$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: Ha1qMQKHA3V0CorO+elxkCjSi1rdcUlBk4NYVQua3Hs= Subject key identifier: CD:74:EB:6A:7B:08:76:74:7D:A4:27:97:AC:3B:1E:2D:67:8A:ED:DE Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: 016C Signing time: Sun 05 Apr 2026 04:16:21 +0000 Manifest this update: Sun 05 Apr 2026 04:16:20 +0000 Manifest next update: Sun 12 Apr 2026 04:16:20 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: HfjhxGTXTX1HLVZEwfcGscKBbXBrfV/ApmqAny6j6Bc=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: LYriHLSpUhMr55UlNlgp7shUCvecZ8GUsEOVzeACv2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Apr 5 04:16:20 2026 GMT Not After : Apr 12 04:16:20 2026 GMT Subject: CN=69d1e214-b06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:f0:60:b7:1b:89:d6:ba:ec:1a:b2:fe:05: 73:01:e1:85:12:72:68:f3:87:7d:cd:df:8f:fe:5c: dc:31:8e:0b:4b:cc:90:aa:89:84:09:01:17:b1:b9: b9:46:30:d4:71:77:1d:e6:97:b4:7a:4f:d1:9a:f5: de:af:f5:58:4b:58:d6:cb:5c:b7:0f:9f:ad:57:10: 44:8e:16:5a:9b:d8:d9:53:f6:1a:97:d9:9d:62:23: cb:c2:ca:1a:e4:62:21:09:58:fb:c9:10:bf:f2:26: 0c:6b:36:12:bc:05:4e:c0:c9:a9:a5:fb:cc:52:74: af:ea:b8:48:d0:5f:e9:62:6c:73:b4:1f:f2:ac:fe: 1a:0a:29:66:b0:be:e1:85:80:76:fa:cd:62:8b:5d: d3:5b:7e:5a:b3:f1:30:83:d9:38:b0:50:3e:92:68: 9f:a2:3a:63:72:fd:03:06:89:44:d7:6b:69:76:3b: 4c:64:11:02:31:d9:5a:cd:9b:54:93:87:89:da:b6: ab:d1:23:78:41:22:a1:fa:d8:e6:ac:2e:1d:55:51: f8:3b:15:19:11:23:61:32:df:b1:26:f7:dc:e2:d3: dc:6b:17:ad:6e:f5:a7:e2:24:f4:a7:89:a6:7e:e1: 9f:a1:40:49:e1:04:16:38:74:45:91:f3:53:d7:23: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:EB:6A:7B:08:76:74:7D:A4:27:97:AC:3B:1E:2D:67:8A:ED:DE X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fd:14:69:fe:7b:87:7a:a7:51:6b:17:ff:06:9f:c2:38:6e: 42:de:6a:01:6a:6e:ca:6f:b4:5b:3a:ed:aa:90:55:63:46:2a: ce:66:90:3a:4e:f7:ec:6c:94:1c:00:08:9e:f6:7a:1a:ae:e0: 26:85:32:76:75:a1:dd:dd:7c:77:bd:bf:7c:93:49:47:6a:39: 8e:2e:e8:44:b6:8d:aa:ad:2e:73:df:4b:e0:f7:b9:bc:81:a0: 1c:bb:ef:b1:63:ec:cd:35:1d:28:c1:41:59:3c:da:f4:1c:ef: 47:0d:4c:b8:b4:00:62:ee:83:ee:41:65:24:48:6b:c8:1f:78: ac:5a:e1:9f:17:e2:ec:7e:55:b3:7b:6b:82:77:0e:84:ef:af: 2c:df:b4:8e:6f:1b:b6:49:b0:ea:d9:2e:df:6d:ce:f1:cc:05: 05:6a:ca:35:75:0e:2a:01:0f:06:2d:b9:d9:9e:66:6c:7d:21: c3:2f:fe:70:f8:f9:d4:87:5c:2c:7f:d4:99:80:ff:10:2b:7d: cf:83:9c:a2:74:26:b9:ba:7e:77:e9:2e:44:92:e8:b0:52:cd: 45:58:88:a4:ef:eb:a9:3a:22:26:d5:7d:05:13:0f:da:4d:b7: 78:36:a2:23:0e:1c:71:30:e9:34:6c:e0:51:68:a6:cd:35:33: f0:7d:5f:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjYwNDA1MDQxNjIwWhcNMjYwNDEyMDQxNjIwWjAYMRYwFAYD VQQDEw02OWQxZTIxNC1iMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZrwYLcbida67Bqy/gVzAeGFEnJo84d9zd+P/lzcMY4LS8yQqomECQEXsbm5 RjDUcXcd5pe0ek/RmvXer/VYS1jWy1y3D5+tVxBEjhZam9jZU/Yal9mdYiPLwsoa 5GIhCVj7yRC/8iYMazYSvAVOwMmppfvMUnSv6rhI0F/pYmxztB/yrP4aCilmsL7h hYB2+s1ii13TW35as/Ewg9k4sFA+kmifojpjcv0DBolE12tpdjtMZBECMdlazZtU k4eJ2rar0SN4QSKh+tjmrC4dVVH4OxUZESNhMt+xJvfc4tPcaxetbvWn4iT0p4mm fuGfoUBJ4QQWOHRFkfNT1yNzmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1062p7 CHZ0faQnl6w7Hi1niu3eMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaP0Uaf57h3qnUWsX/wafwjhuQt5qAWpuym+0WzrtqpBVY0YqzmaQOk737GyU HAAInvZ6Gq7gJoUydnWh3d18d72/fJNJR2o5ji7oRLaNqq0uc99L4Pe5vIGgHLvv sWPszTUdKMFBWTza9BzvRw1MuLQAYu6D7kFlJEhryB94rFrhnxfi7H5Vs3trgncO hO+vLN+0jm8btkmw6tku323O8cwFBWrKNXUOKgEPBi252Z5mbH0hwy/+cPj51Idc LH/UmYD/ECt9z4OconQmubp+d+kuRJLosFLNRViIpO/rqToiJtV9BRMP2k23eDai Iw4ccTDpNGzgUWimzTUz8H1fYQ== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:35 2026 by rpki-client