$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: Ry2F1bMKQH+K2NgV9+85eEMcqiT1L0VDxJQtF5SGkWI= Subject key identifier: D3:3C:64:6A:C2:B5:6C:F0:17:2B:7E:34:7D:6F:D3:F8:85:9E:FC:84 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 070E Signing time: Tue 24 Mar 2026 21:38:49 +0000 Manifest this update: Tue 24 Mar 2026 21:38:49 +0000 Manifest next update: Tue 31 Mar 2026 21:38:49 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: rCB6186q7ib9V2yBPIsT4CWWOzkHiKKYHpMg/TJoZYY=) 2: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: DOXhX1leics2/OlA+16D6wHVTeejyQT2l+nsM3RKbHM=) 3: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: S/MfSzQzTqgLlxgu9oOyjNXmLNUKb18E7V+8O/9wAzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Mar 24 21:38:49 2026 GMT Not After : Mar 31 21:38:49 2026 GMT Subject: CN=69c30469-07a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:36:7e:91:86:86:cd:e9:63:8f:7b:91:37:2d: c6:86:5e:ef:5c:a8:65:6e:e5:42:80:d4:96:c2:43: aa:20:cc:eb:70:23:c9:cd:d9:cc:ec:d5:25:ea:8c: 21:ff:16:9a:0b:34:0c:a6:f6:46:14:c7:54:02:5f: ba:1b:ab:5a:26:de:b7:78:44:f7:b9:40:23:a2:21: b2:85:87:3c:b4:a1:54:8c:9d:7e:29:b9:8c:31:73: b6:ef:7d:af:bc:6c:b3:56:08:0a:9b:b7:6d:27:34: fe:82:b5:92:3c:6f:a7:32:6e:cf:da:08:42:77:2d: 27:1f:f1:12:20:12:21:d5:f3:d5:20:db:84:e2:7e: 50:fc:45:e3:67:6b:1e:a9:f6:b9:b2:fd:87:21:21: 57:76:e4:c5:5b:4c:93:0e:8f:68:be:25:1b:9f:2c: 75:09:23:85:39:aa:42:61:ff:c7:8c:ab:23:43:09: ea:26:8e:7a:fb:8e:63:cd:97:87:10:bb:94:b6:6c: c7:1c:e8:72:8d:ae:5c:40:75:9c:e6:18:ca:3d:c8: ef:3a:46:11:e2:ac:da:31:db:51:bd:b5:58:cc:12: d3:ea:75:e4:cf:9d:c0:39:a6:1b:04:71:43:18:99: 38:bf:e3:aa:07:88:e4:16:64:70:4b:24:3a:3e:6b: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3C:64:6A:C2:B5:6C:F0:17:2B:7E:34:7D:6F:D3:F8:85:9E:FC:84 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c4:ba:ab:bc:b7:6e:8c:93:00:7d:24:74:0d:c5:72:4f:ee: a7:2c:8a:92:ec:c2:5d:02:76:37:df:08:28:55:aa:29:30:dc: 64:84:a3:87:1e:6e:0c:55:ee:23:54:61:fe:78:69:f3:43:60: 06:d3:f1:dd:95:25:6c:aa:11:8b:6d:a9:95:c0:65:d6:2d:32: 71:99:74:e8:be:dc:84:77:4c:7c:a0:e2:7c:9d:b5:76:7d:55: 21:73:2b:aa:df:ca:17:de:27:7d:60:ed:31:b5:1a:70:8f:99: 4a:9a:26:12:e4:f5:bb:8f:19:74:b0:8f:ba:90:1e:be:67:b1: 18:75:e9:45:17:f5:7c:00:db:22:af:ed:36:a8:cd:13:b6:ca: 52:45:bc:b6:75:fe:74:01:ff:ea:d1:52:f5:3d:8d:ef:92:38: 41:5d:20:35:1b:1d:2c:8e:91:34:31:aa:20:a1:df:f0:96:41: 39:4e:ee:81:d8:f5:f1:2c:87:c1:af:7a:e0:91:1d:f8:b9:23: 8b:9f:c3:d3:5c:27:b6:e2:3b:7c:5e:25:cd:75:79:7f:c7:44: e5:10:b7:da:bb:35:de:1f:4e:1b:da:0d:8f:3c:94:1a:ed:d3: d0:4c:1a:ac:e2:04:af:0b:94:f3:51:91:d0:0e:3e:1d:c5:2a: ed:1f:73:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjYwMzI0MjEzODQ5WhcNMjYwMzMxMjEzODQ5WjAYMRYwFAYD VQQDEw02OWMzMDQ2OS0wN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TZ+kYaGzeljj3uRNy3Ghl7vXKhlbuVCgNSWwkOqIMzrcCPJzdnM7NUl6owh /xaaCzQMpvZGFMdUAl+6G6taJt63eET3uUAjoiGyhYc8tKFUjJ1+KbmMMXO2732v vGyzVggKm7dtJzT+grWSPG+nMm7P2ghCdy0nH/ESIBIh1fPVINuE4n5Q/EXjZ2se qfa5sv2HISFXduTFW0yTDo9oviUbnyx1CSOFOapCYf/HjKsjQwnqJo56+45jzZeH ELuUtmzHHOhyja5cQHWc5hjKPcjvOkYR4qzaMdtRvbVYzBLT6nXkz53AOaYbBHFD GJk4v+OqB4jkFmRwSyQ6PmtP0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNM8ZGrC tWzwFyt+NH1v0/iFnvyEMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACMS6q7y3boyTAH0kdA3Fck/upyyKkuzCXQJ2N98IKFWqKTDcZISjhx5uDFXu I1Rh/nhp80NgBtPx3ZUlbKoRi22plcBl1i0ycZl06L7chHdMfKDifJ21dn1VIXMr qt/KF94nfWDtMbUacI+ZSpomEuT1u48ZdLCPupAevmexGHXpRRf1fADbIq/tNqjN E7bKUkW8tnX+dAH/6tFS9T2N75I4QV0gNRsdLI6RNDGqIKHf8JZBOU7ugdj18SyH wa964JEd+Lkji5/D01wntuI7fF4lzXV5f8dE5RC32rs13h9OG9oNjzyUGu3T0Ewa rOIErwuU81GR0A4+HcUq7R9zSg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:02:25 2026 by rpki-client