$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft File: 3OubbYP7AtxF6SA1OKXIr2-UH6k.mft (raw, json) Hash identifier: 5oizOWC1f5pD1+OrKcoqJlmqQtQ7VAyAaYYwSyhjYSk= Subject key identifier: BE:3A:B1:11:D8:1F:E5:16:14:9E:58:4B:AE:03:8D:0D:E2:B0:35:87 Authority key identifier: DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 Certificate issuer: /CN=A918D2CA/serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft Manifest number: B1 Signing time: Sun 19 Apr 2026 06:46:07 +0000 Manifest this update: Sun 19 Apr 2026 06:46:06 +0000 Manifest next update: Sun 26 Apr 2026 06:46:06 +0000 Files and hashes: 1: 3OubbYP7AtxF6SA1OKXIr2-UH6k.crl (hash: gOdOVai9GypZN/4IZ/OXIt0qsVKKoAjs49WG3HeET0g=) 2: 177E82C884B211F0BC4C5E79C4F9AE02.roa (hash: DGdwfmJXcUZmyhZmIEATFGf53ujcTKbq+bFHiQ/LYS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=DCEB9B6D83FB02DC45E9203538A5C8AF6F941FA9 Validity Not Before: Apr 19 06:46:06 2026 GMT Not After : Apr 26 06:46:06 2026 GMT Subject: CN=69e47a2f-1ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:f1:77:4e:96:ec:88:ea:83:bc:ea:1c:13: a4:b5:5d:e1:79:a3:f6:41:03:44:d1:3e:02:33:a4: f2:45:56:d5:a2:2f:b4:78:32:38:f1:1b:b3:87:86: 8b:ec:fc:0b:2f:e0:c4:ba:cd:d8:03:a0:83:f2:58: 9c:37:d4:27:9e:c8:74:46:43:ba:fd:4f:74:78:92: e8:0e:14:f7:ce:d8:5a:b3:cc:f6:0d:06:1a:a4:af: 93:02:17:b3:16:b4:b8:c3:b0:22:7c:ad:a2:fd:e2: 1a:da:fa:40:4b:0b:af:7d:3e:fb:6d:f7:17:7e:78: 69:06:7d:b6:71:4b:59:c1:b5:84:ec:90:4d:9c:d2: f5:3e:3e:90:c4:a8:83:4d:ec:6b:fa:24:a7:a4:45: 1e:22:22:46:4a:01:cc:6e:2a:97:17:a3:53:85:45: ed:3b:74:cd:1f:47:07:79:4d:72:9a:e5:0d:ae:1f: 94:f7:c9:ef:9e:7b:9f:8f:76:f7:db:d5:e1:2e:0e: 87:cc:86:b0:93:66:ce:6e:10:13:3d:a7:d0:d6:8f: 36:39:4c:16:c0:d7:a7:3c:7d:68:d2:5a:6d:09:51: a2:a1:2e:fb:0b:f2:23:50:52:65:4f:de:af:4e:a9: 81:80:57:0c:09:c7:88:dc:d6:9e:41:74:20:81:9d: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3A:B1:11:D8:1F:E5:16:14:9E:58:4B:AE:03:8D:0D:E2:B0:35:87 X509v3 Authority Key Identifier: keyid:DC:EB:9B:6D:83:FB:02:DC:45:E9:20:35:38:A5:C8:AF:6F:94:1F:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OubbYP7AtxF6SA1OKXIr2-UH6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/12384ADE354711F08103BE24C4F9AE02/3OubbYP7AtxF6SA1OKXIr2-UH6k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:2c:f8:53:d9:ae:c5:0f:63:33:7f:cc:d3:37:25:d3:8f:c6: