$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: UcfAnKYUvH3fLEfg2DviBcu1VF6Q9A4dOEB+oY7KQCM= Subject key identifier: 03:1A:E1:1F:E5:4B:A7:2A:60:64:B3:17:AA:1F:D3:06:21:99:BF:1C Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 352B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 352A Signing time: Thu 16 Apr 2026 15:09:16 +0000 Manifest this update: Thu 16 Apr 2026 15:09:16 +0000 Manifest next update: Thu 23 Apr 2026 15:09:16 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: nU1PsZihKd6/w4fOwYaahU0jNYeNY/sCR7ufB3KnGGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Apr 16 15:09:16 2026 GMT Not After : Apr 23 15:09:16 2026 GMT Subject: CN=69e0fb9c-b0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:88:c7:e1:74:60:a3:b0:00:f9:2b:d5:1d: 86:c5:e0:d8:50:39:1e:1e:56:f5:26:17:0f:5a:f4: c9:e1:e9:5f:66:fc:d8:43:70:01:69:54:14:49:3f: 72:b3:b3:96:27:04:25:ca:c5:96:af:25:10:d9:0b: 2e:b2:98:6a:02:24:04:06:62:14:cf:9c:e2:c0:bd: 1f:c8:14:ac:68:a6:aa:1e:88:61:de:e2:27:f0:6e: f6:93:a2:41:2c:89:15:2c:42:ca:ea:52:04:3b:21: cc:41:04:4f:aa:ef:5c:b0:cc:3d:6e:c9:5f:cc:4a: 55:a2:46:4e:ed:b5:80:84:54:7e:af:7c:52:f4:fe: 66:08:22:24:79:65:83:46:33:d1:1e:58:89:4c:78: 17:ac:d0:5d:58:a3:4f:3c:1c:f6:34:fd:35:63:c8: a7:17:72:e7:52:ad:10:2a:42:38:00:38:68:cb:2a: 0f:7f:cd:a5:3f:ef:28:c9:c4:01:9e:d9:c6:61:21: d4:ee:be:86:89:66:31:ea:32:95:f7:18:42:37:43: cb:14:8a:48:e1:b4:74:dc:a1:62:a7:f1:92:80:c0: 8e:2d:1d:4a:d0:8f:76:b3:2a:7b:46:30:0a:b2:ba: 8f:31:1b:66:18:c3:6c:be:27:e8:2e:31:4b:17:6c: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1A:E1:1F:E5:4B:A7:2A:60:64:B3:17:AA:1F:D3:06:21:99:BF:1C X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7c:20:87:c2:4a:b3:c9:61:b3:90:46:a9:8a:37:74:ba:da: 2e:ae:9d:09:a1:f7:ff:c8:ab:0d:c3:f4:e2:10:e6:e6:b1:ca: 55:65:9d:44:f2:6e:11:4d:7e:20:5a:e9:07:e5:0b:ee:c7:20: be:a8:cf:2b:93:c8:5a:91:52:57:bd:f0:a6:ea:9f:18:a8:39: 78:76:fa:2f:04:09:68:62:1b:d7:a6:5d:37:fe:77:65:f9:d2: 10:4c:79:62:05:2e:8e:e7:b8:65:60:a3:de:62:26:8b:06:72: 7a:96:be:23:d3:fe:43:d2:87:c8:99:dd:d0:e0:3c:7f:18:c8: 95:5d:43:6c:e9:a9:93:5e:32:7c:c3:39:98:e8:57:82:cb:92: af:a8:ac:1f:d9:9f:b4:3c:da:8f:fe:f0:e5:2d:3f:d2:e5:fc: 60:87:73:5f:2a:8c:7b:c4:58:5c:08:f6:c4:50:30:cc:0c:31: ad:63:5e:34:04:a0:bf:28:38:5e:fa:b4:90:eb:c1:e0:b8:59: 90:f1:c7:46:00:74:30:d0:4e:c2:bf:0b:0f:43:d3:a2:b5:6a: 5e:42:2e:0e:f6:99:82:f3:70:8b:e3:fb:65:51:8e:80:bf:bd: f6:8c:19:22:fa:e2:0f:5d:77:db:0d:11:36:24:ea:a6:b2:52: 33:2f:96:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjYwNDE2MTUwOTE2WhcNMjYwNDIzMTUwOTE2WjAYMRYwFAYD VQQDEw02OWUwZmI5Yy1iMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9CIx+F0YKOwAPkr1R2GxeDYUDkeHlb1JhcPWvTJ4elfZvzYQ3ABaVQUST9y s7OWJwQlysWWryUQ2QsusphqAiQEBmIUz5ziwL0fyBSsaKaqHohh3uIn8G72k6JB LIkVLELK6lIEOyHMQQRPqu9csMw9bslfzEpVokZO7bWAhFR+r3xS9P5mCCIkeWWD RjPRHliJTHgXrNBdWKNPPBz2NP01Y8inF3LnUq0QKkI4ADhoyyoPf82lP+8oycQB ntnGYSHU7r6GiWYx6jKV9xhCN0PLFIpI4bR03KFip/GSgMCOLR1K0I92syp7RjAK srqPMRtmGMNsvifoLjFLF2wrlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMa4R/l S6cqYGSzF6of0wYhmb8cMB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArnwgh8JKs8lhs5BGqYo3dLraLq6dCaH3/8irDcP04hDm5rHKVWWdRPJuEU1+ IFrpB+UL7scgvqjPK5PIWpFSV73wpuqfGKg5eHb6LwQJaGIb16ZdN/53ZfnSEEx5 YgUujue4ZWCj3mImiwZyepa+I9P+Q9KHyJnd0OA8fxjIlV1DbOmpk14yfMM5mOhX gsuSr6isH9mftDzaj/7w5S0/0uX8YIdzXyqMe8RYXAj2xFAwzAwxrWNeNASgvyg4 Xvq0kOvB4LhZkPHHRgB0MNBOwr8LD0PTorVqXkIuDvaZgvNwi+P7ZVGOgL+99owZ IvriD1132w0RNiTqprJSMy+WkQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:02:25 2026 by rpki-client