$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft File: 3cXbOB_x7MpblaKFFHktzbpJGCs.mft (raw, json) Hash identifier: JEHzn2ObKYryiWcgfPmEs+wtlANQXuMUJ0ql/Gu9TyU= Subject key identifier: B8:63:9E:FD:57:D9:98:A2:12:AF:65:E5:8B:1F:D8:27:4C:22:03:5A Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft Manifest number: 0107 Signing time: Sun 01 Mar 2026 07:14:08 +0000 Manifest this update: Sun 01 Mar 2026 07:14:07 +0000 Manifest next update: Sun 08 Mar 2026 07:14:07 +0000 Files and hashes: 1: 3cXbOB_x7MpblaKFFHktzbpJGCs.crl (hash: Npxs9cAlU5D3nTlNZ9jQG/cNzgteWGOJd7B/zH7so4U=) 2: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (hash: lCc1zW/fNZMoF/rqNvP9IYJzd9fmXkKhaJc8t7GMllI=) 3: 7DA8E78890E711EF8262A053C4F9AE02.roa (hash: GV87QmCbUO6E5Ecc2vWq6Yxzh0kKETb8AYCibjv61ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B Validity Not Before: Mar 1 07:14:07 2026 GMT Not After : Mar 8 07:14:07 2026 GMT Subject: CN=69a3e740-dd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:a0:f2:c7:b4:93:4d:cb:a4:a8:11:63:5c: e2:45:87:43:26:1f:31:b6:53:b4:46:bd:9a:8b:fd: 03:d3:52:d5:9d:f4:36:dc:07:1b:8b:ef:df:52:c0: db:b2:90:4b:5a:9b:f5:f8:69:4c:4d:a5:c9:ed:a1: ee:6b:6e:42:09:34:f5:1d:76:44:dd:de:48:85:89: 70:ba:7e:2b:bb:d8:e5:93:f9:5a:55:01:40:57:ba: 6d:e6:e2:7c:46:d4:ae:8e:c4:a6:9a:be:a8:e4:12: 58:a7:04:d2:ab:7c:94:0e:07:c7:9c:b4:44:31:90: fe:24:27:68:6a:56:fb:38:a0:3b:79:8a:8c:fd:4c: ce:a8:0b:33:b2:bf:5f:d3:e4:f3:62:7f:dd:ba:9b: 59:d0:2c:9e:03:ec:17:c2:31:de:a6:39:68:0f:4b: cc:93:64:cd:84:2f:28:a2:ed:cb:31:d0:01:20:3b: 29:ee:1b:07:f9:c5:71:45:00:7b:5d:33:83:61:21: 99:db:2a:6c:ad:d1:a2:2b:b7:5a:bb:35:01:1c:9e: d1:a7:6c:53:b6:1e:95:3a:72:3e:11:6a:d5:ff:de: 8d:bb:11:49:5e:e9:7f:74:46:94:2b:d6:aa:50:dc: b4:cf:f0:7b:a2:75:ca:f4:b4:79:c1:81:77:df:b9: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:63:9E:FD:57:D9:98:A2:12:AF:65:E5:8B:1F:D8:27:4C:22:03:5A X509v3 Authority Key Identifier: keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:51:77:f6:32:9f:72:69:cb:57:09:2a:f5:b5:b6:0e:11:3a: 6d:49:8a:95:27:18:6a:50:69:27:bd:35:a4:5c:76:c1:33:ff: 82:a9:87:c0:a2:a9:e9:b9:72:0c:31:21:d4:2d:4c:d2:96:da: fc:d1:e8:a9:11:87:77:e0:29:c8:98:89:59:58:6d:32:a9:df: 94:84:69:10:3d:a1:db:d3:95:55:84:cb:dd:c7:8a:2c:8a:ce: e9:f9:0f:18:59:9f:74:e9:b0:a7:a3:98:6b:72:3a:ae:e0:1d: f6:bc:7b:61:0b:b7:6c:a3:fb:f7:c8:af:7a:dc:aa:f1:47:a2: f6:09:7c:8c:51:a3:4e:ce:89:fd:7c:7e:8d:c8:91:5d:ce:0a: e4:3d:91:ab:11:b7:2a:51:b9:ce:fd:10:92:30:24:de:f6:c0: bf:4c:74:a7:90:5c:70:1b:df:92:31:59:bf:68:e1:08:a7:00: b1:75:0b:a0:5b:89:57:21:84:8b:3d:52:d2:32:cd:26:26:c0: 35:84:f5:0c:f4:e6:11:4b:ee:b6:73:b2:bc:d1:7f:62:b4:c8: 12:65:c5:12:d3:bb:7f:0c:7b:28:e6:6c:c4:89:1e:9b:cf:e4: 2a:52:18:db:d2:61:be:bf:8f:18:07:83:1a:be:ee:11:4e:14: 5d:02:ba:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3NzgxMTAvBgNVBAUTKEREQzVEQjM4MUZGMUVDQ0E1Qjk1QTI4NTE0NzkyRENE QkE0OTE4MkIwHhcNMjYwMzAxMDcxNDA3WhcNMjYwMzA4MDcxNDA3WjAYMRYwFAYD VQQDEw02OWEzZTc0MC1kZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLOg8se0k03LpKgRY1ziRYdDJh8xtlO0Rr2ai/0D01LVnfQ23Acbi+/fUsDb spBLWpv1+GlMTaXJ7aHua25CCTT1HXZE3d5IhYlwun4ru9jlk/laVQFAV7pt5uJ8 RtSujsSmmr6o5BJYpwTSq3yUDgfHnLREMZD+JCdoalb7OKA7eYqM/UzOqAszsr9f 0+TzYn/duptZ0CyeA+wXwjHepjloD0vMk2TNhC8oou3LMdABIDsp7hsH+cVxRQB7 XTODYSGZ2ypsrdGiK7dauzUBHJ7Rp2xTth6VOnI+EWrV/96NuxFJXul/dEaUK9aq UNy0z/B7onXK9LR5wYF337laDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhjnv1X 2ZiiEq9l5Ysf2CdMIgNaMB8GA1UdIwQYMBaAFN3F2zgf8ezKW5WihRR5Lc26SRgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDc3OC81QjhEODY2ODkw RTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdNcGJsYUtGRkhrdHpicEpH Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNjWGJPQl94N01wYmxhS0ZGSGt0emJwSkdDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDc3OC81QjhEODY2ODkwRTIxMUVGOTc2MTJBNDZDNEY5QUUwMi8zY1hiT0JfeDdN cGJsYUtGRkhrdHpicEpHQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhlF39jKfcmnLVwkq9bW2DhE6bUmKlScYalBpJ701pFx2wTP/gqmHwKKp6bly DDEh1C1M0pba/NHoqRGHd+ApyJiJWVhtMqnflIRpED2h29OVVYTL3ceKLIrO6fkP GFmfdOmwp6OYa3I6ruAd9rx7YQu3bKP798ivetyq8Uei9gl8jFGjTs6J/Xx+jciR Xc4K5D2RqxG3KlG5zv0QkjAk3vbAv0x0p5BccBvfkjFZv2jhCKcAsXULoFuJVyGE iz1S0jLNJibANYT1DPTmEUvutnOyvNF/YrTIEmXFEtO7fwx7KOZsxIkem8/kKlIY 29Jhvr+PGAeDGr7uEU4UXQK6Dg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:52:07 2026 by rpki-client