$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: dLRlx1yc+oWthc3oB/hYf+IHRrp8mOoKDzmGOHdlh4g= Subject key identifier: 0F:A6:37:33:18:A5:A0:D9:27:D8:D7:90:CF:FF:08:46:58:67:F5:64 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3527 Signing time: Mon 02 Mar 2026 02:38:33 +0000 Manifest this update: Mon 02 Mar 2026 02:38:31 +0000 Manifest next update: Mon 09 Mar 2026 02:38:31 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: znuEdSFYKVVOHry6n8Qkh7naWMSXvg7ukQe/UB70sso=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: EhMTtTipB5mwuHrKnjpuv7A1471W1JckUsepZh+TZ2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Mar 2 02:38:31 2026 GMT Not After : Mar 9 02:38:31 2026 GMT Subject: CN=69a4f828-2a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:d6:3a:4b:63:80:64:16:8f:4c:d9:34:8b: ed:aa:12:fc:6f:1a:6c:96:f3:25:32:36:3c:dd:b7: 45:f4:c0:55:ac:81:97:ac:fa:25:24:76:cf:8c:84: 19:b5:86:28:08:40:43:24:64:5b:54:d2:ea:01:6c: 31:d8:53:19:b9:e0:d3:16:92:f2:2b:9b:81:27:de: 46:c7:a1:10:0f:92:86:a1:3f:e3:b3:48:81:19:5b: f2:4a:5f:a8:c7:04:f8:e6:08:2b:c3:7f:42:d7:cf: 64:78:c1:67:52:b3:a0:5d:f2:df:cb:37:2a:66:d0: 87:b2:c5:22:d3:b3:49:2f:c3:40:81:80:6d:2f:a2: 31:39:8e:91:33:5a:74:bd:62:ff:f5:13:48:92:d3: d5:c1:72:dc:c8:66:58:71:ba:ef:dd:c4:a6:91:fe: a5:cc:89:4e:91:3c:38:86:bb:77:15:86:08:bc:23: 4c:b5:85:cc:36:06:ad:c0:f7:e2:65:8e:41:46:42: 4a:d0:9b:ce:5b:87:d8:59:60:4b:bf:02:4a:bd:bf: f1:7b:6f:d9:f8:cf:3c:0f:fc:1a:d8:8d:2f:00:d4: 60:58:95:dd:90:88:8b:33:7c:c5:d0:59:3d:1f:90: c9:3b:73:85:28:11:80:f8:7f:3d:c4:b8:c7:b8:76: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A6:37:33:18:A5:A0:D9:27:D8:D7:90:CF:FF:08:46:58:67:F5:64 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c2:a4:21:01:f3:51:96:2c:24:06:e3:27:80:f4:f2:22:4d: 5f:5b:37:51:82:4d:ef:f1:1e:26:1d:f0:53:c4:41:4d:7b:2c: df:d8:92:c8:41:c9:a9:a4:99:bc:b8:5a:21:c1:7d:72:cb:51: 08:8b:14:90:c4:de:f0:2c:3a:d2:c4:92:87:88:9d:b7:ac:ff: 38:45:ef:63:50:60:65:e9:2e:84:95:78:8e:9e:2d:bf:63:df: da:1b:89:e7:67:0b:e4:e6:8d:d5:8f:e7:d3:10:39:c0:38:0f: 01:da:40:b0:ad:2e:22:7d:29:53:8b:b5:06:f9:e6:d2:29:2f: 84:3f:54:dd:10:a3:2d:0d:c2:30:df:99:4b:30:2d:69:30:b0: f3:08:eb:91:9a:00:48:a8:92:1d:3d:0f:7e:20:55:bb:9f:72: 79:ab:d6:a9:44:65:93:26:a1:ac:23:3a:9a:d6:da:a8:c5:d1: 22:d8:df:90:67:5c:25:26:31:fe:ce:9a:8a:7e:0d:6a:28:da: dd:a6:20:64:40:0e:9b:3b:19:fd:1b:08:4c:aa:75:24:76:70: eb:63:9e:09:69:33:d2:4a:00:6c:98:50:19:a8:48:4f:74:76: 94:53:1d:d3:0a:37:ac:f4:eb:23:59:fe:9f:b4:16:1d:2e:23: 75:26:9f:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwMzAyMDIzODMxWhcNMjYwMzA5MDIzODMxWjAYMRYwFAYD VQQDEw02OWE0ZjgyOC0yYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lzWOktjgGQWj0zZNIvtqhL8bxpslvMlMjY83bdF9MBVrIGXrPolJHbPjIQZ tYYoCEBDJGRbVNLqAWwx2FMZueDTFpLyK5uBJ95Gx6EQD5KGoT/js0iBGVvySl+o xwT45ggrw39C189keMFnUrOgXfLfyzcqZtCHssUi07NJL8NAgYBtL6IxOY6RM1p0 vWL/9RNIktPVwXLcyGZYcbrv3cSmkf6lzIlOkTw4hrt3FYYIvCNMtYXMNgatwPfi ZY5BRkJK0JvOW4fYWWBLvwJKvb/xe2/Z+M88D/wa2I0vANRgWJXdkIiLM3zF0Fk9 H5DJO3OFKBGA+H89xLjHuHbTlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+mNzMY paDZJ9jXkM//CEZYZ/VkMB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOcKkIQHzUZYsJAbjJ4D08iJNX1s3UYJN7/EeJh3wU8RBTXss39iSyEHJqaSZ vLhaIcF9cstRCIsUkMTe8Cw60sSSh4idt6z/OEXvY1BgZekuhJV4jp4tv2Pf2huJ 52cL5OaN1Y/n0xA5wDgPAdpAsK0uIn0pU4u1Bvnm0ikvhD9U3RCjLQ3CMN+ZSzAt aTCw8wjrkZoASKiSHT0PfiBVu59yeavWqURlkyahrCM6mtbaqMXRItjfkGdcJSYx /s6ain4Naija3aYgZEAOmzsZ/RsITKp1JHZw62OeCWkz0koAbJhQGahIT3R2lFMd 0wo3rPTrI1n+n7QWHS4jdSafCQ== -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:08 2026 by rpki-client