:e7:9d:ad:5d:4a:ae:d9:18:75:10:c1:67:0d: 31:b3:9f:cd:44:0f:c9:bc:e5:a8:b9:0a:d4:b5:ce:2e:6e:b2: 22:7d:da:c5:91:b3:63:a1:f5:4c:74:c5:c6:46:0d:c6:d6:9f: 3c:99:7a:bc:d2:26:00:2d:93:e5:9f:bd:f4:30:81:68:0c:4e: e2:bd:1b:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNDA0MTUyODA4WhcNMjYwNDExMTUyODA4WjAYMRYwFAYD VQQDEw02OWQxMmUwOC0zNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypFmBnjp0lhecA5WyMcqeURDaBFZsS0cytA3SS9rTAveleccMS6sMLwzi+tW 5wRC+pwWSAX7zPkHMD/LmHPeEe9RzOnZhJbT32AA+c4UJSN196UKGL4CIgWKwfbG PhahJradHpT9e93493u+w++XDrMyR5F5jhnV84S9tihohOA17kfZxgBRYL1upBfI hsAocQDPLc+0dAs9D6bp6pnkuyf2VVUrXiHa07waNTQc30ReBbP3vrrpK8awRwZZ js0CHNxvAmtfhVaQWsHZYEpAHiPw3A8IJq+hPEvBUFuwS+6aAtOpb5Ua69jqsxkT hEnwQ5IrUT7pHYTTNf7qgOXcaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLb9Q2zz F9InvroVccbJiZgzYuONMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi4u99M9SAyWCIjqRh4HUJ9AC0CDIq/KMVuVfOzUtfCr43sn4EuKJlNMrhG24 BmCx8zCgScvyMWcg9FUK5m9vhxpt5RWoRZIQHQw67VjNWPddur7GRBZpIqeWj/ON fyPmfyAe4PMELAqkHH1NFG0WBN/SxgzTp9e6LPO73pREtqtULMj7nvdPDA4r2+X1 1ihKbcnoonQzb63mCt3S4MpXstG2gvIeZjDfN0Z1G8pjIiw2ogesg0k1yv7nna1d Sq7ZGHUQwWcNMbOfzUQPybzlqLkK1LXOLm6yIn3axZGzY6H1THTFxkYNxtafPJl6 vNImAC2T5Z+99DCBaAxO4r0bvg== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:44 2026 by rpki-client