$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: wHO0tZ9061H2NSrFDxp9G1v1yVpoFXUyUSd1tOYilgI= Subject key identifier: 9C:AB:CB:69:DE:FC:D0:66:70:E0:C9:64:49:7E:B9:B7:95:D2:42:B3 Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 3544 Signing time: Sat 04 Apr 2026 14:39:23 +0000 Manifest this update: Sat 04 Apr 2026 14:39:22 +0000 Manifest next update: Sat 11 Apr 2026 14:39:22 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: ER73s33FoQCXwdQB0HBa3VYCnHlqjCFlHZysEd2TAYA=) 2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=) 3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: UIYwNayG8hTeDwgvsuKN7XA3xd3VH9+6keHdCSYXSag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Apr 4 14:39:22 2026 GMT Not After : Apr 11 14:39:22 2026 GMT Subject: CN=69d1229b-f79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:50:70:c2:2e:82:c9:d8:21:3b:6e:93:ce: 5f:c2:9e:f9:86:b8:46:ce:eb:81:19:16:bc:c1:f0: 4c:90:bc:85:ac:6e:4a:52:8c:c1:47:bb:2e:0b:86: e4:37:fb:72:50:e0:db:5f:8e:d9:15:0e:e9:e9:26: ec:65:1b:45:6e:42:67:5e:e8:f6:75:26:fe:24:f0: 87:77:81:b3:7a:d1:73:bd:69:54:ed:20:4c:d1:a5: 0c:49:9c:c2:d6:7c:a8:e8:39:73:d1:07:8e:82:bc: 5f:1c:c8:cd:da:69:70:8e:06:00:e2:22:13:40:c8: 60:bf:30:2b:20:6e:12:ff:5a:ba:c4:95:b4:53:40: 04:35:3e:5b:13:57:88:bd:cb:45:36:8f:16:3b:08: 27:51:9e:19:e4:85:4b:58:bc:00:d0:df:94:20:2e: 95:6c:ec:57:67:93:2d:86:2e:a5:55:27:14:6e:b3: 3f:44:cc:d6:2c:3c:93:1d:52:c8:a2:b4:b7:d2:fe: 01:83:06:9f:7a:bc:14:28:cf:51:60:9b:81:ab:14: 45:58:ac:52:a2:89:2d:fe:86:06:06:b2:ff:a2:0c: db:9a:d9:38:b4:f7:31:1e:3e:27:04:d2:a9:99:c0: 33:e7:a1:19:14:72:63:bb:c0:1a:36:14:73:5c:fe: 26:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AB:CB:69:DE:FC:D0:66:70:E0:C9:64:49:7E:B9:B7:95:D2:42:B3 X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4d:71:74:bc:01:d5:43:0b:fb:72:83:63:29:9a:4c:ee:e8: cd:83:93:99:f2:5d:b8:ac:10:da:d7:04:8d:3c:e2:08:c8:ee: e4:83:b7:09:cc:fd:c3:8f:fa:25:71:eb:ac:c2:6b:3b:65:ad: e7:ef:ea:0c:fd:66:a1:84:a6:b0:a6:b3:6e:50:72:36:ae:13: f8:c8:91:b6:64:96:6a:b2:c5:01:7e:2f:e1:01:b1:34:e7:8f: 05:b7:39:49:5c:2c:8c:70:8b:8b:21:8d:d8:36:ac:91:9f:f3: 12:57:3e:e9:d8:6a:d0:b9:43:bd:5b:04:bf:cb:b3:bc:ef:3d: f8:d3:fd:0a:c5:ad:65:3e:cb:d6:0f:51:68:cb:a2:2b:75:64: d0:a6:5f:80:48:5c:97:ba:ed:80:f9:e0:4f:bf:6e:6d:df:cb: 31:c8:a3:d4:34:bb:e7:a7:a1:c9:25:cc:83:55:82:3c:4c:12: 2e:ed:d7:2d:24:05:a3:53:8a:54:6a:2d:5b:ff:f5:8a:8d:75: 62:d1:a9:be:4e:33:52:69:58:c4:95:0f:d1:19:5b:21:b0:95: c7:ac:be:19:ff:e2:e2:2b:07:07:3c:4f:6c:fd:f8:c0:7b:d0: 7a:e7:65:28:d0:bf:8b:ba:72:34:39:47:da:1e:ac:78:ce:d0: fc:79:3a:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjYwNDA0MTQzOTIyWhcNMjYwNDExMTQzOTIyWjAYMRYwFAYD VQQDEw02OWQxMjI5Yi1mNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDNQcMIugsnYITtuk85fwp75hrhGzuuBGRa8wfBMkLyFrG5KUozBR7suC4bk N/tyUODbX47ZFQ7p6SbsZRtFbkJnXuj2dSb+JPCHd4GzetFzvWlU7SBM0aUMSZzC 1nyo6Dlz0QeOgrxfHMjN2mlwjgYA4iITQMhgvzArIG4S/1q6xJW0U0AENT5bE1eI vctFNo8WOwgnUZ4Z5IVLWLwA0N+UIC6VbOxXZ5Mthi6lVScUbrM/RMzWLDyTHVLI orS30v4BgwaferwUKM9RYJuBqxRFWKxSookt/oYGBrL/ogzbmtk4tPcxHj4nBNKp mcAz56EZFHJju8AaNhRzXP4mhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyry2ne /NBmcODJZEl+ubeV0kKzMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG01xdLwB1UML+3KDYymaTO7ozYOTmfJduKwQ2tcEjTziCMju5IO3Ccz9w4/6 JXHrrMJrO2Wt5+/qDP1moYSmsKazblByNq4T+MiRtmSWarLFAX4v4QGxNOePBbc5 SVwsjHCLiyGN2DaskZ/zElc+6dhq0LlDvVsEv8uzvO89+NP9CsWtZT7L1g9RaMui K3Vk0KZfgEhcl7rtgPngT79ubd/LMcij1DS756ehySXMg1WCPEwSLu3XLSQFo1OK VGotW//1io11YtGpvk4zUmlYxJUP0RlbIbCVx6y+Gf/i4isHBzxPbP34wHvQeudl KNC/i7pyNDlH2h6seM7Q/Hk6mQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:57:22 2026 by rpki-client