$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft File: 3EdNayXV4aHNHSkADMwU6vkzQdI.mft (raw, json) Hash identifier: 871i4/bxJtCxC9+Me53YE/ip5GLQtyjdLAWQkxqRcp8= Subject key identifier: 5F:EE:20:EE:24:53:4F:5A:4F:EE:2D:26:84:90:D7:EF:EC:A3:19:3F Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 Certificate issuer: /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Certificate serial: 1F37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft Manifest number: 1F1E Signing time: Sat 28 Feb 2026 16:03:25 +0000 Manifest this update: Sat 28 Feb 2026 16:03:25 +0000 Manifest next update: Sat 07 Mar 2026 16:03:25 +0000 Files and hashes: 1: 3EdNayXV4aHNHSkADMwU6vkzQdI.crl (hash: ep4zYOFb22bsGiPQEkZp0opR+4g+3aCTlQRWsLvrE1g=) 2: BE26B9DA097711F08C05FC5AC4F9AE02.roa (hash: yMcE3tmH7UIpO9OkxwhmXmOUyw6usE3KWg2f35Z4/C0=) 3: 0E35A0A0097611F0B5B04858C4F9AE02.roa (hash: faKI457+O03Thbe4kDtQEDQEb5T9q9NP3NicyECMqd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7991 (0x1f37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C373, serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2 Validity Not Before: Feb 28 16:03:25 2026 GMT Not After : Mar 7 16:03:25 2026 GMT Subject: CN=69a311cd-56f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:47:d6:57:90:87:3c:24:30:19:c4:1e:cc: fa:85:b6:73:2a:d5:b8:c3:ef:23:af:54:d2:ec:cb: c7:d3:1a:56:24:6d:f7:14:46:f8:e0:a3:1d:ee:7f: dd:55:50:be:8b:fa:34:3b:d1:b8:7a:b7:86:25:b0: 8f:68:58:af:f6:11:51:7d:21:22:b6:96:62:c6:a1: b4:c8:ff:07:87:9f:cc:d6:5e:d3:ef:d2:14:5b:5e: 0a:d3:0e:12:a2:f1:bf:c7:9c:7e:45:f5:7d:0c:81: 07:b4:cd:fd:27:d1:3f:59:e9:37:34:12:ea:c3:1b: af:a8:09:aa:ed:0a:eb:f1:b5:61:83:61:aa:36:c0: bd:5c:bb:41:cb:3b:f9:16:ef:4d:cf:ed:da:e0:53: cf:38:19:3e:b3:7f:5a:7c:35:04:10:d7:0c:a2:b0: ce:d1:85:b5:c6:21:55:d9:a2:78:20:02:4e:d9:2d: 00:79:eb:00:2c:fe:c6:48:bb:b7:84:15:6c:15:50: 29:6d:7d:ef:16:73:6a:ca:15:d8:70:a3:ac:b2:59: 22:53:9f:e2:47:3e:a3:b0:99:e4:24:d6:60:ac:1d: 66:60:d3:21:e6:f8:a9:d1:0a:2d:5d:1b:44:c6:2b: 91:65:55:e5:f8:69:83:33:f8:80:8d:0e:f0:cd:c8: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:20:EE:24:53:4F:5A:4F:EE:2D:26:84:90:D7:EF:EC:A3:19:3F X509v3 Authority Key Identifier: keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:30:55:fb:0a:5b:b2:ce:78:01:d3:d7:99:17:4f:64:5f:6a: 87:0e:24:a2:e0:a9:44:17:47:56:43:63:28:e7:33:07:c5:f1: 7e:9e:88:a7:2c:13:87:ea:10:f7:9a:b3:b3:47:d4:0f:0e:31: 0c:3a:9a:c5:34:ea:83:03:c9:e3:b9:9f:94:f9:e7:04:2c:25: 5d:34:04:86:ea:0c:57:5e:5d:d0:c8:1c:17:5c:a0:33:7f:f1: ac:76:62:6b:7e:f6:f4:71:c7:73:1d:49:d9:41:48:8e:c4:ac: a6:c4:1f:d3:af:26:39:c3:63:09:09:4f:aa:c3:de:dd:7b:89: 76:5f:1c:d3:2d:73:3a:5f:54:cf:39:87:06:ae:41:ad:40:fc: 57:d7:88:02:1d:8f:95:ee:19:84:db:67:2f:5d:06:02:ad:42: 87:af:9f:24:f2:1e:8a:84:bc:69:a8:52:f3:04:4d:86:c0:c2: 54:22:71:40:95:3d:43:89:d9:85:c5:e5:ee:9b:d0:30:2d:16: bd:3b:31:b0:b8:b6:99:0f:41:cd:79:61:fd:8b:a9:14:d5:db: 13:62:de:fc:d3:73:83:9e:cf:f3:e0:60:a2:9e:6b:98:64:73: 58:12:73:ca:36:55:d8:c8:5d:1e:02:73:4c:4f:3c:ce:c2:ae: ea:7d:58:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNzMxMTAvBgNVBAUTKERDNDc0RDZCMjVENUUxQTFDRDFEMjkwMDBDQ0MxNEVB RjkzMzQxRDIwHhcNMjYwMjI4MTYwMzI1WhcNMjYwMzA3MTYwMzI1WjAYMRYwFAYD VQQDDA02OWEzMTFjZC01NmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZNH1leQhzwkMBnEHsz6hbZzKtW4w+8jr1TS7MvH0xpWJG33FEb44KMd7n/d VVC+i/o0O9G4ereGJbCPaFiv9hFRfSEitpZixqG0yP8Hh5/M1l7T79IUW14K0w4S ovG/x5x+RfV9DIEHtM39J9E/Wek3NBLqwxuvqAmq7Qrr8bVhg2GqNsC9XLtByzv5 Fu9Nz+3a4FPPOBk+s39afDUEENcMorDO0YW1xiFV2aJ4IAJO2S0AeesALP7GSLu3 hBVsFVApbX3vFnNqyhXYcKOsslkiU5/iRz6jsJnkJNZgrB1mYNMh5vip0QotXRtE xiuRZVXl+GmDM/iAjQ7wzciqdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/uIO4k U09aT+4tJoSQ1+/soxk/MB8GA1UdIwQYMBaAFNxHTWsl1eGhzR0pAAzMFOr5M0HS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM3My9DRkNBQzYxMDZG RjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRhSE5IU2tBRE13VTZ2a3pR ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFZE5heVhWNGFITkhTa0FETXdVNnZrelFkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM3My9DRkNBQzYxMDZGRjUxMUU2OUYyQjEwMjNDNEY5QUUwMi8zRWROYXlYVjRh SE5IU2tBRE13VTZ2a3pRZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASzBV+wpbss54AdPXmRdPZF9qhw4kouCpRBdHVkNjKOczB8Xxfp6IpywTh+oQ 95qzs0fUDw4xDDqaxTTqgwPJ47mflPnnBCwlXTQEhuoMV15d0MgcF1ygM3/xrHZi a3729HHHcx1J2UFIjsSspsQf068mOcNjCQlPqsPe3XuJdl8c0y1zOl9UzzmHBq5B rUD8V9eIAh2Ple4ZhNtnL10GAq1Ch6+fJPIeioS8aahS8wRNhsDCVCJxQJU9Q4nZ hcXl7pvQMC0WvTsxsLi2mQ9BzXlh/YupFNXbE2Le/NNzg57P8+Bgop5rmGRzWBJz yjZV2MhdHgJzTE88zsKu6n1YHw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:31 2026 by rpki-client