$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: WxLxR4L306aijNX17bRSIpJA6bbC2FIrA2unwW69qsg= Subject key identifier: B4:BA:D2:0B:D4:5E:B2:96:7F:C8:FB:DC:20:13:58:E2:47:1F:77:0E Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 15AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 15A1 Signing time: Mon 02 Mar 2026 02:11:03 +0000 Manifest this update: Mon 02 Mar 2026 02:11:02 +0000 Manifest next update: Mon 09 Mar 2026 02:11:02 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: /rRhTjAmwk2aEn5Vy0dXHKbqrNZ0DB/6dzXzIdKuGCQ=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5547 (0x15ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Mar 2 02:11:02 2026 GMT Not After : Mar 9 02:11:02 2026 GMT Subject: CN=69a4f1b7-1d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:94:26:d5:84:71:b0:03:9e:84:8f:a3:6a: f5:f5:6e:49:03:b4:eb:3c:e6:bc:e5:93:ca:52:9e: 10:2f:bb:24:10:50:e4:7e:45:55:52:e3:4f:f6:d0: 8c:bd:20:11:20:3a:9e:2a:57:50:59:bf:e5:ea:79: c8:f4:09:aa:0c:a2:34:84:3b:dc:d1:a8:8b:19:fb: 9b:d7:d1:c2:b9:46:89:56:ce:be:fc:58:a4:40:12: 84:4d:5b:a5:7d:2e:39:f8:5a:67:a6:d2:e9:69:4d: 81:a1:53:9e:1e:db:30:5c:b1:dc:30:83:e8:1e:40: e7:b7:ea:d1:93:34:54:8d:5e:88:6c:52:ae:e9:97: 09:62:65:b1:fe:97:2f:9a:77:ea:a4:b6:6e:7a:c8: 05:64:cd:e0:c5:7c:61:d2:4c:bf:4b:fb:78:5d:f2: 02:e6:0e:8a:f0:32:da:91:23:70:3c:6c:f6:b0:59: 4e:b9:10:d5:59:12:ac:63:ea:cd:30:25:5f:1b:de: c0:cc:63:58:1f:6f:3d:f3:ed:90:18:75:c8:20:11: 38:60:69:de:a6:a6:ea:5c:60:cf:57:e6:2b:53:24: 6a:ba:54:d6:0b:39:5c:00:ac:29:29:c1:bd:a7:0b: b3:11:37:90:f6:a2:a9:6f:0b:14:8d:27:40:f0:ae: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BA:D2:0B:D4:5E:B2:96:7F:C8:FB:DC:20:13:58:E2:47:1F:77:0E X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:aa:fa:a4:cb:76:58:e5:5b:39:10:1a:3a:bd:67:1b:81:28: 70:3b:e4:a4:9f:d1:24:41:d0:92:c0:9a:25:96:24:f6:31:fa: ff:f2:37:55:4c:37:62:0f:94:f1:9c:d9:9c:6b:7e:97:bd:a7: 37:69:34:d5:74:94:8d:86:fc:cf:49:78:26:6f:fc:66:7f:8d: a2:00:14:a0:43:29:b2:ce:35:43:1a:26:d2:6c:8e:0c:9d:4a: 35:a0:a7:14:63:91:c5:7a:a7:97:0f:3f:f7:4a:d1:b8:f8:20: 4c:3f:2f:12:86:60:93:2e:47:15:a1:6f:41:e6:ac:bb:63:ec: 5f:86:e0:bd:42:71:25:cf:b0:33:b5:90:f2:7e:af:81:3d:e6: bc:83:15:42:da:70:cb:e5:25:d3:1a:82:c9:c3:25:19:72:c2: 52:2e:34:30:37:13:4c:29:63:c7:ae:06:e3:d8:28:2f:d0:df: 47:ea:06:9a:9c:9a:20:e8:4d:db:1e:07:3a:80:f1:28:db:5c: 16:cc:22:fd:73:cd:e1:4b:ae:c7:e1:a0:1b:18:04:78:b6:07: e8:a9:b4:41:2f:53:5c:34:a3:95:ff:45:a6:a6:63:a4:e2:ac: 4f:76:1f:d9:71:9d:d9:77:c9:5a:5d:09:93:31:1e:1c:26:26: 3f:ef:f6:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjYwMzAyMDIxMTAyWhcNMjYwMzA5MDIxMTAyWjAYMRYwFAYD VQQDEw02OWE0ZjFiNy0xZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9SUJtWEcbADnoSPo2r19W5JA7TrPOa85ZPKUp4QL7skEFDkfkVVUuNP9tCM vSARIDqeKldQWb/l6nnI9AmqDKI0hDvc0aiLGfub19HCuUaJVs6+/FikQBKETVul fS45+FpnptLpaU2BoVOeHtswXLHcMIPoHkDnt+rRkzRUjV6IbFKu6ZcJYmWx/pcv mnfqpLZuesgFZM3gxXxh0ky/S/t4XfIC5g6K8DLakSNwPGz2sFlOuRDVWRKsY+rN MCVfG97AzGNYH2898+2QGHXIIBE4YGnepqbqXGDPV+YrUyRqulTWCzlcAKwpKcG9 pwuzETeQ9qKpbwsUjSdA8K4x/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLS60gvU XrKWf8j73CATWOJHH3cOMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApKr6pMt2WOVbORAaOr1nG4EocDvkpJ/RJEHQksCaJZYk9jH6//I3VUw3Yg+U 8ZzZnGt+l72nN2k01XSUjYb8z0l4Jm/8Zn+NogAUoEMpss41Qxom0myODJ1KNaCn FGORxXqnlw8/90rRuPggTD8vEoZgky5HFaFvQeasu2PsX4bgvUJxJc+wM7WQ8n6v gT3mvIMVQtpwy+Ul0xqCycMlGXLCUi40MDcTTCljx64G49goL9DfR+oGmpyaIOhN 2x4HOoDxKNtcFswi/XPN4Uuux+GgGxgEeLYH6Km0QS9TXDSjlf9FpqZjpOKsT3Yf 2XGd2XfJWl0JkzEeHCYmP+/2mQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:06 2026 by rpki-client