$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: FN1pzyPLuXb+rcQPh/anYtXKi6lDuOIgxODcT/x/ZFs= Subject key identifier: C9:D0:80:AC:E7:70:A7:57:38:65:41:6C:D4:C4:AC:EF:C8:11:71:45 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 0406 Signing time: Fri 17 Apr 2026 00:20:58 +0000 Manifest this update: Fri 17 Apr 2026 00:20:58 +0000 Manifest next update: Fri 24 Apr 2026 00:20:58 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: uoKEmwljUA/vkXeoMm6KnESjObY0A2WifMCPGz9a8nc=) 2: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=) 3: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Apr 17 00:20:58 2026 GMT Not After : Apr 24 00:20:58 2026 GMT Subject: CN=69e17cea-a3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:9e:0b:2c:b4:c9:0e:46:a1:dd:8e:64:05: d3:5f:26:f0:1e:53:ef:94:14:de:75:14:7b:78:ee: d7:73:3a:dc:81:46:96:d6:2e:c1:90:76:40:ae:6c: 2d:8a:59:7a:21:d4:83:41:76:a1:ed:0d:26:5c:8e: 13:33:dc:c6:50:8f:a2:ce:d4:76:32:b3:97:a3:70: 8e:08:5b:3f:9a:d5:29:65:0d:25:df:3e:56:39:74: 22:96:26:59:07:5d:35:19:49:3f:76:d7:1e:d4:8f: cc:99:f8:49:bf:21:87:0b:b7:21:d5:61:5a:29:d4: 30:f8:99:4b:da:15:66:96:0f:f4:99:54:61:db:12: 6d:06:67:34:b8:36:7f:fe:af:dd:84:40:c9:a6:0e: db:58:83:16:96:a6:60:d7:c7:ff:59:dd:ec:87:59: 3d:27:1c:12:4b:9b:bb:91:7b:a9:e8:b6:7e:55:61: 35:66:73:ef:9c:2e:42:44:13:e8:64:f7:2e:0a:cf: 4f:c4:72:41:5d:e6:70:7e:0e:4a:16:6e:47:2f:06: 41:b3:51:a8:67:ca:14:59:6e:ab:ad:71:c0:41:b0: 5c:68:ae:db:59:78:7f:ad:ab:30:d2:07:c9:d9:fe: 5a:19:d5:42:bc:54:c8:f8:6a:95:e0:da:db:ef:90: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D0:80:AC:E7:70:A7:57:38:65:41:6C:D4:C4:AC:EF:C8:11:71:45 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b4:e1:44:ce:77:9e:79:61:7f:97:27:89:10:b1:2d:46:e0: ac:4b:e0:58:6c:fe:02:a6:40:4d:c9:84:58:34:da:74:a2:7e: d9:39:36:61:ba:5a:9f:7d:99:a5:37:4b:21:de:2d:9d:53:f1: b9:00:15:98:b6:61:c7:a1:2c:db:71:3c:d9:4e:93:8f:43:dd: 4d:ad:c4:80:dd:16:75:f1:28:a0:24:75:01:9e:ad:fe:ba:43: b2:76:70:b8:8c:21:2d:58:06:30:23:87:2b:09:e3:42:e1:73: 40:f6:fb:af:9c:6d:51:3d:4f:de:60:82:77:cd:9a:04:4a:bb: 14:23:4b:0f:f6:b4:fc:58:32:49:b6:ae:fb:f3:f2:03:ad:a4: 48:8b:d1:8e:24:6d:ed:01:7e:84:b7:e8:df:d9:1d:0a:b5:43: 86:8d:ac:dc:17:df:85:ee:22:ee:9d:ab:46:be:aa:a0:06:7f: 7b:76:da:7f:e6:51:91:5b:74:30:22:d9:3e:2d:a3:c2:d9:31: 5b:c1:71:a1:53:ba:84:22:6c:fa:76:93:16:92:f7:2b:91:67: 41:cc:f1:80:d4:74:be:23:b3:68:68:7d:77:87:d3:59:09:4b: 9b:62:8a:b3:57:18:37:d5:03:bf:6a:9e:56:98:6b:78:06:28: 15:ba:f0:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjYwNDE3MDAyMDU4WhcNMjYwNDI0MDAyMDU4WjAYMRYwFAYD VQQDEw02OWUxN2NlYS1hM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltqeCyy0yQ5God2OZAXTXybwHlPvlBTedRR7eO7XczrcgUaW1i7BkHZArmwt ill6IdSDQXah7Q0mXI4TM9zGUI+iztR2MrOXo3COCFs/mtUpZQ0l3z5WOXQiliZZ B101GUk/dtce1I/MmfhJvyGHC7ch1WFaKdQw+JlL2hVmlg/0mVRh2xJtBmc0uDZ/ /q/dhEDJpg7bWIMWlqZg18f/Wd3sh1k9JxwSS5u7kXup6LZ+VWE1ZnPvnC5CRBPo ZPcuCs9PxHJBXeZwfg5KFm5HLwZBs1GoZ8oUWW6rrXHAQbBcaK7bWXh/rasw0gfJ 2f5aGdVCvFTI+GqV4Nrb75AbcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnQgKzn cKdXOGVBbNTErO/IEXFFMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp7ThRM53nnlhf5cniRCxLUbgrEvgWGz+AqZATcmEWDTadKJ+2Tk2Ybpan32Z pTdLId4tnVPxuQAVmLZhx6Es23E82U6Tj0PdTa3EgN0WdfEooCR1AZ6t/rpDsnZw uIwhLVgGMCOHKwnjQuFzQPb7r5xtUT1P3mCCd82aBEq7FCNLD/a0/FgySbau+/Py A62kSIvRjiRt7QF+hLfo39kdCrVDho2s3Bffhe4i7p2rRr6qoAZ/e3baf+ZRkVt0 MCLZPi2jwtkxW8FxoVO6hCJs+naTFpL3K5FnQczxgNR0viOzaGh9d4fTWQlLm2KK s1cYN9UDv2qeVphreAYoFbrwTA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:57:51 2026 by rpki-client