$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: SmZhI7w7dd3zv2NinFOGHgPSrYoEj9gHfqCVW/cZZkA= Subject key identifier: 82:B3:FB:38:0F:6D:B1:1A:CA:B6:33:E2:F3:58:70:98:EF:87:64:23 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0CAD Signing time: Sat 04 Apr 2026 18:19:18 +0000 Manifest this update: Sat 04 Apr 2026 18:19:17 +0000 Manifest next update: Sat 11 Apr 2026 18:19:17 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: +iCaQbP6K8L4ATqMWz8GqF31Oy/qTERBTxVJtgbfu/A=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Apr 4 18:19:17 2026 GMT Not After : Apr 11 18:19:17 2026 GMT Subject: CN=69d15625-6990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:fe:cf:09:bc:91:c6:80:d1:48:1c:58:52: cd:1b:4f:23:8f:3e:4b:46:8b:58:a3:50:27:73:c6: 50:f5:2b:9c:76:87:72:a2:25:59:9b:df:a8:b6:ac: b6:09:4c:70:1f:54:31:88:fe:20:42:6b:b0:d9:71: 7e:60:62:de:ef:a2:03:ac:1e:1a:09:10:b8:7c:ef: 98:ce:18:dc:bf:bc:6e:02:1a:1f:b0:fc:9b:4b:88: 2a:3c:56:c1:0d:cb:4f:5c:b9:80:ae:f3:9b:41:b3: 84:56:cc:66:96:c8:a7:8b:46:78:06:6a:49:5a:01: 8d:93:02:99:41:65:ae:9b:6b:7d:66:d2:a3:bd:5e: 9d:57:22:d2:9d:71:4f:d1:7f:76:bf:21:71:6f:6a: 71:56:ed:4f:d2:65:1e:96:74:fa:32:a0:76:ff:f7: 7f:fe:a5:93:85:49:1c:f1:cf:75:25:a2:57:27:ca: 6b:2c:26:55:d0:e5:1c:24:bf:01:cf:8b:d4:fd:4f: b2:12:47:2d:d5:d5:a0:a2:ad:24:02:8e:29:a7:5a: 7c:29:3b:ae:de:52:c7:51:34:69:56:65:b0:76:19: e4:8c:48:a4:73:5f:7a:5b:d0:1c:90:0d:8b:6f:78: 50:1f:90:73:6a:fc:4f:b7:ad:38:04:5f:53:47:56: a4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B3:FB:38:0F:6D:B1:1A:CA:B6:33:E2:F3:58:70:98:EF:87:64:23 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b9:7c:11:19:b3:e1:9c:9b:34:0c:43:81:04:95:93:e7:6c: c0:50:59:68:6f:3a:12:a7:ad:d8:03:e4:6c:5a:c6:21:08:b6: 90:45:88:f2:93:29:bf:98:34:df:e4:e3:ba:ff:2c:e8:7e:ef: 2a:3e:25:84:f0:06:01:bf:8b:09:35:b0:25:c5:c5:fd:3e:0b: a8:0f:ef:27:35:21:b4:88:8f:e6:6f:66:be:08:3d:0f:ef:1a: f7:3b:52:70:13:4d:1d:2e:87:7b:af:52:ff:f4:7b:9d:d7:f9: 21:a8:a1:9c:44:0a:5f:7d:8a:9a:0c:b6:8a:80:3e:1d:c2:74: 8e:3b:2b:b9:0d:5c:db:77:4b:ca:a2:e3:80:cd:87:de:09:5a: e4:d3:a1:32:68:93:ed:fa:2f:ee:e4:4f:a5:01:a4:52:94:30: d2:01:83:cf:cd:04:ae:66:4f:a3:18:5d:fb:d5:0b:f7:50:08: 16:af:71:58:da:c9:67:ca:f5:c7:be:b6:24:a3:b0:20:a7:1b: bc:ab:67:8e:9e:36:8f:a4:35:b6:aa:98:95:d8:e0:a1:88:4b: da:ea:08:f2:65:b6:c1:5c:09:be:5d:10:fe:93:a4:03:73:fb: 88:ec:3c:fe:82:96:86:ae:e1:d4:d4:07:48:d4:77:a7:5a:28: 8c:6b:0e:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjYwNDA0MTgxOTE3WhcNMjYwNDExMTgxOTE3WjAYMRYwFAYD VQQDEw02OWQxNTYyNS02OTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P3+zwm8kcaA0UgcWFLNG08jjz5LRotYo1Anc8ZQ9SucdodyoiVZm9+otqy2 CUxwH1QxiP4gQmuw2XF+YGLe76IDrB4aCRC4fO+Yzhjcv7xuAhofsPybS4gqPFbB DctPXLmArvObQbOEVsxmlsini0Z4BmpJWgGNkwKZQWWum2t9ZtKjvV6dVyLSnXFP 0X92vyFxb2pxVu1P0mUelnT6MqB2//d//qWThUkc8c91JaJXJ8prLCZV0OUcJL8B z4vU/U+yEkct1dWgoq0kAo4pp1p8KTuu3lLHUTRpVmWwdhnkjEikc196W9AckA2L b3hQH5BzavxPt604BF9TR1ak9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKz+zgP bbEayrYz4vNYcJjvh2QjMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR7l8ERmz4ZybNAxDgQSVk+dswFBZaG86Eqet2APkbFrGIQi2kEWI8pMpv5g0 3+Tjuv8s6H7vKj4lhPAGAb+LCTWwJcXF/T4LqA/vJzUhtIiP5m9mvgg9D+8a9ztS cBNNHS6He69S//R7ndf5IaihnEQKX32Kmgy2ioA+HcJ0jjsruQ1c23dLyqLjgM2H 3gla5NOhMmiT7fov7uRPpQGkUpQw0gGDz80ErmZPoxhd+9UL91AIFq9xWNrJZ8r1 x762JKOwIKcbvKtnjp42j6Q1tqqYldjgoYhL2uoI8mW2wVwJvl0Q/pOkA3P7iOw8 /oKWhq7h1NQHSNR3p1oojGsOBQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:01:32 2026 by rpki-client