$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json) Hash identifier: HdGE0tj5z2bYuEY3v4ailug4OQA9AkgEf+irwWa7XBc= Subject key identifier: 75:CB:51:56:59:B1:C1:4F:78:AC:AC:EF:04:B7:9B:0F:25:E7:8D:23 Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft Manifest number: 0102 Signing time: Mon 11 May 2026 06:23:27 +0000 Manifest this update: Mon 11 May 2026 06:23:26 +0000 Manifest next update: Mon 18 May 2026 06:23:26 +0000 Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: pRMScL7Gvuf6ulCxbfxTQFMpj0STF1qUVtNTNwTYIu4=) 2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Validity Not Before: May 11 06:23:26 2026 GMT Not After : May 18 06:23:26 2026 GMT Subject: CN=6a0175de-654d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:b2:db:20:bf:d1:21:7f:28:66:c9:11:b8: 3e:81:5d:7b:91:81:af:70:64:e0:cf:fc:9c:8f:45: bb:a9:28:cf:55:7d:c6:dc:53:69:cd:58:7e:f9:7f: cd:fe:e7:f1:a4:2d:13:79:6f:65:48:e2:4d:31:af: d6:7e:39:f8:52:d0:f0:bb:7b:a8:25:ad:55:76:09: 14:56:e0:ac:5d:0b:37:91:73:a6:2d:ea:24:12:14: 3d:1b:c1:f4:f3:68:64:36:6e:3e:29:bd:80:de:db: 3b:ab:b7:7c:e2:7a:f6:eb:c5:9b:d3:f9:54:37:2c: 9f:97:e2:c3:da:2e:a1:79:b5:49:23:cb:4e:01:cc: c9:a9:5c:4c:bd:b5:94:8f:d9:a4:4d:9e:14:bd:c2: 18:c4:d1:2a:46:b6:53:f9:8a:94:ad:d4:72:4f:c8: 00:60:c3:2b:2a:94:73:01:6c:5a:f9:f0:df:64:a9: ce:f0:3d:c7:a4:7a:af:f2:12:b3:8c:4b:83:4c:83: ab:d6:37:dd:ab:9d:18:c8:5b:ec:71:df:be:e1:19: 71:e4:42:84:37:5f:79:1e:c8:37:8a:66:7b:69:e6: e5:a4:eb:21:a9:cd:c7:c8:4f:4a:73:47:ca:9c:8e: 55:61:86:8e:ec:b1:29:de:14:22:e6:a4:1d:fa:cf: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CB:51:56:59:B1:C1:4F:78:AC:AC:EF:04:B7:9B:0F:25:E7:8D:23 X509v3 Authority Key Identifier: keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:db:b0:c8:5a:7e:2d:72:66:56:e9:2a:3f:8c:3a:5d:53:3f: 70:83:d6:2f:4f:42:db:95:c0:8a:fd:87:99:51:de:92:ee:2e: fb:cc:79:d3:60:da:40:49:bd:78:7e:25:80:40:83:c2:fd:ca: 7d:e6:7f:47:6c:23:90:32:65:c6:0f:0e:b0:f0:6d:2a:b5:2a: 2f:11:dd:72:33:bb:3a:df:5a:77:c5:5a:ca:a0:37:6c:08:c0: ee:fc:6b:c7:c5:c6:dc:86:5e:bf:94:45:45:85:95:9d:54:af: 6f:26:14:09:fa:e5:b3:90:0f:1c:9b:96:c1:26:cd:ac:3c:bb: b6:65:21:fa:b1:12:ce:41:fd:2b:d8:41:1b:0d:3d:4a:61:d1: 5b:89:60:7b:1c:35:10:c1:9a:05:3b:ec:30:14:c3:81:2b:6e: 4a:fb:bb:67:59:8f:c7:e0:b2:d9:92:84:53:4d:75:e0:a1:37: fe:7c:0f:01:fc:6c:81:0b:3e:a6:6c:92:c8:73:04:10:e0:0e: 64:71:80:56:72:d4:dc:ad:ab:cb:9a:8a:53:c4:0e:54:fb:ff: 40:6b:8d:89:af:86:5c:84:c7:ec:e7:ae:c6:51:e5:56:61:19: 9c:a5:ac:d1:c1:1d:2c:6a:6a:9a:2f:2f:d1:c7:e7:1d:92:c7: 53:d2:2e:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDAzNzg4RUUyQkFFNEQ4MDVFQkNEQ0E2NjE4RTJFQzFB MThBNUM0RTIwHhcNMjYwNTExMDYyMzI2WhcNMjYwNTE4MDYyMzI2WjAYMRYwFAYD VQQDEw02YTAxNzVkZS02NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70qy2yC/0SF/KGbJEbg+gV17kYGvcGTgz/ycj0W7qSjPVX3G3FNpzVh++X/N /ufxpC0TeW9lSOJNMa/Wfjn4UtDwu3uoJa1VdgkUVuCsXQs3kXOmLeokEhQ9G8H0 82hkNm4+Kb2A3ts7q7d84nr268Wb0/lUNyyfl+LD2i6hebVJI8tOAczJqVxMvbWU j9mkTZ4UvcIYxNEqRrZT+YqUrdRyT8gAYMMrKpRzAWxa+fDfZKnO8D3HpHqv8hKz jEuDTIOr1jfdq50YyFvscd++4Rlx5EKEN195Hsg3imZ7aeblpOshqc3HyE9Kc0fK nI5VYYaO7LEp3hQi5qQd+s86PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXLUVZZ scFPeKys7wS3mw8l540jMB8GA1UdIwQYMBaAFAN4juK65NgF683KZhji7BoYpcTi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CRTdDQUMxMkQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJBWHJ6Y3BtR09Mc0doaWx4 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CRTdDQUMxMkQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJB WHJ6Y3BtR09Mc0doaWx4T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwduwyFp+LXJmVukqP4w6XVM/cIPWL09C25XAiv2HmVHeku4u+8x502DaQEm9 eH4lgECDwv3KfeZ/R2wjkDJlxg8OsPBtKrUqLxHdcjO7Ot9ad8VayqA3bAjA7vxr x8XG3IZev5RFRYWVnVSvbyYUCfrls5APHJuWwSbNrDy7tmUh+rESzkH9K9hBGw09 SmHRW4lgexw1EMGaBTvsMBTDgStuSvu7Z1mPx+Cy2ZKEU0114KE3/nwPAfxsgQs+ pmySyHMEEOAOZHGAVnLU3K2ry5qKU8QOVPv/QGuNia+GXITH7OeuxlHlVmEZnKWs 0cEdLGpqmi8v0cfnHZLHU9IuAA== -----END CERTIFICATE-----Generated at Wed May 13 08:11:08 2026 by rpki-client