$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: xfQjuIzpR2kmdZzeufWR8kmhlIYvG3hN1J2mhuJhFHs= Subject key identifier: 48:DA:F9:C6:B4:CF:C0:48:F7:F0:A1:04:E7:7B:EF:29:D0:EE:3E:8C Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1F4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1F2D Signing time: Thu 26 Mar 2026 16:00:36 +0000 Manifest this update: Thu 26 Mar 2026 16:00:35 +0000 Manifest next update: Thu 02 Apr 2026 16:00:35 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: 2OYxRobOhO0DJKUmqjzlm6DeSeDLKrS8eL3t1IRl7Mg=) 2: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: 7/gwqGUBAOb3hEJ8slgdeW3dddqMQy1lCsCPeg2AjSY=) 3: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: ZQGkVblUeaBQpEuqoVPq5XzQKgpGACzTE5sIWyJcuEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8010 (0x1f4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Mar 26 16:00:35 2026 GMT Not After : Apr 2 16:00:35 2026 GMT Subject: CN=69c55823-d0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:f3:13:0a:35:b8:34:b0:21:79:a7:51:55: 4f:94:91:04:27:1e:95:f2:a0:e9:ff:a5:de:16:91: 99:ea:9c:7f:79:b8:13:7d:60:c4:61:09:4e:15:23: 12:ff:96:f9:37:30:0b:ed:5a:13:fc:ea:2c:57:30: e7:41:63:6c:a0:31:b9:53:19:d2:7f:9d:99:2d:74: d2:d9:98:2f:d9:cc:23:58:2b:86:e0:9a:ba:d7:1e: db:ff:14:6d:c7:ea:17:5b:2e:88:a6:da:db:44:91: ec:7d:0c:08:1f:c7:a0:47:e5:ab:1c:be:27:8b:bb: 2f:48:92:98:64:8e:1c:43:35:74:66:48:41:46:24: 2d:18:7a:d0:d6:cc:7c:36:c9:5d:be:0f:be:0c:0e: 68:af:05:63:16:ee:d1:9e:3c:a2:61:c5:7d:06:de: 3f:78:58:28:cc:f7:1f:e8:bd:a6:d1:fc:2b:50:2c: 61:a8:4b:aa:ff:13:b1:92:12:10:09:40:e4:61:a6: 65:7f:46:e8:bb:1b:27:68:e1:2e:49:bc:dc:f1:9e: a1:ea:30:9f:69:86:39:33:d5:f4:52:4d:95:cf:9a: a3:f4:b8:a0:bc:10:80:c0:a9:b9:d5:c3:d8:17:4d: 0b:83:f7:09:3b:cc:82:b6:a0:a2:0f:97:42:24:9c: c0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:F9:C6:B4:CF:C0:48:F7:F0:A1:04:E7:7B:EF:29:D0:EE:3E:8C X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5d:ca:16:6a:09:c6:f4:6d:39:66:90:a1:82:52:60:01:4a: 0a:54:42:ae:e8:c6:a4:ca:3e:5b:ec:df:f9:3e:c8:13:41:35: 44:a0:33:a4:c5:62:f7:5e:9a:76:fa:41:bb:aa:dc:7d:ba:ce: e7:9f:74:34:48:ee:19:8c:0d:d0:17:1c:99:65:d6:45:89:1e: 9d:8d:38:ec:3f:aa:e6:1c:70:aa:e3:44:e9:e3:15:1d:6f:ab: 13:21:09:0e:b3:e0:ad:63:90:09:de:4d:fc:10:0c:7f:4a:20: e7:d8:cc:c7:00:3f:d7:66:bf:a3:1f:23:83:c2:58:76:f4:f7: 9e:a0:b9:d3:2a:7b:a4:97:4f:cb:06:a9:50:d5:48:c9:f6:b6: 55:2d:c2:e5:48:e1:60:7d:3e:2a:e5:3e:74:f3:75:67:62:6d: 2b:4d:0f:5e:47:9f:48:73:bf:34:c6:1b:8a:49:b7:22:87:b2: 03:38:aa:9e:b5:26:e6:b9:59:a4:fb:be:44:87:74:fd:a1:3d: 6a:09:e5:3a:70:38:f8:68:1d:10:55:83:b8:e2:a4:59:66:f6: 9e:bb:ee:eb:f5:28:56:e3:20:6c:32:36:31:2c:c0:4e:61:8d: 84:dc:9c:cf:74:66:f1:b6:c2:9b:30:70:f3:cd:d0:f8:86:d0: 63:aa:ad:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjYwMzI2MTYwMDM1WhcNMjYwNDAyMTYwMDM1WjAYMRYwFAYD VQQDEw02OWM1NTgyMy1kMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkXzEwo1uDSwIXmnUVVPlJEEJx6V8qDp/6XeFpGZ6px/ebgTfWDEYQlOFSMS /5b5NzAL7VoT/OosVzDnQWNsoDG5UxnSf52ZLXTS2Zgv2cwjWCuG4Jq61x7b/xRt x+oXWy6IptrbRJHsfQwIH8egR+WrHL4ni7svSJKYZI4cQzV0ZkhBRiQtGHrQ1sx8 Nsldvg++DA5orwVjFu7RnjyiYcV9Bt4/eFgozPcf6L2m0fwrUCxhqEuq/xOxkhIQ CUDkYaZlf0bouxsnaOEuSbzc8Z6h6jCfaYY5M9X0Uk2Vz5qj9LigvBCAwKm51cPY F00Lg/cJO8yCtqCiD5dCJJzAvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEja+ca0 z8BI9/ChBOd77ynQ7j6MMB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABl3KFmoJxvRtOWaQoYJSYAFKClRCrujGpMo+W+zf+T7IE0E1RKAzpMVi916a dvpBu6rcfbrO5590NEjuGYwN0BccmWXWRYkenY047D+q5hxwquNE6eMVHW+rEyEJ DrPgrWOQCd5N/BAMf0og59jMxwA/12a/ox8jg8JYdvT3nqC50yp7pJdPywapUNVI yfa2VS3C5UjhYH0+KuU+dPN1Z2JtK00PXkefSHO/NMYbikm3IoeyAziqnrUm5rlZ pPu+RId0/aE9agnlOnA4+GgdEFWDuOKkWWb2nrvu6/UoVuMgbDI2MSzATmGNhNyc z3Rm8bbCmzBw883Q+IbQY6qt+A== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:07 2026 by rpki-client