$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft File: 3aSfQfYYpV-cp8_FW66nthbZV2I.mft (raw, json) Hash identifier: 6E6TnRqp8tc3o3pfbjW1U/vNl4mZrfMcaTd6PEbywKE= Subject key identifier: 92:78:C2:63:06:A3:5A:0A:6C:6A:1B:3E:24:03:B2:A0:AF:14:58:0A Authority key identifier: DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 Certificate issuer: /CN=A91A7273/serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft Manifest number: CB Signing time: Mon 02 Mar 2026 02:14:53 +0000 Manifest this update: Mon 02 Mar 2026 02:14:52 +0000 Manifest next update: Mon 09 Mar 2026 02:14:52 +0000 Files and hashes: 1: 3aSfQfYYpV-cp8_FW66nthbZV2I.crl (hash: kyLWn4sUW//m56zjsJrIffuX4rGuxASdpUr7reeX6Rg=) 2: 3958EEC642BB11F0B449BB81C4F9AE02.roa (hash: xBMqZvhUayr3U1URgwrl8EIqJ+zMDOpes797KaEjYwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7273, serialNumber=DDA49F41F618A55F9CA7CFC55BAEA7B616D95762 Validity Not Before: Mar 2 02:14:52 2026 GMT Not After : Mar 9 02:14:52 2026 GMT Subject: CN=69a4f29d-90eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:a8:b3:a1:b2:78:d5:1b:8b:e5:f0:75:b7: 27:a1:34:1e:cc:d3:a0:1d:33:fa:49:91:b0:5a:d1: 33:d2:cc:77:1a:8b:fa:45:21:89:11:10:41:00:2a: b8:8c:e8:10:cc:de:0a:2e:e4:f0:68:e1:95:77:5c: 1a:ec:9a:87:b4:28:6c:bf:1b:8f:6c:e6:22:3d:39: 5e:ce:20:fb:ab:00:c0:36:e4:bd:e2:31:fb:77:f4: a5:71:c3:20:aa:22:eb:d2:de:ef:1b:63:be:6f:a0: 81:0c:2d:2d:65:e6:2e:11:3c:82:b4:0f:6d:9d:91: 45:c2:67:f5:65:f8:0b:5e:0c:90:40:60:6a:45:81: b7:01:c3:be:33:a3:74:e1:f3:ca:50:7a:79:83:1b: 23:c7:34:68:e2:b9:74:ec:66:10:3b:b6:53:62:ea: f0:99:38:22:a0:51:8b:57:e6:43:ee:7e:48:b5:ba: 75:fa:af:14:04:7f:ae:9b:8d:74:8a:5d:d9:50:b7: e2:ba:25:bc:c0:4b:59:d0:20:3d:33:94:24:f3:2c: 60:08:2f:82:72:84:22:55:5d:7a:8d:a5:40:4a:46: 39:54:14:25:6c:94:2e:75:9b:0b:d9:35:b3:6f:5e: d8:f8:01:66:e9:79:36:77:f7:35:3d:c8:e0:48:08: c9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:C2:63:06:A3:5A:0A:6C:6A:1B:3E:24:03:B2:A0:AF:14:58:0A X509v3 Authority Key Identifier: keyid:DD:A4:9F:41:F6:18:A5:5F:9C:A7:CF:C5:5B:AE:A7:B6:16:D9:57:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3aSfQfYYpV-cp8_FW66nthbZV2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/FC50500EE77111EF9DFBDD50C4F9AE02/3aSfQfYYpV-cp8_FW66nthbZV2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8a:e8:9b:7f:1d:a5:2e:6a:98:0a:4a:d8:8a:1e:f6:d8:30: 