$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft File: 3yKppXt9OorrEk1pDHkXBmtNtZ4.mft (raw, json) Hash identifier: NJQ9UIUQnLRHLyReO0Vb1wMy3b9djKcIKifP1UUopb8= Subject key identifier: D0:A9:41:D7:6E:5A:9C:7E:E1:05:AD:07:19:6B:E8:04:96:9A:D8:00 Authority key identifier: DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E Certificate issuer: /CN=A91DE19B/serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft Manifest number: 54 Signing time: Sun 01 Mar 2026 09:40:53 +0000 Manifest this update: Sun 01 Mar 2026 09:40:52 +0000 Manifest next update: Sun 08 Mar 2026 09:40:52 +0000 Files and hashes: 1: 3yKppXt9OorrEk1pDHkXBmtNtZ4.crl (hash: E3nhd+efiqE6j5nx3yyoO/dlTNBos5WAmFHpZUhGDow=) 2: DA06E7EAA37511F09017D760C4F9AE02.roa (hash: wpQC06DiQ+xzlEL7d1LfcmEUWMK/NDUMBZdyTADqLL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE19B, serialNumber=DF22A9A57B7D3A8AEB124D690C7917066B4DB59E Validity Not Before: Mar 1 09:40:52 2026 GMT Not After : Mar 8 09:40:52 2026 GMT Subject: CN=69a409a5-5fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:03:cc:95:bc:eb:ff:22:fe:bb:97:a8:51: cd:16:e9:08:50:37:01:8c:b3:6d:a5:df:3f:ed:30: 3d:4e:69:a0:24:cd:ee:fc:9f:26:34:dc:c1:dc:e0: d2:da:ad:cc:ea:29:15:2a:a3:61:e0:32:c1:1b:c6: 9e:4f:b5:80:6b:0d:b5:f4:5a:c2:7e:b3:a6:fd:2e: 0c:66:95:05:44:6f:31:d8:f2:5c:81:20:2b:a3:33: ba:ca:d7:8c:18:7e:53:41:76:41:81:3f:9a:31:ae: a8:2b:57:fe:dc:67:54:99:22:a1:fa:0f:f6:cf:5d: e4:5f:fb:74:45:4b:a4:46:07:ee:81:20:c5:4b:40: 5c:41:ab:04:a0:d5:85:de:df:a8:94:ae:f8:06:2b: 9f:2d:4b:a3:19:71:02:58:6c:a0:71:72:35:64:65: e5:87:5f:9d:0d:44:f9:58:7d:24:f0:f9:c2:28:cf: b0:9f:aa:93:5c:ee:c0:11:06:4d:9d:78:2c:72:c4: 7a:cb:98:23:e0:e0:4b:0c:67:61:8a:95:2d:08:ec: 4f:b9:24:11:e1:a0:24:b3:d2:da:28:21:46:df:77: 50:7d:40:f4:0c:0b:5d:c2:08:a9:c5:e1:b5:da:c5: 4e:af:20:c2:53:6b:fa:ec:34:66:0a:21:73:56:96: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:41:D7:6E:5A:9C:7E:E1:05:AD:07:19:6B:E8:04:96:9A:D8:00 X509v3 Authority Key Identifier: keyid:DF:22:A9:A5:7B:7D:3A:8A:EB:12:4D:69:0C:79:17:06:6B:4D:B5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yKppXt9OorrEk1pDHkXBmtNtZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE19B/DAB85E28A37311F08F891C37C4F9AE02/3yKppXt9OorrEk1pDHkXBmtNtZ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:df:8e:f1:c7:0a:2f:4f:eb:ff:e8:ec:da:3c:24:ff:e4:9c: