$ rpki-client -vvf rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft File: _3cE5KczP2k3LZ8zQfjQAstKwM8.mft (raw, json) Hash identifier: usxDTbH9YDa4hLt3seZVFuQWDSn1063JVz5l262G2YU= Subject key identifier: 46:BC:25:40:31:EA:A3:3E:55:45:C2:EC:5A:8B:4F:1B:EE:DB:EF:29 Authority key identifier: FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF Certificate issuer: /CN=A919992D/serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Certificate serial: 1DB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft Manifest number: 1D9C Signing time: Sun 01 Mar 2026 23:52:21 +0000 Manifest this update: Sun 01 Mar 2026 23:52:19 +0000 Manifest next update: Sun 08 Mar 2026 23:52:19 +0000 Files and hashes: 1: _3cE5KczP2k3LZ8zQfjQAstKwM8.crl (hash: NQvzVAUqWZnT/x3gXc+6HSTncTmysoQTlViy9WrFZZM=) 2: F2E707C4CB2D11E6B15E0480C4F9AE02.roa (hash: CiMRetgqfOHyT+t0oT0VnFidFPg4QE9lc+5bTN+xNPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7603 (0x1db3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919992D, serialNumber=FF7704E4A7333F69372D9F3341F8D002CB4AC0CF Validity Not Before: Mar 1 23:52:19 2026 GMT Not After : Mar 8 23:52:19 2026 GMT Subject: CN=69a4d134-3feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:3c:f7:c7:ce:1a:72:1f:7c:b0:92:e7:7c: c1:41:22:1d:9b:4b:04:77:ed:82:47:ea:64:bc:89: b0:1f:ac:29:ed:bd:6d:e8:17:04:ef:75:8a:78:7c: c0:49:80:c6:3d:a4:88:22:b9:43:a3:c0:bd:6f:90: 3b:53:17:50:7d:ec:df:5d:34:6a:24:94:ac:45:6f: 97:09:c9:e9:ff:01:c8:61:9c:3a:d0:9b:3b:76:75: 73:0c:97:4b:df:a4:8b:d5:03:c2:4a:a1:74:44:d2: e4:b5:01:b2:7f:a0:61:1d:ee:52:cc:d7:9a:b9:25: 04:7b:51:da:ed:d6:a7:84:f9:4d:40:d8:82:2c:8e: e5:13:d3:e0:10:9c:3b:4d:2d:75:db:0a:e7:40:66: 2d:d6:0e:32:d9:e6:fa:60:e3:be:69:12:ac:23:90: b8:82:d1:74:42:8f:4e:d6:df:00:a6:01:8f:06:fc: 3c:b4:7b:f3:70:1b:d6:d8:5a:2d:df:a7:bc:ea:b3: c4:8c:76:60:a2:7e:4b:50:70:d3:2a:e2:df:ff:40: 95:50:df:9d:d9:68:61:1d:9d:1d:a8:3f:e4:28:06: 67:79:e3:1d:86:7c:82:fb:d7:26:32:fd:29:4d:4e: a9:de:d3:a0:4a:df:04:d2:82:c9:be:4e:0a:c9:5a: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:25:40:31:EA:A3:3E:55:45:C2:EC:5A:8B:4F:1B:EE:DB:EF:29 X509v3 Authority Key Identifier: keyid:FF:77:04:E4:A7:33:3F:69:37:2D:9F:33:41:F8:D0:02:CB:4A:C0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3cE5KczP2k3LZ8zQfjQAstKwM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919992D/913329F4BBA611E68FC1212DC4F9AE02/_3cE5KczP2k3LZ8zQfjQAstKwM8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:28:a6:ac:8c:dc:b5:0d:31:3e:ed:7d:52:b4:2b:99:0a:68: