$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft File: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft (raw, json) Hash identifier: ajZ+YI1I1/PZaFAjRjAq/4rSfToOoLH2pX4AlhNhj0E= Subject key identifier: 91:BF:79:46:7E:B2:31:DA:4E:67:DB:F4:27:97:A8:F7:FE:97:51:CD Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft Manifest number: 01FB Signing time: Mon 02 Mar 2026 00:01:58 +0000 Manifest this update: Mon 02 Mar 2026 00:01:57 +0000 Manifest next update: Mon 09 Mar 2026 00:01:57 +0000 Files and hashes: 1: 3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl (hash: 9qcxCY0tWB1Kt7zqMSHmI7MhJ5Ue6knjUxeFw5qb1ms=) 2: 4F9AF642C51611F0BA6C053AC4F9AE02.roa (hash: 5zAOgB22zL6pVph9qm3voiT68sx6u2vMp/yVRjtWQK4=) 3: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (hash: VCOjCSF/4xzIAgt9Ri0TgNyMKXdtQbA3xkgLmkwNolc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Mar 2 00:01:57 2026 GMT Not After : Mar 9 00:01:57 2026 GMT Subject: CN=69a4d376-5250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:1a:c0:f6:b1:b4:73:68:9e:55:70:10:0b: 99:b2:32:b1:f9:ae:3c:fc:19:72:a7:9a:95:4f:b7: 9e:0c:3e:6c:dd:04:58:ba:ea:6f:9f:d1:12:b3:46: 97:6b:2e:b5:95:d5:21:7a:6b:2d:0d:b0:f2:b8:a8: ec:48:10:08:d1:18:d6:6c:c1:9e:46:73:42:68:f7: 96:c2:38:a8:9c:4b:1a:c3:c7:19:01:24:08:7d:d1: 80:69:60:ce:da:ab:60:17:81:43:42:20:17:07:cc: d7:d3:7b:21:d7:89:ce:b5:f0:8c:1c:9e:8a:a1:73: 1b:99:9d:90:72:21:0b:47:de:34:f3:b1:17:d1:b1: 7d:a6:15:9d:b9:c2:a8:f8:c4:1f:d8:7e:70:b4:0b: 8e:88:be:c4:2c:3e:09:d4:4d:8b:60:ed:8c:b1:8f: 8c:64:ab:2b:31:b8:9f:59:48:87:38:1b:fb:fc:c1: 86:df:f5:2a:19:bf:33:b8:91:d6:32:5f:cd:8e:a2: 58:7a:08:85:f3:e6:4d:00:e4:b5:6b:58:63:fb:91: 21:26:10:6a:d5:9a:6e:dc:5f:d7:bd:6b:52:27:88: b7:c2:dc:b5:5c:e1:c9:5f:18:15:6d:cc:fb:4a:c4: 43:0b:b0:8a:3f:78:0f:f0:a6:14:8c:14:94:95:d4: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BF:79:46:7E:B2:31:DA:4E:67:DB:F4:27:97:A8:F7:FE:97:51:CD X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:80:2e:20:aa:2f:b3:85:2b:15:46:f6:d1:b1:f9:24:c0:7a: 9e:49:a8:d5:b8:de:df:39:00:9c:65:6f:09:f9:1e:23:50:8c: 78:7f:29:1b:11:ab:bb:13:78:41:b3:34:24:3b:8a:bd:90:01: 3a:bb:aa:2d:dc:da:e8:79:d7:7e:14:c6:4e:ec:e2:0e:4d:ae: c7:e4:93:fa:74:b9:e9:d6:7a:fa:57:5c:01:36:67:b5:80:12: 88:80:e8:25:40:3a:7f:12:06:e9:1a:9a:17:6e:8c:96:56:82: 7a:46:df:47:36:eb:2a:90:78:b4:5f:49:9f:47:6d:59:f9:6d: b3:b2:f3:18:e7:7a:59:ca:11:a1:01:61:29:97:a7:9f:b6:25: 0d:45:70:5e:0a:1f:d9:3c:97:bb:01:24:cb:38:72:f6:c5:8f: ba:ce:47:40:4a:bc:b0:36:9d:32:3d:19:7c:96:42:33:bb:b8: a9:df:b2:54:c6:84:b4:fb:f8:b3:57:88:c7:b3:2d:67:02:77: 5a:12:90:02:4b:fa:df:f6:13:26:0c:85:da:7a:c7:60:c7:db: b1:3b:cc:e5:99:74:31:d7:11:7f:a9:d2:e1:0f:56:12:a0:a6: 8d:fa:1f:3e:db:56:99:e8:40:32:63:73:f8:ac:0f:41:fa:2e: 58:dd:e4:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjYwMzAyMDAwMTU3WhcNMjYwMzA5MDAwMTU3WjAYMRYwFAYD VQQDEw02OWE0ZDM3Ni01MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfcawPaxtHNonlVwEAuZsjKx+a48/Blyp5qVT7eeDD5s3QRYuupvn9ESs0aX ay61ldUhemstDbDyuKjsSBAI0RjWbMGeRnNCaPeWwjionEsaw8cZASQIfdGAaWDO 2qtgF4FDQiAXB8zX03sh14nOtfCMHJ6KoXMbmZ2QciELR94087EX0bF9phWducKo +MQf2H5wtAuOiL7ELD4J1E2LYO2MsY+MZKsrMbifWUiHOBv7/MGG3/UqGb8zuJHW Ml/NjqJYegiF8+ZNAOS1a1hj+5EhJhBq1Zpu3F/XvWtSJ4i3wty1XOHJXxgVbcz7 SsRDC7CKP3gP8KYUjBSUldTaqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJG/eUZ+ sjHaTmfb9CeXqPf+l1HNMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUNDMy82NDE2RDgzODE0QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdH bU1MV1BETHZZYjI4V1lCWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWoAuIKovs4UrFUb20bH5JMB6nkmo1bje3zkAnGVvCfkeI1CMeH8pGxGruxN4 QbM0JDuKvZABOruqLdza6HnXfhTGTuziDk2ux+ST+nS56dZ6+ldcATZntYASiIDo JUA6fxIG6RqaF26MllaCekbfRzbrKpB4tF9Jn0dtWflts7LzGOd6WcoRoQFhKZen n7YlDUVwXgof2TyXuwEkyzhy9sWPus5HQEq8sDadMj0ZfJZCM7u4qd+yVMaEtPv4 s1eIx7MtZwJ3WhKQAkv63/YTJgyF2nrHYMfbsTvM5Zl0MdcRf6nS4Q9WEqCmjfof PttWmehAMmNz+KwPQfouWN3kQg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:17 2026 by rpki-client