d5:1b:8d:60:5e:b5:63:87:3f:25:78:4d:fe:b9:f8:6d:90:cd: 50:ee:5d:37:88:6f:59:c7:c2:ce:89:ab:ef:28:1d:0e:a8:c2: f5:e4:05:ca:c4:6e:39:28:ff:9c:0b:54:ce:2b:62:49:a7:d3: e4:b2:49:b6:df:ce:b7:33:d0:fa:34:36:ac:2f:a6:48:f6:a8: 65:3e:a2:d3:59:d0:fc:01:a0:6d:e3:8d:30:be:10:5b:71:df: 04:46:f2:18:79:bb:9d:6c:b0:72:ed:a8:c3:4d:66:a3:25:e2: 82:1a:39:7d:c0:27:53:b1:d0:ec:a6:d2:95:f5:39:d8:94:e5: 75:1a:24:67:7b:f0:ea:a7:2a:7f:22:37:77:f4:a4:cb:da:29: ce:e6:2b:24:a2:1b:77:f5:3a:a5:94:b2:9d:0d:a2:a2:90:d0: 09:07:08:08:0e:22:f9:84:02:83:41:f9:d2:7c:6e:82:6f:0d: af:7e:aa:73:8f:4a:05:e1:e9:a5:11:0b:7e:51:5a:e6:3d:a4: 03:31:3e:e0:6d:4d:61:75:92:f7:ee:4a:d8:e6:94:9c:82:fa: 8d:c5:a0:80:79:a2:a4:eb:cb:62:50:40:3c:f7:5c:3e:b9:0a: 42:c2:83:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTE5QjExMC8GA1UEBRMoREYyMkE5QTU3QjdEM0E4QUVCMTI0RDY5MEM3OTE3MDY2 QjREQjU5RTAeFw0yNjAzMDEwOTQwNTJaFw0yNjAzMDgwOTQwNTJaMBgxFjAUBgNV BAMTDTY5YTQwOWE1LTVmZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbgAPMlbzr/yL+u5eoUc0W6QhQNwGMs22l3z/tMD1OaaAkze78nyY03MHc4NLa rczqKRUqo2HgMsEbxp5PtYBrDbX0WsJ+s6b9LgxmlQVEbzHY8lyBICujM7rK14wY flNBdkGBP5oxrqgrV/7cZ1SZIqH6D/bPXeRf+3RFS6RGB+6BIMVLQFxBqwSg1YXe 36iUrvgGK58tS6MZcQJYbKBxcjVkZeWHX50NRPlYfSTw+cIoz7CfqpNc7sARBk2d eCxyxHrLmCPg4EsMZ2GKlS0I7E+5JBHhoCSz0tooIUbfd1B9QPQMC13CCKnF4bXa xU6vIMJTa/rsNGYKIXNWlqoNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0KlB125a nH7hBa0HGWvoBJaa2AAwHwYDVR0jBBgwFoAU3yKppXt9OorrEk1pDHkXBmtNtZ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMTlCL0RBQjg1RTI4QTM3 MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29yckVrMXBESGtYQm10TnRa NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3lLcHBYdDlPb3JyRWsxcERIa1hCbXROdFo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MTlCL0RBQjg1RTI4QTM3MzExRjA4Rjg5MUMzN0M0RjlBRTAyLzN5S3BwWHQ5T29y ckVrMXBESGtYQm10TnRaNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCi347xxwovT+v/6OzaPCT/5JzVG41gXrVjhz8leE3+ufhtkM1Q7l03iG9Zx8LO iavvKB0OqML15AXKxG45KP+cC1TOK2JJp9Pkskm23863M9D6NDasL6ZI9qhlPqLT WdD8AaBt440wvhBbcd8ERvIYebudbLBy7ajDTWajJeKCGjl9wCdTsdDsptKV9TnY lOV1GiRne/Dqpyp/Ijd39KTL2inO5iskoht39TqllLKdDaKikNAJBwgIDiL5hAKD QfnSfG6Cbw2vfqpzj0oF4emlEQt+UVrmPaQDMT7gbU1hdZL37krY5pScgvqNxaCA eaKk68tiUEA891w+uQpCwoNy -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:21 2026 by rpki-client