$ rpki-client -vvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json) Hash identifier: WWNvkL6tT0OqVPBfXfJxuGavfOLerdpnijMSs9lF2OU= Subject key identifier: CD:C4:D3:27:57:97:25:FC:82:9F:4B:76:8F:3B:D7:BD:3D:63:99:C3 Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft Manifest number: 08 Signing time: Sun 01 Mar 2026 10:42:33 +0000 Manifest this update: Sun 01 Mar 2026 10:42:33 +0000 Manifest next update: Sun 08 Mar 2026 10:42:33 +0000 Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: S4JV+zpeJT9zHa0uXlC6KKUQdp0fWbqPF4LeseBQCT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Validity Not Before: Mar 1 10:42:33 2026 GMT Not After : Mar 8 10:42:33 2026 GMT Subject: CN=69a41819-a402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:e0:d3:98:5c:21:19:72:79:a1:a7:2e:fb: 32:e0:7b:5c:81:a3:43:93:ab:3a:c9:59:c3:ae:1c: 3c:4c:0d:a3:90:c0:2a:e8:37:39:6f:6c:cf:ea:91: 98:5e:01:15:73:ba:19:8c:b6:e6:a1:62:52:44:96: 6f:d9:76:a5:ee:8a:94:ad:79:e0:7f:58:79:d6:c7: 5c:bb:97:6f:65:01:04:27:1b:43:17:d3:ca:60:c1: f7:7f:6d:e8:26:5e:da:41:f0:04:44:06:ea:87:e6: 39:fb:60:37:54:0f:42:33:06:f9:8a:e7:37:0f:71: 5d:52:71:1c:63:ed:9a:a1:7a:22:35:c7:bb:f1:65: 08:50:26:9b:9d:e4:02:01:bc:10:c1:93:5c:65:b0: 34:6e:1b:db:88:c1:17:e4:47:c4:87:c6:53:68:df: fc:5a:5f:30:9e:39:02:ef:2b:d4:24:b2:4f:04:1b: 03:72:96:0d:f1:0a:c6:1b:e2:fe:b4:41:e8:dc:b2: 05:ab:25:a2:c5:30:39:73:0f:0d:5d:96:54:a8:27: 1e:77:44:f1:07:5f:7f:d7:b8:5c:8d:79:bd:ed:c6: 3d:91:34:b5:54:87:1f:9f:6a:40:e0:06:15:7e:c3: 4d:33:c8:66:bd:f3:c1:c0:33:21:1c:d6:0a:3a:b8: 16:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C4:D3:27:57:97:25:FC:82:9F:4B:76:8F:3B:D7:BD:3D:63:99:C3 X509v3 Authority Key Identifier: keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e8:ba:9f:5b:7b:2c:e0:80:49:89:0c:2b:f7:a4:24:8f:76: 7a:b2:14:fb:ff:2e:29:5e:3b:ce:68:81:8a:f2:28:f7:d0:54: 9c:0c:ce:f0:d0:ba:4e:0d:51:7e:fa:7e:8d:f5:0b:2d:6b:1d: c5:0e:35:c0:dd:68:ae:da:78:69:f5:05:eb:3a:98:17:ad:24: a7:22:8f:09:d1:e7:6d:ce:3e:d2:83:d7:84:ff:9c:31:8f:c0: 1d:d9:f2:5a:b5:87:b4:ea:23:a0:6e:ad:e1:68:b0:6f:04:74: 75:99:a8:94:09:5e:e2:7b:6a:63:35:47:5c:d6:46:48:99:b5: 91:df:3e:b3:f7:eb:21:e9:74:c9:e1:8f:f5:da:aa:cc:58:90: c2:d2:86:29:b3:4c:f7:c6:ff:b3:06:b0:16:52:96:26:ae:ea: ca:90:9e:7a:0f:1d:59:dc:92:a4:1f:b3:2e:99:a3:eb:ad:3c: de:4b:48:fa:c6:cc:f4:c8:48:59:75:d4:74:ad:26:69:99:6b: f7:67:cc:99:83:5d:01:19:73:1a:00:80:ad:af:20:7e:3b:cf: 71:1e:80:9d:b5:55:45:c0:eb:c9:4d:80:09:2f:f1:4e:45:1e: a5:45:b0:73:aa:8d:4f:97:b6:88:aa:c4:ed:0e:8f:c9:1e:b4: 31:01:73:cc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdFRjExMC8GA1UEBRMoREU3REM2NEY5OUY2MjQwNjI0QkExM0QyMTU0OTQ0NEM0 MjRCNTQ2RjAeFw0yNjAzMDExMDQyMzNaFw0yNjAzMDgxMDQyMzNaMBgxFjAUBgNV BAMTDTY5YTQxODE5LWE0MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx5uDTmFwhGXJ5oacu+zLge1yBo0OTqzrJWcOuHDxMDaOQwCroNzlvbM/qkZhe ARVzuhmMtuahYlJElm/ZdqXuipSteeB/WHnWx1y7l29lAQQnG0MX08pgwfd/begm XtpB8AREBuqH5jn7YDdUD0IzBvmK5zcPcV1ScRxj7ZqheiI1x7vxZQhQJpud5AIB vBDBk1xlsDRuG9uIwRfkR8SHxlNo3/xaXzCeOQLvK9Qksk8EGwNylg3xCsYb4v60 QejcsgWrJaLFMDlzDw1dllSoJx53RPEHX3/XuFyNeb3txj2RNLVUhx+fakDgBhV+ w00zyGa988HAMyEc1go6uBapAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzcTTJ1eX JfyCn0t2jzvXvT1jmcMwHwYDVR0jBBgwFoAU3n3GT5n2JAYkuhPSFUlETEJLVG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0VGLzVDOUM4QUMwMTEz RjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZa3VoUFNGVWxFVEVKTFZH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM24zR1Q1bjJKQVlrdWhQU0ZVbEVURUpMVkc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0VGLzVDOUM4QUMwMTEzRjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZ a3VoUFNGVWxFVEVKTFZHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCG6LqfW3ss4IBJiQwr96Qkj3Z6shT7/y4pXjvOaIGK8ij30FScDM7w0LpODVF+ +n6N9Qstax3FDjXA3Wiu2nhp9QXrOpgXrSSnIo8J0edtzj7Sg9eE/5wxj8Ad2fJa tYe06iOgbq3haLBvBHR1maiUCV7ie2pjNUdc1kZImbWR3z6z9+sh6XTJ4Y/12qrM WJDC0oYps0z3xv+zBrAWUpYmrurKkJ56Dx1Z3JKkH7MumaPrrTzeS0j6xsz0yEhZ ddR0rSZpmWv3Z8yZg10BGXMaAICtryB+O89xHoCdtVVFwOvJTYAJL/FORR6lRbBz qo1Pl7aIqsTtDo/JHrQxAXPM -----END CERTIFICATE-----Generated at Mon Mar 2 11:43:50 2026 by rpki-client