$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: MGhwOzgL4X5u0YMOWcmkZ8R177rUPXL3e+Ha2C/BEUs= Subject key identifier: 2B:44:F7:2E:0F:19:2E:45:D2:A0:7E:DE:36:F4:E8:13:F1:1B:E5:8D Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 0162 Signing time: Sun 01 Mar 2026 05:55:31 +0000 Manifest this update: Sun 01 Mar 2026 05:55:30 +0000 Manifest next update: Sun 08 Mar 2026 05:55:30 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: zJGxX99Hc8v4neaEwzasLw/JTBuhk4B+/K/Sf/FOomk=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: j6g0qkyBnbC6ObzWJzLVBlWvAyU9t4dwcYlCD4aOUWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: Mar 1 05:55:30 2026 GMT Not After : Mar 8 05:55:30 2026 GMT Subject: CN=69a3d4d3-dd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:f6:4c:87:65:55:b0:7f:8e:88:1f:f4:a2: e9:0d:1a:84:dd:86:54:2b:9f:97:bd:7c:da:9d:cf: 91:2c:55:fd:8d:9b:bc:96:44:45:39:8a:f2:98:ed: cc:1e:ab:c2:88:ed:b4:8a:0e:28:9c:0a:58:3f:d0: d8:e4:04:06:47:61:47:75:12:4c:05:b1:fa:92:9e: 39:49:93:c2:d3:a3:6e:2c:b2:55:5a:6e:4a:34:9d: 0d:ec:34:1f:dc:d0:ce:76:eb:b2:70:14:de:d0:a2: df:25:e2:38:7a:5d:e1:bb:57:55:1d:bc:22:c6:16: 5d:38:f6:df:23:34:66:e9:91:30:38:bb:75:03:20: b0:aa:ca:20:a8:2b:0e:dd:84:75:43:6c:65:f2:ea: 87:bb:77:e5:08:86:75:0c:b4:2d:61:3c:89:2c:b5: 95:76:b7:c2:89:b0:ad:22:e2:cc:70:dc:95:33:62: da:26:be:8b:b8:1d:e6:d1:46:fd:7d:07:1d:3b:2b: cf:d5:fc:e3:e2:b2:2e:d2:b0:80:49:e9:42:d8:15: 32:94:dd:0f:88:b8:0e:f5:ca:a5:b7:13:f9:65:39: 0d:20:95:bb:6d:04:c9:77:6c:48:58:38:dd:db:a0: e9:34:72:f1:02:90:23:4c:02:6a:66:f0:77:d6:78: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:44:F7:2E:0F:19:2E:45:D2:A0:7E:DE:36:F4:E8:13:F1:1B:E5:8D X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:72:69:c4:c8:ca:33:a6:1a:63:09:53:0f:0a:c0:7a:93:dc: 8d:6b:82:dc:bd:f8:bf:ee:5b:7a:9b:8a:68:1c:ea:a5:1f:fb: 0d:8e:fd:96:b9:65:8b:d8:55:0d:d1:74:e4:4f:52:fc:be:78: e1:6d:ac:57:c5:d9:d0:8b:19:c2:3e:ac:9e:fb:f1:d4:13:c6: a5:41:23:9b:0a:f8:63:ef:37:b5:ef:58:26:c9:4c:5d:92:4f: 13:77:2c:88:5f:54:e2:ff:4f:64:33:e2:72:40:54:15:ca:f0: 07:bb:d5:c8:3f:9f:f0:5d:51:85:1e:c0:7c:b2:9b:c7:4a:73: 0f:02:1c:6b:c3:9d:52:6d:0c:46:66:f9:31:e4:54:1e:db:93: 4b:39:e0:b7:10:0a:3c:01:dc:1e:3d:a5:40:3d:92:74:2c:d2: 12:f6:30:23:9b:b7:38:cf:7e:cc:d6:0a:2a:fc:13:1f:bc:80: ae:c9:01:91:c2:de:08:10:28:5d:6b:d6:1d:b6:2b:2c:a4:92: f4:ac:2b:fb:d6:41:fa:50:3f:86:e8:2b:63:32:3b:b9:ff:c8: 2f:65:24:88:0d:11:4c:ec:35:50:3f:32:8a:b1:ca:c6:80:94: a1:b1:d7:14:50:b6:c7:8e:01:dd:b3:90:e6:07:36:80:a2:dc: b3:0b:c7:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjYwMzAxMDU1NTMwWhcNMjYwMzA4MDU1NTMwWjAYMRYwFAYD VQQDEw02OWEzZDRkMy1kZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt//2TIdlVbB/jogf9KLpDRqE3YZUK5+XvXzanc+RLFX9jZu8lkRFOYrymO3M HqvCiO20ig4onApYP9DY5AQGR2FHdRJMBbH6kp45SZPC06NuLLJVWm5KNJ0N7DQf 3NDOduuycBTe0KLfJeI4el3hu1dVHbwixhZdOPbfIzRm6ZEwOLt1AyCwqsogqCsO 3YR1Q2xl8uqHu3flCIZ1DLQtYTyJLLWVdrfCibCtIuLMcNyVM2LaJr6LuB3m0Ub9 fQcdOyvP1fzj4rIu0rCASelC2BUylN0PiLgO9cqltxP5ZTkNIJW7bQTJd2xIWDjd 26DpNHLxApAjTAJqZvB31nhfVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtE9y4P GS5F0qB+3jb06BPxG+WNMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXJpxMjKM6YaYwlTDwrAepPcjWuC3L34v+5bepuKaBzqpR/7DY79lrlli9hV DdF05E9S/L544W2sV8XZ0IsZwj6snvvx1BPGpUEjmwr4Y+83te9YJslMXZJPE3cs iF9U4v9PZDPickBUFcrwB7vVyD+f8F1RhR7AfLKbx0pzDwIca8OdUm0MRmb5MeRU HtuTSzngtxAKPAHcHj2lQD2SdCzSEvYwI5u3OM9+zNYKKvwTH7yArskBkcLeCBAo XWvWHbYrLKSS9Kwr+9ZB+lA/hugrYzI7uf/IL2UkiA0RTOw1UD8yirHKxoCUobHX FFC2x44B3bOQ5gc2gKLcswvHvQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:26:44 2026 by rpki-client