$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: b4oxCQ8LpEXnPI7V/jcjgTxX8Dc2fuEszRQ928Bt36c= Subject key identifier: EC:AE:32:6B:1E:72:45:E0:24:30:FB:D2:99:E2:C4:6E:2B:A0:42:7F Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 2C Signing time: Sun 01 Mar 2026 10:13:18 +0000 Manifest this update: Sun 01 Mar 2026 10:13:17 +0000 Manifest next update: Sun 08 Mar 2026 10:13:17 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: 2gt4Mjw05Y5D2GjorAoPrCX+Mjn3uvHoANgDjCUPvbE=) 2: 4A2FDB94DA3F11F0A550B47F8ED3641D.roa (hash: L00xAVyMdi4yq57cuojf8StF3IqtNwJ5mRR+k9KIHc4=) 3: 4AB6B736DA3F11F0A550B47F8ED3641D.roa (hash: kopwtALdcZuNW2OVHYWJ7MsyJaVgK9ic1eGQvFl0MfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Mar 1 10:13:17 2026 GMT Not After : Mar 8 10:13:17 2026 GMT Subject: CN=69a4113e-3493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:5a:51:d1:36:d5:ad:6e:cc:13:34:92:27: c9:5d:0f:25:a7:2e:64:97:e0:5b:ed:dd:87:88:33: 85:1a:9e:5c:78:3b:bd:30:4d:d4:e0:28:8b:f2:fd: 35:b4:d8:f1:57:80:06:51:0c:5b:d3:da:53:b0:3e: ab:95:3c:8a:65:a9:f4:e8:d9:6b:ab:dc:b0:93:69: ed:b8:81:9b:e2:93:ac:4a:38:64:67:f1:65:13:e1: a2:3b:3e:c4:08:0f:e0:d5:72:7d:a5:35:56:7d:8e: 34:de:65:64:95:7b:7a:7b:63:da:66:f3:eb:c6:72: d4:c1:76:b2:67:fc:2f:38:e2:ce:42:3c:b3:29:10: f7:df:a8:c6:ba:bc:e1:25:e7:7e:4d:3e:19:fd:0a: 9e:21:ee:33:8c:83:24:e8:37:ee:f0:9c:e9:72:ab: 62:21:57:08:e5:0b:81:94:c4:48:b7:1e:3a:4f:7b: 0d:49:9b:b7:b5:c5:fd:f6:e5:08:aa:40:af:42:d1: be:76:41:1b:71:8c:9e:81:bb:c6:ec:c1:1f:07:0e: d2:0b:2b:f7:19:70:b3:56:21:93:e7:7c:d0:44:59: b5:bc:0a:b2:6f:c3:9b:27:05:df:7b:bc:f6:27:73: b6:74:c8:e4:d9:ac:03:c9:59:6f:2d:88:b2:aa:26: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AE:32:6B:1E:72:45:E0:24:30:FB:D2:99:E2:C4:6E:2B:A0:42:7F X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:18:2f:4c:59:52:35:ca:93:c5:82:85:af:66:36:65:45:f7: 3a:70:d6:d1:bf:54:ea:41:6c:0c:b8:66:27:a0:c3:2c:f9:ff: bc:86:66:a8:38:2a:00:ee:32:7b:84:47:e8:15:06:08:f9:f1: 79:7e:45:dd:ba:cd:cd:4e:21:36:6e:61:69:63:d4:9f:ea:4e: ec:52:51:86:81:3a:20:15:58:77:59:69:3b:e0:42:39:e8:b6: a3:46:c2:a7:b3:22:44:b1:46:0b:f3:98:91:71:2c:8d:d3:d1: d2:37:c1:f8:62:25:3d:81:6d:42:c6:82:d5:ed:c8:4b:21:1d: 8f:b1:bc:ea:20:3b:55:07:3c:ba:c4:39:06:76:d3:66:fc:d0: 08:be:e8:4a:0c:74:f3:08:b4:c7:0d:52:89:b5:5b:71:74:d2: d9:18:fd:c5:43:a2:d0:fe:fa:70:cb:a6:a9:ed:b5:a1:d9:32: ea:2d:11:2b:a2:e6:8e:1e:c2:98:ca:8a:fa:f5:6d:ec:d8:81: 4c:92:8b:bd:d8:7a:bd:e0:e6:b7:03:fc:a4:04:ba:e8:86:c4: eb:82:ae:c7:0e:f6:40:ae:85:6c:77:f1:63:f5:7d:0f:e3:f2: 98:06:14:58:f7:01:c4:e9:f2:91:2b:86:4a:1a:71:8c:2b:7e: 2f:e0:44:ae -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNjAzMDExMDEzMTdaFw0yNjAzMDgxMDEzMTdaMBgxFjAUBgNV BAMTDTY5YTQxMTNlLTM0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsqlpR0TbVrW7MEzSSJ8ldDyWnLmSX4Fvt3YeIM4Uanlx4O70wTdTgKIvy/TW0 2PFXgAZRDFvT2lOwPquVPIplqfTo2Wur3LCTae24gZvik6xKOGRn8WUT4aI7PsQI D+DVcn2lNVZ9jjTeZWSVe3p7Y9pm8+vGctTBdrJn/C844s5CPLMpEPffqMa6vOEl 535NPhn9Cp4h7jOMgyToN+7wnOlyq2IhVwjlC4GUxEi3HjpPew1Jm7e1xf325Qiq QK9C0b52QRtxjJ6Bu8bswR8HDtILK/cZcLNWIZPnfNBEWbW8CrJvw5snBd97vPYn c7Z0yOTZrAPJWW8tiLKqJhSXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7K4yax5y ReAkMPvSmeLEbiugQn8wHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q bkprdnR0WUx3bzNlN0pMMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhGC9MWVI1ypPFgoWvZjZlRfc6cNbRv1TqQWwMuGYnoMMs+f+8hmaoOCoA7jJ7 hEfoFQYI+fF5fkXdus3NTiE2bmFpY9Sf6k7sUlGGgTogFVh3WWk74EI56LajRsKn syJEsUYL85iRcSyN09HSN8H4YiU9gW1CxoLV7chLIR2PsbzqIDtVBzy6xDkGdtNm /NAIvuhKDHTzCLTHDVKJtVtxdNLZGP3FQ6LQ/vpwy6ap7bWh2TLqLRErouaOHsKY yor69W3s2IFMkou92Hq94Oa3A/ykBLrohsTrgq7HDvZAroVsd/Fj9X0P4/KYBhRY 9wHE6fKRK4ZKGnGMK34v4ESu -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:58 2026 by rpki-client