$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft File: 3jE8s1zQdq_lw3ePBeXKFc8zevk.mft (raw, json) Hash identifier: 2KFTv5LEtpz+1bP80lcLnxKt8v3OjAuWt/8aIwLd4A0= Subject key identifier: 58:94:ED:EA:9A:0E:C3:28:85:F4:D2:A6:EC:0E:1E:3D:30:03:C9:68 Authority key identifier: DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 Certificate issuer: /CN=A9148AC4/serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Certificate serial: 2D49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft Manifest number: 2D2D Signing time: Mon 02 Mar 2026 02:06:17 +0000 Manifest this update: Mon 02 Mar 2026 02:06:15 +0000 Manifest next update: Mon 09 Mar 2026 02:06:15 +0000 Files and hashes: 1: 3jE8s1zQdq_lw3ePBeXKFc8zevk.crl (hash: e6tXymzzvI4APkEUVLAahKhOG9GHsrJVKt2bgbrAc6I=) 2: E33945D6B0ED11E5B7779F44C4F9AE02.roa (hash: 9I/UF8wVS9sTnXr5fHjV7Fm4AlFC8LAa0hnWMtmsfp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11593 (0x2d49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148AC4, serialNumber=DE313CB35CD076AFE5C3778F05E5CA15CF337AF9 Validity Not Before: Mar 2 02:06:15 2026 GMT Not After : Mar 9 02:06:15 2026 GMT Subject: CN=69a4f098-10ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1c:bb:33:b2:b7:4b:92:a0:14:c4:68:ae:3c: e3:cf:84:e5:f3:cc:57:cc:13:10:a7:fc:48:b2:f5: ed:89:7f:7f:49:2a:13:67:ce:9c:6a:f7:32:bc:a0: 16:6a:86:75:dd:37:eb:60:97:11:36:61:75:5e:3b: 63:2d:a2:f6:4b:28:f1:8e:2b:fa:5f:f7:3d:97:43: de:9a:a4:12:5e:04:49:96:da:65:9c:52:f0:68:b4: be:39:21:85:13:6e:ea:96:72:48:8d:25:94:6f:6f: cd:29:b4:6d:24:f7:7b:88:4d:a2:9a:ab:03:0a:b2: 3b:22:01:e9:9b:05:d6:7f:27:96:d9:0a:f0:57:40: 9d:30:d6:30:2e:a5:5f:2c:7e:14:14:3b:b5:55:8b: e4:93:c5:1c:27:4a:e8:ab:95:a7:c9:df:f2:c3:d6: b8:5c:ce:c9:da:fb:d0:ce:00:a1:6e:4d:d8:f5:2b: 59:5f:13:a7:2f:a7:90:4b:07:42:72:d8:e5:da:e9: 55:81:43:e9:66:9d:44:86:df:68:6a:6c:c1:2b:da: 47:7b:81:5d:8a:6e:20:36:2d:d1:33:92:80:4a:dc: 63:1e:f5:a6:dc:f2:6d:f0:96:66:26:12:e7:e8:0f: 1e:a4:b1:1d:b9:1f:af:19:41:76:ad:9e:cd:c5:76: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:94:ED:EA:9A:0E:C3:28:85:F4:D2:A6:EC:0E:1E:3D:30:03:C9:68 X509v3 Authority Key Identifier: keyid:DE:31:3C:B3:5C:D0:76:AF:E5:C3:77:8F:05:E5:CA:15:CF:33:7A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3jE8s1zQdq_lw3ePBeXKFc8zevk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC4/206BC86CAE6A11E39379D5505911EA32/3jE8s1zQdq_lw3ePBeXKFc8zevk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:74:52:45:88:0f:11:3b:5c:f8:2a:11:e5:a1:9d:04:10:d8: