$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft File: -3sFh4NlHpP6MN2W1iZebi81JVQ.mft (raw, json) Hash identifier: ZajoYbdCkjwhfL/LYmnkP+zeipwmD3SaOzqY5C0ZI8U= Subject key identifier: 7F:F2:17:17:D9:C6:9A:FF:CC:9B:4A:F6:87:27:1F:2A:7D:93:60:CA Authority key identifier: FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 Certificate issuer: /CN=A916C473/serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft Manifest number: 85 Signing time: Wed 25 Mar 2026 06:50:03 +0000 Manifest this update: Wed 25 Mar 2026 06:50:03 +0000 Manifest next update: Wed 01 Apr 2026 06:50:03 +0000 Files and hashes: 1: -3sFh4NlHpP6MN2W1iZebi81JVQ.crl (hash: vDrmywodIM0BvxYrqqSrsXxBBsZgLOd4ipaCfSpY7b0=) 2: 2BB9711E5DE111F09B775D76C4F9AE02.roa (hash: U9tyCvMDlceVXMLQfDjCprercZZxtbmQBQkbmthwKe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C473, serialNumber=FB7B058783651E93FA30DD96D6265E6E2F352554 Validity Not Before: Mar 25 06:50:03 2026 GMT Not After : Apr 1 06:50:03 2026 GMT Subject: CN=69c3859b-cbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:56:51:dc:2c:6c:d1:57:07:ac:8a:5d:cc: 1f:f4:bd:eb:1d:d3:2e:1b:54:c4:e7:60:52:49:79: de:5f:98:84:da:ed:2b:5b:2a:be:85:d1:03:c4:db: 65:3a:02:a0:b6:3e:a0:e8:3b:39:b1:eb:c6:2b:5c: e2:55:64:00:dd:61:3f:84:2f:73:f4:db:bf:d3:bc: e7:9d:0c:6d:b9:42:26:38:bb:46:1e:4d:98:f1:47: f3:8b:13:b7:04:f0:f6:2a:22:d6:81:73:09:0b:71: a6:d0:44:ad:16:99:22:45:2d:24:e0:48:52:04:db: 65:30:d1:84:6c:00:1b:eb:30:9b:69:9f:9d:9f:b2: fd:6a:b8:f9:b8:a5:6f:18:1a:e6:69:73:26:4d:eb: 8e:e4:ed:9a:13:9b:f0:fd:6d:c7:d4:5b:d4:1d:db: b1:05:6d:82:92:e5:17:3f:54:ad:9c:dc:9c:5a:68: ed:1a:c2:ac:9b:1a:2c:c2:75:b1:a5:84:73:3d:21: 73:06:fe:6f:8a:cb:f4:6c:df:a0:4b:49:5f:7e:c2: f1:86:96:4e:c7:c9:9d:a9:1c:78:d1:3c:6d:ad:10: d4:06:5c:ff:20:fd:17:81:81:7d:70:00:5d:a8:10: 6d:50:10:f4:4c:8e:53:90:27:11:df:79:e7:08:d3: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:17:17:D9:C6:9A:FF:CC:9B:4A:F6:87:27:1F:2A:7D:93:60:CA X509v3 Authority Key Identifier: keyid:FB:7B:05:87:83:65:1E:93:FA:30:DD:96:D6:26:5E:6E:2F:35:25:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-3sFh4NlHpP6MN2W1iZebi81JVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/FEAE12A25DDF11F0A5BFD66FC4F9AE02/-3sFh4NlHpP6MN2W1iZebi81JVQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:7e:34:cd:bc:e1:89:9b:9f:75:14:a9:c0:b1:82:b6:0b:71: 