$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: deyzzXWX1ixoRJB5SIcMBhOyMWwpVWc/6uGYKGwAJJ0= Subject key identifier: 48:31:FD:BA:EA:A3:2E:63:62:42:28:AD:8F:F0:CE:09:CA:68:19:EF Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 0830 Signing time: Sat 04 Apr 2026 20:44:19 +0000 Manifest this update: Sat 04 Apr 2026 20:44:19 +0000 Manifest next update: Sat 11 Apr 2026 20:44:19 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: rtActnkSwBgB6z08iblnLVA6oebh2nMdS3FSuwkYV0o=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: +1MurbXyF5va03lXfL/j9G2HKWwfacoafaUYrKj0wIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2, serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Apr 4 20:44:19 2026 GMT Not After : Apr 11 20:44:19 2026 GMT Subject: CN=69d17823-cdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:97:4f:9a:7c:a6:c7:9f:68:77:51:33:44: ca:ea:f5:2b:5f:b5:9f:49:ad:05:d3:7e:d1:09:d0: e9:e9:cc:63:2e:4f:3b:91:36:4d:f1:d6:07:ea:da: c6:d9:52:3a:5b:44:c4:fd:98:b0:82:48:5f:29:b6: 8b:7f:31:2b:8b:c0:dd:9f:b6:d9:87:20:83:3c:60: 4c:df:33:8e:e6:02:2e:f1:28:88:98:bd:6d:23:37: fe:d2:ea:7d:16:c4:91:94:03:79:92:31:02:5e:98: c9:a8:bf:3f:bd:40:f4:c8:ee:01:7b:73:ec:d8:f3: 5a:34:49:98:a5:41:d2:66:7b:f7:2f:65:4d:6c:3b: cd:fa:7c:11:4b:b9:17:ae:fd:48:52:31:b6:01:64: 12:a2:7d:be:74:a7:82:53:eb:8d:ba:23:cf:59:db: 8a:e0:0f:06:3c:0d:51:65:59:76:4c:07:1c:4b:83: c7:64:7a:38:ef:a3:d4:a7:70:73:4e:f0:b1:9b:79: d3:6f:1c:03:44:df:f2:78:de:85:99:bd:97:de:8a: f8:17:f9:46:bf:3c:f7:24:70:91:1e:a6:23:dd:e1: 4c:cc:56:48:74:75:ee:3e:8a:cf:84:d6:4c:e5:2a: bb:0c:95:0a:39:21:7d:ea:06:6b:14:c3:35:33:a1: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:31:FD:BA:EA:A3:2E:63:62:42:28:AD:8F:F0:CE:09:CA:68:19:EF X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:70:c3:c2:b3:fd:42:d7:c7:e6:0c:07:91:68:66:b3:fd:62: ff:3f:e4:e6:6d:56:c5:4a:ac:71:1d:aa:0d:df:7b:31:6d:db: 9a:ff:2a:21:c1:d3:eb:91:98:23:d2:81:a3:52:26:3f:3f:a7: 1e:00:06:05:b4:6f:94:12:cd:9d:9b:ae:1e:dc:10:0d:19:34: 92:28:a9:40:c7:0d:05:b7:9e:ea:c5:68:d7:a2:f4:4c:57:8f: ba:7e:c8:25:15:d4:54:a9:db:90:a1:a3:5b:f7:f1:3f:3a:e3: f8:87:8c:a5:5b:ab:ad:b5:0b:97:38:cd:31:a2:78:be:19:cf: d9:a8:44:62:ca:c2:82:1c:7c:df:38:1b:5c:bd:79:7f:65:f5: 50:e6:0c:f1:08:a1:8b:04:ec:b3:aa:06:6b:05:98:c8:de:b9: a5:bf:63:55:55:26:4e:f4:78:5c:b9:ed:bc:1a:96:7c:5f:f2: ac:4f:fe:2b:00:15:1c:b0:90:29:9d:75:96:17:e9:4f:c1:7c: 79:7f:0f:57:d0:b4:37:cd:bd:bc:2a:d4:31:bf:81:61:f2:b6: a6:e0:83:30:37:02:6c:6b:e0:dd:d0:cb:8c:6a:24:f0:6b:d6: 90:ae:63:90:5b:df:08:12:58:c3:14:35:fa:7e:31:cf:79:ea: f0:c8:48:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjYwNDA0MjA0NDE5WhcNMjYwNDExMjA0NDE5WjAYMRYwFAYD VQQDEw02OWQxNzgyMy1jZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArumXT5p8psefaHdRM0TK6vUrX7WfSa0F037RCdDp6cxjLk87kTZN8dYH6trG 2VI6W0TE/ZiwgkhfKbaLfzEri8Ddn7bZhyCDPGBM3zOO5gIu8SiImL1tIzf+0up9 FsSRlAN5kjECXpjJqL8/vUD0yO4Be3Ps2PNaNEmYpUHSZnv3L2VNbDvN+nwRS7kX rv1IUjG2AWQSon2+dKeCU+uNuiPPWduK4A8GPA1RZVl2TAccS4PHZHo476PUp3Bz TvCxm3nTbxwDRN/yeN6Fmb2X3or4F/lGvzz3JHCRHqYj3eFMzFZIdHXuPorPhNZM 5Sq7DJUKOSF96gZrFMM1M6FF5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEgx/brq oy5jYkIorY/wzgnKaBnvMB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIHDDwrP9QtfH5gwHkWhms/1i/z/k5m1WxUqscR2qDd97MW3bmv8qIcHT65GY I9KBo1ImPz+nHgAGBbRvlBLNnZuuHtwQDRk0kiipQMcNBbee6sVo16L0TFePun7I JRXUVKnbkKGjW/fxPzrj+IeMpVurrbULlzjNMaJ4vhnP2ahEYsrCghx83zgbXL15 f2X1UOYM8QihiwTss6oGawWYyN65pb9jVVUmTvR4XLntvBqWfF/yrE/+KwAVHLCQ KZ11lhfpT8F8eX8PV9C0N829vCrUMb+BYfK2puCDMDcCbGvg3dDLjGok8GvWkK5j kFvfCBJYwxQ1+n4xz3nq8MhIpg== -----END CERTIFICATE-----Generated at Mon Apr 6 11:27:48 2026 by rpki-client