$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft File: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json) Hash identifier: bn7/UzCnzKnz9kRl++OMN0VJYXg02Bis8SWrXtjHXnY= Subject key identifier: A5:5F:31:19:1B:EE:C8:94:C0:E5:38:09:54:18:EA:8A:16:1C:A8:BC Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 Certificate issuer: /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Certificate serial: 0409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft Manifest number: 03FA Signing time: Wed 25 Mar 2026 00:08:32 +0000 Manifest this update: Wed 25 Mar 2026 00:08:31 +0000 Manifest next update: Wed 01 Apr 2026 00:08:31 +0000 Files and hashes: 1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: YSmjoZzUqQRqFsM70xeLkt9yNo0RKt4FvdBDKIO8S40=) 2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=) 3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823 Validity Not Before: Mar 25 00:08:31 2026 GMT Not After : Apr 1 00:08:31 2026 GMT Subject: CN=69c32780-f5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7e:ea:90:3e:d4:97:ee:23:86:5c:d6:a0:2e: 2d:b9:f1:d7:5a:44:a0:14:0e:36:e2:25:37:3c:79: f1:9c:89:a0:68:97:6c:c8:70:27:8e:91:38:03:55: f6:db:ee:35:12:28:02:8d:35:bc:f1:0d:dc:75:db: f2:50:46:09:c4:d3:0a:a3:c1:91:26:c0:6e:b6:69: b9:54:95:61:ba:44:e5:5c:67:36:66:0c:52:f4:19: 4b:fa:bc:6e:77:87:f9:f1:93:b1:ba:14:8b:b9:62: 2b:62:21:c9:35:52:f6:57:51:19:a0:88:c7:ec:25: 94:09:8b:4b:2d:2d:5b:64:d1:5c:6d:b2:ce:ab:b5: de:34:37:11:c1:8b:dc:c1:6e:91:e6:bb:98:ea:e1: 0e:c8:c7:42:cc:b5:ac:c8:a9:5b:27:89:90:7a:d2: f0:b9:41:49:0d:3e:11:2d:f0:2b:85:bc:9c:c8:67: 76:b0:95:35:c6:58:ba:5e:13:6c:12:99:60:44:1d: c0:3c:8c:65:4b:b3:eb:a4:11:8c:bc:14:59:d5:cf: 15:a6:1c:fb:21:7e:93:e3:30:a6:6a:44:4a:f1:ba: 7d:73:b7:bd:52:79:36:24:1a:5f:59:22:83:d1:a9: 2e:8d:e6:50:4d:9f:34:11:14:c4:2e:79:8c:53:e9: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5F:31:19:1B:EE:C8:94:C0:E5:38:09:54:18:EA:8A:16:1C:A8:BC X509v3 Authority Key Identifier: keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:3c:a8:99:d1:14:eb:85:b0:b4:df:f7:4e:68:96:72:3e:dc: 1c:cc:b6:50:98:2f:a3:e1:da:f1:9c:66:cd:63:c7:1b:e1:d4: 16:92:a4:13:63:ee:d4:80:07:83:58:af:30:f4:b7:4f:ef:a5: 87:94:3c:ec:46:7e:fe:f5:c0:e2:66:e1:84:ca:86:cd:22:51: 54:15:3a:fa:a7:08:a5:bb:90:0c:d7:3b:43:ef:43:51:57:1c: 49:61:41:33:cf:60:7e:23:f9:23:9d:b6:2e:9f:7a:34:ff:18: 4f:64:81:5d:47:92:3b:1a:bf:14:c9:33:35:2d:3b:d9:ad:6e: 14:55:ef:6b:19:9f:79:6a:16:42:38:ae:73:ec:30:39:04:5a: 6e:d3:a4:5d:ce:38:50:53:f8:e7:8d:af:26:e5:fc:92:f0:4b: b3:e5:17:cc:53:b9:2a:b9:29:57:e8:f1:f4:34:29:b0:45:76: 12:f6:6a:8c:13:85:28:10:92:7f:a6:11:14:9b:45:b8:d3:39: da:57:4e:8d:b2:e9:79:35:3d:86:b8:17:e9:0e:35:1c:3f:fe: ad:ab:54:5e:47:23:53:0e:14:39:3e:6e:0c:70:c5:c5:ea:80: b9:c5:5d:29:cf:34:b9:55:fd:38:53:dd:88:ad:c0:3c:2a:46: 6e:c0:77:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0 Q0FCMkI4MjMwHhcNMjYwMzI1MDAwODMxWhcNMjYwNDAxMDAwODMxWjAYMRYwFAYD VQQDEw02OWMzMjc4MC1mNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4X7qkD7Ul+4jhlzWoC4tufHXWkSgFA424iU3PHnxnImgaJdsyHAnjpE4A1X2 2+41EigCjTW88Q3cddvyUEYJxNMKo8GRJsButmm5VJVhukTlXGc2ZgxS9BlL+rxu d4f58ZOxuhSLuWIrYiHJNVL2V1EZoIjH7CWUCYtLLS1bZNFcbbLOq7XeNDcRwYvc wW6R5ruY6uEOyMdCzLWsyKlbJ4mQetLwuUFJDT4RLfArhbycyGd2sJU1xli6XhNs EplgRB3APIxlS7PrpBGMvBRZ1c8Vphz7IX6T4zCmakRK8bp9c7e9Unk2JBpfWSKD 0akujeZQTZ80ERTELnmMU+mPDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVfMRkb 7siUwOU4CVQY6ooWHKi8MB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0 MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGTyomdEU64WwtN/3TmiWcj7cHMy2UJgvo+Ha8ZxmzWPHG+HUFpKkE2Pu1IAH g1ivMPS3T++lh5Q87EZ+/vXA4mbhhMqGzSJRVBU6+qcIpbuQDNc7Q+9DUVccSWFB M89gfiP5I522Lp96NP8YT2SBXUeSOxq/FMkzNS072a1uFFXvaxmfeWoWQjiuc+ww OQRabtOkXc44UFP4542vJuX8kvBLs+UXzFO5KrkpV+jx9DQpsEV2EvZqjBOFKBCS f6YRFJtFuNM52ldOjbLpeTU9hrgX6Q41HD/+ratUXkcjUw4UOT5uDHDFxeqAucVd Kc80uVX9OFPdiK3APCpGbsB31A== -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:24 2026 by rpki-client