$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: capf1XKDY+pjXjzHs+ptEN2KN08o8Fz8yFCpzazeOfE= Subject key identifier: 4E:F1:29:02:AB:86:BC:59:E8:46:5F:47:28:AE:C7:47:EA:3D:72:DC Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 042D Signing time: Sun 19 Apr 2026 00:15:01 +0000 Manifest this update: Sun 19 Apr 2026 00:15:00 +0000 Manifest next update: Sun 26 Apr 2026 00:15:00 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: /O0OtUeLV5IM7OL8fOlsEW2ksqZKTAH8EeJNk9i8xsc=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: jDls2g86m7GV6UJnx5UHRHLT+1GVeljl8mbGfPYQmlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: Apr 19 00:15:00 2026 GMT Not After : Apr 26 00:15:00 2026 GMT Subject: CN=69e41e85-58b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7d:da:5f:a5:29:e7:1e:4f:c7:b5:9f:3d:84: 26:f2:41:ed:31:b8:78:1a:5b:cb:c1:f7:10:bc:0e: 49:87:24:ea:ee:f7:19:76:69:b9:ef:68:df:c6:1d: 48:95:6c:95:66:6e:8e:01:95:21:5d:56:3e:bd:1f: d3:d3:71:0c:ba:ce:a4:e2:b4:9f:d2:b6:65:5b:e8: 47:e4:47:4e:ef:e9:3d:d0:32:d9:9f:f1:46:79:db: 36:22:8e:6d:2a:53:89:69:a3:38:6d:91:9b:de:94: 62:ad:8f:78:94:22:fb:7f:93:d1:b5:bb:33:d3:36: 42:4b:82:29:06:d3:12:86:fd:17:86:87:c2:d3:06: 4f:99:32:c8:38:5b:4e:b6:82:15:55:a7:08:41:c3: 81:87:98:94:74:5b:05:08:19:d2:83:33:21:d0:f1: 94:46:6e:d5:2d:37:f9:ae:a2:48:b3:f8:fe:90:92: 0b:03:de:fa:f8:7e:6b:d0:d5:32:9f:47:f3:67:14: 9f:11:d6:35:9d:31:9c:a4:91:a0:ed:d7:2e:a6:4e: 8a:90:da:85:9e:6c:20:7e:41:c3:44:0f:2e:90:c8: fc:57:eb:fe:3e:b5:32:8f:75:1d:90:49:04:17:00: 19:65:66:f4:e1:26:e7:2d:ff:83:e5:cc:25:92:b3: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F1:29:02:AB:86:BC:59:E8:46:5F:47:28:AE:C7:47:EA:3D:72:DC X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:bf:bf:c2:ec:a1:4e:7e:a5:d0:24:b5:e0:d0:08:eb:56:6a: 77:3a:24:dc:20:35:65:2b:ba:b1:79:90:a6:36:db:75:21:d1: 9f:43:13:28:00:a3:c6:45:10:85:14:48:85:1b:e7:6f:4b:94: 02:30:d5:1b:2a:af:97:32:9b:4c:00:77:69:c4:77:e0:86:ca: 1d:66:a3:da:49:ba:d4:ce:f0:d0:f3:6c:29:de:a8:95:3a:40: 68:ba:5f:f5:9d:c5:2f:0f:39:ca:9a:25:7f:49:be:df:3b:c9: 82:b3:14:aa:6a:87:a5:ed:70:0a:38:d6:ec:94:17:6b:ec:7b: b4:4e:6a:66:1b:3d:58:be:f5:57:0d:b7:b0:55:b8:bc:64:28: 3c:7a:81:d6:f1:4f:b6:8d:32:66:ed:05:d2:ef:c9:6e:2e:eb: bf:c8:e8:e1:4d:d2:03:ff:8c:d7:27:e4:cc:ab:5b:be:8f:c7: a0:d8:67:7a:3d:04:c6:af:2c:88:34:a8:e0:2f:60:e3:0d:50: 29:35:7c:c8:fc:6d:ae:13:44:52:f0:1c:30:ef:cd:b0:84:07: 9e:fa:80:31:72:d0:b9:0b:85:e2:04:4b:0b:f1:75:4b:ba:c3: 44:3e:1b:75:59:8f:a9:43:b7:22:80:96:bc:40:ed:91:f9:0d: d7:e0:96:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjYwNDE5MDAxNTAwWhcNMjYwNDI2MDAxNTAwWjAYMRYwFAYD VQQDEw02OWU0MWU4NS01OGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoH3aX6Up5x5Px7WfPYQm8kHtMbh4GlvLwfcQvA5JhyTq7vcZdmm572jfxh1I lWyVZm6OAZUhXVY+vR/T03EMus6k4rSf0rZlW+hH5EdO7+k90DLZn/FGeds2Io5t KlOJaaM4bZGb3pRirY94lCL7f5PRtbsz0zZCS4IpBtMShv0XhofC0wZPmTLIOFtO toIVVacIQcOBh5iUdFsFCBnSgzMh0PGURm7VLTf5rqJIs/j+kJILA976+H5r0NUy n0fzZxSfEdY1nTGcpJGg7dcupk6KkNqFnmwgfkHDRA8ukMj8V+v+PrUyj3UdkEkE FwAZZWb04SbnLf+D5cwlkrP7XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7xKQKr hrxZ6EZfRyiux0fqPXLcMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY7+/wuyhTn6l0CS14NAI61Zqdzok3CA1ZSu6sXmQpjbbdSHRn0MTKACjxkUQ hRRIhRvnb0uUAjDVGyqvlzKbTAB3acR34IbKHWaj2km61M7w0PNsKd6olTpAaLpf 9Z3FLw85ypolf0m+3zvJgrMUqmqHpe1wCjjW7JQXa+x7tE5qZhs9WL71Vw23sFW4 vGQoPHqB1vFPto0yZu0F0u/Jbi7rv8jo4U3SA/+M1yfkzKtbvo/HoNhnej0Exq8s iDSo4C9g4w1QKTV8yPxtrhNEUvAcMO/NsIQHnvqAMXLQuQuF4gRLC/F1S7rDRD4b dVmPqUO3IoCWvEDtkfkN1+CWAA== -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:45 2026 by rpki-client