$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: 6eQv8Rf0+AGarBxnkXcw/vwJXLm7sR4srTA8rOWrkR8= Subject key identifier: 34:60:F6:C5:64:3E:F0:07:6B:02:29:B6:31:F8:FD:BA:A8:E4:E8:72 Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 3C Signing time: Wed 25 Mar 2026 07:47:29 +0000 Manifest this update: Wed 25 Mar 2026 07:47:28 +0000 Manifest next update: Wed 01 Apr 2026 07:47:28 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: yZH+MZPYu0bDO6CzB7w9n2CxOXphq0F4rEpol11ADs8=) 2: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=) 3: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=) 4: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Mar 25 07:47:28 2026 GMT Not After : Apr 1 07:47:28 2026 GMT Subject: CN=69c39311-fa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:77:e0:4f:a5:36:50:17:ac:aa:64:9a:6a: d5:9d:8e:8e:fb:87:e2:b6:db:33:3e:40:2a:6c:fa: c2:f3:6c:f4:2b:f1:bb:6a:02:45:b2:52:84:95:96: e2:de:5a:be:6c:f3:ac:2c:a4:d6:f8:e2:9b:26:7a: 69:ca:1a:3a:9a:b4:c5:3e:b2:87:cb:d5:49:15:4d: 7c:3a:c5:f4:f4:3a:a1:0f:5e:f6:32:6d:da:a4:e6: 33:cf:6b:11:55:cc:8a:9a:5b:3d:6d:f1:f2:05:57: 1f:3b:27:09:ca:f2:ba:0d:4f:de:20:bc:bf:73:4f: dc:a8:9a:d4:0e:6a:5d:72:e7:59:40:8b:d4:40:bb: 64:2b:14:8a:a1:76:29:4e:ba:6d:6d:29:88:8e:d4: 0b:be:4b:0c:90:0f:27:ac:59:0b:83:c3:2e:3f:eb: c2:3e:41:a6:e7:a4:cc:e9:11:cb:4f:eb:54:21:c4: 10:29:d0:6d:e9:4f:a4:e6:e4:90:9a:24:ef:34:3b: f9:7f:d3:0a:76:0f:f9:d2:e5:9f:da:53:c8:66:54: 9b:e5:61:93:45:ed:70:bf:4e:82:11:4a:84:e4:99: 6a:25:de:da:1e:fb:44:f0:ec:12:e2:91:b0:03:e7: d4:c2:06:79:6d:fd:b3:d2:fa:18:40:c5:0e:63:0d: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:60:F6:C5:64:3E:F0:07:6B:02:29:B6:31:F8:FD:BA:A8:E4:E8:72 X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:07:e3:f9:78:dc:a4:ec:ba:3c:0a:99:66:50:24:e1:fe:e9: 66:a2:d7:b3:04:c9:fd:d7:e3:06:da:b4:6e:be:d4:0c:a0:ac: 3d:22:a5:d7:b4:d0:ca:26:72:e4:0f:21:c7:8f:7b:ca:7c:09: 3a:61:19:ec:13:4b:c3:1e:1a:c2:fd:f8:41:9d:fc:9a:e2:75: 19:2b:2f:e0:f9:9f:0b:91:90:a4:37:ae:b3:e6:05:f7:2d:70: f0:30:42:ca:2e:f7:eb:4f:c6:5c:7c:f1:15:91:17:cc:81:94: 02:62:16:ca:41:25:49:92:68:8e:d1:3c:e4:52:37:93:87:0b: d9:d5:e9:9c:50:11:2e:35:ca:e5:a9:70:03:ee:10:81:f1:01: 9e:ad:e0:b6:b7:43:2d:60:23:96:e3:7e:b9:4b:ed:90:0c:cd: 7e:da:dc:02:f3:c1:a4:36:1c:c0:96:b8:2a:3a:a7:85:16:1e: 8f:30:c2:18:b2:aa:83:cc:c2:e7:2a:46:61:92:b3:55:9a:0c: ab:4b:44:0f:7c:0c:d6:ef:37:64:88:35:65:b3:dc:97:98:15: 6d:11:94:cb:66:94:f3:69:10:38:13:4d:b4:64:c5:9b:dc:d4: a6:7b:00:f4:d0:db:a6:96:8b:db:3e:d9:c3:9a:4e:f8:a7:88: 7a:9c:68:82 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNjAzMjUwNzQ3MjhaFw0yNjA0MDEwNzQ3MjhaMBgxFjAUBgNV BAMTDTY5YzM5MzExLWZhNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPjHfgT6U2UBesqmSaatWdjo77h+K22zM+QCps+sLzbPQr8btqAkWyUoSVluLe Wr5s86wspNb44psmemnKGjqatMU+sofL1UkVTXw6xfT0OqEPXvYybdqk5jPPaxFV zIqaWz1t8fIFVx87JwnK8roNT94gvL9zT9yomtQOal1y51lAi9RAu2QrFIqhdilO um1tKYiO1Au+SwyQDyesWQuDwy4/68I+QabnpMzpEctP61QhxBAp0G3pT6Tm5JCa JO80O/l/0wp2D/nS5Z/aU8hmVJvlYZNF7XC/ToIRSoTkmWol3toe+0Tw7BLikbAD 59TCBnlt/bPS+hhAxQ5jDaM7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNGD2xWQ+ 8AdrAim2Mfj9uqjk6HIwHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q bkprdnR0WUx3bzNlN0pMMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0B+P5eNyk7Lo8CplmUCTh/ulmotezBMn91+MG2rRuvtQMoKw9IqXXtNDKJnLk DyHHj3vKfAk6YRnsE0vDHhrC/fhBnfya4nUZKy/g+Z8LkZCkN66z5gX3LXDwMELK LvfrT8ZcfPEVkRfMgZQCYhbKQSVJkmiO0TzkUjeThwvZ1emcUBEuNcrlqXAD7hCB 8QGereC2t0MtYCOW4365S+2QDM1+2twC88GkNhzAlrgqOqeFFh6PMMIYsqqDzMLn KkZhkrNVmgyrS0QPfAzW7zdkiDVls9yXmBVtEZTLZpTzaRA4E020ZMWb3NSmewD0 0NumlovbPtnDmk74p4h6nGiC -----END CERTIFICATE-----Generated at Thu Mar 26 18:02:23 2026 by rpki-client