$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft File: 3nj0PVfAvnIiR0Mta6r3onwaW5o.mft (raw, json) Hash identifier: MfqajQkH8TsRGVGNNwi/py6RkOI7QjzdQT2kV+OHZyk= Subject key identifier: D6:FF:53:31:BB:55:15:D5:28:CD:B8:54:3A:B0:02:95:75:67:A4:48 Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft Manifest number: 055F Signing time: Tue 24 Mar 2026 23:03:47 +0000 Manifest this update: Tue 24 Mar 2026 23:03:47 +0000 Manifest next update: Tue 31 Mar 2026 23:03:47 +0000 Files and hashes: 1: 3nj0PVfAvnIiR0Mta6r3onwaW5o.crl (hash: jR7h7rS5tnxDuRk1FdAnw+67nNnwgCznPVmjbgSNgqs=) 2: 680F0EA2284411EC8826F928C4F9AE02.roa (hash: oiLr2Ru1DYuL64/uOeAPIHRwlt1uV7B6bu1q+HXMs94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A Validity Not Before: Mar 24 23:03:47 2026 GMT Not After : Mar 31 23:03:47 2026 GMT Subject: CN=69c31853-cde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:1e:59:f0:a8:f9:48:3f:61:dd:75:f2:f2: 57:8f:e5:2e:93:1f:ed:a0:85:20:4a:c4:96:ac:d6: 91:08:6f:d8:72:6e:b8:a8:8b:42:cc:75:22:10:2f: d4:b5:02:42:e8:4a:49:cd:a3:7c:bc:ef:e0:fa:d6: 7b:89:07:c9:7c:eb:34:b1:69:d9:a9:e7:4b:98:25: 71:7e:30:00:d2:34:80:8c:9e:4e:0c:1c:50:83:e1: 9e:9a:5a:8d:e0:60:ca:9d:e0:a4:07:03:ce:01:1a: 9d:0c:36:22:cd:f6:87:cd:96:bb:9c:42:33:ad:0d: 22:db:63:c4:ce:01:a7:9b:aa:0b:2e:de:c0:39:d1: bb:76:a3:4f:a5:3f:28:fe:af:2c:cf:bc:46:bf:a8: 7c:01:3c:fb:c1:a6:42:48:73:ba:26:a9:60:21:dc: 33:2b:e5:a3:15:cb:c3:fe:a6:c0:83:d0:a5:5b:f1: 16:5f:32:0c:c4:22:6f:9b:5f:a0:77:19:bd:48:7e: f9:06:b0:a0:b5:f5:07:bc:c0:6c:e3:39:83:64:ec: d4:c4:b9:f5:d5:dd:ef:60:eb:ed:b3:b5:38:b2:03: 1a:e1:58:1e:7a:99:e9:4f:cc:0c:5c:b5:ca:99:ca: 75:c6:51:79:1f:f0:1e:cd:70:03:23:65:24:e9:72: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FF:53:31:BB:55:15:D5:28:CD:B8:54:3A:B0:02:95:75:67:A4:48 X509v3 Authority Key Identifier: keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d4:80:9b:8d:af:04:cd:d6:20:47:6a:3f:6a:45:95:45:6b: 20:6b:cc:df:46:5b:b0:42:7e:01:4b:95:10:48:33:e1:b9:84: a1:b0:18:97:93:dc:7f:c0:1b:0d:b9:64:81:38:4a:ff:c9:17: bb:60:95:33:d9:fe:59:a8:21:52:fa:79:5d:d5:27:13:85:61: d1:fc:38:2c:19:26:a3:f9:6c:f3:11:08:13:0a:ef:15:ae:2f: 53:97:20:d2:22:bb:a1:90:cc:3f:89:b1:65:bc:7f:8d:ec:02: 83:34:34:1c:5a:6c:5c:18:d6:8e:aa:c7:99:d3:0c:e8:b5:99: a1:de:c1:2a:78:78:fa:ef:3b:b5:41:b4:24:18:81:71:9d:6b: 04:64:6f:aa:c1:72:7e:cd:b9:30:03:57:3d:8a:be:c0:a7:49: 40:c6:6f:a1:84:cc:a7:98:60:1c:76:3e:38:ec:49:5d:70:ee: 5d:48:f3:67:db:51:0c:16:7d:21:ca:15:2c:ec:54:63:9a:3f: d2:ce:3d:bd:7b:8b:89:b9:2b:fc:e2:a5:57:23:62:c0:c3:18: 72:98:55:59:b7:1c:dd:fa:2f:cb:a3:ac:25:e1:dd:1e:b9:46: b5:16:ca:50:44:fc:0c:02:ac:fc:62:0d:84:d4:45:60:bc:3c: 9e:85:18:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzQkUxMTAvBgNVBAUTKERFNzhGNDNENTdDMEJFNzIyMjQ3NDMyRDZCQUFGN0Ey N0MxQTVCOUEwHhcNMjYwMzI0MjMwMzQ3WhcNMjYwMzMxMjMwMzQ3WjAYMRYwFAYD VQQDEw02OWMzMTg1My1jZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+ceWfCo+Ug/Yd118vJXj+Uukx/toIUgSsSWrNaRCG/Ycm64qItCzHUiEC/U tQJC6EpJzaN8vO/g+tZ7iQfJfOs0sWnZqedLmCVxfjAA0jSAjJ5ODBxQg+GemlqN 4GDKneCkBwPOARqdDDYizfaHzZa7nEIzrQ0i22PEzgGnm6oLLt7AOdG7dqNPpT8o /q8sz7xGv6h8ATz7waZCSHO6JqlgIdwzK+WjFcvD/qbAg9ClW/EWXzIMxCJvm1+g dxm9SH75BrCgtfUHvMBs4zmDZOzUxLn11d3vYOvts7U4sgMa4VgeepnpT8wMXLXK mcp1xlF5H/AezXADI2Uk6XKQNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNb/UzG7 VRXVKM24VDqwApV1Z6RIMB8GA1UdIwQYMBaAFN549D1XwL5yIkdDLWuq96J8Glua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNCRS8yRTQzQzNFQzI4 NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZuSWlSME10YTZyM29ud2FX NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNuajBQVmZBdm5JaVIwTXRhNnIzb253YVc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTNCRS8yRTQzQzNFQzI4NDAxMUVDQkUyMTZGNDBDNEY5QUUwMi8zbmowUFZmQXZu SWlSME10YTZyM29ud2FXNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVdSAm42vBM3WIEdqP2pFlUVrIGvM30ZbsEJ+AUuVEEgz4bmEobAYl5Pcf8Ab DblkgThK/8kXu2CVM9n+WaghUvp5XdUnE4Vh0fw4LBkmo/ls8xEIEwrvFa4vU5cg 0iK7oZDMP4mxZbx/jewCgzQ0HFpsXBjWjqrHmdMM6LWZod7BKnh4+u87tUG0JBiB cZ1rBGRvqsFyfs25MANXPYq+wKdJQMZvoYTMp5hgHHY+OOxJXXDuXUjzZ9tRDBZ9 IcoVLOxUY5o/0s49vXuLibkr/OKlVyNiwMMYcphVWbcc3fovy6OsJeHdHrlGtRbK UET8DAKs/GINhNRFYLw8noUYpw== -----END CERTIFICATE-----Generated at Thu Mar 26 09:09:57 2026 by rpki-client