$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: B4PXjNEoLD+54UwJ+ih7kIap2GxKerlsdKKRUEELNck= Subject key identifier: D8:38:2B:F0:2B:51:82:3B:49:CF:BC:75:7F:E5:69:DC:F7:3D:9C:23 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 03EB Signing time: Sun 05 Apr 2026 00:17:58 +0000 Manifest this update: Sun 05 Apr 2026 00:17:58 +0000 Manifest next update: Sun 12 Apr 2026 00:17:58 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: 5UtcIgzFfqFlLGC+e2fdZ4qc/lk3z+tXuJv2OVkRLIs=) 2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: bbFe9zajQ0g2zhaT+BLjCcFN40wGnYAdz85LZxbirZ8=) 3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: YoChpX9w4FCCtAPtS4tdDvkJcAqQRe8NPjFDFUXSQH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Apr 5 00:17:58 2026 GMT Not After : Apr 12 00:17:58 2026 GMT Subject: CN=69d1aa36-94bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:96:7b:6f:14:e5:7e:92:91:56:7a:0b:4d:0f: b6:e8:04:7f:e2:5d:d7:10:19:bf:92:ba:d7:ad:1d: fc:f5:93:17:66:ef:31:8f:ed:8f:c1:f5:e2:cf:ed: 96:21:68:3c:f8:af:e3:8b:0a:f8:6f:23:c3:91:c5: 41:b9:89:53:9a:79:c7:bb:dd:5b:dc:e4:fb:fe:71: f9:4d:28:46:4e:8e:00:85:26:c0:ee:7d:8d:7d:c6: f8:d1:05:cb:db:a5:f9:3e:d2:cf:4c:10:04:d3:97: f5:a5:5d:76:87:aa:a8:37:2e:6f:a3:c0:57:ef:a6: f8:7e:f3:17:04:77:38:57:c7:5f:df:8e:f3:97:7b: 55:2b:5c:94:b2:5a:33:bc:29:12:0c:c2:05:26:24: 84:e6:a2:66:61:a6:24:8e:06:83:a3:87:f3:fe:de: b8:b5:19:89:a9:10:6a:ab:a9:cc:ab:dc:65:05:ad: b3:9e:b9:dd:91:66:f4:56:1e:a3:7a:1a:70:1f:7c: c0:f8:6f:4b:01:d2:f6:68:f4:74:16:69:29:c8:05: 14:d7:db:b4:0c:25:6a:d6:9d:57:65:1a:74:b5:8b: 67:0f:54:8e:fc:0c:3e:43:09:9a:1b:17:e2:6f:25: 77:d1:21:ae:0a:30:36:af:17:6c:b6:8b:0d:64:a9: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:38:2B:F0:2B:51:82:3B:49:CF:BC:75:7F:E5:69:DC:F7:3D:9C:23 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a1:4d:73:f2:f1:bd:6e:b1:42:d3:ed:8d:6c:8e:ee:84:59: a1:c3:96:a8:eb:03:fc:be:8d:04:bf:02:cc:24:5e:2e:10:a3: 8c:a1:d1:f6:09:43:02:64:fc:34:45:c3:5b:88:c4:49:06:3a: 58:5a:78:e8:9f:22:cb:0a:07:1a:a0:28:9c:5a:c3:95:81:54: b2:35:d8:05:4f:f0:91:de:7d:05:99:78:31:8b:11:dc:c4:c4: cd:85:4b:82:d3:b1:3d:23:4c:9f:b1:e4:b3:3b:13:d6:13:37: 04:06:ed:93:dc:03:03:ab:60:6d:31:d8:d0:e2:15:9d:06:7c: d5:81:2a:59:fe:6a:be:51:0a:1f:3e:4a:bf:09:18:29:63:1a: 0a:45:a4:fe:ef:19:05:ee:28:06:99:da:61:20:5e:a4:94:30: ab:5d:d1:50:90:a1:8a:6a:5d:b8:0e:9e:be:66:5f:a5:53:f3: 90:5b:b0:b0:9e:ed:ed:f7:59:46:4a:3c:90:21:1b:6c:97:51: 9c:20:df:88:af:70:99:26:43:8b:29:ff:4f:0e:34:17:8c:54: e3:e4:e8:b3:5a:19:fa:34:c7:b4:d0:1d:47:e0:29:2e:81:c9: 5a:bc:e4:e7:d1:30:85:d4:d9:15:7d:2a:88:c3:12:d6:33:23: d7:a8:d4:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwNDA1MDAxNzU4WhcNMjYwNDEyMDAxNzU4WjAYMRYwFAYD VQQDEw02OWQxYWEzNi05NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZZ7bxTlfpKRVnoLTQ+26AR/4l3XEBm/krrXrR389ZMXZu8xj+2PwfXiz+2W IWg8+K/jiwr4byPDkcVBuYlTmnnHu91b3OT7/nH5TShGTo4AhSbA7n2Nfcb40QXL 26X5PtLPTBAE05f1pV12h6qoNy5vo8BX76b4fvMXBHc4V8df347zl3tVK1yUsloz vCkSDMIFJiSE5qJmYaYkjgaDo4fz/t64tRmJqRBqq6nMq9xlBa2znrndkWb0Vh6j ehpwH3zA+G9LAdL2aPR0FmkpyAUU19u0DCVq1p1XZRp0tYtnD1SO/Aw+QwmaGxfi byV30SGuCjA2rxdstosNZKmm6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNg4K/Ar UYI7Sc+8dX/ladz3PZwjMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXKFNc/LxvW6xQtPtjWyO7oRZocOWqOsD/L6NBL8CzCReLhCjjKHR9glDAmT8 NEXDW4jESQY6WFp46J8iywoHGqAonFrDlYFUsjXYBU/wkd59BZl4MYsR3MTEzYVL gtOxPSNMn7HkszsT1hM3BAbtk9wDA6tgbTHY0OIVnQZ81YEqWf5qvlEKHz5KvwkY KWMaCkWk/u8ZBe4oBpnaYSBepJQwq13RUJChimpduA6evmZfpVPzkFuwsJ7t7fdZ Rko8kCEbbJdRnCDfiK9wmSZDiyn/Tw40F4xU4+Tos1oZ+jTHtNAdR+ApLoHJWrzk 59EwhdTZFX0qiMMS1jMj16jULg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:36 2026 by rpki-client