$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: 7iTePU1w8mbjoxbjbnGJKfVbHezasl4wmBL2iw0ZZU4= Subject key identifier: 81:3D:37:05:7B:A8:6B:E7:4E:64:C9:9C:E4:EA:66:BB:7B:EC:7B:F1 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 16D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 16C1 Signing time: Sat 18 Apr 2026 16:37:03 +0000 Manifest this update: Sat 18 Apr 2026 16:37:03 +0000 Manifest next update: Sat 25 Apr 2026 16:37:03 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: V8i4UypD1aI6nZCywOY7sL5LR1rSM4rCEIDIsBISRC8=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 16:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5849 (0x16d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Apr 18 16:37:03 2026 GMT Not After : Apr 25 16:37:03 2026 GMT Subject: CN=69e3b32f-5675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:3e:4b:96:ae:e1:65:d1:59:02:2c:20:69: 56:98:bf:fe:f8:f5:8a:02:f5:69:5f:fa:4a:a5:8b: 57:2b:68:1b:38:12:6e:c6:a7:d2:cf:bb:e9:87:7d: d7:91:89:3f:2a:da:c1:7a:d0:07:a4:39:69:74:5e: 66:47:9f:64:70:02:47:30:1f:d6:21:2a:f4:ba:d7: 97:21:19:21:61:53:cc:f4:07:37:e0:09:88:b9:ac: ab:4d:71:6f:45:bf:29:32:19:ce:52:87:16:ff:d0: 06:49:0e:f9:1a:49:f9:bb:96:c9:f0:d4:30:e0:82: 66:9a:97:6d:3b:30:65:cf:6a:6a:47:4a:4a:85:9e: 9d:6d:3c:d2:69:fe:2d:b1:7c:88:26:ef:e8:ef:53: e0:51:fb:1c:67:33:a3:94:e7:f7:64:1f:2c:14:94: b6:be:a5:30:55:83:ee:0d:fa:d0:12:70:4e:09:61: 05:88:99:35:9d:ad:71:3e:f3:ab:21:03:7a:92:13: 48:27:d8:e7:6b:c1:b0:a8:20:37:f2:d3:b4:b1:fe: 8d:b0:28:f0:0d:8d:05:e6:25:30:8f:2d:8e:51:b8: 05:4a:0b:8e:b0:6a:a0:97:f3:90:63:99:bc:9f:5a: 89:b9:bd:cf:73:50:14:c0:e6:ff:7b:a2:c1:20:18: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:37:05:7B:A8:6B:E7:4E:64:C9:9C:E4:EA:66:BB:7B:EC:7B:F1 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:12:36:75:e5:eb:52:87:20:a8:15:18:7b:b3:11:48:74:b6: 81:65:b4:db:71:f8:3d:80:ad:07:30:9d:84:95:1d:30:b8:a5: f6:b8:24:f7:f7:67:74:79:13:99:21:fc:36:bc:3c:ff:93:0d: 4b:4f:b1:8b:d6:a2:ca:af:90:61:19:0d:5f:7d:00:55:28:8b: c7:dc:85:e2:3a:d9:7c:a8:82:25:cd:0d:5d:0d:95:4e:2e:ae: a8:1d:22:c5:7d:0a:5f:87:d9:a9:a9:50:5e:3b:c1:15:18:93: 68:da:44:21:fc:b1:ad:56:a4:71:5a:ae:99:07:54:69:fd:d4: c4:33:6e:f0:d8:45:11:c3:0b:ef:94:04:14:c5:be:32:13:03: 78:32:e6:11:ab:ed:26:a2:da:e1:0e:5a:35:5b:b6:2e:bc:8d: f5:77:fb:0d:74:3c:8b:46:3f:9a:c0:97:9e:99:cd:6d:1f:09: ae:c9:fd:55:71:34:9b:9d:ac:f9:44:91:40:1e:0a:df:99:11: 3f:c9:76:5c:f6:51:24:10:e4:a0:6e:46:53:0a:a5:f3:48:20: f1:c9:7e:0f:39:0a:01:f6:52:ec:3c:ed:f9:bd:0e:ff:bc:16: eb:78:43:49:94:66:e4:c7:6b:c6:86:1b:7d:cf:0a:4e:ef:89: 68:23:2c:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjYwNDE4MTYzNzAzWhcNMjYwNDI1MTYzNzAzWjAYMRYwFAYD VQQDEw02OWUzYjMyZi01Njc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJE+S5au4WXRWQIsIGlWmL/++PWKAvVpX/pKpYtXK2gbOBJuxqfSz7vph33X kYk/KtrBetAHpDlpdF5mR59kcAJHMB/WISr0uteXIRkhYVPM9Ac34AmIuayrTXFv Rb8pMhnOUocW/9AGSQ75Gkn5u5bJ8NQw4IJmmpdtOzBlz2pqR0pKhZ6dbTzSaf4t sXyIJu/o71PgUfscZzOjlOf3ZB8sFJS2vqUwVYPuDfrQEnBOCWEFiJk1na1xPvOr IQN6khNIJ9jna8GwqCA38tO0sf6NsCjwDY0F5iUwjy2OUbgFSguOsGqgl/OQY5m8 n1qJub3Pc1AUwOb/e6LBIBgJ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIE9NwV7 qGvnTmTJnOTqZrt77HvxMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaBI2deXrUocgqBUYe7MRSHS2gWW023H4PYCtBzCdhJUdMLil9rgk9/dndHkT mSH8Nrw8/5MNS0+xi9aiyq+QYRkNX30AVSiLx9yF4jrZfKiCJc0NXQ2VTi6uqB0i xX0KX4fZqalQXjvBFRiTaNpEIfyxrVakcVqumQdUaf3UxDNu8NhFEcML75QEFMW+ MhMDeDLmEavtJqLa4Q5aNVu2LryN9Xf7DXQ8i0Y/msCXnpnNbR8Jrsn9VXE0m52s +USRQB4K35kRP8l2XPZRJBDkoG5GUwql80gg8cl+DzkKAfZS7Dzt+b0O/7wW63hD SZRm5MdrxoYbfc8KTu+JaCMsHQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:36:53 2026 by rpki-client