$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: 3TtHDqN39isVxV9fy2dFi8jrfZhZp0dA/71jxoByYvc= Subject key identifier: 0A:2A:12:7B:9B:5E:A1:39:1E:DE:4A:55:F1:36:E7:F4:0D:C2:07:80 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 010D Signing time: Sun 01 Mar 2026 06:59:44 +0000 Manifest this update: Sun 01 Mar 2026 06:59:44 +0000 Manifest next update: Sun 08 Mar 2026 06:59:44 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: RkHEy4erkZNj4qO65SM5v78XIqLx/QVORdNRvXH1Ixg=) 2: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 29JJitgeZibCuMLwmFZOe7Iewb0yCQvMIqLz7xwmm+U=) 3: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: dW58Y+pKYUf1WCLV35cEdJ/OqwM43ahP5CXKmE1/xaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Mar 1 06:59:44 2026 GMT Not After : Mar 8 06:59:44 2026 GMT Subject: CN=69a3e3e0-290d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:3f:cc:7b:6c:0a:1d:ea:e1:d1:65:7b:ef: 96:22:67:bc:4c:21:cc:82:c5:07:d3:57:27:cb:f1: e5:41:ab:37:3f:6a:de:80:70:e3:f7:b0:d5:3d:0d: ff:cb:f2:ad:a5:e4:a3:d7:14:d0:3b:ea:ca:70:4d: 83:94:a5:44:fc:95:59:48:b7:37:5c:04:0f:38:ed: 83:4e:13:08:4a:a1:db:c8:77:c0:ae:55:30:57:87: 57:ff:14:4e:79:9b:e8:d4:34:f2:62:f9:95:10:9c: 3e:1b:9c:64:e4:72:aa:64:95:17:4d:e1:9b:49:44: c6:71:77:26:87:a7:41:17:79:f1:d7:cf:eb:50:2e: fa:12:44:16:ad:e9:9a:9b:13:f5:d8:11:43:7e:d0: c5:ab:aa:a7:15:ff:53:26:66:82:9e:2d:1b:89:3f: ac:9b:44:26:35:4d:73:fb:70:20:71:b8:83:30:dd: d1:96:89:99:c4:6a:01:4d:5b:ba:8a:78:db:a7:73: 93:4c:ab:1a:5f:2e:34:e2:71:85:07:70:6b:ee:2a: 9e:ef:ed:e0:98:19:99:9e:6f:82:af:3c:3a:be:a6: 3b:ba:8e:00:f8:93:c4:24:b4:9d:2e:f7:57:89:de: 79:05:e6:58:9e:62:2c:56:b9:04:60:24:95:b8:3e: 6c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2A:12:7B:9B:5E:A1:39:1E:DE:4A:55:F1:36:E7:F4:0D:C2:07:80 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:0e:d1:30:8c:2e:21:9f:43:da:e7:f8:7f:4c:b0:71:cd:3c: 95:87:69:a0:4a:5d:82:62:01:d3:9d:86:73:e8:c6:f1:d3:14: a5:e7:3b:29:11:c2:8a:e2:59:1a:33:02:4b:5c:a4:db:04:0c: 4d:8b:18:3b:5e:ac:ad:62:cb:ae:09:89:49:de:19:17:83:15: 0e:42:b9:e1:0e:8e:98:cc:2d:be:b7:b9:63:96:e6:23:c9:49: f3:81:f7:1f:0d:08:d2:30:6e:d5:21:7b:61:41:9f:b6:44:37: e0:0b:35:ac:d0:73:65:8c:fc:d6:dc:99:9a:64:b7:d5:8e:57: cd:a7:25:3a:72:83:f9:3a:0f:3a:22:42:8f:e4:86:de:0c:8e: 9a:a8:53:34:75:e8:ac:7d:cf:b9:d2:c2:4a:a5:a0:80:8c:87: 72:61:c4:e2:18:0a:a4:c3:a5:d6:69:a2:38:59:02:15:a0:80: 43:e4:69:25:fe:a2:a0:ce:c8:cd:c7:f4:94:bd:88:e5:1c:c8: c9:a8:78:39:c6:7d:57:82:73:d4:f0:cb:71:81:e0:4f:42:ec: 7d:f5:66:53:4d:0a:ce:a3:18:5b:29:2c:e6:26:48:f0:45:20: dc:9d:d5:03:be:ae:71:9f:7a:be:70:86:39:0a:5d:ca:82:4d: 38:a2:a7:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYwMzAxMDY1OTQ0WhcNMjYwMzA4MDY1OTQ0WjAYMRYwFAYD VQQDEw02OWEzZTNlMC0yOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbk/zHtsCh3q4dFle++WIme8TCHMgsUH01cny/HlQas3P2regHDj97DVPQ3/ y/KtpeSj1xTQO+rKcE2DlKVE/JVZSLc3XAQPOO2DThMISqHbyHfArlUwV4dX/xRO eZvo1DTyYvmVEJw+G5xk5HKqZJUXTeGbSUTGcXcmh6dBF3nx18/rUC76EkQWrema mxP12BFDftDFq6qnFf9TJmaCni0biT+sm0QmNU1z+3AgcbiDMN3RlomZxGoBTVu6 injbp3OTTKsaXy404nGFB3Br7iqe7+3gmBmZnm+Crzw6vqY7uo4A+JPEJLSdLvdX id55BeZYnmIsVrkEYCSVuD5sdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoqEnub XqE5Ht5KVfE25/QNwgeAMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvQ7RMIwuIZ9D2uf4f0ywcc08lYdpoEpdgmIB052Gc+jG8dMUpec7KRHCiuJZ GjMCS1yk2wQMTYsYO16srWLLrgmJSd4ZF4MVDkK54Q6OmMwtvre5Y5bmI8lJ84H3 Hw0I0jBu1SF7YUGftkQ34As1rNBzZYz81tyZmmS31Y5XzaclOnKD+ToPOiJCj+SG 3gyOmqhTNHXorH3PudLCSqWggIyHcmHE4hgKpMOl1mmiOFkCFaCAQ+RpJf6ioM7I zcf0lL2I5RzIyah4OcZ9V4Jz1PDLcYHgT0LsffVmU00KzqMYWyks5iZI8EUg3J3V A76ucZ96vnCGOQpdyoJNOKKnSw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:20 2026 by rpki-client