$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json) Hash identifier: hvTMvTEo8MLyRQq8HjYFM3MElTyiiSccpZAOqNClf1g= Subject key identifier: C7:55:FD:04:6D:43:0E:96:76:51:FD:6E:66:B9:65:77:81:F7:94:63 Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft Manifest number: 06FF Signing time: Tue 24 Mar 2026 21:44:07 +0000 Manifest this update: Tue 24 Mar 2026 21:44:06 +0000 Manifest next update: Tue 31 Mar 2026 21:44:06 +0000 Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: TDLMR5+zvZ1qMwIGyDGaPMqrkq6iQiIjh3Wg33SZJdM=) 2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: 7b7X7lAmpe4VIztKAFHWhrlQ0MJNaUA4ExxoVQIfMEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF Validity Not Before: Mar 24 21:44:06 2026 GMT Not After : Mar 31 21:44:06 2026 GMT Subject: CN=69c305a7-458d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:fd:13:40:87:3b:01:40:c2:b8:bb:a7:69: 87:73:79:6b:d1:df:04:2b:d9:37:de:67:7d:82:03: 8d:41:f7:35:35:f8:2b:47:dd:8f:9e:cc:88:04:c6: 47:b8:94:cb:71:2d:f6:35:55:5a:e4:fc:52:76:87: b9:71:16:4c:48:40:aa:70:af:b6:5f:07:40:0b:d0: 2f:5a:38:df:16:eb:09:49:d0:04:4a:a5:9e:9f:c2: b5:b5:34:83:c8:3d:3b:60:5b:93:5c:80:59:c5:33: 8c:fc:9f:08:b6:d8:95:23:19:29:38:51:4d:7b:9d: a2:55:3e:54:17:fb:d5:07:b9:e3:62:c6:ec:73:eb: f2:ec:46:db:57:7c:27:8e:ff:13:a4:5d:7a:77:9b: ee:94:a7:d3:92:44:df:e2:0f:93:92:84:66:81:08: 14:48:cd:8c:53:f7:4e:e8:28:69:fb:92:f5:35:13: a8:3d:7a:03:20:b8:50:ca:ad:66:a1:7e:f8:fa:57: 13:38:5d:68:b9:96:5b:64:73:2c:bd:e3:54:77:ea: 20:ef:6f:04:fe:e7:98:5e:23:4a:d1:b3:15:41:1f: 8f:16:ac:64:a5:cd:e3:b1:18:61:d4:e7:48:d7:66: 1b:3f:0b:51:b9:06:78:d1:2e:ef:a5:43:d4:53:65: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:55:FD:04:6D:43:0E:96:76:51:FD:6E:66:B9:65:77:81:F7:94:63 X509v3 Authority Key Identifier: keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:4b:3a:df:75:b9:49:1a:a8:9c:5d:11:d7:f4:47:7f:67:6e: 4e:1b:42:22:d0:ae:64:d6:0d:72:64:88:49:82:57:a7:64:ea: 7a:b9:58:82:3c:5a:f0:7f:93:28:a4:3c:a7:b8:4d:32:8e:e8: d1:93:f3:72:59:d0:be:67:56:8d:a0:2a:34:41:f7:71:f0:dc: 32:43:92:3d:c0:25:0a:3b:35:a3:34:0d:c4:5a:3a:63:a4:c2: c8:02:35:7f:c8:ee:bc:56:4b:ee:b2:25:39:3e:cd:81:39:46: 11:9a:b6:fe:15:13:63:66:af:c0:4f:f4:c6:08:30:fd:df:c3: ae:a3:46:78:ab:9e:f8:61:e6:a7:39:59:b9:fa:df:1d:75:9a: f9:a7:ef:08:c0:60:28:ad:ca:9b:c3:b4:97:b6:5d:d7:14:0d: d0:be:e1:c4:8b:d9:50:a6:cb:b6:ed:b0:f7:dd:39:e4:d0:34: 6e:96:49:c0:ee:68:69:7e:d3:cc:44:44:ee:0a:b3:54:f0:48: d3:f3:b0:c2:51:62:17:0e:82:f4:f1:45:99:f5:02:eb:89:3f: bd:28:a4:7d:40:37:37:fb:d7:8c:cb:61:67:68:e8:65:5f:2f: 0b:9b:9b:90:7a:d8:89:79:9f:f8:0f:da:f7:b1:82:c7:93:dc: ff:6b:e8:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3 NEVERUJCQkYwHhcNMjYwMzI0MjE0NDA2WhcNMjYwMzMxMjE0NDA2WjAYMRYwFAYD VQQDEw02OWMzMDVhNy00NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxj9E0CHOwFAwri7p2mHc3lr0d8EK9k33md9ggONQfc1NfgrR92PnsyIBMZH uJTLcS32NVVa5PxSdoe5cRZMSECqcK+2XwdAC9AvWjjfFusJSdAESqWen8K1tTSD yD07YFuTXIBZxTOM/J8IttiVIxkpOFFNe52iVT5UF/vVB7njYsbsc+vy7EbbV3wn jv8TpF16d5vulKfTkkTf4g+TkoRmgQgUSM2MU/dO6Chp+5L1NROoPXoDILhQyq1m oX74+lcTOF1ouZZbZHMsveNUd+og728E/ueYXiNK0bMVQR+PFqxkpc3jsRhh1OdI 12YbPwtRuQZ40S7vpUPUU2W6XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdV/QRt Qw6WdlH9bma5ZXeB95RjMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1 NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIks633W5SRqonF0R1/RHf2duThtCItCuZNYNcmSISYJXp2TqerlYgjxa8H+T KKQ8p7hNMo7o0ZPzclnQvmdWjaAqNEH3cfDcMkOSPcAlCjs1ozQNxFo6Y6TCyAI1 f8juvFZL7rIlOT7NgTlGEZq2/hUTY2avwE/0xggw/d/DrqNGeKue+GHmpzlZufrf HXWa+afvCMBgKK3Km8O0l7Zd1xQN0L7hxIvZUKbLtu2w99055NA0bpZJwO5oaX7T zERE7gqzVPBI0/OwwlFiFw6C9PFFmfUC64k/vSikfUA3N/vXjMthZ2joZV8vC5ub kHrYiXmf+A/a97GCx5Pc/2vomA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:49 2026 by rpki-client