ca:3d:8b:1d:22:83:c7:15:2f:f0:e9:fd:b6:39:4e:ad:02:d0: 77:63:d9:3d:58:57:d3:3d:18:ad:0a:65:c6:2f:c5:83:56:81: c1:a0:36:1f:8f:e8:79:66:4d:54:98:a9:9e:78:c5:0f:ce:e0: f3:d5:1e:54:1e:4b:6f:83:4e:57:a3:33:a3:6c:3b:2a:b3:4e: 95:b8:1d:21:7a:df:22:cf:62:f3:6e:c0:c5:aa:16:62:ca:24: 9f:0e:f9:ad:50:ab:bf:67:e9:b6:e6:6a:18:cd:25:2a:ac:b8: 7e:3e:b1:58:a8:6c:97:de:18:43:2f:d9:46:73:db:f5:05:f7: 9e:45:e3:65:f0:54:c6:e4:f7:d2:36:77:7f:9c:6c:6c:23:74: 8e:94:b9:6d:3e:b2:da:11:03:0f:e6:8c:30:86:4b:60:a7:e6: 07:42:68:94:a2:40:2a:9e:61:01:be:ba:23:f2:b2:97:c9:0b: a9:de:d3:09:06:d5:29:a8:bc:2f:a0:e2:34:68:43:a2:19:28: 3f:49:0c:83:84:0e:f7:c4:06:88:8d:81:a5:ca:a3:c6:63:d7: cc:8c:10:7f:36:54:d8:34:27:83:78:f6:e8:ed:7e:d9:8d:f9: 62:72:51:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5MkQxMTAvBgNVBAUTKEZGNzcwNEU0QTczMzNGNjkzNzJEOUYzMzQxRjhEMDAy Q0I0QUMwQ0YwHhcNMjYwMzAxMjM1MjE5WhcNMjYwMzA4MjM1MjE5WjAYMRYwFAYD VQQDEw02OWE0ZDEzNC0zZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQE898fOGnIffLCS53zBQSIdm0sEd+2CR+pkvImwH6wp7b1t6BcE73WKeHzA SYDGPaSIIrlDo8C9b5A7UxdQfezfXTRqJJSsRW+XCcnp/wHIYZw60Js7dnVzDJdL 36SL1QPCSqF0RNLktQGyf6BhHe5SzNeauSUEe1Ha7danhPlNQNiCLI7lE9PgEJw7 TS112wrnQGYt1g4y2eb6YOO+aRKsI5C4gtF0Qo9O1t8ApgGPBvw8tHvzcBvW2Fot 36e86rPEjHZgon5LUHDTKuLf/0CVUN+d2WhhHZ0dqD/kKAZneeMdhnyC+9cmMv0p TU6p3tOgSt8E0oLJvk4KyVpBtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEa8JUAx 6qM+VUXC7FqLTxvu2+8pMB8GA1UdIwQYMBaAFP93BOSnMz9pNy2fM0H40ALLSsDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTkyRC85MTMzMjlGNEJC QTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAyazNMWjh6UWZqUUFzdEt3 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18zY0U1S2N6UDJrM0xaOHpRZmpRQXN0S3dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTkyRC85MTMzMjlGNEJCQTYxMUU2OEZDMTIxMkRDNEY5QUUwMi9fM2NFNUtjelAy azNMWjh6UWZqUUFzdEt3TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALyimrIzctQ0xPu19UrQrmQpoyj2LHSKDxxUv8On9tjlOrQLQd2PZPVhX0z0Y rQplxi/Fg1aBwaA2H4/oeWZNVJipnnjFD87g89UeVB5Lb4NOV6Mzo2w7KrNOlbgd IXrfIs9i827AxaoWYsoknw75rVCrv2fptuZqGM0lKqy4fj6xWKhsl94YQy/ZRnPb 9QX3nkXjZfBUxuT30jZ3f5xsbCN0jpS5bT6y2hEDD+aMMIZLYKfmB0JolKJAKp5h Ab66I/Kyl8kLqd7TCQbVKai8L6DiNGhDohkoP0kMg4QO98QGiI2BpcqjxmPXzIwQ fzZU2DQng3j26O1+2Y35YnJRLA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:41 2026 by rpki-client