$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: jxSgXqLOKpHQl/zasdtUsEgHnBgC2kFVkxiFlPtR7bY= Subject key identifier: 4B:C5:60:B0:B2:48:9E:EF:73:A6:D2:D2:D9:E4:A3:F8:83:15:35:E8 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 0417 Signing time: Thu 21 May 2026 00:28:51 +0000 Manifest this update: Thu 21 May 2026 00:28:51 +0000 Manifest next update: Thu 28 May 2026 00:28:51 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: IcbpxB2MYPWt0iuLiQU7g2fq4LV5Mr+ereazUAW7lOA=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: May 21 00:28:51 2026 GMT Not After : May 28 00:28:51 2026 GMT Subject: CN=6a0e51c3-f0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:59:d8:4b:98:81:cb:33:26:53:d7:87:1c: 89:99:0e:c2:1d:1e:63:7f:de:33:7b:b7:fc:97:65: eb:00:7a:d7:a5:3a:62:b4:5d:9f:d3:64:4a:49:3f: 1d:f0:35:13:bf:34:cf:c6:2c:52:97:5a:2e:2a:b8: 0b:22:f5:f5:ff:0b:14:f9:3b:22:a5:8e:b0:e4:4c: d9:fc:8f:01:b5:61:8d:6c:c0:d7:b1:9c:8d:f0:59: 37:5b:4e:d6:89:16:3b:c5:3c:38:2f:fd:d5:1e:f8: 59:4a:2f:4a:cb:95:59:18:44:f8:5d:ba:e0:68:da: ed:44:37:a6:3f:5b:1e:de:5b:a5:59:7e:2b:a6:37: 35:36:cc:ff:1f:98:a4:36:bf:a1:c9:9b:d4:63:9b: 5a:24:e4:77:78:98:6b:48:99:86:35:43:e7:70:a4: 74:00:88:99:0f:2e:46:89:ec:4e:1b:8f:ba:76:74: 82:d7:46:95:4a:b4:be:66:99:69:ce:de:7e:e1:af: 1b:ba:b8:59:ee:7c:80:f7:8e:4c:e2:4d:39:8f:3b: 95:9c:5e:ef:4c:65:97:0d:96:67:0a:59:c6:72:95: e8:43:c2:b1:46:a3:26:76:66:01:da:48:28:95:67: 1b:68:ac:af:1f:a8:4d:ea:d6:4f:dd:06:84:eb:d1: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C5:60:B0:B2:48:9E:EF:73:A6:D2:D2:D9:E4:A3:F8:83:15:35:E8 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cb:b0:e8:fe:44:89:a4:1f:8a:6b:2d:90:75:da:3a:fb:f7: 17:7c:05:26:f9:d2:f4:5c:c6:e1:17:a0:c5:1b:bc:8c:0c:ff: f9:e3:09:2f:1b:14:93:fb:36:29:61:74:bf:12:bf:95:2a:18: 20:f2:32:92:b3:fc:e9:1e:c2:84:21:bf:3e:b2:a9:2c:39:1f: 8d:ea:a1:40:ff:8f:0d:52:ad:24:7b:c2:ed:74:4e:9b:79:cb: 93:ea:d9:08:41:21:9c:b3:49:34:b3:61:8a:15:fc:02:88:fc: 5a:21:1d:e7:86:e5:98:ef:ad:8b:3d:8c:f9:25:dc:db:fc:3c: 32:51:43:f6:a3:4f:81:2a:bb:51:71:e3:2c:2a:d3:eb:8d:ef: f3:d7:b5:0a:db:b4:04:fd:e4:b3:e2:59:6b:9c:c1:38:b6:1d: 02:c3:e6:4a:c9:9d:b3:3d:63:fc:20:bb:25:6d:88:4d:ad:a0: 88:29:e0:c7:85:9d:26:26:e6:de:b1:b5:13:ae:3b:df:0d:60: be:c5:c5:d0:52:bf:ea:8f:8c:4d:eb:50:4f:76:03:2c:5f:f4: 5e:0b:71:d7:5f:0b:d9:b4:e4:a2:0b:aa:53:2f:7c:95:76:43: 69:f1:02:1b:5b:00:b3:00:d9:ed:72:3d:e9:b9:cf:ff:20:a4: fa:8d:fc:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjYwNTIxMDAyODUxWhcNMjYwNTI4MDAyODUxWjAYMRYwFAYD VQQDEw02YTBlNTFjMy1mMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7pZ2EuYgcszJlPXhxyJmQ7CHR5jf94ze7f8l2XrAHrXpTpitF2f02RKST8d 8DUTvzTPxixSl1ouKrgLIvX1/wsU+TsipY6w5EzZ/I8BtWGNbMDXsZyN8Fk3W07W iRY7xTw4L/3VHvhZSi9Ky5VZGET4XbrgaNrtRDemP1se3lulWX4rpjc1Nsz/H5ik Nr+hyZvUY5taJOR3eJhrSJmGNUPncKR0AIiZDy5GiexOG4+6dnSC10aVSrS+Zplp zt5+4a8burhZ7nyA945M4k05jzuVnF7vTGWXDZZnClnGcpXoQ8KxRqMmdmYB2kgo lWcbaKyvH6hN6tZP3QaE69HZ5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvFYLCy SJ7vc6bS0tnko/iDFTXoMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb8uw6P5EiaQfimstkHXaOvv3F3wFJvnS9FzG4RegxRu8jAz/+eMJLxsUk/s2 KWF0vxK/lSoYIPIykrP86R7ChCG/PrKpLDkfjeqhQP+PDVKtJHvC7XROm3nLk+rZ CEEhnLNJNLNhihX8Aoj8WiEd54blmO+tiz2M+SXc2/w8MlFD9qNPgSq7UXHjLCrT 643v89e1Ctu0BP3ks+JZa5zBOLYdAsPmSsmdsz1j/CC7JW2ITa2giCngx4WdJibm 3rG1E6473w1gvsXF0FK/6o+MTetQT3YDLF/0Xgtx118L2bTkoguqUy98lXZDafEC G1sAswDZ7XI96bnP/yCk+o38XA== -----END CERTIFICATE-----Generated at Thu May 21 11:16:38 2026 by rpki-client