$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft File: P3PMOoZ5wNsESRpHvnaddbptwZQ.mft (raw, json) Hash identifier: ekByo6nVfH7VjNoM26hWerar0I2qtoYy48f1m13ZKS8= Subject key identifier: B4:94:ED:21:96:EB:0C:B7:B0:3C:5B:16:AF:4B:72:29:2A:4D:A6:34 Authority key identifier: 3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 Certificate issuer: /CN=A91D6DEC/serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft Manifest number: 0257 Signing time: Sun 01 Mar 2026 02:59:18 +0000 Manifest this update: Sun 01 Mar 2026 02:59:17 +0000 Manifest next update: Sun 08 Mar 2026 02:59:17 +0000 Files and hashes: 1: P3PMOoZ5wNsESRpHvnaddbptwZQ.crl (hash: c/uNxkxlpJ1v+Bewhb0kMGyB0rz2QkQLZfYxyxOlvSc=) 2: 777244A4506A11EE8D08A11BC4F9AE02.roa (hash: zxrXFqsfD+7NRRncl+qUeb1Nz8SeSSAW+8BU/fya5cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DEC, serialNumber=3F73CC3A8679C0DB04491A47BE769D75BA6DC194 Validity Not Before: Mar 1 02:59:17 2026 GMT Not After : Mar 8 02:59:17 2026 GMT Subject: CN=69a3ab86-ef68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:36:b1:ab:21:82:23:82:7b:2e:a7:ab:09: 3e:86:65:a6:44:3c:d6:dd:a2:58:8d:d2:09:da:0b: 12:0e:0d:94:89:fc:d8:97:f5:16:68:e3:86:9d:ef: be:9f:d3:71:8d:d0:50:5f:66:f4:65:73:ba:88:57: 88:84:26:d0:87:65:05:0f:22:6c:54:a7:2f:1d:f0: d4:da:d4:4c:a0:d1:11:fc:7e:7d:a3:af:77:6c:a8: 1b:ec:da:52:a9:e3:cd:21:cb:48:22:6e:bf:62:b0: b7:6c:c0:99:b1:1a:80:31:88:42:39:d7:40:70:e5: 32:09:e1:0b:5c:d5:79:15:5a:c2:6b:fa:29:b0:17: dc:dd:0c:39:bd:c8:bc:e7:14:f2:bd:6d:79:5b:5d: fb:4f:1e:96:79:7a:08:fe:15:17:b0:e2:42:9d:54: 0f:38:f2:e6:52:fa:4b:66:3a:c2:72:74:fd:d3:1f: 32:0e:26:f9:a1:dd:93:76:b0:56:3b:0f:41:70:98: 95:6e:1c:31:80:29:62:46:e7:ab:6c:b5:74:92:ea: 7d:ed:f7:f9:ea:bc:f9:53:b8:11:4b:74:3e:3b:c6: bc:04:a9:13:86:86:a8:04:f5:dd:ad:40:d8:7c:cb: fd:bb:ea:d5:9c:58:09:43:7e:19:f7:03:2d:81:d9: 41:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:94:ED:21:96:EB:0C:B7:B0:3C:5B:16:AF:4B:72:29:2A:4D:A6:34 X509v3 Authority Key Identifier: keyid:3F:73:CC:3A:86:79:C0:DB:04:49:1A:47:BE:76:9D:75:BA:6D:C1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3PMOoZ5wNsESRpHvnaddbptwZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DEC/D421794A8BEE11EDA7B3D522C4F9AE02/P3PMOoZ5wNsESRpHvnaddbptwZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8e:eb:bf:01:e7:4a:b6:3d:27:1d:20:18:1e:6b:a3:c1:3c: