$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: ORH9jx085AcInsTUrCLubzFCF21MGW56SSrx1e79lEg= Subject key identifier: D4:1F:16:3B:6E:76:5F:6E:31:16:AB:D8:6E:0B:68:E8:AD:FE:16:1C Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 16D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 16BA Signing time: Sat 04 Apr 2026 16:36:19 +0000 Manifest this update: Sat 04 Apr 2026 16:36:18 +0000 Manifest next update: Sat 11 Apr 2026 16:36:18 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: n09hWM0m5smIAMcS5IEpHbtmaxu0ItzHP3wNv8GTSrk=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5842 (0x16d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Apr 4 16:36:18 2026 GMT Not After : Apr 11 16:36:18 2026 GMT Subject: CN=69d13e03-e33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:32:2f:73:b2:1b:0e:11:f9:f0:a0:d2:ee: fb:c1:5b:49:14:33:4c:7c:c6:a1:ea:0e:f3:55:84: 20:31:93:91:a0:5a:a3:37:8f:69:8f:41:2b:2c:ce: 7e:40:3a:fc:b0:ee:42:70:a9:ea:74:33:b9:06:e9: 68:23:d4:b3:3d:f8:09:0a:0f:16:f4:54:7d:cd:a9: 89:3b:3e:8b:29:a3:1d:e5:b8:ba:70:b6:79:6a:94: bd:e8:d0:2e:12:76:7b:90:dd:31:4b:44:aa:f1:e6: 2f:41:06:71:65:d1:b1:51:00:e3:8b:a3:1b:56:f5: d5:d5:8d:8d:96:c5:a7:f5:06:ad:d4:a5:67:5e:1f: 82:1b:7e:21:25:d2:b9:8a:02:59:af:4b:94:db:fc: da:ba:44:cf:7f:5e:cb:e4:b1:92:11:28:d9:f4:f8: fb:d0:4f:dc:d7:e2:f5:14:a4:25:aa:85:c2:8c:cc: 46:fc:ba:e7:2c:f0:fc:cf:e9:26:6a:21:69:d5:d6: 61:6d:26:b5:57:1b:13:51:c3:16:23:1c:f6:e4:c2: 18:ae:d3:3f:ef:b6:33:f5:7c:59:ce:9e:e7:84:bf: 9d:fd:2b:f4:90:44:92:36:17:78:51:7c:5a:51:37: 8c:05:44:e6:10:ec:b8:6a:37:3e:c2:74:d4:f9:97: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1F:16:3B:6E:76:5F:6E:31:16:AB:D8:6E:0B:68:E8:AD:FE:16:1C X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:77:a4:b7:10:ee:58:cf:99:cb:9d:8d:c9:2d:7e:f4:95:58: fa:50:4f:93:6c:6c:93:3c:96:e0:f8:0e:7e:62:47:5e:d0:96: 30:ac:90:18:76:35:a0:ef:86:cf:2e:1c:05:52:7c:f0:5c:f3: bd:8d:5e:21:d8:76:04:5a:70:1b:4c:40:89:af:02:02:e0:04: 66:a8:c3:eb:66:b1:c3:ca:c0:67:0b:84:56:d8:e4:0e:70:f5: eb:13:21:13:e6:76:23:42:5c:8c:2b:95:b7:aa:00:c5:92:aa: 90:24:4d:81:c2:c0:52:d0:60:42:fa:7a:59:56:48:00:18:1a: 86:3c:07:f5:bb:e5:c7:b6:55:12:08:9f:1b:96:9a:d7:9c:c6: a4:fe:98:7c:d1:43:6b:de:4f:78:ba:ba:05:cb:77:db:e6:ed: 3f:44:72:8d:fe:d4:5e:14:52:da:95:3f:e1:c0:b4:3f:64:45: 2a:44:21:fe:57:db:bd:fb:09:e1:09:c1:06:30:09:c1:63:1f: 77:d4:83:94:fb:a6:73:bc:f2:b8:af:56:cb:d1:1a:cf:cf:23: e1:48:2e:9c:86:4a:53:e0:98:e8:8b:8d:5d:a2:a2:13:a7:1c: a0:47:5f:19:08:2e:0e:b7:73:02:b7:3f:df:8a:f9:bc:24:ba: c9:8c:02:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjYwNDA0MTYzNjE4WhcNMjYwNDExMTYzNjE4WjAYMRYwFAYD VQQDEw02OWQxM2UwMy1lMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXwyL3OyGw4R+fCg0u77wVtJFDNMfMah6g7zVYQgMZORoFqjN49pj0ErLM5+ QDr8sO5CcKnqdDO5BuloI9SzPfgJCg8W9FR9zamJOz6LKaMd5bi6cLZ5apS96NAu EnZ7kN0xS0Sq8eYvQQZxZdGxUQDji6MbVvXV1Y2NlsWn9Qat1KVnXh+CG34hJdK5 igJZr0uU2/zaukTPf17L5LGSESjZ9Pj70E/c1+L1FKQlqoXCjMxG/LrnLPD8z+km aiFp1dZhbSa1VxsTUcMWIxz25MIYrtM/77Yz9XxZzp7nhL+d/Sv0kESSNhd4UXxa UTeMBUTmEOy4ajc+wnTU+ZcDmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQfFjtu dl9uMRar2G4LaOit/hYcMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtXektxDuWM+Zy52NyS1+9JVY+lBPk2xskzyW4PgOfmJHXtCWMKyQGHY1oO+G zy4cBVJ88FzzvY1eIdh2BFpwG0xAia8CAuAEZqjD62axw8rAZwuEVtjkDnD16xMh E+Z2I0JcjCuVt6oAxZKqkCRNgcLAUtBgQvp6WVZIABgahjwH9bvlx7ZVEgifG5aa 15zGpP6YfNFDa95PeLq6Bct32+btP0Ryjf7UXhRS2pU/4cC0P2RFKkQh/lfbvfsJ 4QnBBjAJwWMfd9SDlPumc7zyuK9Wy9Eaz88j4UgunIZKU+CY6IuNXaKiE6ccoEdf GQguDrdzArc/34r5vCS6yYwCJg== -----END CERTIFICATE-----Generated at Mon Apr 6 10:23:42 2026 by rpki-client