$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json) Hash identifier: 0AZ0aUlmN9SO3ZCDzov1RITFmC382M9A8FnJDsZpGl0= Subject key identifier: 9B:C1:08:E0:EC:40:04:9A:7B:47:44:FE:5A:87:D3:56:1A:F6:FA:65 Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft Manifest number: FA Signing time: Wed 25 Mar 2026 05:45:30 +0000 Manifest this update: Wed 25 Mar 2026 05:45:29 +0000 Manifest next update: Wed 01 Apr 2026 05:45:29 +0000 Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: mEe0cCJ5sJH5qOTxCHt/wr9IpyyW3wfrsn+C3jU82kg=) 2: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=) 3: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: 1ZP1vdskU7HhKgstNS23dpEsOSf4i8NBGnYVRVM9PUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: Mar 25 05:45:29 2026 GMT Not After : Apr 1 05:45:29 2026 GMT Subject: CN=69c37679-9aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:6e:54:5d:1e:99:2d:de:03:0c:d7:31:2b: 92:a5:7b:f7:91:b5:c9:bf:c3:07:fb:eb:8a:91:c6: d5:39:ea:f1:a3:5f:b5:32:43:b3:31:f6:d4:58:5e: 99:55:43:9a:96:91:87:da:27:be:dc:3a:89:dd:6b: ab:35:46:b8:d0:4b:5d:65:48:7b:bb:e4:18:09:09: 18:69:94:57:5b:9d:75:2b:c9:6e:0f:48:82:be:7d: e7:d0:34:bb:0f:bc:05:77:4c:bf:87:95:05:90:0c: 0d:a8:0a:81:6a:2e:2a:a7:3d:2d:34:44:d9:40:ec: 9e:b9:30:74:fd:7f:33:46:ed:06:59:bf:56:bc:29: d2:9d:f6:38:6b:cf:84:8c:89:2b:85:f9:42:28:a7: 4b:8d:f4:f9:6f:57:10:47:14:e7:72:92:d0:2a:cd: a5:2d:7d:78:9d:02:56:16:e9:90:d1:c3:bc:ab:1d: 70:6d:7f:d6:9f:a9:6d:6f:6b:eb:4c:50:22:0d:ad: 2a:50:12:13:e0:c7:fc:ce:e3:35:dd:ab:9a:91:f1: 5d:86:e6:af:2e:11:3a:39:4b:0b:71:e7:70:6a:30: 3c:eb:cc:be:64:0b:7a:3c:76:1d:e5:c8:93:29:10: a4:a3:4a:f9:eb:a6:c1:6f:13:8e:8a:92:85:d2:d5: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C1:08:E0:EC:40:04:9A:7B:47:44:FE:5A:87:D3:56:1A:F6:FA:65 X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:b5:bb:22:dd:22:5d:f6:ef:33:04:33:ee:6c:0a:6b:0a:8a: 54:61:b4:a0:b9:a0:84:b0:b3:c6:90:d6:39:b2:1d:60:1c:fb: c8:d9:29:6e:73:ed:0a:54:cc:ca:dd:de:4a:2d:79:cf:37:09: ba:f2:bd:67:20:3b:c5:5a:66:fa:0b:c9:ad:0f:3b:ee:d0:a7: 93:c8:a6:71:5b:73:11:04:50:a2:22:ff:9f:57:ff:6f:e6:76: bc:fa:70:d8:52:10:d8:e4:dc:23:20:33:11:1e:21:be:c7:3a: 43:6d:25:82:03:fa:b5:2e:ab:2a:a6:83:d4:c3:93:3a:12:1c: 8e:37:2b:2a:25:29:0b:67:11:59:b1:7e:75:16:9b:0d:9c:e8: 03:5a:dc:05:db:13:30:75:c3:d1:07:4c:42:58:48:ef:05:52: 02:cf:7b:9c:a9:04:4d:d0:0d:6d:f0:8e:b5:a2:b1:32:44:86: 8f:53:d6:4e:65:e1:bb:9e:12:dc:77:83:cf:c2:11:d9:2d:40: ce:06:53:34:30:03:4b:d9:ad:b6:22:75:49:63:95:ce:aa:0c: 92:29:36:90:fa:14:6e:28:03:f2:26:39:21:9b:23:dd:bb:28: e8:23:f0:b4:1a:5f:bf:1a:88:78:36:50:a3:e4:2f:f7:1e:98: c2:eb:0f:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4 QTZFRENGQjkwHhcNMjYwMzI1MDU0NTI5WhcNMjYwNDAxMDU0NTI5WjAYMRYwFAYD VQQDEw02OWMzNzY3OS05YWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+VuVF0emS3eAwzXMSuSpXv3kbXJv8MH++uKkcbVOerxo1+1MkOzMfbUWF6Z VUOalpGH2ie+3DqJ3WurNUa40EtdZUh7u+QYCQkYaZRXW511K8luD0iCvn3n0DS7 D7wFd0y/h5UFkAwNqAqBai4qpz0tNETZQOyeuTB0/X8zRu0GWb9WvCnSnfY4a8+E jIkrhflCKKdLjfT5b1cQRxTncpLQKs2lLX14nQJWFumQ0cO8qx1wbX/Wn6ltb2vr TFAiDa0qUBIT4Mf8zuM13auakfFdhuavLhE6OUsLcedwajA868y+ZAt6PHYd5ciT KRCko0r566bBbxOOipKF0tUr9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvBCODs QASae0dE/lqH01Ya9vplMB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5 dXFKN18tUC1XbnVLYnR6N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI7W7It0iXfbvMwQz7mwKawqKVGG0oLmghLCzxpDWObIdYBz7yNkpbnPtClTM yt3eSi15zzcJuvK9ZyA7xVpm+gvJrQ877tCnk8imcVtzEQRQoiL/n1f/b+Z2vPpw 2FIQ2OTcIyAzER4hvsc6Q20lggP6tS6rKqaD1MOTOhIcjjcrKiUpC2cRWbF+dRab DZzoA1rcBdsTMHXD0QdMQlhI7wVSAs97nKkETdANbfCOtaKxMkSGj1PWTmXhu54S 3HeDz8IR2S1AzgZTNDADS9mttiJ1SWOVzqoMkik2kPoUbigD8iY5IZsj3bso6CPw tBpfvxqIeDZQo+Qv9x6YwusP/g== -----END CERTIFICATE-----Generated at Thu Mar 26 07:39:52 2026 by rpki-client