$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft File: As_3eY8FPpyB_czteWLsu3bB0ho.mft (raw, json) Hash identifier: fOooWIHMAqBKXMUqucOZ6X8tyGzjgEGOY69ci+hb/lE= Subject key identifier: 54:54:1E:EF:BC:2E:74:2A:FA:12:BF:C2:46:6E:A8:CC:98:33:DE:86 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft Manifest number: 0127 Signing time: Sun 01 Mar 2026 06:40:48 +0000 Manifest this update: Sun 01 Mar 2026 06:40:47 +0000 Manifest next update: Sun 08 Mar 2026 06:40:47 +0000 Files and hashes: 1: As_3eY8FPpyB_czteWLsu3bB0ho.crl (hash: 6+w2L79xyJ/7tKXotOawi3+It0N5umiooTJXQBWGDPw=) 2: A8F5426250E311F09F3F2B1BC4F9AE02.roa (hash: EV0FyGcK6QhRS2eudKV74ZzYeY1G7bSUxZzFZFCBxAQ=) 3: 18C1AED0ABD111F0A1D84812C4F9AE02.roa (hash: LpfiiZBp6ZqPz+RAq9RYXP6EPKlAVKwF2M7MPrOOMO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Mar 1 06:40:47 2026 GMT Not After : Mar 8 06:40:47 2026 GMT Subject: CN=69a3df6f-71a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:1a:5b:2c:fd:20:5a:cd:25:04:87:d3:4f: c6:e3:b9:83:96:e9:2c:2b:29:16:16:8c:df:26:cd: 95:65:5d:67:52:bc:ff:4e:55:a5:56:28:e1:db:09: 01:0b:da:70:e9:b7:8a:3c:ba:a9:48:61:bd:8f:8c: 4a:cf:d5:ef:6a:16:96:3e:77:c3:7c:75:78:e3:ab: 7f:d8:21:63:28:cb:1d:ac:7c:34:3c:26:94:83:8d: 46:f9:5c:5c:11:d7:de:44:ca:bb:4e:20:f5:81:bb: fb:72:f6:62:90:d9:a7:02:c7:d3:0c:1d:ba:f9:64: 0e:ac:3d:29:33:d1:9b:a3:95:44:f5:8c:d8:d1:35: 4b:86:bd:af:a8:26:d5:a1:5b:40:b7:1b:0a:01:db: 40:30:e0:01:3d:fa:7e:1c:b2:cc:61:0e:6b:81:44: 17:61:f9:e2:a4:1a:78:85:fe:14:26:3e:88:e2:c9: e6:e8:3d:25:fd:96:76:e6:7a:2a:23:87:5f:6c:4d: fd:cf:9d:1a:a2:50:bc:1e:20:e6:d6:c7:bd:b9:c8: 4d:77:bb:48:2e:e5:72:14:ab:0d:5f:7e:ae:4c:88: 9f:fd:8e:28:4e:d4:18:db:0a:cd:bd:ed:cb:b2:aa: 98:05:c0:08:a8:f7:a4:ee:ed:5f:30:b6:58:ac:fc: 9c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:54:1E:EF:BC:2E:74:2A:FA:12:BF:C2:46:6E:A8:CC:98:33:DE:86 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d5:e9:79:25:a9:f9:f3:cf:be:b4:18:da:38:f3:2c:2c:e5: 77:29:c7:c8:cb:ae:16:e1:01:d4:df:66:82:15:af:08:d8:cf: 5c:b3:66:0d:7b:9d:b3:7e:00:79:f8:1a:09:c1:29:df:3a:9b: 8f:8e:c5:84:d2:c8:8d:94:e4:8e:f4:37:f7:db:4d:72:fe:1b: 96:33:3c:c7:d5:b5:2c:d9:a8:c9:db:02:f7:d9:ef:90:3d:61: 45:8e:aa:d1:d0:39:e1:d9:b3:cf:0b:bf:98:17:b5:5c:76:60: 69:52:70:cf:d6:ef:3d:4e:56:14:e2:d5:09:58:87:f4:88:f1: 02:14:16:0d:83:99:68:9d:71:4d:e6:15:4b:3c:03:68:91:51: 43:ff:26:ee:46:02:76:29:e7:74:0c:8d:af:22:ce:6b:ba:8f: c0:78:d2:bd:68:6a:cd:a3:d4:9d:d7:65:a6:8c:4d:ea:e4:a7: 55:9c:73:17:92:0e:db:a1:89:11:16:e0:1b:e0:a8:d0:82:aa: a0:30:c0:50:39:a5:dc:6c:ec:c0:48:a1:4f:63:09:02:97:20: f3:0d:e6:dc:b4:43:1c:f5:c1:b2:d6:b3:df:85:e1:94:7d:c4: 9c:7e:aa:25:93:48:a7:b1:69:ed:33:3a:58:87:ba:45:7d:d8: f2:d5:5d:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjYwMzAxMDY0MDQ3WhcNMjYwMzA4MDY0MDQ3WjAYMRYwFAYD VQQDEw02OWEzZGY2Zi03MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj8EaWyz9IFrNJQSH00/G47mDluksKykWFozfJs2VZV1nUrz/TlWlVijh2wkB C9pw6beKPLqpSGG9j4xKz9XvahaWPnfDfHV446t/2CFjKMsdrHw0PCaUg41G+Vxc EdfeRMq7TiD1gbv7cvZikNmnAsfTDB26+WQOrD0pM9Gbo5VE9YzY0TVLhr2vqCbV oVtAtxsKAdtAMOABPfp+HLLMYQ5rgUQXYfnipBp4hf4UJj6I4snm6D0l/ZZ25noq I4dfbE39z50aolC8HiDm1se9uchNd7tILuVyFKsNX36uTIif/Y4oTtQY2wrNve3L sqqYBcAIqPek7u1fMLZYrPycQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRUHu+8 LnQq+hK/wkZuqMyYM96GMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY5MC80MDlDOTcwQTVBRTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBw eUJfY3p0ZVdMc3UzYkIwaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdtXpeSWp+fPPvrQY2jjzLCzldynHyMuuFuEB1N9mghWvCNjPXLNmDXuds34A efgaCcEp3zqbj47FhNLIjZTkjvQ399tNcv4bljM8x9W1LNmoydsC99nvkD1hRY6q 0dA54dmzzwu/mBe1XHZgaVJwz9bvPU5WFOLVCViH9IjxAhQWDYOZaJ1xTeYVSzwD aJFRQ/8m7kYCdinndAyNryLOa7qPwHjSvWhqzaPUnddlpoxN6uSnVZxzF5IO26GJ ERbgG+Co0IKqoDDAUDml3GzswEihT2MJApcg8w3m3LRDHPXBstaz34XhlH3EnH6q JZNIp7Fp7TM6WIe6RX3Y8tVdVQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:15:07 2026 by rpki-client