$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json) Hash identifier: fUu/n1FdWZbaADf0EM6c3PfxOjsz9MdqrMYbWeATqPQ= Subject key identifier: D7:94:81:AB:41:8E:B2:3F:8F:49:AD:BA:BA:1B:C9:56:DF:EF:24:0E Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 09:55:57 +0000 Manifest this update: Sun 01 Mar 2026 09:55:56 +0000 Manifest next update: Sun 08 Mar 2026 09:55:56 +0000 Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: K6g2RvEbkAeav0vIWsVJQDefpFNmmzoA+PwFTMfTIqI=) 2: C6B0BA0EC37D11F0A205F578C4F9AE02.roa (hash: +CmSda4T3YUnvvvrMYK818glj0vIe2epiTUr9j+GbE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Mar 1 09:55:56 2026 GMT Not After : Mar 8 09:55:56 2026 GMT Subject: CN=69a40d2d-d6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:ba:17:c9:22:34:ff:7b:d5:4a:a7:be:c6: 73:54:35:23:b9:16:38:78:7a:72:3b:0d:33:d2:e7: 62:60:79:ed:08:ef:fc:0d:4f:c6:2a:51:f2:68:98: e4:ae:34:9b:72:e4:fa:2b:77:40:31:1b:37:f5:1a: 5f:b5:9e:b6:73:2f:04:99:7d:1c:a6:d6:3b:2b:05: cb:c6:ee:1b:d9:d6:3d:e1:c3:f8:17:74:43:8d:46: d2:7d:66:b1:11:2f:8e:04:0f:70:0f:00:bb:ae:ba: c2:8b:7d:2a:24:50:5f:47:96:ad:8e:fe:b5:c1:ce: 93:36:b8:78:e0:a1:f6:bb:ed:d7:c6:36:84:d8:c2: 62:49:16:8e:3f:a5:62:fd:5b:d3:54:65:3c:b8:26: bc:70:ab:15:29:09:7d:be:4b:50:03:f4:65:e4:d8: 3d:b6:8d:e4:95:86:37:d3:8b:16:53:e5:ec:46:78: b8:5b:4a:50:d9:7b:d3:df:2b:17:21:0f:40:a1:3b: a4:c6:b3:16:82:f8:4a:6f:f4:ee:7d:78:81:26:4c: 24:c8:52:36:c3:43:ea:5c:25:6c:8a:20:23:18:85: bf:5c:2d:d8:b6:90:52:a3:db:5f:0f:b5:a0:37:14: 25:82:e7:a6:7c:18:02:85:a9:fe:99:f7:bd:b8:88: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:94:81:AB:41:8E:B2:3F:8F:49:AD:BA:BA:1B:C9:56:DF:EF:24:0E X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:68:05:b1:7f:1d:5f:73:35:e6:f9:27:bb:60:f5:d9:d7:1b: 22:2f:c6:a6:8e:8d:05:65:0b:7c:c5:25:58:48:f7:19:9d:2e: 66:6e:e8:87:7d:8e:d8:30:75:82:e2:8b:d0:a3:dd:9c:49:e6: 4d:2b:de:38:1e:5b:51:fa:16:f5:95:2f:c9:b9:8a:c5:d1:49: fe:62:c3:a7:ea:21:e3:bb:9a:49:28:9c:f6:4c:82:c6:cc:ee: 78:23:94:f9:77:00:02:4f:c3:83:70:bb:b8:f7:e2:f9:62:b4: 59:3a:4c:e2:4f:cb:e1:95:4a:21:08:e4:f5:24:b7:03:29:4e: df:30:ed:92:88:af:3f:4b:4b:e6:10:64:f0:eb:22:af:72:55: d9:65:d4:38:e5:cc:a5:21:70:40:6c:3c:88:30:cf:39:cf:4f: 0e:9b:56:7e:97:00:4c:be:5a:72:d5:2e:e2:4c:37:2a:27:7d: ab:34:7d:1a:cc:90:b7:28:e1:af:7c:c8:53:00:e6:79:8a:9e: a2:6f:26:da:48:76:ef:f0:cd:51:33:d6:59:a8:0a:29:33:89: 47:5c:3a:6d:14:62:8c:81:f8:d7:81:95:00:96:f3:b5:7d:d7: 8d:ae:45:c1:15:dc:81:d0:c9:d7:2b:ac:27:a5:bd:d6:ff:40: b2:99:44:bd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNjAzMDEwOTU1NTZaFw0yNjAzMDgwOTU1NTZaMBgxFjAUBgNV BAMTDTY5YTQwZDJkLWQ2ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdYLoXySI0/3vVSqe+xnNUNSO5Fjh4enI7DTPS52Jgee0I7/wNT8YqUfJomOSu NJty5Pord0AxGzf1Gl+1nrZzLwSZfRym1jsrBcvG7hvZ1j3hw/gXdEONRtJ9ZrER L44ED3APALuuusKLfSokUF9Hlq2O/rXBzpM2uHjgofa77dfGNoTYwmJJFo4/pWL9 W9NUZTy4JrxwqxUpCX2+S1AD9GXk2D22jeSVhjfTixZT5exGeLhbSlDZe9PfKxch D0ChO6TGsxaC+Epv9O59eIEmTCTIUjbDQ+pcJWyKICMYhb9cLdi2kFKj218PtaA3 FCWC56Z8GAKFqf6Z9724iBuDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU15SBq0GO sj+PSa26uhvJVt/vJA4wHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzY4MkIzOUE2QzM3QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRr TUtLZGxkZGl0NWtLY1A4cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRaAWxfx1fczXm+Se7YPXZ1xsiL8amjo0FZQt8xSVYSPcZnS5mbuiHfY7YMHWC 4ovQo92cSeZNK944HltR+hb1lS/JuYrF0Un+YsOn6iHju5pJKJz2TILGzO54I5T5 dwACT8ODcLu49+L5YrRZOkziT8vhlUohCOT1JLcDKU7fMO2SiK8/S0vmEGTw6yKv clXZZdQ45cylIXBAbDyIMM85z08Om1Z+lwBMvlpy1S7iTDcqJ32rNH0azJC3KOGv fMhTAOZ5ip6ibybaSHbv8M1RM9ZZqAopM4lHXDptFGKMgfjXgZUAlvO1fdeNrkXB FdyB0MnXK6wnpb3W/0CymUS9 -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:50 2026 by rpki-client