$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft File: I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft (raw, json) Hash identifier: Zqxx7vtHzeBOuXN397jnCoyCYwYqeaXE+G+7EMaQHwI= Subject key identifier: F7:D1:D6:EC:75:12:EA:EB:E4:D1:54:06:B9:F3:F3:D5:74:70:80:19 Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft Manifest number: 02A4 Signing time: Mon 02 Mar 2026 01:41:21 +0000 Manifest this update: Mon 02 Mar 2026 01:41:19 +0000 Manifest next update: Mon 09 Mar 2026 01:41:19 +0000 Files and hashes: 1: I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl (hash: 1l2wS9adPRnfJikAfKHRVwBjrgJzwZ4Ayc769gomvqU=) 2: 623705DA339111ED9249064BC4F9AE02.roa (hash: dJkQChNuxBTFdv5H2Ke/hDe3+P5lfeBF0mKLDRfy7Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Validity Not Before: Mar 2 01:41:19 2026 GMT Not After : Mar 9 01:41:19 2026 GMT Subject: CN=69a4eac0-5185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:0e:c8:18:1a:d6:48:70:04:43:2b:7c:d7: 08:fc:14:40:1e:af:67:eb:1e:7d:e0:ce:d4:4c:d4: 5d:fc:aa:40:c0:60:3c:ff:e6:ff:e0:90:8f:e0:8a: 5b:a8:54:7f:1b:e2:96:b9:e2:00:36:64:63:25:ef: c5:0e:d1:c0:bc:49:78:11:b6:8e:3a:71:e7:dd:08: 1c:70:3b:45:1d:14:d4:d9:13:d1:da:4e:91:b3:58: 50:5d:c3:71:13:53:59:d2:1e:8f:e7:e9:60:4b:65: 44:67:09:e0:62:be:b6:da:59:20:cd:e2:20:41:2e: 8e:16:21:43:11:61:ce:e4:75:d3:2c:cf:55:49:0a: ff:b4:cc:17:0e:0d:8a:93:09:27:d6:1f:ec:56:7d: ec:fa:a2:5f:3a:8b:a0:aa:e4:45:88:ac:37:e1:f0: f0:ef:a4:44:15:9f:5e:4a:0f:88:ab:bb:27:8c:5e: 9d:c1:72:de:9a:a8:6a:92:2a:f6:12:08:37:3c:b2: 03:87:51:78:0b:ea:45:fd:1b:7e:dd:0b:48:86:86: 82:c1:ce:12:2c:4b:56:69:f9:45:cd:58:cf:a7:9d: b4:08:34:fa:85:68:52:fd:50:e6:fb:4e:9b:19:e3: 00:3a:db:e4:57:5f:ab:e7:9d:d9:64:9d:ee:eb:67: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D1:D6:EC:75:12:EA:EB:E4:D1:54:06:B9:F3:F3:D5:74:70:80:19 X509v3 Authority Key Identifier: keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:5a:f3:eb:20:04:ea:a3:d8:b2:70:32:93:92:91:46:a2:70: 42:4c:61:03:27:0d:3b:c9:e9:cf:6c:2b:07:df:1a:aa:d4:85: 08:27:7c:94:81:64:36:25:72:ae:d8:2e:cb:a7:47:6a:a8:dd: e8:d9:43:41:e6:9b:c3:77:7e:ce:2c:8f:2a:b8:0a:f7:f4:68: 37:a4:f9:ce:5a:8d:cf:36:8d:e4:51:68:22:17:d6:2a:4c:64: 9d:38:16:1e:a5:da:02:fb:59:8a:dc:95:be:de:41:dc:40:b5: 48:eb:62:92:92:81:c9:ad:b3:a0:22:0e:df:0e:26:60:ce:c7: fa:84:44:71:69:5d:d9:0c:68:c5:23:c7:87:68:c2:ad:f9:4a: 08:32:82:bb:65:a6:04:c7:3f:db:56:b9:91:c9:fd:98:4c:76: a8:e3:aa:aa:bd:fe:8d:29:04:ab:4f:d2:3f:6e:94:0e:bd:df: f1:c5:30:5f:50:3f:bd:65:11:ef:56:88:a6:b7:60:b8:85:a6: 3b:a2:0a:8c:e3:e8:0b:b8:24:ce:ec:fa:21:45:cc:30:2a:50: 48:91:7e:31:48:24:4c:98:38:c0:df:d7:a1:0f:23:af:ef:66: f4:7a:7a:d9:05:05:95:11:8a:20:17:f5:56:db:34:c4:63:ca: a2:13:37:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2 OTFEQzA2MTUwHhcNMjYwMzAyMDE0MTE5WhcNMjYwMzA5MDE0MTE5WjAYMRYwFAYD VQQDEw02OWE0ZWFjMC01MTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FsOyBga1khwBEMrfNcI/BRAHq9n6x594M7UTNRd/KpAwGA8/+b/4JCP4Ipb qFR/G+KWueIANmRjJe/FDtHAvEl4EbaOOnHn3QgccDtFHRTU2RPR2k6Rs1hQXcNx E1NZ0h6P5+lgS2VEZwngYr622lkgzeIgQS6OFiFDEWHO5HXTLM9VSQr/tMwXDg2K kwkn1h/sVn3s+qJfOougquRFiKw34fDw76REFZ9eSg+Iq7snjF6dwXLemqhqkir2 Egg3PLIDh1F4C+pF/Rt+3QtIhoaCwc4SLEtWaflFzVjPp520CDT6hWhS/VDm+06b GeMAOtvkV1+r553ZZJ3u62eUMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPfR1ux1 Eurr5NFUBrnz89V0cIAZMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFNS9GNUUzNEU2NDMzOEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFP Ul9BYnlMOTRRN2RwSGNCaFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ1rz6yAE6qPYsnAyk5KRRqJwQkxhAycNO8npz2wrB98aqtSFCCd8lIFkNiVy rtguy6dHaqjd6NlDQeabw3d+ziyPKrgK9/RoN6T5zlqNzzaN5FFoIhfWKkxknTgW HqXaAvtZityVvt5B3EC1SOtikpKBya2zoCIO3w4mYM7H+oREcWld2QxoxSPHh2jC rflKCDKCu2WmBMc/21a5kcn9mEx2qOOqqr3+jSkEq0/SP26UDr3f8cUwX1A/vWUR 71aIprdguIWmO6IKjOPoC7gkzuz6IUXMMCpQSJF+MUgkTJg4wN/XoQ8jr+9m9Hp6 2QUFlRGKIBf1Vts0xGPKohM3AQ== -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:54 2026 by rpki-client