$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: hd7u6xfmBE6/jHgJAHgUwq/W8krFTmNw0N/ZQEgv1eE= Subject key identifier: 23:FB:74:82:17:8D:EE:FB:33:70:26:A5:18:F8:81:4F:E7:5C:5E:E0 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 0938 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 0903 Signing time: Thu 16 Apr 2026 14:45:28 +0000 Manifest this update: Thu 16 Apr 2026 14:45:28 +0000 Manifest next update: Thu 23 Apr 2026 14:45:28 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: IDQLUyOvprkS5LoI8gM1TXDmcG5jhW3OuEMtu2dMa2c=) 2: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) 3: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: BoL9UlNE8f39H5zPW1byPvXmDiZbS/dSQi7Q0NywADo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Apr 16 14:45:28 2026 GMT Not After : Apr 23 14:45:28 2026 GMT Subject: CN=69e0f608-d669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:ec:bf:c0:26:71:11:9b:6c:6a:c5:4a:94: da:f0:39:a7:6c:c8:25:61:d4:92:7f:72:09:c0:01: 3f:bd:d1:b8:61:04:67:fd:53:b1:14:ab:6d:38:76: 67:06:fa:0c:d3:f6:ee:e3:51:88:47:b8:d3:ed:d6: 43:25:70:49:04:43:39:4b:fd:32:e9:8b:ca:b5:20: 8d:b0:7b:94:ec:71:e0:1e:95:1c:fa:71:c7:60:44: f0:3d:15:f4:89:f4:c1:a2:d0:59:ea:2f:2c:0d:d7: 3b:2b:0d:f4:06:f8:9b:d6:7b:2f:2e:94:16:c8:79: 37:73:db:6f:2a:b8:73:3f:2f:76:b2:a7:f7:e7:ba: 3f:b4:e1:0e:e4:63:2b:39:07:ce:b5:fd:58:71:06: 22:a8:59:47:18:37:34:f8:5f:9e:07:58:e9:fb:0d: 3a:59:57:ea:51:d3:c7:c8:45:ab:76:88:b8:bf:65: 72:f0:de:a9:94:34:7e:b9:0c:0c:08:a8:2b:4c:82: 01:f7:4a:5f:37:29:4a:13:20:dd:cf:8a:f6:95:0f: 04:77:f9:36:62:38:b1:b7:00:83:59:3c:a6:e3:1c: 42:bf:9e:cf:4e:db:34:15:77:b8:ee:d9:3d:5b:61: 3c:fb:7b:38:4a:f5:b3:cb:25:36:d8:d5:b6:b3:72: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FB:74:82:17:8D:EE:FB:33:70:26:A5:18:F8:81:4F:E7:5C:5E:E0 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:cf:a2:88:05:06:9d:84:50:d7:a0:14:a8:96:92:b6:9d:67: a4:31:32:0f:3f:83:6a:d4:08:6a:33:2e:d7:88:a7:0b:37:50: f6:c1:7c:df:16:03:4a:e5:cc:1a:6a:e0:99:f6:3e:6e:9b:d0: 5e:45:25:04:07:22:07:69:8c:62:be:9b:9b:ac:7b:c8:74:e4: 8c:f5:dc:e2:0d:26:be:35:2f:16:38:d3:0c:8f:49:45:a6:9d: 75:56:e3:c1:dc:93:d2:19:48:ce:b4:ed:9f:1e:c6:00:96:97: 91:e4:92:5c:24:f3:b0:45:e1:23:29:db:36:ad:e2:c3:a7:60: b1:34:b4:ae:7c:29:d8:44:a2:24:34:28:1b:d2:fe:70:d3:40: cc:7a:e8:d4:c6:59:cb:c2:15:62:63:0b:74:e9:80:e3:17:df: b5:6b:c4:63:10:5b:1d:f4:96:ea:74:1c:10:76:5c:09:7a:e3: 33:ce:1a:ac:0b:18:c5:63:ae:6b:c5:ed:f6:1e:4a:17:99:2c: 2a:b3:6e:71:ae:0b:8d:76:08:91:ef:9a:32:4f:4e:0f:45:f5: fa:c2:38:bb:37:dd:f4:1c:13:07:fa:63:7c:17:73:cb:46:c6: 03:22:9b:f3:7d:61:20:4e:1f:76:a2:d0:a8:d4:c4:79:66:c7: 8c:b5:7a:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwNDE2MTQ0NTI4WhcNMjYwNDIzMTQ0NTI4WjAYMRYwFAYD VQQDEw02OWUwZjYwOC1kNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXbsv8AmcRGbbGrFSpTa8DmnbMglYdSSf3IJwAE/vdG4YQRn/VOxFKttOHZn BvoM0/bu41GIR7jT7dZDJXBJBEM5S/0y6YvKtSCNsHuU7HHgHpUc+nHHYETwPRX0 ifTBotBZ6i8sDdc7Kw30Bvib1nsvLpQWyHk3c9tvKrhzPy92sqf357o/tOEO5GMr OQfOtf1YcQYiqFlHGDc0+F+eB1jp+w06WVfqUdPHyEWrdoi4v2Vy8N6plDR+uQwM CKgrTIIB90pfNylKEyDdz4r2lQ8Ed/k2YjixtwCDWTym4xxCv57PTts0FXe47tk9 W2E8+3s4SvWzyyU22NW2s3LDgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCP7dIIX je77M3AmpRj4gU/nXF7gMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMM+iiAUGnYRQ16AUqJaStp1npDEyDz+DatQIajMu14inCzdQ9sF83xYDSuXM GmrgmfY+bpvQXkUlBAciB2mMYr6bm6x7yHTkjPXc4g0mvjUvFjjTDI9JRaaddVbj wdyT0hlIzrTtnx7GAJaXkeSSXCTzsEXhIynbNq3iw6dgsTS0rnwp2ESiJDQoG9L+ cNNAzHro1MZZy8IVYmMLdOmA4xfftWvEYxBbHfSW6nQcEHZcCXrjM84arAsYxWOu a8Xt9h5KF5ksKrNuca4LjXYIke+aMk9OD0X1+sI4uzfd9BwTB/pjfBdzy0bGAyKb 831hIE4fdqLQqNTEeWbHjLV65A== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:14 2026 by rpki-client