de:58:df:c9:63:44:2d:db:76:3e:0d:95:ad:76:02:39:e6:be: 39:68:ab:88:03:ac:68:f9:2b:02:d1:08:fe:ba:5b:e7:62:c2: e8:a8:5d:a8:e0:ef:f4:8f:78:78:de:8d:9e:89:bc:3d:10:cf: fe:13:8c:a4:10:77:7a:e2:46:df:c2:2a:8a:99:0d:2a:47:b2: 3f:4e:b8:c5:78:59:d9:1b:4e:2a:1b:43:8c:c6:7f:80:8e:19: 90:e0:ea:0e:35:59:d4:b0:8d:72:ca:75:98:47:25:c2:57:1f: f0:0b:43:e4:aa:7f:d9:1a:c2:53:fe:12:50:46:e1:34:4e:89: c7:43:11:6f:85:c2:22:91:30:1c:c5:21:54:3c:e9:da:db:ee: ad:78:c1:4e:09:7b:18:c5:7d:8e:6a:6f:a1:40:53:4f:4a:dc: fc:0a:6c:c9:88:d3:82:6e:9f:07:d7:e8:25:24:37:ca:e9:d3: b0:0c:51:59:f9:43:f0:a9:62:65:93:41:ba:6a:be:02:61:41: 9c:af:43:30:a3:72:0f:8b:ea:70:f4:8c:77:f2:e2:2b:ee:a6: 33:b2:0f:79:4c:15:2d:2f:96:9a:b2:60:d7:1f:57:e0:5c:70: e6:7d:e0:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhBQzQxMTAvBgNVBAUTKERFMzEzQ0IzNUNEMDc2QUZFNUMzNzc4RjA1RTVDQTE1 Q0YzMzdBRjkwHhcNMjYwMzAyMDIwNjE1WhcNMjYwMzA5MDIwNjE1WjAYMRYwFAYD VQQDEw02OWE0ZjA5OC0xMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ry7M7K3S5KgFMRorjzjz4Tl88xXzBMQp/xIsvXtiX9/SSoTZ86cavcyvKAW aoZ13TfrYJcRNmF1XjtjLaL2Syjxjiv6X/c9l0PemqQSXgRJltplnFLwaLS+OSGF E27qlnJIjSWUb2/NKbRtJPd7iE2imqsDCrI7IgHpmwXWfyeW2QrwV0CdMNYwLqVf LH4UFDu1VYvkk8UcJ0roq5Wnyd/yw9a4XM7J2vvQzgChbk3Y9StZXxOnL6eQSwdC ctjl2ulVgUPpZp1Eht9oamzBK9pHe4Fdim4gNi3RM5KAStxjHvWm3PJt8JZmJhLn 6A8epLEduR+vGUF2rZ7NxXZJZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFiU7eqa DsMohfTSpuwOHj0wA8loMB8GA1UdIwQYMBaAFN4xPLNc0Hav5cN3jwXlyhXPM3r5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDNC8yMDZCQzg2Q0FF NkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRxX2x3M2VQQmVYS0ZjOHpl dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNqRThzMXpRZHFfbHczZVBCZVhLRmM4emV2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEFDNC8yMDZCQzg2Q0FFNkExMUUzOTM3OUQ1NTA1OTExRUEzMi8zakU4czF6UWRx X2x3M2VQQmVYS0ZjOHpldmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgHRSRYgPETtc+CoR5aGdBBDY3ljfyWNELdt2Pg2VrXYCOea+OWiriAOsaPkr AtEI/rpb52LC6KhdqODv9I94eN6Nnom8PRDP/hOMpBB3euJG38IqipkNKkeyP064 xXhZ2RtOKhtDjMZ/gI4ZkODqDjVZ1LCNcsp1mEclwlcf8AtD5Kp/2RrCU/4SUEbh NE6Jx0MRb4XCIpEwHMUhVDzp2tvurXjBTgl7GMV9jmpvoUBTT0rc/ApsyYjTgm6f B9foJSQ3yunTsAxRWflD8KliZZNBumq+AmFBnK9DMKNyD4vqcPSMd/LiK+6mM7IP eUwVLS+WmrJg1x9X4Fxw5n3g9Q== -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:18 2026 by rpki-client