$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft File: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft (raw, json) Hash identifier: 8LJxwhfgoCn+imhB7SHi6dLljdg6wY0UInBH1jtzeIE= Subject key identifier: BF:85:1C:02:62:F8:36:44:16:C5:D6:C7:97:8A:F1:42:72:C1:04:B9 Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft Manifest number: 1C Signing time: Sun 01 Mar 2026 10:25:12 +0000 Manifest this update: Sun 01 Mar 2026 10:25:11 +0000 Manifest next update: Sun 08 Mar 2026 10:25:11 +0000 Files and hashes: 1: 3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl (hash: 55FfQhYOQuA0j/Iq1JQTc6df/SnTcZEq9EPRN5GJwnU=) 2: D7C273FAF1EF11F0A394FA90446F56BC.roa (hash: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246 Validity Not Before: Mar 1 10:25:11 2026 GMT Not After : Mar 8 10:25:11 2026 GMT Subject: CN=69a41408-8cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9b:72:72:11:10:32:09:ca:fe:b3:60:6c:74: 4a:ac:9a:3b:2d:ff:96:60:bd:e5:d4:ef:bb:bf:66: 29:c7:c7:78:10:1a:92:1a:cf:ee:b3:a9:4f:09:7c: 35:31:65:40:4a:f4:42:67:8a:37:ba:bc:e1:20:28: 9f:94:7e:49:7d:ee:db:7c:bd:93:d1:c0:c3:57:de: 8d:2e:fc:67:44:fb:96:f7:b7:fe:de:ad:d5:b1:f0: d1:cd:ab:7e:f8:5d:8b:c1:55:e7:57:9e:19:0b:36: 74:00:83:7f:4f:c9:76:e7:a9:f3:2b:4b:95:a8:71: 4e:11:59:b3:e2:c2:22:67:60:9e:d5:a9:d1:0d:92: 41:f9:72:40:66:17:80:e5:0a:ec:14:df:2c:f8:f9: 41:36:42:63:01:54:bd:fb:a5:d5:0e:9a:5b:d2:57: de:7f:b4:28:1d:ed:c1:a5:6f:0c:09:99:87:07:4d: 5c:c9:f7:50:b4:70:8a:bf:08:7b:02:17:cd:07:83: 82:b8:d1:48:ae:5d:15:59:f2:0c:2a:eb:49:f2:fa: e3:76:d4:b7:e3:5f:3a:e1:29:da:81:21:2a:f2:80: 71:06:e0:3e:70:7c:18:ed:da:16:ce:72:15:14:57: ce:aa:fd:54:9c:9a:97:8c:a2:b1:46:76:2e:0e:be: 95:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:85:1C:02:62:F8:36:44:16:C5:D6:C7:97:8A:F1:42:72:C1:04:B9 X509v3 Authority Key Identifier: keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:ea:f4:c5:6a:9e:94:ac:30:a4:6c:8b:b6:78:6c:ab:e5:f7: cb:b8:9a:58:b6:b8:5a:ff:d9:b0:4f:cf:30:09:8b:0c:4b:48: fc:72:2a:0b:48:08:43:f8:7a:3a:9a:c6:0a:75:59:55:db:e8: fa:4f:5a:32:ae:17:7b:e5:55:16:13:fc:d7:87:66:15:be:30: 29:74:3a:fa:ed:ef:7a:d7:ed:aa:57:84:5d:16:de:ef:95:06: 98:ed:f9:dd:ef:47:ea:51:c1:b0:af:4b:af:4e:34:82:39:2d: 0c:61:d1:54:fe:b7:1c:59:eb:81:72:7b:45:44:53:d6:8d:17: 3b:97:51:e7:d9:80:96:53:4a:b2:c0:f9:c5:6d:bc:e4:45:f1: 0d:d9:c4:37:53:26:b2:4c:b4:8e:ba:9f:5d:42:4d:ef:0b:d2: b7:1b:53:27:44:c6:bc:6d:24:f2:2e:f6:51:55:54:dd:8f:a4: 5d:a7:2c:bc:20:c9:81:b8:de:a5:d3:aa:1f:f0:ee:cd:cc:3b: e8:6e:18:a1:be:a7:4c:05:29:fc:6c:2b:9c:21:eb:f1:b5:ce: d0:77:2c:8b:ae:25:a4:d8:6e:07:5b:5c:8e:9f:a8:31:16:d9: 25:d8:fc:a0:12:7a:3c:b9:6f:56:8f:00:b8:bf:f3:5f:a3:a4: 8b:41:8f:65 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RENGNTExMC8GA1UEBRMoREYwRDUwQzdFRTJCMTE3NkQ1OEQxOEQ4NUQyNTkyOTM2 QUQ3QjI0NjAeFw0yNjAzMDExMDI1MTFaFw0yNjAzMDgxMDI1MTFaMBgxFjAUBgNV BAMTDTY5YTQxNDA4LThjZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzm3JyERAyCcr+s2BsdEqsmjst/5ZgveXU77u/ZinHx3gQGpIaz+6zqU8JfDUx ZUBK9EJnije6vOEgKJ+Ufkl97tt8vZPRwMNX3o0u/GdE+5b3t/7erdWx8NHNq374 XYvBVedXnhkLNnQAg39PyXbnqfMrS5WocU4RWbPiwiJnYJ7VqdENkkH5ckBmF4Dl CuwU3yz4+UE2QmMBVL37pdUOmlvSV95/tCgd7cGlbwwJmYcHTVzJ91C0cIq/CHsC F80Hg4K40UiuXRVZ8gwq60ny+uN21LfjXzrhKdqBISrygHEG4D5wfBjt2hbOchUU V86q/VScmpeMorFGdi4OvpX9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUv4UcAmL4 NkQWxdbHl4rxQnLBBLkwHwYDVR0jBBgwFoAU3w1Qx+4rEXbVjRjYXSWSk2rXskYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1Lzc1RkU2RjRBRjFF MzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhiVmpSallYU1dTazJyWHNr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM3cxUXgtNHJFWGJWalJqWVhTV1NrMnJYc2tZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Q0Y1Lzc1RkU2RjRBRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDLzN3MVF4LTRyRVhi VmpSallYU1dTazJyWHNrWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDa6vTFap6UrDCkbIu2eGyr5ffLuJpYtrha/9mwT88wCYsMS0j8cioLSAhD+Ho6 msYKdVlV2+j6T1oyrhd75VUWE/zXh2YVvjApdDr67e961+2qV4RdFt7vlQaY7fnd 70fqUcGwr0uvTjSCOS0MYdFU/rccWeuBcntFRFPWjRc7l1Hn2YCWU0qywPnFbbzk RfEN2cQ3UyayTLSOup9dQk3vC9K3G1MnRMa8bSTyLvZRVVTdj6Rdpyy8IMmBuN6l 06of8O7NzDvobhihvqdMBSn8bCucIevxtc7QdyyLriWk2G4HW1yOn6gxFtkl2Pyg Eno8uW9WjwC4v/Nfo6SLQY9l -----END CERTIFICATE-----Generated at Mon Mar 2 04:20:19 2026 by rpki-client