$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft File: 3oqNpw4WUAnRQNn2JFJNxNR51eg.mft (raw, json) Hash identifier: vVrsbxzhISrIVl5iZl6kvd58MyRDmjBKJKWVD0CauAw= Subject key identifier: 0B:2A:19:15:C4:08:EA:4C:BF:5A:74:FB:02:94:0B:D5:31:90:EF:1E Authority key identifier: DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 Certificate issuer: /CN=A91DA13E/serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Certificate serial: 086D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft Manifest number: 0846 Signing time: Sun 01 Mar 2026 22:20:40 +0000 Manifest this update: Sun 01 Mar 2026 22:20:40 +0000 Manifest next update: Sun 08 Mar 2026 22:20:40 +0000 Files and hashes: 1: 3oqNpw4WUAnRQNn2JFJNxNR51eg.crl (hash: rigrvvWeDLnqxwlojZhZaxdRJdeiF3txUJVPdBmPRBU=) 2: B9A51B1AFA4F11EDB82FCB1FC4F9AE02.roa (hash: ySJ9f4a7cg7BoSELqx9I/0KDLVkwX9/nfnRYeM6OTmg=) 3: 298965AC06B611EBBBFD6B2CC4F9AE02.roa (hash: mEYTlHG5kpWGqAptPr16SuSTKtrgl88+S1qWS3rlZ1c=) 4: 29D6DCB2849211EE8F9C5870C4F9AE02.roa (hash: F6LSRzHnrTo7J01sXjb7AoMVO+sTd3XP3ZGtjca+Bu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA13E, serialNumber=DE8A8DA70E165009D140D9F624524DC4D479D5E8 Validity Not Before: Mar 1 22:20:40 2026 GMT Not After : Mar 8 22:20:40 2026 GMT Subject: CN=69a4bbb8-e613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:c6:57:a5:b3:34:20:af:c7:80:6a:13:3d: 89:76:b1:34:44:c2:07:fc:28:15:dd:55:3a:3b:de: 3c:ae:8e:bc:59:61:37:22:8b:ae:92:91:d9:45:cd: aa:65:a8:e7:50:f5:54:e2:5c:9b:b4:2e:39:81:c6: 94:c8:0c:45:76:4a:d1:7a:15:67:b1:bf:9e:de:46: a8:0f:0e:fd:32:db:79:be:97:4a:ff:ee:08:10:9b: ff:06:e4:85:79:91:11:db:4f:0d:5a:83:b7:a9:a0: 64:bc:1c:42:a1:ca:64:4f:22:db:1b:25:11:aa:1c: df:55:a8:b0:13:da:c1:50:07:ff:b4:87:b9:8c:7a: ee:60:56:c8:fa:4b:35:78:19:10:53:85:d8:39:7b: 1d:60:4c:45:df:ee:b7:4d:22:2a:17:0c:5c:77:8b: bc:54:32:37:ef:eb:b2:57:cd:77:89:90:10:5f:38: ef:29:38:47:93:4b:9b:b2:d1:54:90:d7:3f:ed:eb: 13:c3:99:07:31:95:23:39:a5:b7:08:6c:9c:d8:84: d6:09:89:f4:d1:f9:cc:17:57:94:9e:fc:ac:3c:ad: 95:48:e6:25:8b:9c:52:1a:1e:09:13:2c:48:f4:57: 93:db:e0:97:0e:cb:0f:0b:51:a4:d0:79:7e:86:6d: 7c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2A:19:15:C4:08:EA:4C:BF:5A:74:FB:02:94:0B:D5:31:90:EF:1E X509v3 Authority Key Identifier: keyid:DE:8A:8D:A7:0E:16:50:09:D1:40:D9:F6:24:52:4D:C4:D4:79:D5:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oqNpw4WUAnRQNn2JFJNxNR51eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA13E/54D6A50E06B511EB9372D32BC4F9AE02/3oqNpw4WUAnRQNn2JFJNxNR51eg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:62:79:25:25:0b:44:cf:85:b6:e7:01:79:a6:4c:c1:c8:b8: 