$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json) Hash identifier: A41OmQCU13/RuINpCGa71PGVgCJUU8bRTkYNLw8ATuI= Subject key identifier: 02:CD:3B:FE:35:45:92:32:82:DB:23:0E:33:95:07:D6:E5:84:B2:A0 Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft Manifest number: FA Signing time: Sat 25 Apr 2026 06:02:53 +0000 Manifest this update: Sat 25 Apr 2026 06:02:52 +0000 Manifest next update: Sat 02 May 2026 06:02:52 +0000 Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: euErCRG856XXOGLuMSVJ9m6zLu+ixFIAarg+MdMly8s=) 2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 May 2026 06:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Validity Not Before: Apr 25 06:02:52 2026 GMT Not After : May 2 06:02:52 2026 GMT Subject: CN=69ec590c-e4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:b9:e5:16:cc:90:bb:18:8d:34:cc:ac:0f: 39:18:6d:d2:78:4e:ec:7f:80:c2:07:e4:79:75:b4: dc:43:85:a1:f2:b3:67:f8:a2:27:37:de:8a:12:e9: f1:fb:79:15:1a:9b:ef:53:9b:25:69:2a:c5:74:9e: 14:2a:a9:6e:eb:77:64:0a:06:0c:d7:d5:2f:aa:d2: 3e:82:6d:b3:2c:34:01:21:a8:af:4f:2d:f5:70:a4: b5:fd:b4:e0:2d:a9:43:9b:48:14:0b:e6:fa:35:8d: 98:cd:17:14:35:00:2a:74:23:fe:4b:7e:94:fd:ae: e4:0c:26:0f:fb:59:07:60:ee:12:ed:0c:92:a8:9c: 84:c5:7c:ca:81:99:7a:1f:6a:09:c3:c6:50:e1:8c: ca:7d:86:23:db:6a:e5:43:29:96:c0:de:06:f4:b7: 27:92:56:34:48:68:e5:cd:f2:61:31:22:db:05:b6: d2:1a:47:c0:c1:a6:10:38:2a:c1:99:40:d4:9f:0b: 2f:1b:44:39:8e:af:66:e0:2c:8a:af:bc:ef:b1:a5: af:16:5c:c8:f4:92:4f:13:48:11:a7:75:98:4a:bd: 87:5c:76:34:5a:c4:8b:d9:b9:43:40:02:dd:0d:6d: 7b:b5:fc:12:70:ca:06:07:62:d9:f5:92:f4:83:f9: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CD:3B:FE:35:45:92:32:82:DB:23:0E:33:95:07:D6:E5:84:B2:A0 X509v3 Authority Key Identifier: keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:0d:a8:c3:5b:e3:5d:83:9e:59:30:70:6e:46:4a:a3:38:8b: 86:79:fc:f0:32:45:52:ab:88:86:ba:ad:a5:27:d0:f6:81:dd: 2c:75:40:df:92:19:f3:7d:b0:27:40:04:16:ea:89:a5:f6:66: 1a:56:cc:2e:3d:08:85:c9:cc:6c:b3:0d:12:10:7a:59:8f:a3: dc:0c:23:b9:ee:fa:55:ef:2e:86:37:ba:42:60:c1:61:0d:88: 1c:0f:be:a6:40:52:16:9a:9d:91:b7:8e:1b:92:19:cf:63:81: a9:d1:e5:2b:19:67:95:ea:a2:e8:f5:56:fc:d7:03:c9:e1:90: 19:00:1c:62:dc:16:72:79:98:ad:a6:ac:55:0d:4d:36:af:3c: a5:d2:67:91:22:f3:02:f0:f6:53:3e:f5:aa:fa:0e:88:7b:5d: f0:c9:b3:5c:f8:ed:cf:f4:42:ab:1b:f8:60:3e:56:2d:49:43: f5:81:4a:da:f5:f2:e6:39:df:b1:fe:a0:a5:b9:40:c0:cf:60: 7d:78:b2:cf:62:64:5a:66:f7:0c:57:45:cf:e6:f2:9c:b7:bf: 68:25:e8:99:33:50:cf:7a:89:05:1b:68:24:2e:51:a0:69:35: 9e:bf:89:3a:c9:85:c2:c5:d9:97:9f:78:73:e6:0d:01:78:53: 12:92:44:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDAzNzg4RUUyQkFFNEQ4MDVFQkNEQ0E2NjE4RTJFQzFB MThBNUM0RTIwHhcNMjYwNDI1MDYwMjUyWhcNMjYwNTAyMDYwMjUyWjAYMRYwFAYD VQQDEw02OWVjNTkwYy1lNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquO55RbMkLsYjTTMrA85GG3SeE7sf4DCB+R5dbTcQ4Wh8rNn+KInN96KEunx +3kVGpvvU5slaSrFdJ4UKqlu63dkCgYM19UvqtI+gm2zLDQBIaivTy31cKS1/bTg LalDm0gUC+b6NY2YzRcUNQAqdCP+S36U/a7kDCYP+1kHYO4S7QySqJyExXzKgZl6 H2oJw8ZQ4YzKfYYj22rlQymWwN4G9LcnklY0SGjlzfJhMSLbBbbSGkfAwaYQOCrB mUDUnwsvG0Q5jq9m4CyKr7zvsaWvFlzI9JJPE0gRp3WYSr2HXHY0WsSL2blDQALd DW17tfwScMoGB2LZ9ZL0g/mx9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALNO/41 RZIygtsjDjOVB9blhLKgMB8GA1UdIwQYMBaAFAN4juK65NgF683KZhji7BoYpcTi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CRTdDQUMxMkQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJBWHJ6Y3BtR09Mc0doaWx4 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CRTdDQUMxMkQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJB WHJ6Y3BtR09Mc0doaWx4T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeA2ow1vjXYOeWTBwbkZKoziLhnn88DJFUquIhrqtpSfQ9oHdLHVA35IZ832w J0AEFuqJpfZmGlbMLj0IhcnMbLMNEhB6WY+j3Awjue76Ve8uhje6QmDBYQ2IHA++ pkBSFpqdkbeOG5IZz2OBqdHlKxlnleqi6PVW/NcDyeGQGQAcYtwWcnmYraasVQ1N Nq88pdJnkSLzAvD2Uz71qvoOiHtd8MmzXPjtz/RCqxv4YD5WLUlD9YFK2vXy5jnf sf6gpblAwM9gfXiyz2JkWmb3DFdFz+bynLe/aCXomTNQz3qJBRtoJC5RoGk1nr+J OsmFwsXZl594c+YNAXhTEpJEAA== -----END CERTIFICATE-----Generated at Mon Apr 27 07:17:47 2026 by rpki-client