$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: V3KTo2NCrQvTn3PxO5DWOyxXEjKu+px8imuxS9ovsw0= Subject key identifier: 34:1B:E8:A8:F1:C2:6F:DF:70:29:94:10:8A:EC:F8:C0:31:D4:8F:B7 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 0171 Signing time: Fri 27 Mar 2026 04:14:19 +0000 Manifest this update: Fri 27 Mar 2026 04:14:18 +0000 Manifest next update: Fri 03 Apr 2026 04:14:18 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: DLwPv+72HD30zvBrqazm5d7WU5TNBsl3EEz86bArtsM=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Mar 27 04:14:18 2026 GMT Not After : Apr 3 04:14:18 2026 GMT Subject: CN=69c6041b-84fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:4e:a4:5c:e0:db:ce:10:25:ee:32:bf:ae: 72:fa:80:85:75:7c:e8:0d:98:8f:fb:ad:c7:c1:23: 54:4f:19:57:20:a7:62:9e:b7:2e:2d:fd:5d:62:2d: 4c:ee:df:99:f4:8f:ec:19:38:d6:a3:25:eb:02:c0: d4:2f:5e:12:bd:0f:96:4e:94:1e:2e:1c:63:c4:e6: a9:88:60:fc:a4:10:e2:64:e7:b5:b3:b6:8a:ce:fd: dc:9a:36:8b:e9:5e:d0:87:e6:ca:d1:94:3d:94:26: 8d:0c:68:cd:90:00:ff:16:ce:10:f0:43:62:8c:7c: f4:58:62:30:c2:46:78:4d:58:a6:8e:85:ea:03:af: e3:29:31:ad:60:56:f5:ea:7b:51:ac:7b:86:a5:d0: 5d:28:5b:1b:32:68:d2:92:88:aa:9a:e7:87:ea:7a: 4b:44:94:fc:cc:f2:ff:4d:7c:a8:92:bf:d0:e2:93: ba:a8:ad:72:92:8b:eb:85:0a:2b:ef:0b:45:cb:db: c2:20:3d:63:75:f6:c3:60:74:c5:5f:09:05:56:81: fa:1a:91:81:8b:02:ee:3a:41:4e:88:5a:04:53:de: 9a:7a:73:18:1a:ac:ab:18:7c:f8:8a:32:d9:c0:91: 20:ba:59:84:ce:3f:30:f2:2d:1a:f8:65:3e:e2:19: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1B:E8:A8:F1:C2:6F:DF:70:29:94:10:8A:EC:F8:C0:31:D4:8F:B7 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:65:3e:1f:ec:3b:0d:a8:d7:07:c9:92:44:bf:86:b3:9b:20: 45:80:ce:07:a8:ff:cd:99:d0:7f:72:6d:1d:2e:a1:9b:85:9b: be:d4:81:36:d7:95:ec:a0:ec:64:ce:76:c8:13:ad:e5:de:32: 37:2e:df:8d:0b:9e:e9:b6:64:ee:6e:bf:17:e6:3b:86:71:46: 7a:2c:f9:91:0f:a4:0d:13:70:28:da:53:9d:d8:4a:18:4c:3f: a8:0d:22:9c:4b:35:d4:aa:bb:d1:ad:6e:c9:fb:e0:2f:6d:51: 43:20:bb:ac:0f:4e:6e:c4:54:0f:32:45:59:a3:45:61:88:dd: c9:e3:87:af:f2:47:ce:54:68:77:e0:a1:c6:c4:56:4b:f1:0a: 7a:94:bd:d3:06:ab:c9:e0:25:37:ea:11:ef:cd:15:66:e6:52: 94:5a:fc:98:3d:d7:f7:90:99:14:cc:cd:9f:49:cc:5e:a8:bd: 7f:cb:1a:d9:01:66:f8:1f:6d:c5:8b:36:86:76:0c:5a:34:87: 94:a8:d4:e3:a0:02:58:17:7d:7a:d6:1b:3d:c2:b9:21:5a:86: db:de:71:c8:e5:30:76:63:8e:48:e2:09:e2:0d:4c:03:5a:a5: bb:45:9e:e4:5e:52:7a:69:fd:94:14:33:9c:e9:bf:f8:f9:ff: ce:40:ed:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjYwMzI3MDQxNDE4WhcNMjYwNDAzMDQxNDE4WjAYMRYwFAYD VQQDEw02OWM2MDQxYi04NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5JOpFzg284QJe4yv65y+oCFdXzoDZiP+63HwSNUTxlXIKdinrcuLf1dYi1M 7t+Z9I/sGTjWoyXrAsDUL14SvQ+WTpQeLhxjxOapiGD8pBDiZOe1s7aKzv3cmjaL 6V7Qh+bK0ZQ9lCaNDGjNkAD/Fs4Q8ENijHz0WGIwwkZ4TVimjoXqA6/jKTGtYFb1 6ntRrHuGpdBdKFsbMmjSkoiqmueH6npLRJT8zPL/TXyokr/Q4pO6qK1ykovrhQor 7wtFy9vCID1jdfbDYHTFXwkFVoH6GpGBiwLuOkFOiFoEU96aenMYGqyrGHz4ijLZ wJEgulmEzj8w8i0a+GU+4hlmkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQb6Kjx wm/fcCmUEIrs+MAx1I+3MB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu2U+H+w7DajXB8mSRL+Gs5sgRYDOB6j/zZnQf3JtHS6hm4WbvtSBNteV7KDs ZM52yBOt5d4yNy7fjQue6bZk7m6/F+Y7hnFGeiz5kQ+kDRNwKNpTndhKGEw/qA0i nEs11Kq70a1uyfvgL21RQyC7rA9ObsRUDzJFWaNFYYjdyeOHr/JHzlRod+ChxsRW S/EKepS90waryeAlN+oR780VZuZSlFr8mD3X95CZFMzNn0nMXqi9f8sa2QFm+B9t xYs2hnYMWjSHlKjU46ACWBd9etYbPcK5IVqG295xyOUwdmOOSOIJ4g1MA1qlu0We 5F5Semn9lBQznOm/+Pn/zkDtcg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:15 2026 by rpki-client