$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json) Hash identifier: 5tEBMqhyhonA+n2juuYPwE6GlbCBX00jwlBNHAbcANc= Subject key identifier: CA:EA:83:1C:5A:E4:9B:7A:39:9F:76:F0:3B:AD:AA:3A:24:E6:C0:31 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft Manifest number: 0120 Signing time: Mon 02 Mar 2026 12:40:28 +0000 Manifest this update: Mon 02 Mar 2026 12:40:27 +0000 Manifest next update: Mon 09 Mar 2026 12:40:27 +0000 Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: N5S4Q/hadVYULVZ3zl0Aok+yv4XCUJxwcs0QS3P00mE=) 2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qCZfH+xJ2p/8mTPa4y8ptTvD/J5HFYkwYWe+Fplo+JE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Mar 2 12:40:27 2026 GMT Not After : Mar 9 12:40:27 2026 GMT Subject: CN=69a5853b-d274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:48:76:2c:05:ba:12:3d:1f:be:c1:3b:d3:8b: 0a:72:4d:e8:05:eb:ff:19:60:43:c0:96:04:15:36: 85:b0:33:f0:b6:9f:53:9d:fc:17:fb:eb:be:6c:78: ff:07:83:7b:3b:43:df:10:84:37:49:e2:fa:93:3f: da:6f:c6:01:56:77:9c:47:b1:be:f2:cb:c0:49:f0: 29:2e:2c:3c:62:a3:2e:f7:1e:d1:be:a3:64:a6:b2: ee:c1:6f:72:e7:68:13:dc:b3:55:e3:3d:2d:23:c4: bd:8e:22:b1:d3:19:9f:0f:ff:df:d7:bf:85:82:49: 3c:41:c1:e0:9b:fe:d7:a5:9f:a9:28:a8:84:51:bb: 1e:a4:3e:25:b4:57:a4:62:3e:51:73:f4:7a:49:d6: cc:5b:71:6d:ea:5b:a5:9d:25:cb:dd:b6:f4:cd:c0: fa:41:40:ba:9e:5d:2b:5b:ce:ba:5e:e5:6b:0f:8c: 9b:37:82:ce:3b:0d:f5:f2:55:27:bd:63:95:62:fe: 42:39:cd:87:c9:91:c8:23:25:22:bc:0b:28:d5:70: 4f:82:6b:08:15:db:df:ff:dd:43:38:17:8d:f9:2c: fc:29:ab:a5:36:f6:77:0b:5d:4e:f3:28:ec:01:ba: 13:db:fd:7a:24:23:2b:c5:c9:16:d4:e4:f9:6d:79: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EA:83:1C:5A:E4:9B:7A:39:9F:76:F0:3B:AD:AA:3A:24:E6:C0:31 X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a3:b9:bf:8a:c3:80:e1:ac:f8:6c:ca:1d:6d:e1:e1:40:9e: 35:ea:19:f7:6d:4a:b6:23:0e:6c:12:0d:bf:9e:69:a3:68:89: 72:4a:f5:58:c0:23:50:eb:61:75:1c:a1:30:f4:2a:5c:dd:bb: 9e:f3:89:ba:55:6d:c6:de:18:31:4b:da:46:40:dd:ee:19:f5: 62:a1:b4:1c:c8:08:ab:92:5f:f5:fe:7f:ef:60:30:c5:7b:ac: 9d:6c:b2:87:1a:80:2d:73:ee:2a:84:4b:a9:54:d0:41:90:41: 44:9f:a2:1b:63:02:94:8a:49:d2:4c:1a:ac:f7:c9:d3:d0:50: 3c:90:d4:34:30:aa:ce:36:f6:93:be:a7:32:9a:bc:5e:95:85: 80:c4:2e:a2:aa:dd:7d:a6:dc:53:84:9e:3f:50:b8:0a:0d:af: e8:43:fc:47:0a:a6:46:3f:77:ce:c9:99:cf:06:2b:42:12:5c: 77:50:5f:61:7d:1f:a5:97:64:9a:8f:76:7f:f9:97:ba:a0:b2: 25:50:00:bd:11:2c:2f:da:24:af:6e:e0:89:2f:3e:bd:fd:35: 23:08:61:88:57:f8:15:94:9f:09:50:d0:a3:fd:56:0f:17:0a: 1f:e9:7c:ba:65:23:e9:9f:59:8b:87:b9:13:0c:56:5b:00:57: c8:31:30:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRUQxMTAvBgNVBAUTKERGMjRCNEQ1MUM2Nzg0MURENjAwREQyQTYxNzg2QkNF OTg4Nzg2NjcwHhcNMjYwMzAyMTI0MDI3WhcNMjYwMzA5MTI0MDI3WjAYMRYwFAYD VQQDEw02OWE1ODUzYi1kMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kh2LAW6Ej0fvsE704sKck3oBev/GWBDwJYEFTaFsDPwtp9TnfwX++u+bHj/ B4N7O0PfEIQ3SeL6kz/ab8YBVnecR7G+8svASfApLiw8YqMu9x7RvqNkprLuwW9y 52gT3LNV4z0tI8S9jiKx0xmfD//f17+Fgkk8QcHgm/7XpZ+pKKiEUbsepD4ltFek Yj5Rc/R6SdbMW3Ft6lulnSXL3bb0zcD6QUC6nl0rW866XuVrD4ybN4LOOw318lUn vWOVYv5COc2HyZHIIyUivAso1XBPgmsIFdvf/91DOBeN+Sz8KaulNvZ3C11O8yjs AboT2/16JCMrxckW1OT5bXnjjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrqgxxa 5Jt6OZ928Dutqjok5sAxMB8GA1UdIwQYMBaAFN8ktNUcZ4Qd1gDdKmF4a86Yh4Zn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFRC82NzdBQUEzQzVG MzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhCM1dBTjBxWVhocnpwaUho bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi8zeVMwMVJ4bmhC M1dBTjBxWVhocnpwaUhobWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALqO5v4rDgOGs+GzKHW3h4UCeNeoZ921KtiMObBINv55po2iJckr1WMAjUOth dRyhMPQqXN27nvOJulVtxt4YMUvaRkDd7hn1YqG0HMgIq5Jf9f5/72AwxXusnWyy hxqALXPuKoRLqVTQQZBBRJ+iG2MClIpJ0kwarPfJ09BQPJDUNDCqzjb2k76nMpq8 XpWFgMQuoqrdfabcU4SeP1C4Cg2v6EP8RwqmRj93zsmZzwYrQhJcd1BfYX0fpZdk mo92f/mXuqCyJVAAvREsL9okr27giS8+vf01IwhhiFf4FZSfCVDQo/1WDxcKH+l8 umUj6Z9Zi4e5EwxWWwBXyDEwxQ== -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:01 2026 by rpki-client