$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft File: 3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json) Hash identifier: DymL4Gar1Jx20EZC6jCviZS6hGCC3eY4aDjsuj9w/TU= Subject key identifier: D9:6D:E8:CD:50:0F:4B:CB:50:34:D4:5F:39:76:04:FC:85:A0:5B:C7 Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 Certificate issuer: /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft Manifest number: 0165 Signing time: Sun 01 Mar 2026 05:53:16 +0000 Manifest this update: Sun 01 Mar 2026 05:53:16 +0000 Manifest next update: Sun 08 Mar 2026 05:53:16 +0000 Files and hashes: 1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: 49I5c7bhpgH00f5zUQz11LYN0q0soR8MwqA9jiUGXp4=) 2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: /IMJX7XsSqXWSBpPQa+GU6jkXrtHKjX0kCU46WfMzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7 Validity Not Before: Mar 1 05:53:16 2026 GMT Not After : Mar 8 05:53:16 2026 GMT Subject: CN=69a3d44c-11c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:47:b9:22:bd:25:0e:03:a4:ee:f0:e0:72: 1e:9b:a8:86:8d:a5:88:be:9a:b2:fa:3d:96:d7:51: 78:99:d3:49:69:7a:65:e1:fe:93:76:61:64:08:11: 2a:c7:d2:ea:2e:73:a4:15:c6:7e:f1:29:7b:dc:f5: 8b:37:f1:e4:90:e9:ca:40:46:a4:cb:ab:3d:6e:81: 98:4e:d7:99:d7:eb:eb:a7:2f:04:1c:e4:fd:06:57: 10:62:10:fa:f1:72:e1:88:3e:6f:3d:a1:b1:15:9b: 42:e0:a0:02:bf:07:4f:d3:86:8e:7d:00:b9:8a:d1: 61:d3:0e:51:13:c4:0d:78:a3:ff:4f:d4:90:1e:fd: 36:14:a3:36:96:18:61:86:6a:dd:9d:e1:b0:12:dd: 15:e6:0a:44:9b:60:94:d1:89:55:74:8e:c3:70:36: 6c:14:b6:ba:50:53:a8:a4:fa:6b:30:94:bb:21:01: 8e:ca:37:49:50:58:de:fd:2a:23:15:f4:60:4d:bd: 9e:e7:56:8f:34:c4:31:de:86:25:91:f1:78:e8:64: b1:19:0b:9b:a2:f6:27:a0:df:a7:51:1d:1c:8c:35: a3:0a:12:dd:0e:4b:14:e3:9b:61:3e:52:a5:5b:89: b0:b1:03:1b:1b:1e:a0:ce:be:e4:ea:bc:83:e5:d1: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6D:E8:CD:50:0F:4B:CB:50:34:D4:5F:39:76:04:FC:85:A0:5B:C7 X509v3 Authority Key Identifier: keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:42:b0:e4:0e:3b:5e:97:c2:32:3f:6e:58:68:4d:d9:ec:80: a6:6b:26:4b:e8:0b:4b:4c:19:23:71:1d:10:ee:30:78:22:a2: 4e:a1:64:c4:97:a4:8c:35:29:ad:f8:cb:e9:90:07:93:a5:eb: 32:c6:2d:44:d4:cc:fd:c1:f9:55:82:b3:33:ac:df:42:7d:a4: 43:6f:54:6a:cd:9f:3a:4f:90:fc:4c:f0:19:76:c9:07:53:98: 24:6f:10:91:14:58:45:c3:ed:01:87:8c:cf:d8:3d:19:f8:54: e8:5f:57:97:b0:35:d6:7c:13:03:7b:2d:9d:48:d4:09:7e:02: 75:2b:cd:c8:f5:fa:c2:00:29:66:4b:2e:2d:1a:fc:dd:82:f9: 68:5e:3d:33:4a:d4:9b:1c:cf:33:cf:34:3a:54:2b:08:ec:e9: c7:94:e9:25:d9:18:74:4f:b9:d5:2e:13:24:95:da:4d:7d:43: e2:ae:4c:f8:b1:c0:37:8a:a9:d0:fb:f9:75:de:ac:7e:2b:f2: 30:e6:e1:28:ed:1c:bb:5b:e3:73:56:de:01:6e:57:72:9d:fc: bb:39:ea:fc:b1:51:3a:e4:de:2a:57:c7:ab:9a:1c:77:18:1c: 3b:73:3e:81:41:02:d8:4c:81:cd:4f:13:3c:a4:95:da:31:9f: 07:09:40:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy MTkwN0IzRjcwHhcNMjYwMzAxMDU1MzE2WhcNMjYwMzA4MDU1MzE2WjAYMRYwFAYD VQQDEw02OWEzZDQ0Yy0xMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnY1HuSK9JQ4DpO7w4HIem6iGjaWIvpqy+j2W11F4mdNJaXpl4f6TdmFkCBEq x9LqLnOkFcZ+8Sl73PWLN/HkkOnKQEaky6s9boGYTteZ1+vrpy8EHOT9BlcQYhD6 8XLhiD5vPaGxFZtC4KACvwdP04aOfQC5itFh0w5RE8QNeKP/T9SQHv02FKM2lhhh hmrdneGwEt0V5gpEm2CU0YlVdI7DcDZsFLa6UFOopPprMJS7IQGOyjdJUFje/Soj FfRgTb2e51aPNMQx3oYlkfF46GSxGQubovYnoN+nUR0cjDWjChLdDksU45thPlKl W4mwsQMbGx6gzr7k6ryD5dH4DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlt6M1Q D0vLUDTUXzl2BPyFoFvHMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt bnBsbFdBdThiU0loa0hzX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkUKw5A47XpfCMj9uWGhN2eyApmsmS+gLS0wZI3EdEO4weCKiTqFkxJekjDUp rfjL6ZAHk6XrMsYtRNTM/cH5VYKzM6zfQn2kQ29Uas2fOk+Q/EzwGXbJB1OYJG8Q kRRYRcPtAYeMz9g9GfhU6F9Xl7A11nwTA3stnUjUCX4CdSvNyPX6wgApZksuLRr8 3YL5aF49M0rUmxzPM880OlQrCOzpx5TpJdkYdE+51S4TJJXaTX1D4q5M+LHAN4qp 0Pv5dd6sfivyMObhKO0cu1vjc1beAW5Xcp38uznq/LFROuTeKlfHq5ocdxgcO3M+ gUEC2EyBzU8TPKSV2jGfBwlA2Q== -----END CERTIFICATE-----Generated at Mon Mar 2 00:30:44 2026 by rpki-client