$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft File: 3FejmXtffOj7ybTZiz1F1jMHcRg.mft (raw, json) Hash identifier: wVdXU34ik8Xy75RQmYRIoxpdimy4ljrMt0ezBej5gGU= Subject key identifier: 47:9A:53:A3:40:FB:00:1D:A1:40:2F:F6:91:43:26:02:79:DA:D4:84 Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0CB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft Manifest number: 0CAF Signing time: Thu 26 Mar 2026 18:24:13 +0000 Manifest this update: Thu 26 Mar 2026 18:24:13 +0000 Manifest next update: Thu 02 Apr 2026 18:24:13 +0000 Files and hashes: 1: 3FejmXtffOj7ybTZiz1F1jMHcRg.crl (hash: QqqFypM6Cuiq5baj/dnCCNi5snJPk0DQOGcuZyhZVtA=) 2: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (hash: STCKrvlRsuBwgCCitF/41y1bZsQULp/xbRwSRQTsp2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Mar 26 18:24:13 2026 GMT Not After : Apr 2 18:24:13 2026 GMT Subject: CN=69c579cd-4635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:56:3c:8d:8b:0d:09:35:eb:d4:bc:3c:b6:fd: da:4f:80:d6:27:31:70:ec:8e:9a:15:ad:a1:4f:36: 42:36:13:5b:7b:4b:14:cd:eb:7c:3f:48:96:66:d9: 02:7e:2a:f0:3c:2c:a6:38:de:1f:27:e5:6c:e2:1e: 21:fb:e9:e0:96:d4:dd:8b:1e:9a:e7:15:3c:8a:75: 70:37:2e:8c:50:db:10:60:3b:23:6a:b2:bb:b2:6f: 5f:8b:8c:54:0e:1c:a3:46:01:48:69:07:51:70:9c: 3a:7f:89:99:f5:67:ea:35:87:98:7f:bd:c4:46:8f: a5:0a:39:5d:2c:c4:c9:6c:72:05:2e:da:47:c0:51: fe:43:da:b2:e0:83:8c:c2:16:b7:3d:6f:bf:2e:a5: 53:e5:b4:fd:65:e0:c3:be:71:0c:a2:c1:f3:77:f7: a5:8e:d2:59:84:77:31:d1:75:a1:1a:58:6a:7e:01: b2:2d:f0:61:3f:cd:fe:91:61:3c:84:6e:28:32:27: a7:e1:42:39:bd:80:b4:e9:f7:7d:cd:1b:de:99:e6: e1:1f:b5:3c:2d:4d:f9:db:38:4e:12:65:ad:f1:a7: 26:a6:7a:bb:be:d7:c4:f7:ac:89:e3:5c:e6:e0:5e: da:6e:e3:a2:e1:b6:cc:be:be:93:3b:6d:24:45:ca: 13:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9A:53:A3:40:FB:00:1D:A1:40:2F:F6:91:43:26:02:79:DA:D4:84 X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:94:f6:9f:1f:52:67:7f:16:bb:fb:48:fa:60:b6:11:25:e6: f3:0e:a5:f1:58:44:c7:86:87:e0:3c:93:46:3b:e3:15:ea:7c: 3a:cd:13:f2:e0:91:73:d0:90:06:86:c0:af:c4:32:c0:a2:9a: fb:75:bf:85:50:fc:a3:85:d9:98:6a:08:a6:2f:11:ea:7e:e2: bb:55:f5:ae:31:17:b6:3a:c6:71:fe:de:35:25:67:c1:87:67: 03:90:d9:b4:89:88:06:28:24:94:88:de:1a:7a:48:8c:18:88: a9:51:51:87:b4:a7:64:27:e6:85:81:2f:b4:e0:82:20:d5:b6: b5:81:6e:4b:d7:9c:77:23:10:4a:fd:de:5c:3f:e0:ca:a4:87: 19:0a:6c:74:f9:a9:8f:8b:1c:10:34:c7:c1:ed:29:00:f0:74: 09:25:a8:c5:67:73:34:b6:ea:64:bb:f3:cb:12:69:15:1f:c1: cb:9a:23:a5:b2:ca:06:c9:56:0a:db:2f:0b:60:de:2e:3d:30: a6:ba:9e:e9:c8:02:d4:a3:e9:a3:1e:7d:79:f7:fb:60:02:60: 26:1d:2f:4a:f8:c1:1d:a8:cf:83:a0:42:55:d2:8d:21:61:42: 2a:9d:f3:f2:46:8c:00:aa:af:c4:bd:53:df:fa:02:42:02:df: 75:cf:d5:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjYwMzI2MTgyNDEzWhcNMjYwNDAyMTgyNDEzWjAYMRYwFAYD VQQDEw02OWM1NzljZC00NjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1Y8jYsNCTXr1Lw8tv3aT4DWJzFw7I6aFa2hTzZCNhNbe0sUzet8P0iWZtkC firwPCymON4fJ+Vs4h4h++ngltTdix6a5xU8inVwNy6MUNsQYDsjarK7sm9fi4xU DhyjRgFIaQdRcJw6f4mZ9WfqNYeYf73ERo+lCjldLMTJbHIFLtpHwFH+Q9qy4IOM wha3PW+/LqVT5bT9ZeDDvnEMosHzd/eljtJZhHcx0XWhGlhqfgGyLfBhP83+kWE8 hG4oMien4UI5vYC06fd9zRvemebhH7U8LU352zhOEmWt8acmpnq7vtfE96yJ41zm 4F7abuOi4bbMvr6TO20kRcoT5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeaU6NA +wAdoUAv9pFDJgJ52tSEMB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0FCQi8wNzY3NUYxRTBGNjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZP ajd5YlRaaXoxRjFqTUhjUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr5T2nx9SZ38Wu/tI+mC2ESXm8w6l8VhEx4aH4DyTRjvjFep8Os0T8uCRc9CQ BobAr8QywKKa+3W/hVD8o4XZmGoIpi8R6n7iu1X1rjEXtjrGcf7eNSVnwYdnA5DZ tImIBigklIjeGnpIjBiIqVFRh7SnZCfmhYEvtOCCINW2tYFuS9ecdyMQSv3eXD/g yqSHGQpsdPmpj4scEDTHwe0pAPB0CSWoxWdzNLbqZLvzyxJpFR/By5ojpbLKBslW CtsvC2DeLj0wprqe6cgC1KPpox59eff7YAJgJh0vSvjBHajPg6BCVdKNIWFCKp3z 8kaMAKqvxL1T3/oCQgLfdc/VsQ== -----END CERTIFICATE-----Generated at Fri Mar 27 02:39:28 2026 by rpki-client