$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft File: 3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json) Hash identifier: Uscr3z9Ok0itmpZ+EeHxJRYsrlJ4Oqh327wjjic+wlY= Subject key identifier: 33:E9:DF:3B:CB:7B:29:E0:B5:8D:98:34:7D:A3:BF:02:EB:47:55:6E Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft Manifest number: 0420 Signing time: Wed 25 Mar 2026 00:02:21 +0000 Manifest this update: Wed 25 Mar 2026 00:02:21 +0000 Manifest next update: Wed 01 Apr 2026 00:02:21 +0000 Files and hashes: 1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: Z+7gLzIDa6fToNFyKlnSlDOq/vkoJcLbhaNY+Xp/bUo=) 2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: jDls2g86m7GV6UJnx5UHRHLT+1GVeljl8mbGfPYQmlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: Mar 25 00:02:21 2026 GMT Not After : Apr 1 00:02:21 2026 GMT Subject: CN=69c3260d-4647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:85:ab:15:05:b6:32:11:ec:d6:4a:58:f2: 0a:36:e8:24:58:0d:40:1c:79:e7:32:4d:ab:12:f1: 8c:ef:1c:a3:da:3b:de:ae:7d:3c:85:48:68:96:33: e1:28:3a:50:41:e2:41:e8:69:50:9e:cd:5a:ed:17: 07:f0:fd:9b:08:08:f4:c1:aa:c8:bb:ee:1c:a8:06: 9e:83:cc:78:df:60:73:ac:ed:3c:53:17:c7:d4:51: c5:3f:06:63:3f:7f:35:56:e8:b8:6d:37:0f:2b:f5: 38:a1:d1:b7:fd:ce:bf:3f:de:2c:9b:f2:2f:41:c7: 38:c6:f8:4d:11:b9:d1:81:0d:62:75:81:8f:eb:23: 00:4a:c1:9a:cd:a7:d5:37:04:d4:68:72:b8:7f:40: b9:0a:50:3e:62:bb:d1:86:67:fa:11:01:a1:f9:b8: b1:67:c5:3a:0f:12:04:36:2c:58:b9:72:e9:aa:5d: eb:91:5a:ba:af:f3:7a:10:ef:d4:20:72:39:a2:3a: d9:b3:2d:37:39:28:56:47:89:c9:68:e1:e8:48:22: 03:ff:69:98:7f:8f:91:5c:fa:90:61:ef:5f:2e:71: bd:83:25:47:5b:e4:81:aa:28:5c:29:7a:1f:c4:ec: f6:0e:35:28:3b:f1:f2:f5:3d:bc:88:c5:c9:19:a6: 48:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E9:DF:3B:CB:7B:29:E0:B5:8D:98:34:7D:A3:BF:02:EB:47:55:6E X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7c:30:1b:37:9d:c3:c6:1b:7b:23:88:ba:6e:3e:50:7d:66: bd:a0:0e:e9:b4:91:18:16:8e:e9:d9:27:fc:53:ef:99:9c:e9: 0d:18:7f:4e:20:b6:41:7a:37:47:6c:1d:cb:07:13:3d:70:74: e5:1d:44:6c:99:fc:e7:36:13:c6:a3:31:f1:87:0f:dd:57:0e: 22:87:63:35:02:d5:cb:13:be:9c:ff:44:ae:35:25:64:87:eb: ef:42:57:e8:f0:a9:dd:6b:10:ba:98:cc:09:59:e5:67:37:ca: a4:e2:3a:38:9a:a0:ad:60:93:64:ec:0f:14:3f:eb:b6:b2:cf: bf:d8:cf:c1:90:47:71:d1:27:4e:d5:87:01:ff:80:93:a8:06: 4f:b0:8e:7c:15:81:8a:b4:e2:5f:79:bf:78:cd:5e:ae:31:9d: 8a:d5:32:5d:20:6b:f4:6e:3a:68:fd:9f:50:68:45:21:fc:4a: 1e:8f:21:68:3f:c7:22:ba:33:c2:63:5d:22:7b:3b:b6:92:dc: 20:cb:55:9b:b2:af:f5:f2:32:98:e2:df:e2:d3:78:67:59:40: 6e:9a:a3:e9:a9:29:8a:ca:11:cf:40:20:1f:ab:c1:bf:cb:26: 89:d2:b4:25:1e:47:a4:af:9a:f2:4f:a6:03:08:f9:7d:62:48: 3c:08:5c:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjYwMzI1MDAwMjIxWhcNMjYwNDAxMDAwMjIxWjAYMRYwFAYD VQQDEw02OWMzMjYwZC00NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPGFqxUFtjIR7NZKWPIKNugkWA1AHHnnMk2rEvGM7xyj2jvern08hUholjPh KDpQQeJB6GlQns1a7RcH8P2bCAj0warIu+4cqAaeg8x432BzrO08UxfH1FHFPwZj P381Vui4bTcPK/U4odG3/c6/P94sm/IvQcc4xvhNEbnRgQ1idYGP6yMASsGazafV NwTUaHK4f0C5ClA+YrvRhmf6EQGh+bixZ8U6DxIENixYuXLpql3rkVq6r/N6EO/U IHI5ojrZsy03OShWR4nJaOHoSCID/2mYf4+RXPqQYe9fLnG9gyVHW+SBqihcKXof xOz2DjUoO/Hy9T28iMXJGaZIawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPp3zvL eyngtY2YNH2jvwLrR1VuMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU5MS8yRTkyMTYzNkE0MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtK bnRBcmNYZ1lRMlZCYXpIaHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA3wwGzedw8YbeyOIum4+UH1mvaAO6bSRGBaO6dkn/FPvmZzpDRh/TiC2QXo3 R2wdywcTPXB05R1EbJn85zYTxqMx8YcP3VcOIodjNQLVyxO+nP9ErjUlZIfr70JX 6PCp3WsQupjMCVnlZzfKpOI6OJqgrWCTZOwPFD/rtrLPv9jPwZBHcdEnTtWHAf+A k6gGT7COfBWBirTiX3m/eM1erjGditUyXSBr9G46aP2fUGhFIfxKHo8haD/HIroz wmNdIns7tpLcIMtVm7Kv9fIymOLf4tN4Z1lAbpqj6akpisoRz0AgH6vBv8smidK0 JR5HpK+a8k+mAwj5fWJIPAhc3g== -----END CERTIFICATE-----Generated at Thu Mar 26 11:54:41 2026 by rpki-client