$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: 4BhxDVEvBL2PVMAcibIbFk+s+qNQFd8FTgAS8VgvLcc= Subject key identifier: 6B:59:56:00:90:BE:68:B4:81:31:28:78:FD:88:69:22:40:B6:B8:88 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D46 Signing time: Sat 18 Apr 2026 15:28:08 +0000 Manifest this update: Sat 18 Apr 2026 15:28:08 +0000 Manifest next update: Sat 25 Apr 2026 15:28:08 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: 8B2zihpYF2EwSx4Us8538nahlrfBzfQgG0bI2fSnyyo=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: 9I/UF8wVS9sTnXr5fHjV7Fm4AlFC8LAa0hnWMtmsfp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11618 (0x2d62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Apr 18 15:28:08 2026 GMT Not After : Apr 25 15:28:08 2026 GMT Subject: CN=69e3a308-62d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:c5:d4:fe:60:a7:84:9d:37:8f:ea:0d:2b: ab:07:88:c8:fd:8f:c2:0c:66:13:dc:e4:b7:ab:f4: 84:03:6a:86:a4:52:dc:eb:0e:40:c2:4b:75:e2:3c: 54:5e:14:33:73:fa:e7:67:4b:3f:e9:6d:5a:d2:14: 40:ad:8e:19:0f:c2:18:a0:16:b4:0b:e2:b5:b5:34: 27:20:b0:3c:c4:1d:14:8b:d0:07:22:e1:4b:6c:ad: af:b9:a5:2b:a8:87:ef:11:5f:ea:00:fb:00:1d:3c: 04:27:cf:b4:37:1f:1b:f4:2d:ce:bf:7d:b7:5e:cb: c4:7e:0d:6c:e6:8c:db:c4:90:26:5a:75:fa:55:7c: bb:0b:58:3a:3b:ce:c8:c7:b2:b6:c8:db:2e:21:5e: 22:e9:e1:52:d0:48:a8:e2:0e:51:5c:11:35:b6:46: 19:9b:07:72:3f:e3:b8:ee:8f:6f:ab:cf:26:e3:d0: 41:44:92:f7:e5:76:55:5e:4c:3b:1f:7e:e8:3f:96: 85:95:9f:bc:18:89:dc:10:cb:e3:c0:89:36:71:b1: b6:92:3c:e3:07:7f:d6:dd:34:d2:c5:4d:71:45:f5: 41:3f:9f:49:21:98:c6:45:b4:d9:f5:96:8f:be:90: 42:06:f2:82:87:10:25:d8:aa:90:de:6f:f9:72:23: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:59:56:00:90:BE:68:B4:81:31:28:78:FD:88:69:22:40:B6:B8:88 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a8:73:ab:e4:de:87:8e:44:d4:20:58:cb:11:e3:0f:64:80: db:08:e2:8a:95:77:3c:c9:17:12:9b:98:37:c8:4d:b0:01:63: e0:b5:6a:03:87:e2:6e:e2:09:10:91:9e:73:18:a5:69:09:13: e2:82:77:89:41:7e:18:e5:75:ca:a3:eb:54:69:6a:a6:b8:5c: f4:54:9a:ed:47:b5:bf:a0:cc:d7:93:18:b5:66:33:76:3f:50: de:62:16:d2:10:4f:ba:f9:7e:55:c0:e5:87:25:c1:7f:b3:49: 12:19:08:8a:0b:f5:df:3c:06:5e:42:e5:1f:bb:5b:d3:9e:83: 04:54:f8:d8:a0:41:42:33:44:82:69:9c:c4:ef:14:80:a2:3b: fb:79:9a:c8:e7:f8:8d:ca:4b:53:e9:5b:84:2b:53:c7:b1:56: a0:2f:26:bc:f5:80:50:5d:df:05:07:8c:8f:f3:fd:b3:59:88: af:f2:53:2d:74:99:0b:2e:a5:f6:81:ff:d4:60:09:db:cb:13: e0:96:bf:97:a0:f4:c0:d9:4b:ee:49:70:40:0a:8b:fc:6b:3d: 3a:4d:1c:dd:e1:35:3e:fc:a5:df:bd:d9:e9:26:64:5e:bc:22: 3e:7b:5d:88:74:59:a6:63:aa:a8:76:f0:ee:b6:0d:7d:47:d5: 38:15:dc:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwNDE4MTUyODA4WhcNMjYwNDI1MTUyODA4WjAYMRYwFAYD VQQDEw02OWUzYTMwOC02MmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BbF1P5gp4SdN4/qDSurB4jI/Y/CDGYT3OS3q/SEA2qGpFLc6w5Awkt14jxU XhQzc/rnZ0s/6W1a0hRArY4ZD8IYoBa0C+K1tTQnILA8xB0Ui9AHIuFLbK2vuaUr qIfvEV/qAPsAHTwEJ8+0Nx8b9C3Ov323XsvEfg1s5ozbxJAmWnX6VXy7C1g6O87I x7K2yNsuIV4i6eFS0Eio4g5RXBE1tkYZmwdyP+O47o9vq88m49BBRJL35XZVXkw7 H37oP5aFlZ+8GIncEMvjwIk2cbG2kjzjB3/W3TTSxU1xRfVBP59JIZjGRbTZ9ZaP vpBCBvKChxAl2KqQ3m/5ciMFdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtZVgCQ vmi0gTEoeP2IaSJAtriIMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE6hzq+Teh45E1CBYyxHjD2SA2wjiipV3PMkXEpuYN8hNsAFj4LVqA4fibuIJ EJGecxilaQkT4oJ3iUF+GOV1yqPrVGlqprhc9FSa7Ue1v6DM15MYtWYzdj9Q3mIW 0hBPuvl+VcDlhyXBf7NJEhkIigv13zwGXkLlH7tb056DBFT42KBBQjNEgmmcxO8U gKI7+3mayOf4jcpLU+lbhCtTx7FWoC8mvPWAUF3fBQeMj/P9s1mIr/JTLXSZCy6l 9oH/1GAJ28sT4Ja/l6D0wNlL7klwQAqL/Gs9Ok0c3eE1Pvyl373Z6SZkXrwiPntd iHRZpmOqqHbw7rYNfUfVOBXc5g== -----END CERTIFICATE-----Generated at Sun Apr 19 10:24:34 2026 by rpki-client