ef:ca:c2:ed:92:98:42:a7:a4:b4:1c:ea:39:2f:ae:13:9d:6b: f7:42:c7:c3:56:65:dd:73:3f:fa:67:0a:c9:44:d9:95:c4:d7: f5:71:be:13:76:6c:0b:5d:94:10:b3:7c:26:7f:e3:b2:91:fe: 1f:ff:8e:cd:0a:01:78:fd:fa:10:e8:60:af:8a:16:ce:70:e6: 0d:6a:ae:f7:79:ac:57:e1:60:75:42:8b:e2:3a:a5:9e:89:77: e4:9d:67:29:20:aa:05:df:69:0b:35:72:dd:61:34:fd:45:d2: 9c:e8:70:c2:40:b1:b5:05:9e:8a:d0:a4:1e:34:3d:f0:24:6e: 93:05:dc:72:3e:74:42:a5:90:5d:61:b0:87:8d:22:13:47:8d: 70:ad:d9:de:ba:4a:3e:ee:b7:fd:0e:8b:1b:1b:8f:39:23:26: 4f:02:2e:6d:b5:37:46:fb:9f:7c:54:be:37:5e:c2:43:f3:27: d4:07:49:0e:5f:d4:dc:d9:14:2e:b3:15:3e:3b:f4:c7:ab:36: de:b5:34:34:97:80:ea:73:89:66:cb:b7:c7:23:74:e4:3d:12: b1:d5:d6:66:70:15:c8:72:4a:96:5b:ba:76:cd:c2:e7:a7:7c: 43:d1:f7:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQyQ0ExMTAvBgNVBAUTKERDRUI5QjZEODNGQjAyREM0NUU5MjAzNTM4QTVDOEFG NkY5NDFGQTkwHhcNMjYwNDE5MDY0NjA2WhcNMjYwNDI2MDY0NjA2WjAYMRYwFAYD VQQDEw02OWU0N2EyZi0xZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhCvxd06W7Ijqg7zqHBOktV3heaP2QQNE0T4CM6TyRVbVoi+0eDI48Ruzh4aL 7PwLL+DEus3YA6CD8licN9Qnnsh0RkO6/U90eJLoDhT3zthas8z2DQYapK+TAhez FrS4w7AifK2i/eIa2vpASwuvfT77bfcXfnhpBn22cUtZwbWE7JBNnNL1Pj6QxKiD Texr+iSnpEUeIiJGSgHMbiqXF6NThUXtO3TNH0cHeU1ymuUNrh+U98nvnnufj3b3 29XhLg6HzIawk2bObhATPafQ1o82OUwWwNenPH1o0lptCVGioS77C/IjUFJlT96v TqmBgFcMCceI3NaeQXQggZ1b/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL46sRHY H+UWFJ5YS64DjQ3isDWHMB8GA1UdIwQYMBaAFNzrm22D+wLcRekgNTilyK9vlB+p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDJDQS8xMjM4NEFERTM1 NDcxMUYwODEwM0JFMjRDNEY5QUUwMi8zT3ViYllQN0F0eEY2U0ExT0tYSXIyLVVI NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNPdWJiWVA3QXR4RjZTQTFPS1hJcjItVUg2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDJDQS8xMjM4NEFERTM1NDcxMUYwODEwM0JFMjRDNEY5QUUwMi8zT3ViYllQN0F0 eEY2U0ExT0tYSXIyLVVINmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQyz4U9muxQ9jM3/M0zcl04/G78rC7ZKYQqektBzqOS+uE51r90LHw1Zl3XM/ +mcKyUTZlcTX9XG+E3ZsC12UELN8Jn/jspH+H/+OzQoBeP36EOhgr4oWznDmDWqu 93msV+FgdUKL4jqlnol35J1nKSCqBd9pCzVy3WE0/UXSnOhwwkCxtQWeitCkHjQ9 8CRukwXccj50QqWQXWGwh40iE0eNcK3Z3rpKPu63/Q6LGxuPOSMmTwIubbU3Rvuf fFS+N17CQ/Mn1AdJDl/U3NkULrMVPjv0x6s23rU0NJeA6nOJZsu3xyN05D0SsdXW ZnAVyHJKllu6ds3C56d8Q9H3NQ== -----END CERTIFICATE-----Generated at Sun Apr 19 11:18:05 2026 by rpki-client