$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: xmsqMvGoN4zjeTztqlwaNio3DXGNf9TNF2W7bLX3DXo= Subject key identifier: 9E:FB:F0:C3:B0:E1:AE:B2:52:3F:46:CA:73:E9:ED:F6:E7:ED:AA:FD Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 03F2 Signing time: Sun 19 Apr 2026 00:25:14 +0000 Manifest this update: Sun 19 Apr 2026 00:25:14 +0000 Manifest next update: Sun 26 Apr 2026 00:25:14 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: rUfqCKYJ6OHhYmlFOskxMi97C3TitaNb5NeqfSh71po=) 2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: bbFe9zajQ0g2zhaT+BLjCcFN40wGnYAdz85LZxbirZ8=) 3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: YoChpX9w4FCCtAPtS4tdDvkJcAqQRe8NPjFDFUXSQH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Apr 19 00:25:14 2026 GMT Not After : Apr 26 00:25:14 2026 GMT Subject: CN=69e420ea-bb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:8d:a6:ac:33:92:09:31:13:80:9f:d4:07: a9:44:0c:09:a3:d2:c4:83:04:8e:49:45:04:e2:ad: 53:d4:8e:21:71:ae:0d:41:c3:8e:fe:b5:3c:7e:ec: ed:0b:01:3e:10:5a:db:d1:39:c5:80:a5:db:a9:13: 28:d4:4c:59:49:e2:9a:e7:77:c3:0f:00:a0:20:14: c1:dc:5c:b9:9b:ee:aa:c0:00:0e:8b:aa:e0:1f:cb: 53:04:23:b9:28:73:b6:97:c0:1f:90:e8:65:f6:12: 69:57:5d:0f:20:f1:e1:f9:b4:cd:90:e5:91:bf:52: 8e:22:7d:4d:f6:fb:4f:c0:eb:99:5d:37:9c:fb:29: 18:31:03:57:31:1b:2f:38:37:27:a5:81:25:95:e7: e3:30:48:47:77:3e:29:a5:d9:f3:0f:84:f0:55:0b: 61:84:bd:52:0f:18:9f:4b:96:41:d7:20:c7:92:b5: 61:c0:a9:9c:12:c2:2f:ec:d7:dd:d1:f3:62:c7:b2: cf:01:02:ea:0a:ad:01:c1:dd:65:2d:b5:d5:4d:5d: 33:25:6f:ee:53:c3:30:a1:1d:ef:22:c1:64:12:fc: 32:06:f3:76:f0:bc:0f:3c:64:bd:92:93:b3:b3:5e: bd:88:8e:58:6d:a5:fa:86:3a:08:de:e9:cf:cd:78: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FB:F0:C3:B0:E1:AE:B2:52:3F:46:CA:73:E9:ED:F6:E7:ED:AA:FD X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:35:60:dc:89:d4:b9:1c:55:1f:ea:ea:a0:88:d2:8a:7b:64: 85:31:2f:ee:52:e2:6c:43:2f:4b:d4:d9:a2:9f:d3:5d:9e:bf: 50:97:09:2b:af:b9:ca:be:61:a6:de:e0:ed:b8:17:52:b7:93: 33:7b:8d:ad:0f:e8:82:f4:f4:2e:7d:0c:87:ff:dd:4f:54:fb: 3a:f6:72:a9:33:8d:26:a0:64:51:ad:43:51:0a:c3:24:7b:25: 32:e7:0c:d6:0c:fd:b2:22:4e:34:1f:12:9a:99:69:f1:13:96: e4:5f:e8:86:e7:ab:c2:9c:49:d2:e5:d6:55:3b:4b:69:3c:7d: 7b:6c:d4:ef:eb:d8:f8:aa:c2:9c:77:4a:eb:b7:45:aa:28:ee: 2b:64:58:a8:9d:f9:30:94:1f:b5:10:3a:d7:80:a1:a5:a3:60: 45:9d:f5:0f:8f:1d:5e:21:7c:7d:b2:8d:87:87:68:93:8b:d8: 1c:f6:9a:96:3d:6e:22:64:7d:da:1b:dc:17:ae:67:ef:73:99: 1c:ce:b1:52:22:a3:d1:85:18:ef:2a:28:8c:f7:3d:09:f3:d8: 67:fe:f7:28:77:1b:a8:4f:7e:c2:05:c3:7b:b0:e6:20:1a:dc: 82:f1:d7:d6:5a:74:53:bb:b8:1d:be:5a:34:52:80:54:ad:cc: f9:3b:29:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwNDE5MDAyNTE0WhcNMjYwNDI2MDAyNTE0WjAYMRYwFAYD VQQDEw02OWU0MjBlYS1iYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzyNpqwzkgkxE4Cf1AepRAwJo9LEgwSOSUUE4q1T1I4hca4NQcOO/rU8fuzt CwE+EFrb0TnFgKXbqRMo1ExZSeKa53fDDwCgIBTB3Fy5m+6qwAAOi6rgH8tTBCO5 KHO2l8AfkOhl9hJpV10PIPHh+bTNkOWRv1KOIn1N9vtPwOuZXTec+ykYMQNXMRsv ODcnpYEllefjMEhHdz4ppdnzD4TwVQthhL1SDxifS5ZB1yDHkrVhwKmcEsIv7Nfd 0fNix7LPAQLqCq0Bwd1lLbXVTV0zJW/uU8MwoR3vIsFkEvwyBvN28LwPPGS9kpOz s169iI5YbaX6hjoI3unPzXjmFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ778MOw 4a6yUj9GynPp7fbn7ar9MB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANDVg3InUuRxVH+rqoIjSintkhTEv7lLibEMvS9TZop/TXZ6/UJcJK6+5yr5h pt7g7bgXUreTM3uNrQ/ogvT0Ln0Mh//dT1T7OvZyqTONJqBkUa1DUQrDJHslMucM 1gz9siJONB8Smplp8ROW5F/ohuerwpxJ0uXWVTtLaTx9e2zU7+vY+KrCnHdK67dF qijuK2RYqJ35MJQftRA614ChpaNgRZ31D48dXiF8fbKNh4dok4vYHPaalj1uImR9 2hvcF65n73OZHM6xUiKj0YUY7yoojPc9CfPYZ/73KHcbqE9+wgXDe7DmIBrcgvHX 1lp0U7u4Hb5aNFKAVK3M+TspHg== -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:38 2026 by rpki-client