$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft File: 3COmnqHvwaN5SSwT6awUfEn1rQQ.mft (raw, json) Hash identifier: ZlZaaf/dOmKT+Ej9A/6vb6Bm05JGQXB6o2W+P8+sNR0= Subject key identifier: F0:0D:7B:45:35:84:55:EE:A3:D7:36:D2:BC:2F:4E:63:8C:08:74:13 Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Certificate serial: 0266 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft Manifest number: 0237 Signing time: Mon 02 Mar 2026 01:24:15 +0000 Manifest this update: Mon 02 Mar 2026 01:24:13 +0000 Manifest next update: Mon 09 Mar 2026 01:24:13 +0000 Files and hashes: 1: 3COmnqHvwaN5SSwT6awUfEn1rQQ.crl (hash: fC0hNt5Tpe18UnSgxXO6KiowVI7uyzFrIb8ulauJtRU=) 2: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (hash: 4yj8sZR6Z/FxcvXrPscntmMUZkXTFX7XG+1HhFVkn+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04 Validity Not Before: Mar 2 01:24:13 2026 GMT Not After : Mar 9 01:24:13 2026 GMT Subject: CN=69a4e6be-cfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:c8:81:34:cf:63:b7:af:ca:d2:53:5e:8f: 12:e6:94:d3:c6:63:54:77:d1:ea:3d:99:79:4e:b8: 40:3e:47:7f:39:ac:ba:ac:d4:d1:9f:fe:b9:79:7f: de:46:9f:73:91:f1:be:26:d0:c6:a2:30:c1:ca:42: 59:11:09:ac:f5:a7:27:e4:c4:25:1d:5b:ac:9f:f3: 1d:28:6f:2c:73:79:38:26:83:f0:79:e6:00:83:4a: 9b:68:84:e6:87:77:3c:15:2a:7a:bf:9e:e4:bf:85: ca:31:13:35:32:70:1c:37:a8:81:97:30:72:68:a7: 63:ec:cf:a6:d1:d9:ba:b5:75:34:fe:a1:84:4a:dc: 58:8a:08:ff:76:3c:7d:df:f9:50:ec:0d:07:62:38: c0:a7:38:57:97:92:c1:5d:27:56:29:4e:0b:bb:48: b4:c9:54:1d:37:0d:7d:32:c2:87:56:c2:7f:58:ff: 8c:a6:00:27:95:13:dc:55:a3:5f:79:2d:41:0c:09: 21:7e:5a:38:d3:4e:e2:5f:b9:b6:7c:5f:3c:fb:c7: 8b:c1:56:75:fd:2a:f8:1a:6d:1f:20:b9:5a:99:da: 71:8d:85:7f:38:88:a2:69:81:51:f2:9c:98:ba:6b: 1d:b0:b2:5e:85:6a:5e:3c:da:11:7f:73:58:16:da: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0D:7B:45:35:84:55:EE:A3:D7:36:D2:BC:2F:4E:63:8C:08:74:13 X509v3 Authority Key Identifier: keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:de:11:c1:dc:74:22:92:3a:64:9f:8a:e4:22:d7:b1:2e:ac: fa:97:53:1b:9f:6c:c3:6f:a5:c4:a4:c6:a0:ec:73:9a:cb:bf: 59:a4:82:20:79:5c:a1:c1:77:78:89:37:04:95:8e:b4:40:07: ca:ff:ee:e9:e2:30:69:f9:30:c9:d4:4c:1a:35:c1:3c:fe:bb: 2d:1e:62:19:e3:9d:de:04:75:d4:b1:ab:21:79:52:c3:37:88: 6f:b8:d0:f1:cd:c6:0f:8a:42:60:e6:29:72:68:ef:fd:70:2c: 38:f4:55:0d:b3:5b:e9:34:54:d9:0c:2a:b5:e1:17:08:a1:bb: 64:45:04:4c:a7:68:77:12:02:3d:ae:da:13:21:47:66:e5:5c: 99:96:5e:6e:c8:1f:65:98:aa:0f:47:db:66:16:69:ba:a6:93: e8:14:7f:26:32:31:48:71:7e:be:be:54:9c:4b:b0:a7:f6:b9: 33:2c:01:b5:ab:60:9c:ee:7e:a6:34:31:3c:85:7b:bd:68:5e: f1:f5:ed:b2:2d:49:c9:5b:aa:fb:c8:07:74:34:c6:32:cf:c9: 25:59:a3:4f:76:61:c8:92:a4:67:df:d6:ce:65:2a:ca:6a:93: 33:d6:1e:49:1e:08:49:9b:dd:18:82:17:2d:c9:aa:10:75:81: ae:46:95:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0QzIxMTAvBgNVBAUTKERDMjNBNjlFQTFFRkMxQTM3OTQ5MkMxM0U5QUMxNDdD NDlGNUFEMDQwHhcNMjYwMzAyMDEyNDEzWhcNMjYwMzA5MDEyNDEzWjAYMRYwFAYD VQQDEw02OWE0ZTZiZS1jZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx77IgTTPY7evytJTXo8S5pTTxmNUd9HqPZl5TrhAPkd/Oay6rNTRn/65eX/e Rp9zkfG+JtDGojDBykJZEQms9acn5MQlHVusn/MdKG8sc3k4JoPweeYAg0qbaITm h3c8FSp6v57kv4XKMRM1MnAcN6iBlzByaKdj7M+m0dm6tXU0/qGEStxYigj/djx9 3/lQ7A0HYjjApzhXl5LBXSdWKU4Lu0i0yVQdNw19MsKHVsJ/WP+MpgAnlRPcVaNf eS1BDAkhflo4007iX7m2fF88+8eLwVZ1/Sr4Gm0fILlamdpxjYV/OIiiaYFR8pyY umsdsLJehWpePNoRf3NYFtrpnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPANe0U1 hFXuo9c20rwvTmOMCHQTMB8GA1UdIwQYMBaAFNwjpp6h78GjeUksE+msFHxJ9a0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjRDMi9CMTdFOTVENjAz NzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndhTjVTU3dUNmF3VWZFbjFy UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi8zQ09tbnFIdndh TjVTU3dUNmF3VWZFbjFyUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfN4Rwdx0IpI6ZJ+K5CLXsS6s+pdTG59sw2+lxKTGoOxzmsu/WaSCIHlcocF3 eIk3BJWOtEAHyv/u6eIwafkwydRMGjXBPP67LR5iGeOd3gR11LGrIXlSwzeIb7jQ 8c3GD4pCYOYpcmjv/XAsOPRVDbNb6TRU2QwqteEXCKG7ZEUETKdodxICPa7aEyFH ZuVcmZZebsgfZZiqD0fbZhZpuqaT6BR/JjIxSHF+vr5UnEuwp/a5MywBtatgnO5+ pjQxPIV7vWhe8fXtsi1JyVuq+8gHdDTGMs/JJVmjT3ZhyJKkZ9/WzmUqymqTM9Ye SR4ISZvdGIIXLcmqEHWBrkaVAQ== -----END CERTIFICATE-----Generated at Mon Mar 2 15:03:49 2026 by rpki-client