$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: WJEyhAa3Hl0VDGAXyFqjk/MmzpIpGZrY6Z2SoTe4Yso= Subject key identifier: 80:F0:4A:07:C9:81:D2:0C:90:BC:87:72:7F:69:91:1F:66:1B:E8:87 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1DC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1DAE Signing time: Sat 04 Apr 2026 16:02:24 +0000 Manifest this update: Sat 04 Apr 2026 16:02:23 +0000 Manifest next update: Sat 11 Apr 2026 16:02:23 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: bDJyLED7UkUKwEXw7P/Aa/rbTMO3qD+bsm5CvtSFzl0=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: CiMRetgqfOHyT+t0oT0VnFidFPg4QE9lc+5bTN+xNPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7621 (0x1dc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Apr 4 16:02:23 2026 GMT Not After : Apr 11 16:02:23 2026 GMT Subject: CN=69d13610-5d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7a:7c:aa:9f:13:00:c9:08:dc:f0:da:2f:ef: 0a:81:42:d2:74:94:7b:1a:9e:f9:b0:c1:56:06:76: 9b:4c:c9:f8:e5:1c:86:2e:43:b2:31:d3:d1:92:9f: 23:e9:49:3e:60:2c:e5:b4:33:3c:78:49:de:73:be: 87:37:3e:7c:a5:65:2e:df:0d:7d:b6:7b:78:49:dd: 43:62:1e:04:bf:78:6e:92:2d:47:48:4a:9b:14:7f: 1e:49:2d:0b:bc:ec:40:e8:01:36:38:9c:f8:8c:6d: 5e:34:6d:41:56:c4:4b:dd:a2:3f:bb:a6:80:6e:2b: 98:0c:b4:ac:a5:8b:bb:7d:be:17:0c:0f:46:3f:c7: d2:22:9a:bd:b3:57:ff:76:8c:5e:5e:e3:85:be:b1: ec:1a:3f:b0:e0:f2:c1:17:15:06:0e:03:38:57:ae: 94:c8:e2:18:b9:31:16:89:87:60:95:87:0c:e6:28: ce:1a:18:4d:a3:b6:f5:6e:99:1b:cb:2a:fd:f0:52: e1:83:33:84:c6:87:ef:fe:f8:59:47:7b:c5:af:4b: 81:d5:3a:5b:b2:a1:95:4f:14:fc:0f:d5:c5:49:3a: 9e:a7:c7:99:0a:67:4a:7b:79:cc:a6:85:f4:ad:75: 82:04:17:16:fa:da:80:56:c3:20:21:18:b1:04:99: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F0:4A:07:C9:81:D2:0C:90:BC:87:72:7F:69:91:1F:66:1B:E8:87 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ed:d1:56:3b:8c:02:2f:e9:64:33:d7:e5:98:23:2f:0a:d7: 2c:4a:ae:47:b5:46:5e:62:5f:f0:2c:92:ba:3c:1c:06:a4:3e: 57:97:7d:f0:21:4b:3a:9f:ea:1a:ca:4b:f7:33:74:12:e8:da: 69:6a:32:6c:ec:34:86:62:72:ca:b8:a6:b7:a2:42:14:14:3c: 10:bd:da:4d:70:7f:78:31:b4:ed:2c:39:69:f7:64:d6:31:91: 06:c2:62:f9:b0:f0:ae:10:ce:ed:b5:82:f6:52:0e:ff:ee:ba: cc:2f:32:41:9f:c9:6e:58:9c:38:db:2b:ea:dc:8c:fd:e3:a8: 48:08:e7:de:35:ec:9f:d2:6c:82:b3:48:a5:9b:e2:e6:5f:a7: 1e:89:68:dc:f3:00:d3:f0:7a:17:f3:f9:ac:ba:41:a4:3f:d0: 31:ee:38:5b:c6:16:70:8a:50:ae:a0:6e:77:46:1f:51:b5:9c: a5:d5:65:68:79:38:20:81:2c:49:d9:bf:9e:61:c1:b0:59:d3: 1c:bd:f4:89:8b:4d:8c:09:3e:d5:4a:54:cd:8e:95:df:2f:98: 73:6f:65:ee:f6:5c:f6:9c:3d:79:62:d9:03:2e:af:49:a1:41: ad:23:96:55:10:19:3c:4d:2a:cd:95:68:d2:f6:c7:f7:d2:c4: 42:03:f4:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjYwNDA0MTYwMjIzWhcNMjYwNDExMTYwMjIzWjAYMRYwFAYD VQQDEw02OWQxMzYxMC01ZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Hp8qp8TAMkI3PDaL+8KgULSdJR7Gp75sMFWBnabTMn45RyGLkOyMdPRkp8j 6Uk+YCzltDM8eEnec76HNz58pWUu3w19tnt4Sd1DYh4Ev3huki1HSEqbFH8eSS0L vOxA6AE2OJz4jG1eNG1BVsRL3aI/u6aAbiuYDLSspYu7fb4XDA9GP8fSIpq9s1f/ doxeXuOFvrHsGj+w4PLBFxUGDgM4V66UyOIYuTEWiYdglYcM5ijOGhhNo7b1bpkb yyr98FLhgzOExofv/vhZR3vFr0uB1TpbsqGVTxT8D9XFSTqep8eZCmdKe3nMpoX0 rXWCBBcW+tqAVsMgIRixBJnq9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIDwSgfJ gdIMkLyHcn9pkR9mG+iHMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAju3RVjuMAi/pZDPX5ZgjLwrXLEquR7VGXmJf8CySujwcBqQ+V5d98CFLOp/q GspL9zN0EujaaWoybOw0hmJyyrimt6JCFBQ8EL3aTXB/eDG07Sw5afdk1jGRBsJi +bDwrhDO7bWC9lIO/+66zC8yQZ/JblicONsr6tyM/eOoSAjn3jXsn9JsgrNIpZvi 5l+nHolo3PMA0/B6F/P5rLpBpD/QMe44W8YWcIpQrqBud0YfUbWcpdVlaHk4IIEs Sdm/nmHBsFnTHL30iYtNjAk+1UpUzY6V3y+Yc29l7vZc9pw9eWLZAy6vSaFBrSOW VRAZPE0qzZVo0vbH99LEQgP0Bw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:54 2026 by rpki-client