d2:cc:38:26:d5:53:3d:82:64:40:ad:f5:f8:66:ee:ed:7f:41: fe:7a:5f:b7:c8:59:b0:af:d3:0e:c8:cd:cb:dc:21:81:2d:58: ac:16:1a:d1:7e:60:36:49:2a:b2:9d:70:a1:b0:86:60:f9:52: aa:d6:e1:9c:9a:f5:85:41:f5:54:dd:88:10:cb:aa:59:db:7e: cf:cd:38:4c:5e:29:45:52:fd:d2:87:c7:16:cb:d1:3e:a4:52: eb:12:a7:70:b3:35:96:2e:6b:35:bd:51:75:05:06:0c:e9:ff: 9b:84:c3:6b:78:27:c3:6b:fd:f5:b5:d2:79:51:f1:e8:82:e1: c8:53:ae:d1:13:1d:b9:04:7f:51:74:b0:b7:d9:b5:89:c2:c2: 0e:99:7a:17:c0:12:f9:3c:9c:2a:87:5e:9f:af:d2:d9:df:57: 80:6e:d1:b5:81:4f:9f:36:af:b2:23:52:84:d6:6d:96:6d:27: 29:db:7e:62:59:92:2d:4b:b8:cc:26:4c:70:8a:fb:09:d5:a5: b3:9f:eb:9f:6b:cc:c7:47:de:5b:f7:d8:eb:6e:5e:88:b5:bc: f2:8d:11:33:51:98:fe:1c:fb:60:b2:44:7c:92:45:17:01:d9: 15:e7:dc:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZERUMxMTAvBgNVBAUTKDNGNzNDQzNBODY3OUMwREIwNDQ5MUE0N0JFNzY5RDc1 QkE2REMxOTQwHhcNMjYwMzAxMDI1OTE3WhcNMjYwMzA4MDI1OTE3WjAYMRYwFAYD VQQDDA02OWEzYWI4Ni1lZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpA2sashgiOCey6nqwk+hmWmRDzW3aJYjdIJ2gsSDg2UifzYl/UWaOOGne++ n9NxjdBQX2b0ZXO6iFeIhCbQh2UFDyJsVKcvHfDU2tRMoNER/H59o693bKgb7NpS qePNIctIIm6/YrC3bMCZsRqAMYhCOddAcOUyCeELXNV5FVrCa/opsBfc3Qw5vci8 5xTyvW15W137Tx6WeXoI/hUXsOJCnVQPOPLmUvpLZjrCcnT90x8yDib5od2TdrBW Ow9BcJiVbhwxgCliRuerbLV0kup97ff56rz5U7gRS3Q+O8a8BKkThoaoBPXdrUDY fMv9u+rVnFgJQ34Z9wMtgdlBBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSU7SGW 6wy3sDxbFq9LcikqTaY0MB8GA1UdIwQYMBaAFD9zzDqGecDbBEkaR752nXW6bcGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRFQy9ENDIxNzk0QThC RUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdOc0VTUnBIdm5hZGRicHR3 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzUE1Pb1o1d05zRVNScEh2bmFkZGJwdHdaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRFQy9ENDIxNzk0QThCRUUxMUVEQTdCM0Q1MjJDNEY5QUUwMi9QM1BNT29aNXdO c0VTUnBIdm5hZGRicHR3WlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh47rvwHnSrY9Jx0gGB5ro8E80sw4JtVTPYJkQK31+Gbu7X9B/npft8hZsK/T DsjNy9whgS1YrBYa0X5gNkkqsp1wobCGYPlSqtbhnJr1hUH1VN2IEMuqWdt+z804 TF4pRVL90ofHFsvRPqRS6xKncLM1li5rNb1RdQUGDOn/m4TDa3gnw2v99bXSeVHx 6ILhyFOu0RMduQR/UXSwt9m1icLCDpl6F8AS+TycKoden6/S2d9XgG7RtYFPnzav siNShNZtlm0nKdt+YlmSLUu4zCZMcIr7CdWls5/rn2vMx0feW/fY625eiLW88o0R M1GY/hz7YLJEfJJFFwHZFefcvw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:29 2026 by rpki-client