9c:13:21:04:84:4c:58:0b:49:e9:34:c7:85:a9:38:da:52:ea: e7:22:84:a6:4c:34:5c:68:65:08:20:68:f0:57:ed:1e:34:2c: c7:86:bc:b7:8e:1a:8d:7d:65:a5:9e:19:80:a5:11:36:57:61: 9f:53:47:66:ee:96:48:79:38:10:92:0d:2c:34:2c:6a:50:68: a2:8e:9f:9c:95:12:1d:94:e2:4d:b9:fb:67:8b:64:e5:cb:18: 2c:e1:62:99:6f:16:a9:42:62:f9:0e:83:2c:da:0c:d7:e0:0a: df:96:4b:0f:30:99:05:00:16:55:91:7c:b3:c3:5c:1e:45:04: b4:6b:a9:6a:23:21:73:db:b3:e3:f7:26:c2:1f:5e:5a:f7:ca: 65:3c:1c:c7:97:32:24:4e:da:bc:ea:b8:cf:0c:e2:7f:77:12: df:36:60:14:5f:64:42:70:4b:1d:06:50:d8:7a:ac:cf:c5:98: ac:8b:23:cd:42:9b:97:74:f8:83:05:72:26:75:04:47:d3:b2: 80:55:e8:a6:7e:28:c3:4a:f0:ba:ba:56:9c:62:06:2b:00:8a: 79:1b:c9:ac:cc:f0:b2:17:52:db:93:12:31:02:be:f4:a1:7f: 25:a0:8b:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExM0UxMTAvBgNVBAUTKERFOEE4REE3MEUxNjUwMDlEMTQwRDlGNjI0NTI0REM0 RDQ3OUQ1RTgwHhcNMjYwMzAxMjIyMDQwWhcNMjYwMzA4MjIyMDQwWjAYMRYwFAYD VQQDEw02OWE0YmJiOC1lNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA44LGV6WzNCCvx4BqEz2JdrE0RMIH/CgV3VU6O948ro68WWE3IouukpHZRc2q ZajnUPVU4lybtC45gcaUyAxFdkrRehVnsb+e3kaoDw79Mtt5vpdK/+4IEJv/BuSF eZER208NWoO3qaBkvBxCocpkTyLbGyURqhzfVaiwE9rBUAf/tIe5jHruYFbI+ks1 eBkQU4XYOXsdYExF3+63TSIqFwxcd4u8VDI37+uyV813iZAQXzjvKThHk0ubstFU kNc/7esTw5kHMZUjOaW3CGyc2ITWCYn00fnMF1eUnvysPK2VSOYli5xSGh4JEyxI 9FeT2+CXDssPC1Gk0Hl+hm18HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsqGRXE COpMv1p0+wKUC9UxkO8eMB8GA1UdIwQYMBaAFN6KjacOFlAJ0UDZ9iRSTcTUedXo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEzRS81NEQ2QTUwRTA2 QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VBblJRTm4ySkZKTnhOUjUx ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvcU5wdzRXVUFuUlFObjJKRkpOeE5SNTFlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEzRS81NEQ2QTUwRTA2QjUxMUVCOTM3MkQzMkJDNEY5QUUwMi8zb3FOcHc0V1VB blJRTm4ySkZKTnhOUjUxZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsmJ5JSULRM+FtucBeaZMwci4nBMhBIRMWAtJ6TTHhak42lLq5yKEpkw0XGhl CCBo8FftHjQsx4a8t44ajX1lpZ4ZgKURNldhn1NHZu6WSHk4EJINLDQsalBooo6f nJUSHZTiTbn7Z4tk5csYLOFimW8WqUJi+Q6DLNoM1+AK35ZLDzCZBQAWVZF8s8Nc HkUEtGupaiMhc9uz4/cmwh9eWvfKZTwcx5cyJE7avOq4zwzif3cS3zZgFF9kQnBL HQZQ2Hqsz8WYrIsjzUKbl3T4gwVyJnUER9OygFXopn4ow0rwurpWnGIGKwCKeRvJ rMzwshdS25MSMQK+9KF/JaCLjg== -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:35 2026 by rpki-client