$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: QwDeI7fC/GS1xkc/pEKFufvtTbDtfn8w5TLug829pT4= Subject key identifier: D9:D9:8F:C7:C0:F4:F8:0B:8C:39:1D:3F:38:9A:5C:6D:79:DE:9E:4B Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 09DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 09C3 Signing time: Sat 28 Feb 2026 20:13:26 +0000 Manifest this update: Sat 28 Feb 2026 20:13:26 +0000 Manifest next update: Sat 07 Mar 2026 20:13:26 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: b76BgbJSk1JcGrhhTNBvEIJF2z8BlqAZXZGILpo6LI0=) 2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: vSHaQ8x5/dUFJ2VaCOEg3IfJ6i5TW1m1+SlMwO7G4nc=) 3: 9F155A86125111F1BDB1E8192A3D8C67.roa (hash: pRika4Tu0KmadmyWesTU8YrrTwZ2/MD++nUBvNTu4zA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 20:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Feb 28 20:13:26 2026 GMT Not After : Mar 7 20:13:26 2026 GMT Subject: CN=69a34c66-96d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:8f:1f:7b:05:9e:d0:0d:09:8f:ca:51:db: d7:a3:5f:60:55:2a:21:0b:6a:ad:dd:9e:52:11:0c: 80:69:81:ba:01:ee:73:d1:50:94:34:74:76:c2:33: c1:1c:06:18:f3:ad:55:07:f6:0d:ed:09:a0:72:e9: 13:df:8a:64:0b:cc:09:44:a6:17:7d:02:f5:0c:e5: 34:5c:06:50:07:25:ca:53:f2:d0:5d:e0:10:b1:d1: 81:fa:59:03:2f:ed:35:cd:2e:15:87:38:58:29:5a: f3:4a:2d:4c:28:90:ed:bf:e9:04:b6:38:3c:ae:34: 24:e5:4d:01:52:20:d8:2a:fe:fe:08:9d:0e:f1:6e: 6c:ee:33:31:45:b6:eb:0b:44:60:4e:a1:b9:4b:18: a9:04:d3:59:ef:e7:fa:e1:34:64:5d:ee:69:2d:57: 8f:73:6e:dc:3a:5f:da:38:b8:15:ad:ff:93:d4:f5: 95:f2:5d:91:70:82:2c:e2:b6:1a:d9:01:ab:e2:d0: 12:d6:a4:95:7a:27:7e:e1:3a:49:57:df:f4:05:fe: 65:7e:f9:b8:a6:bd:6b:34:a3:b4:0e:e0:c6:89:44: a7:c2:d4:7c:70:7f:fe:6b:de:b2:ec:4b:22:12:58: 8d:62:5d:86:ff:a8:ec:e4:82:04:b3:f7:69:c0:26: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:8F:C7:C0:F4:F8:0B:8C:39:1D:3F:38:9A:5C:6D:79:DE:9E:4B X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:52:bd:5d:50:39:e0:f0:59:35:a6:a4:95:d3:51:af:96:9b: 56:c2:37:0e:e6:9e:a1:12:ad:94:c3:3c:ae:5e:e0:aa:19:ff: 5e:03:c5:53:bc:12:b7:94:d4:be:58:ca:b2:44:4f:76:5e:b7: eb:04:fa:f4:80:10:de:a8:99:4d:20:02:d2:72:f7:46:d7:fa: 93:6c:06:da:f9:c6:97:3b:4a:fc:dd:5b:50:3f:49:f1:a0:a4: 5e:e9:d8:03:be:84:41:67:3c:f3:02:c7:fa:66:5a:e8:36:b8: bd:25:38:42:29:b5:a3:ad:63:c1:a7:a1:42:c9:a5:93:a4:89: e8:28:5e:61:30:ba:6b:50:9b:1e:2c:54:bc:fa:0b:13:ce:8a: ca:ce:ed:28:8e:d3:30:d4:35:6d:a1:e8:13:c7:d7:58:e4:a9: 53:9c:64:fe:2c:05:c2:e3:dc:84:f2:39:9f:b8:5b:05:9e:c2: 54:76:92:81:84:76:73:54:8b:f0:50:a9:10:15:3f:6f:7f:e9: 6d:b3:ca:dc:6d:9b:33:27:e6:54:20:a1:b2:3d:41:b2:03:3c: 0f:a5:a3:b3:2a:10:60:be:77:d5:42:b3:42:28:29:9d:72:67: 57:96:f7:21:56:77:45:b5:e4:4c:0c:e7:a6:41:3f:6b:44:99: 92:ca:b6:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjYwMjI4MjAxMzI2WhcNMjYwMzA3MjAxMzI2WjAYMRYwFAYD VQQDDA02OWEzNGM2Ni05NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA076PH3sFntANCY/KUdvXo19gVSohC2qt3Z5SEQyAaYG6Ae5z0VCUNHR2wjPB HAYY861VB/YN7QmgcukT34pkC8wJRKYXfQL1DOU0XAZQByXKU/LQXeAQsdGB+lkD L+01zS4VhzhYKVrzSi1MKJDtv+kEtjg8rjQk5U0BUiDYKv7+CJ0O8W5s7jMxRbbr C0RgTqG5SxipBNNZ7+f64TRkXe5pLVePc27cOl/aOLgVrf+T1PWV8l2RcIIs4rYa 2QGr4tAS1qSVeid+4TpJV9/0Bf5lfvm4pr1rNKO0DuDGiUSnwtR8cH/+a96y7Esi EliNYl2G/6js5IIEs/dpwCZDzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnZj8fA 9PgLjDkdPziaXG153p5LMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjFK9XVA54PBZNaakldNRr5abVsI3DuaeoRKtlMM8rl7gqhn/XgPFU7wSt5TU vljKskRPdl636wT69IAQ3qiZTSAC0nL3Rtf6k2wG2vnGlztK/N1bUD9J8aCkXunY A76EQWc88wLH+mZa6Da4vSU4Qim1o61jwaehQsmlk6SJ6CheYTC6a1CbHixUvPoL E86Kys7tKI7TMNQ1baHoE8fXWOSpU5xk/iwFwuPchPI5n7hbBZ7CVHaSgYR2c1SL 8FCpEBU/b3/pbbPK3G2bMyfmVCChsj1BsgM8D6WjsyoQYL531UKzQigpnXJnV5b3 IVZ3RbXkTAznpkE/a0SZksq2Fw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:58:06 2026 by rpki-client