$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: Qxwb6nespDBon7g0sEPFGNv9RW1zAqrUCzA3ODx3UJs= Subject key identifier: 25:53:30:16:4D:20:A6:58:0D:84:59:F3:0C:81:1E:0E:EA:5B:F6:44 Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 0413 Signing time: Wed 13 May 2026 00:31:38 +0000 Manifest this update: Wed 13 May 2026 00:31:37 +0000 Manifest next update: Wed 20 May 2026 00:31:37 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: mrxhdxgEGqexawzza1rgnSyusA06MZR2VgcJpYr8vH8=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: May 13 00:31:37 2026 GMT Not After : May 20 00:31:37 2026 GMT Subject: CN=6a03c669-3a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:db:85:b4:d9:bc:12:c8:82:f4:fa:48:6c: 4b:93:5f:d4:d3:93:67:7c:e9:d5:22:7b:7b:4e:d2: 64:cb:f9:54:b5:7d:ab:17:d1:73:91:25:a7:9a:f9: 31:5c:78:60:d9:c2:1f:3d:40:4c:69:24:e3:e4:b2: 10:6e:d0:28:b4:1f:73:3c:23:a3:76:f2:f7:fc:db: 3e:88:58:c7:c1:94:f4:00:95:6b:77:f7:ba:bb:38: dc:a8:aa:9a:a3:3d:20:fc:d4:53:91:8f:f8:31:df: 5f:2f:ac:51:b7:b6:9e:17:84:3c:7f:43:d1:81:7c: f7:21:6a:09:a7:65:18:43:af:7c:10:da:d9:da:4c: a7:02:ef:47:29:ea:f7:6e:35:78:56:e3:c3:f5:08: 11:40:78:ef:5e:01:aa:c9:7b:f5:5a:fa:ca:66:91: c7:7f:95:3d:40:7c:0f:4d:61:5f:0c:5a:34:ef:48: ab:13:ba:60:77:6b:ec:dd:64:a2:ea:7f:f6:d8:3c: e1:d5:ae:a1:ad:d3:8e:d6:54:7d:2f:ff:f3:90:ae: 01:73:80:8e:29:8f:82:33:9a:b1:03:67:3e:33:4d: 57:71:b2:cd:66:59:fb:b9:d0:df:7e:bc:b0:e3:e4: fb:a9:4b:72:91:e4:ca:88:a1:bc:8c:0f:9e:34:70: 2f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:53:30:16:4D:20:A6:58:0D:84:59:F3:0C:81:1E:0E:EA:5B:F6:44 X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:49:ce:40:c2:3d:20:cd:50:e9:3f:2c:e8:e4:75:34:38:e3: 48:8d:a7:d5:c9:76:ff:18:0f:b2:ed:68:da:20:5e:d5:6f:5a: 7d:55:66:6b:18:16:8d:a1:7c:86:90:8f:9f:0e:73:a3:86:e6: 82:66:b2:c9:e8:f7:2c:fd:af:54:6e:c9:53:8b:5b:0d:ed:b8: 73:ed:d3:6c:5d:88:13:80:22:35:08:6e:80:4f:90:b3:5a:18: 8e:f0:e3:b1:60:9f:ba:67:e1:95:c5:1e:9e:90:57:7c:58:f0: b3:28:54:d0:a9:ca:ca:8a:53:ef:64:13:f5:d8:e7:74:6c:02: 1d:29:b9:4d:b3:13:4a:51:aa:7e:93:2b:b8:7e:c0:c2:f7:a5: cd:31:3f:7f:27:f6:ba:69:13:39:4d:7d:24:31:7f:ba:77:79: 42:15:b2:6e:3f:ad:d1:0c:19:5e:99:d0:8e:7a:76:1d:99:88: 2b:25:91:b9:0c:e9:01:b5:78:31:15:34:13:34:1c:64:90:9f: 8a:ee:c2:09:70:3f:b4:ca:92:6c:5b:31:e6:d3:f6:78:38:c5: c6:78:58:be:4a:12:e0:f8:68:06:6a:70:c8:8d:e9:24:e7:2c: b6:e7:73:ec:87:a0:89:4f:a8:44:5f:fc:46:19:c3:76:ef:21: 00:d8:f2:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjYwNTEzMDAzMTM3WhcNMjYwNTIwMDAzMTM3WjAYMRYwFAYD VQQDEw02YTAzYzY2OS0zYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyvbhbTZvBLIgvT6SGxLk1/U05NnfOnVInt7TtJky/lUtX2rF9FzkSWnmvkx XHhg2cIfPUBMaSTj5LIQbtAotB9zPCOjdvL3/Ns+iFjHwZT0AJVrd/e6uzjcqKqa oz0g/NRTkY/4Md9fL6xRt7aeF4Q8f0PRgXz3IWoJp2UYQ698ENrZ2kynAu9HKer3 bjV4VuPD9QgRQHjvXgGqyXv1WvrKZpHHf5U9QHwPTWFfDFo070irE7pgd2vs3WSi 6n/22Dzh1a6hrdOO1lR9L//zkK4Bc4COKY+CM5qxA2c+M01XcbLNZln7udDffryw 4+T7qUtykeTKiKG8jA+eNHAvJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVTMBZN IKZYDYRZ8wyBHg7qW/ZEMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnEnOQMI9IM1Q6T8s6OR1NDjjSI2n1cl2/xgPsu1o2iBe1W9afVVmaxgWjaF8 hpCPnw5zo4bmgmayyej3LP2vVG7JU4tbDe24c+3TbF2IE4AiNQhugE+Qs1oYjvDj sWCfumfhlcUenpBXfFjwsyhU0KnKyopT72QT9djndGwCHSm5TbMTSlGqfpMruH7A wvelzTE/fyf2umkTOU19JDF/und5QhWybj+t0QwZXpnQjnp2HZmIKyWRuQzpAbV4 MRU0EzQcZJCfiu7CCXA/tMqSbFsx5tP2eDjFxnhYvkoS4PhoBmpwyI3pJOcstudz 7IegiU+oRF/8RhnDdu8hANjyzg== -----END CERTIFICATE-----Generated at Wed May 13 14:49:17 2026 by rpki-client