92:9b:8c:fc:7e:2f:2e:8a:e8:74:d4:f8:6c:c5:06:52:c4:83: e6:28:6a:2e:3b:93:74:4a:ed:3a:6c:12:5b:35:4f:2a:4e:8a: a6:78:d2:b2:30:09:7c:f9:e1:e8:a6:28:83:8d:40:79:e1:3c: fd:3c:1a:c9:da:bd:9e:65:01:36:bc:8b:7c:8e:48:d8:9d:07: d4:52:a5:fa:81:0c:37:11:9d:38:0b:ca:83:96:78:d9:d8:1e: 5f:91:e7:72:e9:bb:b3:1f:aa:86:1f:f8:5e:84:b0:e7:00:9d: 02:42:c7:c7:87:e2:ad:1d:74:d0:c5:1d:57:18:d1:4e:d0:8e: 6b:c2:95:11:27:a6:70:90:2b:e6:9b:3a:da:c8:dd:34:93:72: 3e:7d:ee:1a:c6:55:8f:c0:91:73:a6:86:46:35:d4:79:64:f6: 77:71:e9:f9:81:10:b1:b0:2d:18:92:8a:5d:b5:c0:2d:ae:57: d6:0c:21:d5:d6:a5:a4:61:61:48:ea:51:29:a7:5a:30:4d:46: a6:d9:aa:ad:b2:e2:21:91:f0:60:93:d8:8e:c9:3b:f4:0e:15: 08:11:f9:3e:70:c5:57:75:f0:a7:88:06:59:64:17:08:85:02: 89:90:55:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0NzMxMTAvBgNVBAUTKEZCN0IwNTg3ODM2NTFFOTNGQTMwREQ5NkQ2MjY1RTZF MkYzNTI1NTQwHhcNMjYwMzI1MDY1MDAzWhcNMjYwNDAxMDY1MDAzWjAYMRYwFAYD VQQDEw02OWMzODU5Yi1jYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAngtWUdwsbNFXB6yKXcwf9L3rHdMuG1TE52BSSXneX5iE2u0rWyq+hdEDxNtl OgKgtj6g6Ds5sevGK1ziVWQA3WE/hC9z9Nu/07znnQxtuUImOLtGHk2Y8UfzixO3 BPD2KiLWgXMJC3Gm0EStFpkiRS0k4EhSBNtlMNGEbAAb6zCbaZ+dn7L9arj5uKVv GBrmaXMmTeuO5O2aE5vw/W3H1FvUHduxBW2CkuUXP1StnNycWmjtGsKsmxoswnWx pYRzPSFzBv5visv0bN+gS0lffsLxhpZOx8mdqRx40TxtrRDUBlz/IP0XgYF9cABd qBBtUBD0TI5TkCcR33nnCNPCQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/yFxfZ xpr/zJtK9ocnHyp9k2DKMB8GA1UdIwQYMBaAFPt7BYeDZR6T+jDdltYmXm4vNSVU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzQ3My9GRUFFMTJBMjVE REYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhwUDZNTjJXMWlaZWJpODFK VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0zc0ZoNE5sSHBQNk1OMlcxaVplYmk4MUpWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzQ3My9GRUFFMTJBMjVEREYxMUYwQTVCRkQ2NkZDNEY5QUUwMi8tM3NGaDRObEhw UDZNTjJXMWlaZWJpODFKVlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlH40zbzhiZufdRSpwLGCtgtxkpuM/H4vLorodNT4bMUGUsSD5ihqLjuTdErt OmwSWzVPKk6KpnjSsjAJfPnh6KYog41AeeE8/Twaydq9nmUBNryLfI5I2J0H1FKl +oEMNxGdOAvKg5Z42dgeX5Hncum7sx+qhh/4XoSw5wCdAkLHx4firR100MUdVxjR TtCOa8KVESemcJAr5ps62sjdNJNyPn3uGsZVj8CRc6aGRjXUeWT2d3Hp+YEQsbAt GJKKXbXALa5X1gwh1dalpGFhSOpRKadaME1GptmqrbLiIZHwYJPYjsk79A4VCBH5 PnDFV3Xwp4gGWWQXCIUCiZBVdg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:41 2026 by rpki-client