$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft File: 3Bh_yEFs5bNHuvIho2E6O0eCjog.mft (raw, json) Hash identifier: oNrU/bW0PRnZovPKdE68Yr/61bZ8+uuNsepjusdnwJg= Subject key identifier: B7:33:A4:5C:A2:53:32:10:2E:46:A4:D6:09:E5:F4:86:A5:07:27:86 Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0F8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft Manifest number: 0F7B Signing time: Sat 04 Apr 2026 17:25:29 +0000 Manifest this update: Sat 04 Apr 2026 17:25:28 +0000 Manifest next update: Sat 11 Apr 2026 17:25:28 +0000 Files and hashes: 1: 3Bh_yEFs5bNHuvIho2E6O0eCjog.crl (hash: xYk1kQvlKhOC1rxXuegfa7dFIm7QEBKzPhlehR27/5o=) 2: 085B4576C35711EC9F5ADC3DC4F9AE02.roa (hash: rVqpkfIia95fH7hrm3/K25j3N5yZHWL25KnyFo0eRas=) 3: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (hash: M1O0TrYvAUms1ssHPRAoRq4bhn4VdK0pL3BB4ocE2jg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3981 (0xf8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Apr 4 17:25:28 2026 GMT Not After : Apr 11 17:25:28 2026 GMT Subject: CN=69d14988-8891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:98:4b:7d:04:90:85:d0:29:1c:bf:7c:25: 82:a2:1c:87:f4:41:a8:ca:f5:0c:f6:30:78:43:f0: 52:95:19:46:ce:d4:c4:84:45:91:a0:40:fe:a9:91: 35:3f:a1:ab:a3:7f:af:cd:5b:71:87:78:c1:56:14: c3:f6:2e:03:f4:6b:69:ca:d5:3c:bb:dc:d4:20:20: f3:9c:9c:24:0f:8b:24:39:bd:86:db:64:35:de:a6: 26:df:f8:94:cf:ac:22:7b:ca:51:ab:12:d0:01:15: 86:db:b9:58:38:91:31:d7:cc:52:73:8f:78:6c:c1: bb:f1:01:ef:7f:bb:3f:4c:b0:0d:9d:5a:38:6a:c8: 30:ef:19:e8:f2:40:e3:07:fd:38:48:09:36:4f:67: 37:3a:07:36:48:e0:b9:b7:b3:ba:b7:4e:41:f5:29: a3:de:97:be:b9:28:04:d8:79:fc:99:49:d2:9d:c0: cb:6d:04:53:58:90:4d:b5:a5:78:17:5a:cc:58:1b: c1:a6:c4:49:ff:8c:f0:9a:8d:ee:05:10:58:01:6a: e2:da:dd:47:7d:90:8d:13:cb:f0:53:30:36:40:cd: f3:48:44:7e:41:58:92:20:d3:ee:b5:0b:f9:fd:fb: 2d:0a:20:b8:5c:cd:59:da:5c:80:53:a5:73:c6:19: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:33:A4:5C:A2:53:32:10:2E:46:A4:D6:09:E5:F4:86:A5:07:27:86 X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ee:87:b5:cd:71:0d:57:eb:f9:e3:ca:c2:f2:6f:e5:1f:1a: 49:1c:f5:2e:93:b3:16:40:a9:74:d0:3d:ff:c6:c7:fc:65:85: 6e:fc:38:2d:46:fa:51:87:ab:29:b7:39:44:61:81:8b:36:2f: 7a:ce:08:d9:cb:da:a9:5d:00:cd:52:47:7e:38:17:c8:f6:96: bf:14:d2:90:e9:63:92:e6:75:89:39:82:0c:36:e1:80:fc:13: a4:d1:ee:6b:73:4d:aa:0a:cc:62:ee:3d:08:0a:a3:af:d6:29: 30:23:b0:e4:a7:07:a4:85:fb:64:41:38:fb:8d:74:89:3e:7d: 92:df:40:a8:09:9e:bf:be:7c:b6:ab:08:38:1a:85:17:53:aa: a7:9e:a6:e3:74:12:9f:43:ef:03:88:d5:01:51:0a:bc:9d:10: 8d:b1:64:e7:5e:e1:6a:c9:c2:eb:4f:a5:63:ae:06:bb:2b:d5: 57:40:e4:6b:fd:ee:f1:1a:32:39:11:4d:c1:86:d9:e7:10:1f: a7:2f:dc:64:66:d3:48:9f:09:03:5a:d7:c5:5a:88:be:5c:95: ff:2f:61:47:58:9b:9b:64:8e:bc:15:ef:a3:a9:e1:de:9c:09: 44:bd:8a:ab:33:b5:7f:40:85:ef:8f:60:7e:7d:1c:09:2f:74: 59:17:e4:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjYwNDA0MTcyNTI4WhcNMjYwNDExMTcyNTI4WjAYMRYwFAYD VQQDEw02OWQxNDk4OC04ODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV+YS30EkIXQKRy/fCWCohyH9EGoyvUM9jB4Q/BSlRlGztTEhEWRoED+qZE1 P6Gro3+vzVtxh3jBVhTD9i4D9GtpytU8u9zUICDznJwkD4skOb2G22Q13qYm3/iU z6wie8pRqxLQARWG27lYOJEx18xSc494bMG78QHvf7s/TLANnVo4asgw7xno8kDj B/04SAk2T2c3Ogc2SOC5t7O6t05B9Smj3pe+uSgE2Hn8mUnSncDLbQRTWJBNtaV4 F1rMWBvBpsRJ/4zwmo3uBRBYAWri2t1HfZCNE8vwUzA2QM3zSER+QViSINPutQv5 /fstCiC4XM1Z2lyAU6Vzxhl4FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLczpFyi UzIQLkak1gnl9IalByeGMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdEMS85QTlCNDhBMjgyQTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczVi Tkh1dklobzJFNk8wZUNqb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPe6Htc1xDVfr+ePKwvJv5R8aSRz1LpOzFkCpdNA9/8bH/GWFbvw4LUb6UYer Kbc5RGGBizYves4I2cvaqV0AzVJHfjgXyPaWvxTSkOljkuZ1iTmCDDbhgPwTpNHu a3NNqgrMYu49CAqjr9YpMCOw5KcHpIX7ZEE4+410iT59kt9AqAmev758tqsIOBqF F1Oqp56m43QSn0PvA4jVAVEKvJ0QjbFk517hasnC60+lY64GuyvVV0Dka/3u8Roy ORFNwYbZ5xAfpy/cZGbTSJ8JA1rXxVqIvlyV/y9hR1ibm2SOvBXvo6nh3pwJRL2K qzO1f0CF749gfn0cCS90WRfkkg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:15 2026 by rpki-client