$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft File: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft (raw, json) Hash identifier: wWMSz21QcSBXbjPmHnZkcr/oXyvae3cIDiHEbmEaWhE= Subject key identifier: 5F:41:34:BA:87:1F:58:D4:25:87:24:E7:CC:78:41:29:D9:69:56:07 Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 0622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft Manifest number: 0600 Signing time: Sat 28 Feb 2026 23:33:43 +0000 Manifest this update: Sat 28 Feb 2026 23:33:43 +0000 Manifest next update: Sat 07 Mar 2026 23:33:43 +0000 Files and hashes: 1: r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl (hash: ZmlXNAbkX4o4/7Q2q1Ow999SxGrBE0oXLLZ4nY0v7xw=) 2: B0203536062A11F185F9D5F9263D8C67.roa (hash: 6Jn5Fp6hvH1TnJRu4rIhfqXZAPlPtrnGZAH0g5AitqU=) 3: A18C330A055611F1B80F1E722C3D8C67.roa (hash: l99Bafss+57kzmj7sNHs6AHWpaLxvsHfwz553FuC1xw=) 4: 75125118FE5F11F0956342DD516F56BC.roa (hash: pOY87ee02JxjD/56+c16KvPHi3TX1tmU66d6XqMwaRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Feb 28 23:33:43 2026 GMT Not After : Mar 7 23:33:43 2026 GMT Subject: CN=69a37b57-add7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:3b:9c:72:cd:d3:82:96:49:68:7b:41:84: 19:47:75:0c:3b:d4:18:86:3f:1e:5a:b6:c5:94:33: c2:e8:25:1f:72:63:9b:fe:fb:6d:82:48:c3:7e:93: 30:e0:e9:d0:76:62:fa:a6:0f:84:64:74:b3:1a:0b: 33:e6:c5:93:11:33:79:80:cb:fd:cb:d0:34:0d:91: ac:9a:24:c1:99:3f:dc:6f:9a:95:82:5e:fc:f9:e4: 2f:b6:51:aa:41:61:91:0f:b8:5c:10:63:a5:3e:03: b5:25:f0:b1:f4:09:1c:13:73:35:11:c6:4d:35:d8: d2:df:f2:8d:46:d1:0e:e9:17:0d:36:30:22:b3:f7: 11:45:dc:94:1c:b2:92:51:20:44:06:84:63:01:c9: 6c:e2:a6:0c:08:ce:12:00:a7:3f:0a:71:88:89:7e: 91:b6:c2:df:e6:4f:5f:45:bd:8b:b7:c1:25:90:0c: 2a:7d:4c:2e:fe:de:79:5b:ae:cc:9f:4c:8d:75:f0: 42:75:0e:a4:0b:c7:f1:44:9d:9f:48:a4:ea:2a:05: 73:b4:15:82:d3:cd:dc:4f:fd:c9:c9:fc:1a:cf:d3: 24:db:a3:f5:d8:87:97:cf:18:16:55:0a:fd:fd:48: ed:ca:9b:c3:06:91:34:b3:59:3f:d8:80:4e:58:e1: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:34:BA:87:1F:58:D4:25:87:24:E7:CC:78:41:29:D9:69:56:07 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f8:5b:2f:3b:2c:11:41:67:7d:9c:76:fc:33:93:ea:30:39: c4:e9:cb:88:2e:71:5f:c4:5e:a1:d5:92:3a:76:89:ca:a0:34: 17:83:f1:6f:50:41:47:9b:52:c9:fe:76:db:6a:2f:13:6d:dd: 57:05:39:fd:e2:af:a9:f6:07:0c:8b:fb:75:55:e2:bc:a8:dc: 57:ad:8a:12:92:04:e1:2f:3c:75:b5:29:2f:3d:01:b0:ad:64: 33:b3:4a:c9:f7:19:10:2d:e3:79:8f:57:fd:73:34:83:ec:a5: c2:da:ec:fe:c3:49:c0:a8:99:7b:2f:db:6b:4a:4e:70:3d:5e: fb:02:b4:40:ad:5f:8c:bf:85:bb:31:e6:1f:36:2d:09:57:0e: 72:0d:d0:fc:5f:32:13:24:0b:c0:dd:8a:ca:72:25:37:c9:b9: f3:cc:ed:1e:53:60:01:eb:76:98:49:ed:15:62:6e:ce:43:02: ae:f0:aa:a3:b3:cf:9f:ea:14:e1:e9:7b:49:0d:bf:c1:68:c7: 2e:d4:02:c4:9b:c5:ac:c7:a7:e1:fc:d6:a9:79:11:3e:19:a6: ba:71:f4:f8:42:72:97:29:50:f2:db:0e:39:4a:17:8d:19:ef: 3a:cd:6c:36:bb:9b:0a:df:7f:28:e2:09:0b:2f:4d:7d:0a:97: ca:ca:7b:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjYwMjI4MjMzMzQzWhcNMjYwMzA3MjMzMzQzWjAYMRYwFAYD VQQDDA02OWEzN2I1Ny1hZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvA7nHLN04KWSWh7QYQZR3UMO9QYhj8eWrbFlDPC6CUfcmOb/vttgkjDfpMw 4OnQdmL6pg+EZHSzGgsz5sWTETN5gMv9y9A0DZGsmiTBmT/cb5qVgl78+eQvtlGq QWGRD7hcEGOlPgO1JfCx9AkcE3M1EcZNNdjS3/KNRtEO6RcNNjAis/cRRdyUHLKS USBEBoRjAcls4qYMCM4SAKc/CnGIiX6RtsLf5k9fRb2Lt8ElkAwqfUwu/t55W67M n0yNdfBCdQ6kC8fxRJ2fSKTqKgVztBWC083cT/3Jyfwaz9Mk26P12IeXzxgWVQr9 /UjtypvDBpE0s1k/2IBOWOGjcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9BNLqH H1jUJYck58x4QSnZaVYHMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTk3Mi85QkY2QzQ0RUYwMzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0 YUt0bVp6cjNvVGJDNmc2bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfhbLzssEUFnfZx2/DOT6jA5xOnLiC5xX8ReodWSOnaJyqA0F4Pxb1BBR5tS yf5222ovE23dVwU5/eKvqfYHDIv7dVXivKjcV62KEpIE4S88dbUpLz0BsK1kM7NK yfcZEC3jeY9X/XM0g+ylwtrs/sNJwKiZey/ba0pOcD1e+wK0QK1fjL+FuzHmHzYt CVcOcg3Q/F8yEyQLwN2KynIlN8m588ztHlNgAet2mEntFWJuzkMCrvCqo7PPn+oU 4el7SQ2/wWjHLtQCxJvFrMen4fzWqXkRPhmmunH0+EJylylQ8tsOOUoXjRnvOs1s NrubCt9/KOIJCy9NfQqXysp7fg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:33 2026 by rpki-client