$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json) Hash identifier: FmNkVugAW/KEM7ged/9YOXgqM2IbumdrYqMXt6Obp/o= Subject key identifier: AA:AF:B4:BB:E9:F5:19:8A:D3:5F:5B:55:E4:41:37:E8:D2:0A:B8:19 Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft Manifest number: F6 Signing time: Fri 17 Apr 2026 06:08:28 +0000 Manifest this update: Fri 17 Apr 2026 06:08:28 +0000 Manifest next update: Fri 24 Apr 2026 06:08:28 +0000 Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: Fu2hESuWmNLup5TRVqkdOf+cFNWJg1H42Txaj3t44eU=) 2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Validity Not Before: Apr 17 06:08:28 2026 GMT Not After : Apr 24 06:08:28 2026 GMT Subject: CN=69e1ce5c-8637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:c2:dd:a5:40:36:e1:98:97:b1:0e:32:6e: 8d:b5:41:b3:c7:8c:35:ef:4d:cc:39:88:3a:a5:03: 64:46:16:60:9c:8d:27:21:25:dc:40:8a:a4:db:fc: 5d:aa:05:66:2f:76:84:1e:0a:09:be:fd:b8:67:30: cc:a6:a3:c2:83:58:1a:b4:7c:e9:7c:6a:b2:78:43: 3a:9a:0d:d7:8b:85:c9:8e:4a:70:4c:e6:9e:49:0f: af:cf:60:1c:92:42:fa:42:6a:f5:3e:ba:a0:8b:74: bb:98:31:ba:6c:54:b8:e3:81:5f:d9:01:34:a4:72: 31:a5:05:7c:1e:72:f7:7b:a0:3e:cf:dd:5e:1e:e9: 89:86:a2:cb:3f:54:2e:c0:95:06:ee:f6:f2:d1:5e: 2a:b0:03:89:46:ce:cb:cb:27:70:0c:a2:89:a5:28: 60:14:05:3d:5c:c0:81:4b:f6:31:9e:63:d1:e8:15: bc:52:78:18:0b:3a:26:aa:75:02:69:79:a0:8d:02: 49:18:8d:a5:53:ed:c0:0a:29:db:95:db:18:44:77: b9:9e:5d:70:43:3c:c9:c6:d6:4c:14:5d:d6:f2:a9: 1c:6c:de:d3:88:76:87:7f:06:cb:d8:ba:64:9c:ed: 24:5d:55:08:e3:8c:0b:9b:0a:5d:b8:07:21:0d:63: 5e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AF:B4:BB:E9:F5:19:8A:D3:5F:5B:55:E4:41:37:E8:D2:0A:B8:19 X509v3 Authority Key Identifier: keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:64:26:4e:e2:dd:64:f8:f6:c1:0b:a9:2a:db:cd:78:c8:84: 88:36:f2:10:8a:04:50:e1:0d:d3:dd:dc:eb:fb:c6:ed:37:84: 49:a9:fc:84:08:b7:ad:db:53:74:73:c8:c1:65:e6:9c:3f:7e: 5e:00:a8:e2:86:47:03:fb:6d:70:92:6e:75:a4:cb:9d:75:08: b0:be:39:6d:d2:d2:c2:c2:3b:0d:99:70:d0:a2:5b:b1:0c:af: 2b:5d:ba:3a:2b:30:b0:53:08:f2:8e:23:17:de:66:be:56:e3: 9e:cc:2f:06:9a:eb:91:91:50:96:0d:59:5f:15:35:e3:bc:6e: 08:69:b8:83:1b:dc:84:9b:ad:db:75:57:11:49:2f:09:80:8e: 9d:75:a7:a7:01:52:3b:81:e6:1a:e3:a6:42:ac:07:df:20:aa: e0:fd:1a:1c:61:74:bd:4e:30:25:56:4f:bc:94:fd:d9:b8:cc: 4f:ec:8a:ac:21:b9:d5:f0:02:ee:d4:69:b9:98:9c:a3:18:15: 80:e1:84:5a:59:51:fd:59:4a:de:20:02:da:9b:b2:35:7f:6b: 58:b4:81:93:86:b4:2e:61:4d:c4:74:72:fa:f7:77:5c:93:fa: 84:89:a1:b1:39:d4:f8:55:31:8d:13:89:2c:3d:2a:6d:9b:81: 6e:11:89:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDAzNzg4RUUyQkFFNEQ4MDVFQkNEQ0E2NjE4RTJFQzFB MThBNUM0RTIwHhcNMjYwNDE3MDYwODI4WhcNMjYwNDI0MDYwODI4WjAYMRYwFAYD VQQDEw02OWUxY2U1Yy04NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs53C3aVANuGYl7EOMm6NtUGzx4w1703MOYg6pQNkRhZgnI0nISXcQIqk2/xd qgVmL3aEHgoJvv24ZzDMpqPCg1gatHzpfGqyeEM6mg3Xi4XJjkpwTOaeSQ+vz2Ac kkL6Qmr1Prqgi3S7mDG6bFS444Ff2QE0pHIxpQV8HnL3e6A+z91eHumJhqLLP1Qu wJUG7vby0V4qsAOJRs7LyydwDKKJpShgFAU9XMCBS/YxnmPR6BW8UngYCzomqnUC aXmgjQJJGI2lU+3ACinbldsYRHe5nl1wQzzJxtZMFF3W8qkcbN7TiHaHfwbL2Lpk nO0kXVUI44wLmwpduAchDWNeCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqvtLvp 9RmK019bVeRBN+jSCrgZMB8GA1UdIwQYMBaAFAN4juK65NgF683KZhji7BoYpcTi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CRTdDQUMxMkQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJBWHJ6Y3BtR09Mc0doaWx4 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CRTdDQUMxMkQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJB WHJ6Y3BtR09Mc0doaWx4T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhWQmTuLdZPj2wQupKtvNeMiEiDbyEIoEUOEN093c6/vG7TeESan8hAi3rdtT dHPIwWXmnD9+XgCo4oZHA/ttcJJudaTLnXUIsL45bdLSwsI7DZlw0KJbsQyvK126 OiswsFMI8o4jF95mvlbjnswvBprrkZFQlg1ZXxU147xuCGm4gxvchJut23VXEUkv CYCOnXWnpwFSO4HmGuOmQqwH3yCq4P0aHGF0vU4wJVZPvJT92bjMT+yKrCG51fAC 7tRpuZicoxgVgOGEWllR/VlK3iAC2puyNX9rWLSBk4a0LmFNxHRy+vd3XJP6hImh sTnU+FUxjROJLD0qbZuBbhGJMg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:40:54 2026 by rpki-client