$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft (raw, json) Hash identifier: vs3z9AdAJsxfHK8ej/3NhfuGfQZs2H1gwPQtdz4Cwis= Subject key identifier: 33:B2:C3:D9:DE:A0:BB:61:30:20:5C:EB:4C:A7:58:C0:2A:D2:98:F3 Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0CB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft Manifest number: 0C95 Signing time: Thu 16 Apr 2026 18:29:41 +0000 Manifest this update: Thu 16 Apr 2026 18:29:40 +0000 Manifest next update: Thu 23 Apr 2026 18:29:40 +0000 Files and hashes: 1: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl (hash: ZXg42W9o2co/IeHA0cZYF7uyfuULdnF+CWuDe3c7Hj8=) 2: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (hash: 2ZECssZFKej2Bnmujg65SvPR+m2K68FZcUfUc+ikvVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Apr 16 18:29:40 2026 GMT Not After : Apr 23 18:29:40 2026 GMT Subject: CN=69e12a94-6c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:ba:7f:30:43:c5:d5:59:cf:18:b3:25:10: 9b:83:66:f6:33:d6:30:77:f6:3f:78:d4:f1:12:9c: e9:4a:96:26:e3:58:72:8d:e2:d2:b6:b9:79:65:e7: f1:25:9d:ee:30:71:b4:f3:bc:8a:17:a0:e5:8a:86: 4f:74:6c:fb:94:bd:44:46:dc:d5:01:78:4d:ce:b5: b5:e3:ef:0e:4a:43:9b:95:3f:98:6b:c8:01:70:a1: 22:a8:6b:96:dc:9d:82:fd:1c:f2:0a:29:c0:b8:ec: c1:00:c0:81:3e:48:dc:90:0b:d5:fa:0a:f5:7b:5e: 20:71:34:32:49:e8:f5:82:6c:37:ba:c5:f9:a0:67: 6b:d4:cd:b0:5f:ea:e4:91:55:8b:eb:9e:ef:e1:ea: 14:02:53:f9:21:49:1c:7e:5e:05:f3:1a:30:dc:ac: 5b:d5:22:27:20:41:51:90:78:bf:5f:b6:19:6d:27: 7e:9b:69:e1:b2:5e:9b:e2:d9:69:fa:78:a7:a3:8f: e6:6a:d7:49:ae:58:a1:a9:af:12:07:e0:c7:f9:f1: 43:20:28:91:bc:c4:19:ae:d8:3f:6c:fc:af:76:dc: 7b:25:f1:75:4e:8a:14:b2:51:29:dd:b4:6e:f7:0d: 71:0e:ab:1f:9b:47:08:49:bf:f3:e0:b7:c1:61:39: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B2:C3:D9:DE:A0:BB:61:30:20:5C:EB:4C:A7:58:C0:2A:D2:98:F3 X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:01:bc:f7:d4:cc:f3:8d:57:8e:38:ac:27:0f:04:a2:09:9a: d6:22:8f:92:bb:2c:3f:01:47:16:6d:89:7c:71:34:52:13:40: 6d:02:38:95:9c:35:2e:b6:30:c7:82:24:10:81:d4:91:23:5b: 37:da:26:bb:43:3b:83:43:6f:91:53:d2:91:86:86:fa:40:14: 0f:87:15:60:3d:36:6e:1c:38:00:2c:f0:3b:34:6a:a9:a9:b8: fd:3b:f3:21:03:b4:66:88:c5:f5:75:aa:8c:92:86:29:66:26: d5:77:a4:5d:89:00:1a:7a:9d:82:2c:60:07:15:86:6c:f5:fb: f1:77:92:82:a8:db:09:58:0e:ce:bf:ec:54:4f:3f:15:f1:a0: e1:d0:1c:4d:97:2a:7a:bc:eb:f5:fe:04:d1:ae:97:ed:39:c7: be:88:0a:ce:d3:23:00:14:a1:07:ea:8e:b4:ec:89:f4:23:06: 52:4a:4d:57:e3:2f:d8:88:88:c2:d6:34:53:2e:84:94:72:67: ef:03:7d:c7:14:5b:55:d5:b3:b6:d3:d6:ff:03:dd:5b:86:f4: 27:71:08:f2:2e:59:8a:e0:ef:0e:45:f5:e9:dc:3a:12:75:9c: e3:99:e3:fe:e5:75:b6:28:0a:ce:44:ae:56:d1:82:14:22:6a: 66:3f:58:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjYwNDE2MTgyOTQwWhcNMjYwNDIzMTgyOTQwWjAYMRYwFAYD VQQDEw02OWUxMmE5NC02YzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKq6fzBDxdVZzxizJRCbg2b2M9Ywd/Y/eNTxEpzpSpYm41hyjeLStrl5Zefx JZ3uMHG087yKF6DlioZPdGz7lL1ERtzVAXhNzrW14+8OSkOblT+Ya8gBcKEiqGuW 3J2C/RzyCinAuOzBAMCBPkjckAvV+gr1e14gcTQySej1gmw3usX5oGdr1M2wX+rk kVWL657v4eoUAlP5IUkcfl4F8xow3Kxb1SInIEFRkHi/X7YZbSd+m2nhsl6b4tlp +nino4/matdJrlihqa8SB+DH+fFDICiRvMQZrtg/bPyvdtx7JfF1TooUslEp3bRu 9w1xDqsfm0cISb/z4LfBYTmSJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOyw9ne oLthMCBc60ynWMAq0pjzMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExF RTN5OUhJN1VUWnl5Vlg5RDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACQG899TM841XjjisJw8Eogma1iKPkrssPwFHFm2JfHE0UhNAbQI4lZw1LrYw x4IkEIHUkSNbN9omu0M7g0NvkVPSkYaG+kAUD4cVYD02bhw4ACzwOzRqqam4/Tvz IQO0ZojF9XWqjJKGKWYm1XekXYkAGnqdgixgBxWGbPX78XeSgqjbCVgOzr/sVE8/ FfGg4dAcTZcqerzr9f4E0a6X7TnHvogKztMjABShB+qOtOyJ9CMGUkpNV+Mv2IiI wtY0Uy6ElHJn7wN9xxRbVdWzttPW/wPdW4b0J3EI8i5ZiuDvDkX16dw6EnWc45nj /uV1tigKzkSuVtGCFCJqZj9Y0g== -----END CERTIFICATE-----Generated at Sat Apr 18 01:53:35 2026 by rpki-client