$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: jp13DQXijqNeW6O5iWKvuV5e+IAcWAhuaTmLY7LGK/w= Subject key identifier: AF:49:82:8C:A0:37:DD:EA:6F:64:9B:32:32:32:43:4B:5F:4B:2E:48 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 09F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 09DD Signing time: Thu 16 Apr 2026 19:48:36 +0000 Manifest this update: Thu 16 Apr 2026 19:48:35 +0000 Manifest next update: Thu 23 Apr 2026 19:48:35 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: KK+aEC1ERQozct8g6PHuKU6uKAu0emfShWPWgj7Libg=) 2: 9F155A86125111F1BDB1E8192A3D8C67.roa (hash: Xp6J4EN8UBByITq+gCFf5DSbouyROjD+ka1UZdn7rcI=) 3: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Apr 16 19:48:35 2026 GMT Not After : Apr 23 19:48:35 2026 GMT Subject: CN=69e13d14-2764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:b2:1a:29:76:cf:41:dd:de:50:99:11:8a: 5b:c4:8b:98:13:ed:19:9b:94:be:a4:f3:54:14:a6: ef:86:72:d2:ad:bc:f5:a7:a4:10:23:75:ce:b9:5c: 25:dc:f4:3b:ea:df:a3:d5:b0:2b:3a:41:a1:de:f2: 26:2f:37:5d:77:c1:c1:e4:76:12:6a:2c:88:5b:e6: 94:19:89:5d:61:e1:0f:86:34:fd:cc:b2:2e:66:65: 36:fe:0e:50:0f:e7:3e:06:dc:8a:35:dd:fb:86:8b: 0c:03:be:c0:ac:a8:d9:18:ce:3f:eb:a5:ca:ad:25: f9:6e:ce:a9:79:88:47:83:06:62:47:91:17:1e:73: 60:d3:d3:43:2e:6f:85:2c:af:9c:83:53:3f:76:c7: 74:81:a3:cc:b2:a2:d3:9c:27:78:fa:44:4e:69:33: e1:19:d7:e7:de:80:74:30:97:08:33:2e:a8:5d:23: 0b:7e:77:fa:0d:79:e9:46:39:87:49:dd:95:23:8a: 4d:08:ad:e7:22:d9:a1:58:e4:b9:81:5c:09:0a:45: 1c:11:17:d4:3b:27:72:25:85:e2:a6:6f:ee:0d:97: c2:5b:b8:be:c8:69:a1:ef:6a:bb:35:97:17:8b:27: a0:7d:99:b1:f5:22:8e:dc:ce:f2:20:f2:0d:48:78: 3e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:49:82:8C:A0:37:DD:EA:6F:64:9B:32:32:32:43:4B:5F:4B:2E:48 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b0:ee:22:b2:e9:bb:a9:c7:9f:61:ac:66:06:d3:ee:66:6c: a3:de:b7:cd:cc:10:e7:f6:06:66:ea:5e:eb:24:81:8b:82:5c: 57:b9:f5:4c:d7:60:d7:df:2d:d9:2d:57:6e:95:64:11:be:4b: 20:5f:d5:cf:d7:16:d0:ee:bc:69:77:ec:94:74:ff:88:8a:02: 6e:96:73:1a:1a:19:29:ad:eb:9b:f0:8b:f2:c9:d2:ac:90:16: e8:8a:c7:06:89:e0:1e:c1:12:52:c7:cc:ce:e1:6b:5a:fa:60: a2:0e:c8:24:4f:20:e0:36:b0:9b:3f:9a:32:e3:92:98:82:28: 36:4e:f5:e7:c2:d5:e5:fe:9b:76:c7:3b:6d:01:cb:7f:f4:64: f7:c2:dc:02:13:55:e8:a4:b1:bc:ec:02:32:39:88:ee:d6:fc: 9a:aa:d9:e1:5b:b0:e6:32:68:f8:a3:8c:53:ba:8a:ce:b7:06: 9e:1f:1f:2a:90:aa:1f:f0:8c:37:1c:c8:59:39:c6:12:5d:8f: 6e:1b:e5:f0:83:1a:f0:25:08:4e:f4:aa:1b:2d:70:e1:63:42: ce:1f:39:54:ef:e9:d5:57:22:84:d0:53:33:b5:85:3b:c4:db: 71:c4:d5:dc:cb:d9:16:0b:fa:3f:28:f1:fb:b6:00:58:0b:6d: 6c:bf:7c:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjYwNDE2MTk0ODM1WhcNMjYwNDIzMTk0ODM1WjAYMRYwFAYD VQQDEw02OWUxM2QxNC0yNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYeyGil2z0Hd3lCZEYpbxIuYE+0Zm5S+pPNUFKbvhnLSrbz1p6QQI3XOuVwl 3PQ76t+j1bArOkGh3vImLzddd8HB5HYSaiyIW+aUGYldYeEPhjT9zLIuZmU2/g5Q D+c+BtyKNd37hosMA77ArKjZGM4/66XKrSX5bs6peYhHgwZiR5EXHnNg09NDLm+F LK+cg1M/dsd0gaPMsqLTnCd4+kROaTPhGdfn3oB0MJcIMy6oXSMLfnf6DXnpRjmH Sd2VI4pNCK3nItmhWOS5gVwJCkUcERfUOydyJYXipm/uDZfCW7i+yGmh72q7NZcX iyegfZmx9SKO3M7yIPINSHg+oQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9Jgoyg N93qb2SbMjIyQ0tfSy5IMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlbDuIrLpu6nHn2GsZgbT7mZso963zcwQ5/YGZupe6ySBi4JcV7n1TNdg198t 2S1XbpVkEb5LIF/Vz9cW0O68aXfslHT/iIoCbpZzGhoZKa3rm/CL8snSrJAW6IrH BongHsESUsfMzuFrWvpgog7IJE8g4Dawmz+aMuOSmIIoNk7158LV5f6bdsc7bQHL f/Rk98LcAhNV6KSxvOwCMjmI7tb8mqrZ4Vuw5jJo+KOMU7qKzrcGnh8fKpCqH/CM NxzIWTnGEl2Pbhvl8IMa8CUITvSqGy1w4WNCzh85VO/p1VcihNBTM7WFO8TbccTV 3MvZFgv6Pyjx+7YAWAttbL98Ug== -----END CERTIFICATE-----Generated at Fri Apr 17 06:36:53 2026 by rpki-client