$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: cEV8dFP8w58HQNv0npdxjdyhIiFln7uvsgzOlpJ9YbA= Subject key identifier: EF:7C:6F:9A:0C:B5:D5:00:6B:5A:A1:6A:7D:71:39:4A:52:74:C4:8C Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D3A Signing time: Thu 26 Mar 2026 15:31:49 +0000 Manifest this update: Thu 26 Mar 2026 15:31:49 +0000 Manifest next update: Thu 02 Apr 2026 15:31:49 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: HRW17vps3TGLp7MzxYpTSvslp0wHRYijbW8V5mAHjgs=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: 9I/UF8wVS9sTnXr5fHjV7Fm4AlFC8LAa0hnWMtmsfp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11606 (0x2d56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Mar 26 15:31:49 2026 GMT Not After : Apr 2 15:31:49 2026 GMT Subject: CN=69c55165-ad23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:3f:5d:9b:d8:f2:91:4e:61:50:64:f0:58: 4b:e9:b8:2f:1f:d9:4f:10:52:6e:c1:cb:d6:8b:39: 20:da:3f:56:92:10:c6:c4:dc:d0:e7:bb:f0:f5:19: 4a:c6:86:17:8a:a2:b0:5f:ae:18:c2:0b:44:aa:8f: 6b:44:ef:8f:3c:dc:b8:e5:ca:50:dd:e8:3a:98:1e: 38:65:43:79:01:9d:8a:76:45:cc:f9:4d:87:56:66: 8b:f8:73:a4:1e:b4:c2:f9:b5:41:42:fd:b1:ed:dc: 64:a0:5b:bc:74:4a:3e:86:5d:6e:27:9e:9a:78:c3: b6:4f:4e:dc:d2:7e:de:aa:ea:9a:2e:5e:ac:df:e2: c2:93:0d:dc:9f:8c:e0:4e:7e:8f:05:ae:c8:80:78: 13:9e:3f:e1:1e:80:6d:e8:c7:ff:7b:e5:4b:ca:1e: 02:8c:3f:b6:cd:15:ac:6c:fa:82:01:71:85:0f:bb: 6b:cc:47:bb:19:63:3b:14:37:6a:0a:da:1c:59:cb: e7:2c:84:02:2f:83:3e:7a:df:d8:be:2e:88:d1:e9: 1a:99:56:e4:d3:50:8d:92:6c:f7:a3:af:81:4d:d2: da:fe:aa:62:2a:b1:7a:ea:76:4b:92:1a:87:f2:7d: 70:a1:bb:dd:25:6e:c0:52:8c:77:72:91:49:e1:bc: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7C:6F:9A:0C:B5:D5:00:6B:5A:A1:6A:7D:71:39:4A:52:74:C4:8C X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2e:e3:53:ff:1a:b7:a2:7d:8b:c5:3c:88:79:b5:06:1f:84: 63:4b:0d:ec:cc:ff:a8:07:ea:44:ab:fe:8f:33:f3:52:b9:de: 67:af:06:c0:3b:f7:30:9c:e5:86:4e:3d:14:d7:9f:01:f1:5e: a7:d6:aa:5a:cb:88:fe:5a:57:e5:c6:b9:e6:54:e0:6f:2a:3a: ba:85:6b:c5:ec:0b:e7:10:90:a7:37:cb:58:3e:6b:09:fc:f3: f5:d1:b5:25:b9:f0:22:ac:68:c1:6b:04:57:17:34:09:e5:bc: 2c:58:b4:21:ce:d1:d5:d9:22:b4:52:9d:d6:99:1c:37:f9:2b: e6:3a:a7:a0:85:6a:96:ac:d4:60:9f:7e:c9:36:1f:10:2f:e7: dd:6e:03:2d:b4:46:ef:bd:75:d4:d3:b9:e4:47:cb:b3:a6:ac: c7:08:e9:c3:80:a4:2b:0d:0b:f3:0f:5a:d7:4f:4b:1e:42:23: 14:5a:c9:e1:ee:de:c3:25:03:0b:54:e6:0f:6e:27:2d:40:0e: 12:fb:31:d4:48:6d:b2:c3:05:c9:3b:94:7a:f3:1c:ac:eb:48: b2:04:b0:f4:5f:99:79:da:2f:13:24:23:d8:25:ec:1e:65:26: 28:b6:57:e2:c0:39:bb:67:84:c7:b8:e1:51:44:0a:31:b3:68: 57:fc:f1:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwMzI2MTUzMTQ5WhcNMjYwNDAyMTUzMTQ5WjAYMRYwFAYD VQQDEw02OWM1NTE2NS1hZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5w/XZvY8pFOYVBk8FhL6bgvH9lPEFJuwcvWizkg2j9WkhDGxNzQ57vw9RlK xoYXiqKwX64YwgtEqo9rRO+PPNy45cpQ3eg6mB44ZUN5AZ2KdkXM+U2HVmaL+HOk HrTC+bVBQv2x7dxkoFu8dEo+hl1uJ56aeMO2T07c0n7equqaLl6s3+LCkw3cn4zg Tn6PBa7IgHgTnj/hHoBt6Mf/e+VLyh4CjD+2zRWsbPqCAXGFD7trzEe7GWM7FDdq CtocWcvnLIQCL4M+et/Yvi6I0ekamVbk01CNkmz3o6+BTdLa/qpiKrF66nZLkhqH 8n1wobvdJW7AUox3cpFJ4bz2UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO98b5oM tdUAa1qhan1xOUpSdMSMMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiy7jU/8at6J9i8U8iHm1Bh+EY0sN7Mz/qAfqRKv+jzPzUrneZ68GwDv3MJzl hk49FNefAfFep9aqWsuI/lpX5ca55lTgbyo6uoVrxewL5xCQpzfLWD5rCfzz9dG1 JbnwIqxowWsEVxc0CeW8LFi0Ic7R1dkitFKd1pkcN/kr5jqnoIVqlqzUYJ9+yTYf EC/n3W4DLbRG77111NO55EfLs6asxwjpw4CkKw0L8w9a109LHkIjFFrJ4e7ewyUD C1TmD24nLUAOEvsx1EhtssMFyTuUevMcrOtIsgSw9F+ZedovEyQj2CXsHmUmKLZX 4sA5u2eEx7jhUUQKMbNoV/zxNg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:21:04 2026 by rpki-client