$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft File: 3dzECt5nfyP4p5ukFo729r7wZcc.mft (raw, json) Hash identifier: wtguwAPs+ZOzLQYrGG/Urr3PuO6TZ77fcBsYkgZrnPQ= Subject key identifier: 7B:D9:78:4F:7E:26:31:91:E2:21:5A:F5:17:CF:E0:E4:6C:63:B4:63 Authority key identifier: DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 Certificate issuer: /CN=A91CB2E2/serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft Manifest number: 5C Signing time: Sun 01 Mar 2026 09:29:25 +0000 Manifest this update: Sun 01 Mar 2026 09:29:24 +0000 Manifest next update: Sun 08 Mar 2026 09:29:24 +0000 Files and hashes: 1: 3dzECt5nfyP4p5ukFo729r7wZcc.crl (hash: d8Iicyd6ScyMk2Y9RV3DGuiTP/wGweZ5+XMPunPv8w0=) 2: 240EF95E896311F0B911053BC4F9AE02.roa (hash: Co/sRPulBw6qvif9KJcvfjfmyMtyY2U7i1UCU8/S+7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB2E2, serialNumber=DDDCC40ADE677F23F8A79BA4168EF6F6BEF065C7 Validity Not Before: Mar 1 09:29:24 2026 GMT Not After : Mar 8 09:29:24 2026 GMT Subject: CN=69a406f5-a0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ed:ac:d1:f0:e2:04:9a:2f:50:6c:1a:d9:4b: 04:10:df:6b:34:88:5f:92:09:88:ed:e0:27:8c:4f: d3:15:89:ba:4c:5f:cf:5a:ed:a9:9a:bf:17:9d:31: c3:94:b1:54:b8:40:0a:6e:01:4b:79:54:3f:db:8b: a8:25:a0:90:1f:9a:15:46:76:7d:af:ab:9a:fe:89: 5f:5d:2e:7a:fb:2f:cd:e2:b9:90:c8:98:c2:7c:65: c1:ea:0d:c2:c8:fb:ae:40:0d:9b:71:92:4a:92:5c: 83:dc:93:40:67:7e:d3:43:a6:90:05:9d:84:e0:89: 8d:01:d9:c0:fc:74:6b:b7:0e:c9:1f:2b:99:fe:19: 86:33:7a:6e:bc:65:50:87:1d:4c:5f:24:24:c6:2c: 76:6a:e2:90:01:41:01:be:c8:ac:ce:72:b4:55:84: c1:8d:e2:f0:7e:c7:45:f5:1a:e6:5e:ca:78:6a:2e: d3:5b:7b:4e:f5:d0:bb:82:3e:bd:ca:a5:03:0b:92: 42:5f:8c:e6:52:08:92:ab:42:fc:2e:5e:9a:e1:65: 5e:73:a6:5c:a8:3a:a5:37:27:65:c3:d3:27:55:80: 24:28:ef:db:6f:0c:05:1a:32:98:84:ba:32:01:0d: 49:42:25:ca:a5:57:30:39:ce:df:48:84:65:39:7c: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:78:4F:7E:26:31:91:E2:21:5A:F5:17:CF:E0:E4:6C:63:B4:63 X509v3 Authority Key Identifier: keyid:DD:DC:C4:0A:DE:67:7F:23:F8:A7:9B:A4:16:8E:F6:F6:BE:F0:65:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dzECt5nfyP4p5ukFo729r7wZcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB2E2/411C63B0895911F0BA65345DC4F9AE02/3dzECt5nfyP4p5ukFo729r7wZcc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:2a:17:2e:a2:f7:bc:fd:b8:2a:e1:11:13:14:0e:e1:15:39: bd:29:03:bf:89:b9:ee:28:d2:6e:0e:79:77:75:84:6a:43:25: da:ff:fd:ba:2c:e5:72:64:2f:43:64:3e:25:1f:9c:81:2f:95: 39:20:0c:e4:06:c4:75:35:5d:bc:c5:5f:6a:e4:41:a7:2b:d4: 5f:0c:17:73:b0:e3:ad:24:52:22:32:89:95:fd:ae:97:e3:7e: 32:4d:b3:25:1d:d8:50:72:72:5c:2f:7d:1e:bb:dc:77:53:92: c0:8e:cd:57:fc:df:cb:f9:6a:44:b1:c5:f9:1a:6d:d9:33:90: c1:7c:52:76:92:e2:8a:07:86:90:0a:32:b9:ca:ed:8e:e0:35: 13:63:ba:ff:5a:c7:d8:8d:a4:62:00:1d:77:d8:b6:5c:78:1a: ea:76:3a:48:25:76:b1:77:fa:7a:0d:bb:13:ed:0d:2a:1c:48: bb:30:7f:cd:39:3f:eb:bb:02:87:98:34:57:81:45:b4:ae:c9: 64:91:21:2a:5f:c9:5b:a2:23:62:ab:a1:0f:19:c3:d0:bd:5a: d3:d6:6a:c8:cc:ff:58:d7:ff:83:9e:f6:da:1f:88:15:21:00: b8:23:69:7e:c0:7e:2a:9a:55:24:41:35:59:79:84:dd:10:8b: a2:86:63:94 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjJFMjExMC8GA1UEBRMoREREQ0M0MEFERTY3N0YyM0Y4QTc5QkE0MTY4RUY2RjZC RUYwNjVDNzAeFw0yNjAzMDEwOTI5MjRaFw0yNjAzMDgwOTI5MjRaMBgxFjAUBgNV BAMTDTY5YTQwNmY1LWEwYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf7azR8OIEmi9QbBrZSwQQ32s0iF+SCYjt4CeMT9MVibpMX89a7amavxedMcOU sVS4QApuAUt5VD/bi6gloJAfmhVGdn2vq5r+iV9dLnr7L83iuZDImMJ8ZcHqDcLI +65ADZtxkkqSXIPck0BnftNDppAFnYTgiY0B2cD8dGu3DskfK5n+GYYzem68ZVCH HUxfJCTGLHZq4pABQQG+yKzOcrRVhMGN4vB+x0X1GuZeynhqLtNbe0710LuCPr3K pQMLkkJfjOZSCJKrQvwuXprhZV5zplyoOqU3J2XD0ydVgCQo79tvDAUaMpiEujIB DUlCJcqlVzA5zt9IhGU5fPCJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe9l4T34m MZHiIVr1F8/g5GxjtGMwHwYDVR0jBBgwFoAU3dzECt5nfyP4p5ukFo729r7wZccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMkUyLzQxMUM2M0IwODk1 OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQNHA1dWtGbzcyOXI3d1pj Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2R6RUN0NW5meVA0cDV1a0ZvNzI5cjd3WmNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC MkUyLzQxMUM2M0IwODk1OTExRjBCQTY1MzQ1REM0RjlBRTAyLzNkekVDdDVuZnlQ NHA1dWtGbzcyOXI3d1pjYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZKhcuove8/bgq4RETFA7hFTm9KQO/ibnuKNJuDnl3dYRqQyXa//26LOVyZC9D ZD4lH5yBL5U5IAzkBsR1NV28xV9q5EGnK9RfDBdzsOOtJFIiMomV/a6X434yTbMl HdhQcnJcL30eu9x3U5LAjs1X/N/L+WpEscX5Gm3ZM5DBfFJ2kuKKB4aQCjK5yu2O 4DUTY7r/WsfYjaRiAB132LZceBrqdjpIJXaxd/p6DbsT7Q0qHEi7MH/NOT/ruwKH mDRXgUW0rslkkSEqX8lboiNiq6EPGcPQvVrT1mrIzP9Y1/+DnvbaH4gVIQC4I2l+ wH4qmlUkQTVZeYTdEIuihmOU -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:20 2026 by rpki-client