$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: GIw2fBq/DKaxZbnl3YB82rXCua7wc553ciE18ZiS7fI= Subject key identifier: 88:A4:9F:03:E0:6E:D7:FA:87:2F:43:AA:32:62:1D:BD:77:16:AB:A9 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 03A9 Signing time: Sun 19 Apr 2026 00:38:09 +0000 Manifest this update: Sun 19 Apr 2026 00:38:08 +0000 Manifest next update: Sun 26 Apr 2026 00:38:08 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: bYT4YrxkXjReYMDkVyNbGwbh9QaLpeA7p3yHVwmqyjs=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: RJPc40XFK5jtMh57bQpC2ukr/5ePr0qsfi6VvsDutiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 00:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Apr 19 00:38:08 2026 GMT Not After : Apr 26 00:38:08 2026 GMT Subject: CN=69e423f1-5b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2a:24:f9:12:f6:ce:21:f7:cd:b9:90:58:bb: 5f:e5:40:de:aa:82:92:8a:90:47:95:5e:73:f9:2b: 4b:49:98:08:9b:2b:3a:a6:a0:03:ec:3a:4e:13:37: a0:f6:8f:a5:2d:7f:3a:15:43:e2:65:88:6a:94:55: 7a:60:e7:f7:2b:06:fe:03:5d:c7:cc:05:6f:ec:92: 6e:f2:e7:5a:81:42:da:16:29:a9:2e:13:e4:bc:74: 11:6b:d9:d6:4b:87:ad:27:d2:de:28:7b:a4:ad:f4: 08:d1:ae:15:2f:83:e2:79:7f:7b:89:6c:1f:8d:b4: e1:bd:20:55:1c:1a:be:b3:a7:0c:35:f6:df:61:ea: 2d:0f:c4:40:1f:3d:3c:af:ed:13:a5:f2:04:bb:57: d3:90:4e:57:0b:b0:34:a9:84:88:90:72:49:7a:91: 9d:b5:75:eb:74:96:63:48:15:97:11:78:54:fc:9f: 03:c7:08:91:d0:be:28:75:2b:78:70:13:9d:1f:7b: 32:a3:7e:d4:6c:b9:a3:ca:7e:b8:b9:03:54:fb:9b: 69:5c:da:15:84:72:67:96:47:f7:9f:3f:ed:b4:fb: 7b:5e:fa:1b:8e:c0:c6:a6:1b:5b:f5:81:13:6c:fd: 9d:e3:f2:4a:d5:88:25:fc:43:49:b6:d1:3c:f3:1a: ee:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A4:9F:03:E0:6E:D7:FA:87:2F:43:AA:32:62:1D:BD:77:16:AB:A9 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cb:7e:af:7b:aa:7f:b9:ef:8d:16:ef:e1:d0:f3:50:be:36: 93:7d:5e:6e:8c:ca:a7:e2:94:20:b3:19:c8:b9:d8:81:b8:5d: e0:dd:7f:3f:25:11:1c:d4:21:dd:f7:5b:cd:74:35:68:f3:d0: a8:a5:8d:b2:cb:d0:34:1a:79:51:09:80:b2:ce:28:fc:dd:32: c3:fa:fd:f2:5c:87:c1:ad:32:e9:2f:09:83:d1:2e:b7:13:b4: 67:7a:77:d3:73:62:8a:99:00:b8:d9:17:07:24:b8:0b:3b:77: c7:0a:ea:5f:fc:a2:1c:a5:71:26:67:7b:9b:38:69:47:61:8c: 70:db:8f:71:10:9b:f6:9e:43:bd:c6:c2:ff:71:2c:0f:dd:4e: cf:49:22:9a:78:7c:ba:19:43:88:2a:d8:37:c4:c1:47:ec:e9: 85:09:ad:36:ad:ef:76:83:6a:3a:92:bc:71:33:97:b2:c2:54: 56:7d:85:6f:a9:a7:e9:44:34:e5:ed:6f:04:15:27:08:e3:fd: c2:bf:5b:16:f8:b8:b6:33:fb:e1:8c:66:bd:40:de:c5:48:81: 06:e2:27:0a:bc:e0:6c:80:0b:b9:82:77:18:36:6d:e5:9e:76: fd:f9:a0:c7:d9:fe:d2:11:4a:66:e2:7e:e1:5a:74:40:7c:ba: 8e:26:b8:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwNDE5MDAzODA4WhcNMjYwNDI2MDAzODA4WjAYMRYwFAYD VQQDEw02OWU0MjNmMS01YjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiyok+RL2ziH3zbmQWLtf5UDeqoKSipBHlV5z+StLSZgImys6pqAD7DpOEzeg 9o+lLX86FUPiZYhqlFV6YOf3Kwb+A13HzAVv7JJu8udagULaFimpLhPkvHQRa9nW S4etJ9LeKHukrfQI0a4VL4PieX97iWwfjbThvSBVHBq+s6cMNfbfYeotD8RAHz08 r+0TpfIEu1fTkE5XC7A0qYSIkHJJepGdtXXrdJZjSBWXEXhU/J8DxwiR0L4odSt4 cBOdH3syo37UbLmjyn64uQNU+5tpXNoVhHJnlkf3nz/ttPt7XvobjsDGphtb9YET bP2d4/JK1Ygl/ENJttE88xru7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiknwPg btf6hy9DqjJiHb13FqupMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAect+r3uqf7nvjRbv4dDzUL42k31ebozKp+KUILMZyLnYgbhd4N1/PyURHNQh 3fdbzXQ1aPPQqKWNssvQNBp5UQmAss4o/N0yw/r98lyHwa0y6S8Jg9EutxO0Z3p3 03NiipkAuNkXByS4Czt3xwrqX/yiHKVxJmd7mzhpR2GMcNuPcRCb9p5DvcbC/3Es D91Oz0kimnh8uhlDiCrYN8TBR+zphQmtNq3vdoNqOpK8cTOXssJUVn2Fb6mn6UQ0 5e1vBBUnCOP9wr9bFvi4tjP74YxmvUDexUiBBuInCrzgbIALuYJ3GDZt5Z52/fmg x9n+0hFKZuJ+4Vp0QHy6jia4Hw== -----END CERTIFICATE-----Generated at Sun Apr 19 10:16:13 2026 by rpki-client