$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: 0CoZJxY58YwY4Sw/JD3YCSq9JGFoqLjK8E3RB3pOK1s= Subject key identifier: 5E:33:C2:54:86:31:20:40:2D:CE:5D:06:B3:8C:C5:91:16:BA:D0:9D Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 038C Signing time: Sun 01 Mar 2026 01:38:35 +0000 Manifest this update: Sun 01 Mar 2026 01:38:34 +0000 Manifest next update: Sun 08 Mar 2026 01:38:34 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: UbmmgolJ/PKHWysJ+F4C5MJ3kSxjSS+4ptHleKr3DuQ=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: BkyDK7N8MqPzb7yz7N5nQ1LHqHZV+xDxLFOlL/0hv/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Mar 1 01:38:34 2026 GMT Not After : Mar 8 01:38:34 2026 GMT Subject: CN=69a3989a-0539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1d:cd:86:6d:eb:f3:72:04:10:3c:06:28:f1: a0:71:19:82:df:02:24:ef:e0:16:dd:44:64:d3:4b: 6c:38:49:2d:30:22:1a:b2:96:69:61:1d:8e:1f:87: da:7d:80:81:3f:71:e0:d5:76:34:fc:20:0d:45:96: 9a:2e:51:03:6f:9c:ee:d5:a6:c0:c4:6a:9a:e9:1c: e0:a9:36:3b:0f:ad:3c:03:af:cf:fb:5f:6c:f9:a7: 9d:f4:01:87:de:ac:a7:f5:b3:5a:c3:cc:ee:be:51: a5:9d:cf:57:e1:19:ff:bf:15:56:65:39:2f:4f:3f: 29:a6:e9:65:bc:1d:6b:22:3f:6c:8f:15:aa:8c:a2: 3a:a5:94:07:8c:ba:bc:c8:ab:6d:20:7b:14:20:82: 89:df:c7:a4:14:f8:a1:e6:25:27:46:75:88:1e:b4: e0:4d:4b:76:cb:d3:04:5d:05:5d:9c:c7:1d:86:ff: 5d:eb:3f:27:09:d3:d2:af:3d:80:90:41:f7:ba:0d: 7e:f6:3f:23:9b:45:3d:cb:46:53:4a:b0:e0:0d:90: 85:2d:10:df:00:e8:8f:93:7d:3b:14:92:fc:f9:e3: 3e:c2:dd:6a:22:f5:08:31:0a:a4:c5:53:ac:50:a0: 55:5d:37:d7:16:c6:56:87:f2:3d:8f:42:38:18:c9: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:33:C2:54:86:31:20:40:2D:CE:5D:06:B3:8C:C5:91:16:BA:D0:9D X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:86:40:0e:bb:59:75:a6:1b:59:d3:1a:98:d5:0b:87:cd:8b: 90:99:57:5d:b8:3d:5a:e7:7a:7b:ba:a7:9e:73:d7:a0:91:af: 0b:47:4b:80:d0:f8:c7:82:34:5f:6c:4e:36:27:51:0c:a1:84: e1:94:e5:4a:c5:b7:97:fe:47:73:92:ae:64:c0:ec:18:eb:cc: e6:b4:8e:0d:44:f4:99:66:91:75:81:b8:71:fc:ff:e6:72:00: ac:19:77:15:08:f5:29:82:9c:28:ec:4d:69:82:b2:a3:72:d5: d7:b2:ff:68:4f:5a:29:c1:87:99:b2:27:a8:8f:4a:da:2e:07: 25:94:94:00:88:53:15:af:06:7a:ba:a9:d2:27:f9:65:a9:35: 0f:bc:70:84:52:da:c4:80:77:1b:aa:c1:d3:9f:33:e4:36:28: fc:36:8b:9e:3f:f8:b5:98:af:27:57:2e:b6:6b:70:ca:05:68: 9f:36:f4:5c:eb:b8:d4:6a:7b:87:b2:04:bc:3f:8b:b8:99:9e: 0e:d8:b1:45:6c:0a:1a:fb:64:21:27:11:2f:a5:67:35:b0:3c: 60:81:55:a8:7a:d2:8b:6b:6a:c0:77:3f:2d:70:45:08:69:f9: db:a8:d4:a2:36:7b:37:53:cc:31:5a:36:4a:23:43:28:19:ec: 74:f0:8e:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjYwMzAxMDEzODM0WhcNMjYwMzA4MDEzODM0WjAYMRYwFAYD VQQDDA02OWEzOTg5YS0wNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkR3Nhm3r83IEEDwGKPGgcRmC3wIk7+AW3URk00tsOEktMCIaspZpYR2OH4fa fYCBP3Hg1XY0/CANRZaaLlEDb5zu1abAxGqa6RzgqTY7D608A6/P+19s+aed9AGH 3qyn9bNaw8zuvlGlnc9X4Rn/vxVWZTkvTz8ppullvB1rIj9sjxWqjKI6pZQHjLq8 yKttIHsUIIKJ38ekFPih5iUnRnWIHrTgTUt2y9MEXQVdnMcdhv9d6z8nCdPSrz2A kEH3ug1+9j8jm0U9y0ZTSrDgDZCFLRDfAOiPk307FJL8+eM+wt1qIvUIMQqkxVOs UKBVXTfXFsZWh/I9j0I4GMnklwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4zwlSG MSBALc5dBrOMxZEWutCdMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYoZADrtZdaYbWdMamNULh82LkJlXXbg9Wud6e7qnnnPXoJGvC0dLgND4x4I0 X2xONidRDKGE4ZTlSsW3l/5Hc5KuZMDsGOvM5rSODUT0mWaRdYG4cfz/5nIArBl3 FQj1KYKcKOxNaYKyo3LV17L/aE9aKcGHmbInqI9K2i4HJZSUAIhTFa8Gerqp0if5 Zak1D7xwhFLaxIB3G6rB058z5DYo/DaLnj/4tZivJ1cutmtwygVonzb0XOu41Gp7 h7IEvD+LuJmeDtixRWwKGvtkIScRL6VnNbA8YIFVqHrSi2tqwHc/LXBFCGn526jU ojZ7N1PMMVo2SiNDKBnsdPCOMw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:29:00 2026 by rpki-client