$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: f9Ydi3FT9uX32gC3WvyjhAO2s7jjsfpZYQWRHQa/rT4= Subject key identifier: A6:BF:8A:FC:16:F2:C0:A6:94:1F:05:FD:C1:23:E6:32:AB:6C:C1:2A Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0274 Signing time: Sun 01 Mar 2026 23:31:11 +0000 Manifest this update: Sun 01 Mar 2026 23:31:10 +0000 Manifest next update: Sun 08 Mar 2026 23:31:10 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: sXvvmK/2apI2lrhm9z63XvAhXkLmOOGW5ygRVlzpyWo=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Mar 1 23:31:10 2026 GMT Not After : Mar 8 23:31:10 2026 GMT Subject: CN=69a4cc3f-f9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4f:d2:74:7f:3c:98:ed:8f:36:5e:d0:51:22: 6c:b6:f6:d2:bf:34:85:d0:cb:24:89:31:54:5e:98: b1:8b:c7:74:ae:ca:95:0c:3f:d5:5d:97:a7:4c:26: 25:99:0c:94:0d:46:4f:f0:0b:9d:04:ce:1a:d8:ad: 55:95:16:0a:0d:c3:74:bf:ea:32:0b:c5:69:01:05: 18:62:23:f4:5b:32:2e:da:39:d1:a7:cc:d7:9c:9d: 98:c2:72:06:e3:6c:c5:a4:89:44:c0:c0:81:aa:d7: a4:3e:cd:e5:a8:a1:ac:8b:a4:ff:69:54:a4:08:7d: 96:ff:aa:66:a7:3d:a1:75:01:89:85:6b:57:a2:75: e1:b8:5f:7e:26:44:73:8a:27:d9:81:00:b4:c8:3e: f2:a1:11:11:9b:0b:cf:ee:2e:b5:d1:a0:f9:72:87: 03:c1:3b:f7:34:6c:65:2f:b0:0f:d8:69:2f:4f:5f: d9:e5:2d:46:b7:fb:1f:99:51:fa:dd:c3:1f:fe:ea: 20:8d:f7:82:b7:0b:f3:f5:cd:e4:8a:ae:bc:12:ce: 34:be:4c:85:03:20:ce:21:f0:00:60:2c:68:b0:c7: 78:de:d8:a1:cc:78:5c:ad:3d:af:ed:25:19:87:9a: 94:aa:f7:47:f2:cf:7c:e5:d9:c4:95:4f:52:b8:84: 46:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BF:8A:FC:16:F2:C0:A6:94:1F:05:FD:C1:23:E6:32:AB:6C:C1:2A X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3e:7f:06:81:b9:fe:d2:cf:2c:62:27:0f:ff:74:13:c6:ee: 5f:25:ab:3e:96:f2:cd:e7:3b:c4:f3:97:d2:4b:82:25:0c:b9: fc:1f:26:bc:67:5f:35:99:5a:3b:ab:a3:d6:da:d3:8f:0d:0e: b4:39:54:2d:a5:05:fc:df:4a:e7:a0:fa:0f:c0:27:b7:25:57: fc:a6:95:af:d5:91:3c:ea:58:8f:bb:2a:37:46:99:d1:73:65: 07:86:04:7a:eb:c0:cd:9b:07:a2:1a:b0:03:95:18:02:45:f8: 04:42:a5:bf:0f:bf:5f:f1:52:7f:24:e2:ad:32:38:31:01:4a: bf:3e:ef:94:de:d6:4d:d5:1c:8a:91:cb:40:6c:19:7c:c5:a7: c2:20:19:67:e4:54:1d:3b:4f:be:bf:8e:41:e9:37:e3:27:24: 2a:b7:07:98:39:ac:a5:6f:17:1d:33:38:63:5b:a5:e2:01:63: bd:1e:c5:f5:3a:e7:6e:0d:6f:e7:79:af:57:43:10:90:73:32: 2b:ae:b4:b3:88:13:9b:58:92:0a:a0:20:e4:13:20:c7:44:24: d7:22:18:92:7f:aa:ac:c2:be:15:0c:92:85:de:e3:09:58:48: 86:80:88:3f:b1:87:8b:01:66:70:e9:1e:b4:43:95:22:7c:de: f4:9d:8a:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwMzAxMjMzMTEwWhcNMjYwMzA4MjMzMTEwWjAYMRYwFAYD VQQDEw02OWE0Y2MzZi1mOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E/SdH88mO2PNl7QUSJstvbSvzSF0MskiTFUXpixi8d0rsqVDD/VXZenTCYl mQyUDUZP8AudBM4a2K1VlRYKDcN0v+oyC8VpAQUYYiP0WzIu2jnRp8zXnJ2YwnIG 42zFpIlEwMCBqtekPs3lqKGsi6T/aVSkCH2W/6pmpz2hdQGJhWtXonXhuF9+JkRz iifZgQC0yD7yoRERmwvP7i610aD5cocDwTv3NGxlL7AP2GkvT1/Z5S1Gt/sfmVH6 3cMf/uogjfeCtwvz9c3kiq68Es40vkyFAyDOIfAAYCxosMd43tihzHhcrT2v7SUZ h5qUqvdH8s985dnElU9SuIRG0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKa/ivwW 8sCmlB8F/cEj5jKrbMEqMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdz5/BoG5/tLPLGInD/90E8buXyWrPpbyzec7xPOX0kuCJQy5/B8mvGdfNZla O6uj1trTjw0OtDlULaUF/N9K56D6D8AntyVX/KaVr9WRPOpYj7sqN0aZ0XNlB4YE euvAzZsHohqwA5UYAkX4BEKlvw+/X/FSfyTirTI4MQFKvz7vlN7WTdUcipHLQGwZ fMWnwiAZZ+RUHTtPvr+OQek34yckKrcHmDmspW8XHTM4Y1ul4gFjvR7F9Trnbg1v 53mvV0MQkHMyK660s4gTm1iSCqAg5BMgx0Qk1yIYkn+qrMK+FQyShd7jCVhIhoCI P7GHiwFmcOketEOVInze9J2KHg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:45 2026 by rpki-client