10:11:94:4e:91:de:4a:02:af:71:0a:cb:36:e3:5f:67:ef:f1: bd:1f:6b:3c:93:b7:a6:51:44:ae:57:ce:d8:3b:c6:f3:8c:ca: c1:7c:39:1b:b2:99:97:90:a1:bf:0f:de:35:5a:7b:65:2b:2c: f2:86:63:a2:f4:43:00:20:39:b6:2b:83:fc:01:19:8d:7d:01: b5:4c:93:08:ca:99:6c:a0:0b:2b:27:27:44:7f:46:7c:8f:9e: 7f:64:97:f5:c5:18:eb:eb:84:7b:01:91:13:00:0d:3a:05:20: 11:91:42:4c:33:ef:85:7e:22:60:67:4a:2f:cb:3f:a4:a4:17: cf:92:a6:2c:81:8b:73:38:f0:1c:61:e3:8f:f1:b5:9a:07:2a: 0f:85:33:0e:8d:aa:50:0a:ee:52:51:01:bc:b4:ea:19:26:a5: 64:3b:19:64:f3:28:a2:42:aa:86:20:15:bd:f7:3d:ad:db:29: 03:62:86:d7:97:d0:19:80:4e:21:99:d3:85:40:23:f2:8d:a3: 4f:e7:4b:1e:eb:80:35:0b:9c:0d:3f:80:3d:18:5d:97:bc:08: 8f:dd:47:7e:25:23:e3:69:cd:36:da:86:a1:ce:71:fa:f3:ec: 6f:58:d7:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcyNzMxMTAvBgNVBAUTKEREQTQ5RjQxRjYxOEE1NUY5Q0E3Q0ZDNTVCQUVBN0I2 MTZEOTU3NjIwHhcNMjYwMzAyMDIxNDUyWhcNMjYwMzA5MDIxNDUyWjAYMRYwFAYD VQQDEw02OWE0ZjI5ZC05MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOuos6GyeNUbi+XwdbcnoTQezNOgHTP6SZGwWtEz0sx3Gov6RSGJERBBACq4 jOgQzN4KLuTwaOGVd1wa7JqHtChsvxuPbOYiPTleziD7qwDANuS94jH7d/SlccMg qiLr0t7vG2O+b6CBDC0tZeYuETyCtA9tnZFFwmf1ZfgLXgyQQGBqRYG3AcO+M6N0 4fPKUHp5gxsjxzRo4rl07GYQO7ZTYurwmTgioFGLV+ZD7n5Itbp1+q8UBH+um410 il3ZULfiuiW8wEtZ0CA9M5Qk8yxgCC+CcoQiVV16jaVASkY5VBQlbJQudZsL2TWz b17Y+AFm6Xk2d/c1PcjgSAjJawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJ4wmMG o1oKbGobPiQDsqCvFFgKMB8GA1UdIwQYMBaAFN2kn0H2GKVfnKfPxVuup7YW2Vdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzI3My9GQzUwNTAwRUU3 NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBWLWNwOF9GVzY2bnRoYlpW MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhU2ZRZllZcFYtY3A4X0ZXNjZudGhiWlYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzI3My9GQzUwNTAwRUU3NzExMUVGOURGQkRENTBDNEY5QUUwMi8zYVNmUWZZWXBW LWNwOF9GVzY2bnRoYlpWMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnYrom38dpS5qmApK2Ioe9tgwEBGUTpHeSgKvcQrLNuNfZ+/xvR9rPJO3plFE rlfO2DvG84zKwXw5G7KZl5Chvw/eNVp7ZSss8oZjovRDACA5tiuD/AEZjX0BtUyT CMqZbKALKycnRH9GfI+ef2SX9cUY6+uEewGREwANOgUgEZFCTDPvhX4iYGdKL8s/ pKQXz5KmLIGLczjwHGHjj/G1mgcqD4UzDo2qUAruUlEBvLTqGSalZDsZZPMookKq hiAVvfc9rdspA2KG15fQGYBOIZnThUAj8o2jT+dLHuuANQucDT+APRhdl7wIj91H fiUj42nNNtqGoc5x+vPsb1jXlQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:20 2026 by rpki-client