$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: JuhS2OlLplk6NKzWS0J365MgZmt+VGHWXWYKenJctYk= Subject key identifier: 22:A5:B3:74:B1:9B:FD:52:EC:FE:1C:FF:44:0C:D0:0B:1B:28:ED:4D Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 0288 Signing time: Mon 02 Mar 2026 02:56:14 +0000 Manifest this update: Mon 02 Mar 2026 02:56:11 +0000 Manifest next update: Mon 09 Mar 2026 02:56:11 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: QAJ1zGiHzyzCBlOFNkTTF4dgCusaeICMEDejYirS/ho=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Mar 2 02:56:11 2026 GMT Not After : Mar 9 02:56:11 2026 GMT Subject: CN=69a4fc4e-5f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:79:e7:94:6a:22:9d:d2:ac:04:61:69:47:c6: d9:5c:9c:1e:0a:69:4b:ec:3a:48:b6:07:c5:ce:09: 27:82:6e:00:e6:cd:75:84:20:38:99:11:e5:aa:ae: b7:80:1b:7a:ef:86:e5:83:b0:95:16:38:b0:da:1e: b3:e6:ae:af:dd:56:f9:65:e7:d2:33:31:0b:e3:31: 6e:58:7d:f5:84:36:bf:fe:67:e3:6a:8d:ef:54:88: 3b:86:21:28:8f:d0:9c:61:01:ce:66:ec:35:32:35: 03:eb:ea:80:91:8a:95:38:1c:4e:c2:43:a9:27:2b: 96:c1:af:c5:22:a7:c4:f4:84:59:4e:a2:21:cd:db: fa:fc:53:b2:a2:56:0e:4d:01:17:8f:59:bc:19:fe: 35:ae:5b:47:02:7f:b0:09:35:59:1e:ff:1d:03:79: ac:89:5c:ab:db:1f:04:4b:94:a9:63:a6:94:0a:e7: bf:e8:30:55:b6:9d:97:89:cf:36:52:34:18:a8:39: 69:66:cb:6d:a8:9a:fb:d4:aa:da:84:e0:2a:08:4b: 2c:7a:8b:74:63:1b:16:1a:da:d6:fe:2c:fa:7d:7a: b6:54:72:94:13:19:d4:aa:7d:b8:c9:f4:60:8c:e4: df:5f:ea:0c:28:27:d0:47:5f:c6:b2:2d:ad:e4:69: 73:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A5:B3:74:B1:9B:FD:52:EC:FE:1C:FF:44:0C:D0:0B:1B:28:ED:4D X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:cc:57:70:4e:68:4a:d4:48:26:b3:50:89:e6:c1:25:f5:96: e6:53:ca:0b:c9:da:fa:68:ff:85:3d:70:c8:f3:c8:09:4e:7b: a6:25:ce:1f:d4:4e:1b:a3:89:65:e4:e1:19:c9:8c:f7:16:7f: a5:b1:fb:42:14:a8:a6:ef:ab:bd:bb:fa:dd:a7:a5:a1:0a:0f: fe:22:65:e9:01:59:e3:24:2f:e2:21:4a:56:bc:56:ff:07:f0: ec:21:b6:52:2f:7b:01:40:28:cb:54:bf:e0:e7:0a:10:18:ce: 2b:33:3f:71:5f:f9:fd:04:f3:ef:67:1d:fa:5f:df:ae:b4:59: a7:4d:14:b2:e7:e9:d7:d4:03:2a:5b:9e:42:2f:69:ed:18:c4: 15:0d:b1:90:dc:7f:b3:8f:08:1c:83:b9:88:8a:48:9e:65:32: 4e:9c:36:bf:cf:fd:29:c2:12:3a:e2:f4:2f:06:c7:d2:2a:c0: 96:69:bc:42:43:bb:f5:84:81:a6:16:cd:2b:1e:44:a6:d8:92: 21:3f:9a:8f:94:e3:75:c1:a2:2f:fa:f4:5f:1f:38:be:86:8a: 5f:3d:2e:a2:a4:d1:59:b2:e1:44:49:e0:33:f1:8c:ba:e2:3f: e8:a3:67:56:b8:4e:00:1d:73:0d:94:8d:92:c4:4f:54:4e:92: 13:6d:c0:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjYwMzAyMDI1NjExWhcNMjYwMzA5MDI1NjExWjAYMRYwFAYD VQQDEw02OWE0ZmM0ZS01Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+XnnlGoindKsBGFpR8bZXJweCmlL7DpItgfFzgkngm4A5s11hCA4mRHlqq63 gBt674blg7CVFjiw2h6z5q6v3Vb5ZefSMzEL4zFuWH31hDa//mfjao3vVIg7hiEo j9CcYQHOZuw1MjUD6+qAkYqVOBxOwkOpJyuWwa/FIqfE9IRZTqIhzdv6/FOyolYO TQEXj1m8Gf41rltHAn+wCTVZHv8dA3msiVyr2x8ES5SpY6aUCue/6DBVtp2Xic82 UjQYqDlpZsttqJr71KrahOAqCEsseot0YxsWGtrW/iz6fXq2VHKUExnUqn24yfRg jOTfX+oMKCfQR1/Gsi2t5GlzQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKls3Sx m/1S7P4c/0QM0AsbKO1NMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA38xXcE5oStRIJrNQiebBJfWW5lPKC8na+mj/hT1wyPPICU57piXOH9ROG6OJ ZeThGcmM9xZ/pbH7QhSopu+rvbv63aeloQoP/iJl6QFZ4yQv4iFKVrxW/wfw7CG2 Ui97AUAoy1S/4OcKEBjOKzM/cV/5/QTz72cd+l/frrRZp00Usufp19QDKlueQi9p 7RjEFQ2xkNx/s48IHIO5iIpInmUyTpw2v8/9KcISOuL0LwbH0irAlmm8QkO79YSB phbNKx5EptiSIT+aj5TjdcGiL/r0Xx84voaKXz0uoqTRWbLhREngM/GMuuI/6KNn VrhOAB1zDZSNksRPVE6SE23APg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:45 2026 by rpki-client