$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: s4aBh4hILGqmYGXeL+TCEKNmyJ6bjhHyeetCJx3WYC8= Subject key identifier: E2:1C:29:A5:2F:5B:88:C6:1A:2D:FD:7E:C9:A4:DB:44:0E:76:65:84 Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 0121 Signing time: Fri 17 Apr 2026 05:33:02 +0000 Manifest this update: Fri 17 Apr 2026 05:33:02 +0000 Manifest next update: Fri 24 Apr 2026 05:33:02 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: p4SwkgoYpGk5t6resqWy1bWMmuvyD7S9o9GVzCM04Zk=) 2: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: QMr7SSp5xbajHiCRuT5qA5lZIJuO6WaXl9EYEvA91Ec=) 3: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: 3kIF68zO8V/KZKS8dRul3MgYSoRJ3VG5qDumT+v5J+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Apr 17 05:33:02 2026 GMT Not After : Apr 24 05:33:02 2026 GMT Subject: CN=69e1c60e-ddd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e9:a7:73:a6:6d:6d:d0:82:19:f2:28:e0:5e: fa:bc:93:1f:42:c9:e3:d6:ce:38:bb:2f:ae:1a:58: 09:d7:99:a3:62:e8:96:67:85:6b:4c:4e:45:84:1c: 78:c6:93:d9:99:fd:f0:d8:30:22:3c:f4:3f:20:5f: a6:bc:02:44:9e:2a:78:df:10:13:52:69:88:e3:23: e0:ce:f3:9d:ec:66:95:13:3e:e3:19:7a:85:3c:10: 81:38:ca:58:9e:29:5c:0c:95:8f:7f:97:77:42:db: 97:41:70:48:6c:f2:39:b2:6e:d3:ae:3e:b6:99:8a: 68:17:a0:c4:18:88:0c:dd:5b:85:a4:63:47:45:52: d3:10:c9:d0:82:8c:71:8b:a7:56:4c:a8:ec:18:64: 72:ee:e1:cc:db:0c:ec:ad:c8:42:fd:de:86:21:50: 0d:78:47:2c:c9:09:88:c9:07:66:0d:18:f9:5a:7a: 49:02:6a:23:1e:11:b8:a8:e9:a1:10:59:f4:2d:3f: d2:e0:a5:63:8e:ec:b6:7e:55:4d:c2:7d:55:cf:ff: 36:7c:53:a6:ff:6a:f3:15:ab:b6:f5:a4:43:8a:00: 9c:30:47:5f:a7:1d:2a:7e:3c:60:c8:20:1f:a4:43: 3e:18:8b:dc:a2:9f:e5:4f:f9:cf:82:8c:cf:e9:4c: e6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1C:29:A5:2F:5B:88:C6:1A:2D:FD:7E:C9:A4:DB:44:0E:76:65:84 X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:44:d5:91:13:8c:18:14:12:c9:2c:1d:64:20:62:e6:7b:16: e8:79:f9:4b:22:1f:db:cb:53:6d:e6:28:db:d2:22:50:4b:fe: 68:d4:3d:1c:95:9c:d3:44:ba:06:da:fb:3a:53:ef:e3:d4:bf: 52:56:b4:b7:d8:90:79:20:0c:99:4a:f6:fc:32:85:39:05:f6: 8e:79:11:e3:e9:a0:93:7e:3e:40:55:e6:3a:87:26:ca:a2:ea: c8:0d:ac:10:3c:5d:2d:4c:43:6d:c5:e2:3d:56:db:03:f3:ab: 48:4a:b9:d3:5d:60:0e:69:49:c8:52:23:b1:fa:b2:80:d8:a2: 6a:a2:f3:d3:40:da:da:04:14:27:41:12:cf:d2:9e:f5:34:76: d8:a1:1f:04:64:52:4f:45:ba:25:0b:c0:e8:01:11:28:9f:c0: 88:6e:7e:a0:08:63:09:4b:c0:fd:86:e1:62:7f:dd:93:41:16: 96:50:04:3d:09:ec:7a:a5:0c:76:87:0b:e6:e9:ab:64:39:11: ba:8c:3f:02:32:03:3b:6e:50:3b:fd:01:a6:f2:3b:33:d3:aa: 0b:de:41:f0:64:ce:0c:1b:2b:dc:78:df:58:ee:fd:15:4f:d8: 90:ad:82:7b:89:8d:de:7a:9a:29:25:cb:9f:31:10:91:e1:a4: 24:6e:f6:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjYwNDE3MDUzMzAyWhcNMjYwNDI0MDUzMzAyWjAYMRYwFAYD VQQDEw02OWUxYzYwZS1kZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1umnc6ZtbdCCGfIo4F76vJMfQsnj1s44uy+uGlgJ15mjYuiWZ4VrTE5FhBx4 xpPZmf3w2DAiPPQ/IF+mvAJEnip43xATUmmI4yPgzvOd7GaVEz7jGXqFPBCBOMpY nilcDJWPf5d3QtuXQXBIbPI5sm7Trj62mYpoF6DEGIgM3VuFpGNHRVLTEMnQgoxx i6dWTKjsGGRy7uHM2wzsrchC/d6GIVANeEcsyQmIyQdmDRj5WnpJAmojHhG4qOmh EFn0LT/S4KVjjuy2flVNwn1Vz/82fFOm/2rzFau29aRDigCcMEdfpx0qfjxgyCAf pEM+GIvcop/lT/nPgozP6UzmFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIcKaUv W4jGGi39fsmk20QOdmWEMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZUTVkROMGBQSySwdZCBi5nsW6Hn5SyIf28tTbeYo29IiUEv+aNQ9HJWc00S6 Btr7OlPv49S/Ula0t9iQeSAMmUr2/DKFOQX2jnkR4+mgk34+QFXmOocmyqLqyA2s EDxdLUxDbcXiPVbbA/OrSEq5011gDmlJyFIjsfqygNiiaqLz00Da2gQUJ0ESz9Ke 9TR22KEfBGRST0W6JQvA6AERKJ/AiG5+oAhjCUvA/YbhYn/dk0EWllAEPQnseqUM docL5umrZDkRuow/AjIDO25QO/0BpvI7M9OqC95B8GTODBsr3HjfWO79FU/YkK2C e4mN3nqaKSXLnzEQkeGkJG72vg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:38 2026 by rpki-client