$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: pSqE5AO1UbEfzKPdolzRO+LVbtNIh+13C7KqX6X6LbU= Subject key identifier: 5D:7E:3B:BF:21:9C:3D:EB:EE:C9:0D:D5:CB:62:3D:F7:22:BF:9A:5A Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0932 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 08FD Signing time: Sat 04 Apr 2026 14:45:09 +0000 Manifest this update: Sat 04 Apr 2026 14:45:09 +0000 Manifest next update: Sat 11 Apr 2026 14:45:09 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: Dg2pbTzw1DM6C7ODpM6MeaAMM3mvMF/efOqAhPnmTGg=) 2: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) 3: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: BoL9UlNE8f39H5zPW1byPvXmDiZbS/dSQi7Q0NywADo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Apr 4 14:45:09 2026 GMT Not After : Apr 11 14:45:09 2026 GMT Subject: CN=69d123f5-657d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:53:2a:53:ff:1f:4d:6c:72:2e:d1:68:26: 32:9c:ff:80:b9:e0:36:2c:49:a3:ae:30:61:d3:0e: a1:53:9b:e4:a4:49:aa:a5:af:30:f2:db:c2:dc:6e: a1:ff:6e:e8:47:56:9e:56:29:b2:c1:a9:2d:9d:93: 3e:b0:3b:95:97:95:ff:ec:8c:c3:7e:f3:fd:8c:f5: 4e:3d:e2:de:7e:86:af:f6:fb:07:b1:f9:e7:f9:7b: 83:6c:c9:02:7f:8b:94:30:4a:4b:00:13:78:df:e3: 5e:55:ba:83:aa:85:47:19:26:bd:c2:cc:dc:00:c1: fc:c9:33:44:f3:fe:40:99:c9:d2:2f:ca:69:e8:18: c1:d7:c7:74:35:ca:5d:8a:6d:43:15:e0:e4:1f:f6: 32:c9:af:35:50:02:ca:67:b6:80:a5:8f:f9:12:e2: 36:9e:a6:3a:b9:04:87:06:7c:b0:0d:b3:4c:aa:d9: 26:54:1e:45:9d:ac:fc:a3:ff:a0:40:fb:9e:6e:bb: 32:ce:32:24:92:e5:2a:50:1c:ae:2c:00:1a:74:8d: 78:c9:90:0e:78:f9:c3:57:fc:38:3c:9a:f1:f0:0c: 23:53:10:b8:44:d0:72:08:c0:28:65:18:fc:4f:60: 17:1e:ce:cd:c2:55:0c:0f:16:76:c2:0a:27:b2:e4: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7E:3B:BF:21:9C:3D:EB:EE:C9:0D:D5:CB:62:3D:F7:22:BF:9A:5A X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:62:62:6d:f4:0a:a8:bc:ab:f6:28:3a:2b:9d:f6:24:86:c2: 18:9a:80:3c:12:09:1d:d4:ef:50:0b:65:18:c1:01:29:4e:e1: d2:57:45:a0:8e:c2:5e:9b:33:fa:ee:a8:1f:fb:c6:df:56:5c: 89:40:55:b1:0a:0d:3c:a9:ed:d7:b9:dd:9f:30:9c:ae:e0:27: 1e:75:4b:3a:14:11:06:dc:31:e9:9b:9e:38:fa:4a:12:20:cc: bb:cf:a9:1c:6e:ec:dc:31:09:51:13:0b:07:b2:59:f3:ea:7c: 26:71:75:84:cc:3b:e4:ec:c3:17:8a:b7:54:1d:6f:a4:cc:e2: d5:53:95:42:71:26:21:e7:2e:79:d2:49:70:11:cc:01:9b:65: 06:38:7a:69:11:eb:b5:2b:2b:08:38:b5:8d:90:9b:79:b2:d0: 59:bd:9e:32:b2:02:0d:d0:28:cb:be:b5:4b:8d:9e:55:50:7c: c0:ab:cc:05:39:44:a3:17:83:cf:d2:e9:4a:3d:b8:b9:5f:25: 5b:3c:22:f5:e4:ff:3b:17:ff:f4:76:2b:78:39:03:68:5e:58: 60:60:50:5f:68:c6:38:bf:b9:60:c9:03:0a:2d:aa:3b:b8:bf: af:7e:41:ae:1e:86:e4:ba:d0:5a:8a:e5:44:41:05:cd:30:f3: 8f:63:d6:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwNDA0MTQ0NTA5WhcNMjYwNDExMTQ0NTA5WjAYMRYwFAYD VQQDEw02OWQxMjNmNS02NTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2l9TKlP/H01sci7RaCYynP+AueA2LEmjrjBh0w6hU5vkpEmqpa8w8tvC3G6h /27oR1aeVimywaktnZM+sDuVl5X/7IzDfvP9jPVOPeLefoav9vsHsfnn+XuDbMkC f4uUMEpLABN43+NeVbqDqoVHGSa9wszcAMH8yTNE8/5AmcnSL8pp6BjB18d0Ncpd im1DFeDkH/Yyya81UALKZ7aApY/5EuI2nqY6uQSHBnywDbNMqtkmVB5Fnaz8o/+g QPuebrsyzjIkkuUqUByuLAAadI14yZAOePnDV/w4PJrx8AwjUxC4RNByCMAoZRj8 T2AXHs7NwlUMDxZ2wgonsuS1LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1+O78h nD3r7skN1ctiPfciv5paMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgGJibfQKqLyr9ig6K532JIbCGJqAPBIJHdTvUAtlGMEBKU7h0ldFoI7CXpsz +u6oH/vG31ZciUBVsQoNPKnt17ndnzCcruAnHnVLOhQRBtwx6ZueOPpKEiDMu8+p HG7s3DEJURMLB7JZ8+p8JnF1hMw75OzDF4q3VB1vpMzi1VOVQnEmIecuedJJcBHM AZtlBjh6aRHrtSsrCDi1jZCbebLQWb2eMrICDdAoy761S42eVVB8wKvMBTlEoxeD z9LpSj24uV8lWzwi9eT/Oxf/9HYreDkDaF5YYGBQX2jGOL+5YMkDCi2qO7i/r35B rh6G5LrQWorlREEFzTDzj2PWog== -----END CERTIFICATE-----Generated at Mon Apr 6 15:12:29 2026 by rpki-client