$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft File: a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json) Hash identifier: 0iavlXlHkzXAKbL9YIMTT608J6H4ZLV9R9T7sFsxuE0= Subject key identifier: 4B:31:C5:8C:BE:A7:32:0C:DA:A6:3E:F5:CE:08:12:7B:21:BC:93:D1 Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft Manifest number: 09E1 Signing time: Tue 24 Mar 2026 19:40:00 +0000 Manifest this update: Tue 24 Mar 2026 19:39:59 +0000 Manifest next update: Tue 31 Mar 2026 19:39:59 +0000 Files and hashes: 1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: ccrYabhNd4yYPlTDzMAdtQE747JpZYp/GKWwevtC3Bs=) 2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: FGKFmIxlRTKcHWAwWVQZRDo1BFONYcqJI1h8vC0VRSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55 Validity Not Before: Mar 24 19:39:59 2026 GMT Not After : Mar 31 19:39:59 2026 GMT Subject: CN=69c2e890-3750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:46:e9:a7:1e:15:f6:a1:3f:d0:0a:9f:ec: 8d:78:d6:dd:e6:46:b4:36:49:a4:b3:10:78:53:81: c2:72:fb:d1:b5:8a:86:5f:a6:bf:72:fa:27:27:48: 3c:ea:d0:76:6f:54:46:a3:8c:95:2b:69:62:13:73: 97:b0:7a:ed:c7:f7:9c:38:64:aa:ab:62:3b:85:09: c5:61:c6:85:43:a4:52:91:1f:f9:96:b0:3d:75:d6: 75:1d:eb:7c:9f:c2:f3:f0:cd:fd:a9:87:8c:11:f5: 27:0c:d2:b1:9b:60:8f:e1:f5:8a:55:72:63:22:d5: 23:f0:79:06:81:a3:c4:dd:5b:06:c5:9e:dc:ca:c4: 70:0b:f9:58:10:fd:99:33:43:9d:27:99:da:5c:8d: 35:71:b5:dc:42:1e:f5:60:4d:23:8b:bb:ec:f9:45: 4e:20:e7:67:fe:cd:dd:2f:9a:89:a3:08:df:6c:0d: c6:c4:0e:4b:e7:9b:8a:99:9e:d5:7f:96:46:bf:ac: fb:7e:18:aa:fa:37:bb:e6:ce:51:69:ad:d7:ba:fa: a0:b6:5d:07:77:3a:fa:a2:80:86:5a:bd:85:72:6d: 2f:ae:85:e8:cd:73:8b:12:95:bb:52:c1:37:da:c6: 92:81:dc:97:3f:bf:4d:06:f0:f1:8f:66:41:20:97: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:C5:8C:BE:A7:32:0C:DA:A6:3E:F5:CE:08:12:7B:21:BC:93:D1 X509v3 Authority Key Identifier: keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:02:94:58:db:db:e4:66:af:e4:df:28:da:a5:1a:97:50:3f: 37:ce:a2:74:bb:29:3c:35:02:ff:b4:20:6a:b5:06:08:43:c0: 66:2e:fa:c4:f8:6b:91:67:eb:e6:7d:cd:8b:73:f1:75:b8:8e: f6:8c:88:c0:51:46:ab:ac:65:5b:83:5f:76:b0:b3:8a:f5:84: fe:40:32:42:19:dd:5a:b1:49:9f:d3:31:2e:2d:18:c5:f8:5a: 5c:6b:bb:2a:47:9c:33:91:e3:fa:dc:eb:9f:40:13:78:c5:64: 35:4d:c0:bb:33:c6:a3:0c:22:c8:1d:a9:55:5d:7c:3e:ce:30: 1a:7c:d2:4a:73:4c:6d:e9:b4:58:7f:dc:a1:36:90:65:f2:9e: 41:62:e8:d1:30:69:13:23:9f:0c:33:5e:33:11:76:36:09:70: 47:ba:71:b0:01:6c:70:7b:39:a5:43:d0:c2:af:04:da:60:a3: e9:75:90:11:0a:a4:91:34:83:76:98:ba:83:eb:df:07:22:91: f0:5e:c4:79:79:ff:84:32:48:f3:d7:7d:3b:41:3c:3f:a4:b9: 09:43:a1:04:82:89:fe:17:82:d0:a0:b1:64:fa:68:f9:a7:c5: 34:d7:65:ec:a5:f0:e6:70:95:59:9d:fa:56:8e:44:a7:b4:26: f0:c5:8a:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE RTNCOUJFNTUwHhcNMjYwMzI0MTkzOTU5WhcNMjYwMzMxMTkzOTU5WjAYMRYwFAYD VQQDEw02OWMyZTg5MC0zNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzVG6aceFfahP9AKn+yNeNbd5ka0NkmksxB4U4HCcvvRtYqGX6a/cvonJ0g8 6tB2b1RGo4yVK2liE3OXsHrtx/ecOGSqq2I7hQnFYcaFQ6RSkR/5lrA9ddZ1Het8 n8Lz8M39qYeMEfUnDNKxm2CP4fWKVXJjItUj8HkGgaPE3VsGxZ7cysRwC/lYEP2Z M0OdJ5naXI01cbXcQh71YE0ji7vs+UVOIOdn/s3dL5qJowjfbA3GxA5L55uKmZ7V f5ZGv6z7fhiq+je75s5Raa3Xuvqgtl0Hdzr6ooCGWr2Fcm0vroXozXOLEpW7UsE3 2saSgdyXP79NBvDxj2ZBIJfktwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsxxYy+ pzIM2qY+9c4IEnshvJPRMB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX YWwxYUh2NmFZTnplTzV2bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgKUWNvb5Gav5N8o2qUal1A/N86idLspPDUC/7QgarUGCEPAZi76xPhrkWfr 5n3Ni3PxdbiO9oyIwFFGq6xlW4NfdrCzivWE/kAyQhndWrFJn9MxLi0YxfhaXGu7 KkecM5Hj+tzrn0ATeMVkNU3AuzPGowwiyB2pVV18Ps4wGnzSSnNMbem0WH/coTaQ ZfKeQWLo0TBpEyOfDDNeMxF2NglwR7pxsAFscHs5pUPQwq8E2mCj6XWQEQqkkTSD dpi6g+vfByKR8F7EeXn/hDJI89d9O0E8P6S5CUOhBIKJ/heC0KCxZPpo+afFNNdl 7KXw5nCVWZ36Vo5Ep7Qm8MWKvQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:08:47 2026 by rpki-client