$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: O20W8uae6CJ18V8xhTflA3mJE3RARrq3NthN8Xi/paY= Subject key identifier: EC:3B:0B:C0:1C:CE:5D:89:45:91:B6:DC:67:5F:F9:FE:DE:8B:41:0E Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 092D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 08F8 Signing time: Thu 26 Mar 2026 14:48:05 +0000 Manifest this update: Thu 26 Mar 2026 14:48:05 +0000 Manifest next update: Thu 02 Apr 2026 14:48:05 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: HF6muBZuPs4xbxN+VslytIYtqBRS6tsk/hZo6Vyc/6c=) 2: AB20F8C0DD3311EF8B8A711FC4F9AE02.roa (hash: BoL9UlNE8f39H5zPW1byPvXmDiZbS/dSQi7Q0NywADo=) 3: 0A0B8CF8308911F0A95E944AC4F9AE02.roa (hash: ndkjJdIlIn3uUdqq8eIO0dPyqCOyoeNAkaE6SO8K2EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2349 (0x92d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B, serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Mar 26 14:48:05 2026 GMT Not After : Apr 2 14:48:05 2026 GMT Subject: CN=69c54725-3599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:c5:33:b0:af:ab:6d:cd:f6:e0:d0:30:e0: d0:72:1c:46:0b:de:03:d4:6e:7b:e0:79:6b:3e:f1: 36:c3:a1:bb:11:43:38:b3:1d:bc:93:09:f0:04:e3: aa:c5:4c:68:60:8c:81:f3:03:81:be:ef:47:a5:ed: 00:67:0c:ee:01:81:24:1d:2d:e1:eb:e8:8f:34:0e: f0:23:f2:a6:ec:51:c4:8c:3e:73:bb:a3:6d:53:f8: 0e:e8:97:ff:34:66:30:90:e8:83:6e:57:70:c0:77: 6d:ed:16:14:94:89:6b:6f:86:52:54:5d:69:b3:16: 03:b4:cd:47:7e:e7:df:a6:f2:8c:e1:e5:47:7d:61: d7:bc:46:32:6f:93:d0:b3:38:04:72:63:cf:ba:8d: 34:2e:7e:6d:e5:37:aa:41:f9:c8:05:a0:f7:1c:cd: 0c:23:4e:15:a3:9c:75:e4:26:a2:ea:88:46:56:f2: 76:29:ea:00:b6:2c:c7:5d:66:e1:af:d3:3d:56:d5: 5f:0c:e6:41:57:93:ae:61:5c:65:f0:b6:4d:62:c2: 6c:ad:8d:d8:4a:9f:3b:4a:d1:1f:3d:56:d6:c1:e7: 69:1c:02:be:63:2b:c1:b4:9e:74:d6:40:f2:30:78: 3a:9d:4a:b4:4e:9a:19:9c:42:5b:80:2b:5c:a0:22: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3B:0B:C0:1C:CE:5D:89:45:91:B6:DC:67:5F:F9:FE:DE:8B:41:0E X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b5:6a:97:54:e1:84:48:ac:28:5d:be:09:23:f4:50:e7:ba: 00:fa:ae:a6:e7:43:41:d3:a5:fa:b0:03:55:f5:b0:c2:66:ad: 77:bd:d0:1f:ce:51:a8:b0:a0:8f:aa:90:28:3f:74:1d:36:a2: 9b:fc:a8:45:f6:eb:31:70:e3:5d:be:30:5e:43:94:3b:14:2d: 0e:ba:82:7d:56:bf:75:59:a5:0c:be:2b:54:2b:c8:a5:ad:35: e0:a1:c2:e5:1a:9f:ee:60:56:d3:89:9f:18:6d:f3:01:6f:09: 56:5b:42:17:65:04:0a:22:19:55:4c:25:a3:ba:1a:2c:60:5a: e2:f0:cd:36:48:9e:86:30:7d:7c:5a:16:75:ec:f5:1d:04:1c: 13:c2:ca:2a:37:18:f8:06:fa:9d:2a:f9:e5:eb:49:bf:dc:c3: b9:08:ad:8a:93:54:1f:ac:49:97:82:59:28:a3:44:ab:cc:56: 77:fd:66:c6:a2:0a:30:a1:b4:24:be:09:b0:bb:74:12:43:55: 7e:c8:8c:bd:db:df:aa:e2:1d:a1:15:11:9a:b7:61:2a:5b:23: d9:88:48:39:40:cd:4a:bf:ea:10:43:32:da:72:fe:fc:57:fa: 19:7f:62:0b:5e:c1:10:56:8e:65:cc:d8:90:a9:14:19:e3:93: 40:e4:3c:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjYwMzI2MTQ0ODA1WhcNMjYwNDAyMTQ0ODA1WjAYMRYwFAYD VQQDEw02OWM1NDcyNS0zNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut3FM7Cvq23N9uDQMODQchxGC94D1G574HlrPvE2w6G7EUM4sx28kwnwBOOq xUxoYIyB8wOBvu9Hpe0AZwzuAYEkHS3h6+iPNA7wI/Km7FHEjD5zu6NtU/gO6Jf/ NGYwkOiDbldwwHdt7RYUlIlrb4ZSVF1psxYDtM1HfuffpvKM4eVHfWHXvEYyb5PQ szgEcmPPuo00Ln5t5TeqQfnIBaD3HM0MI04Vo5x15Cai6ohGVvJ2KeoAtizHXWbh r9M9VtVfDOZBV5OuYVxl8LZNYsJsrY3YSp87StEfPVbWwedpHAK+YyvBtJ501kDy MHg6nUq0TpoZnEJbgCtcoCJUJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOw7C8Ac zl2JRZG23Gdf+f7ei0EOMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR7Vql1ThhEisKF2+CSP0UOe6APqupudDQdOl+rADVfWwwmatd73QH85RqLCg j6qQKD90HTaim/yoRfbrMXDjXb4wXkOUOxQtDrqCfVa/dVmlDL4rVCvIpa014KHC 5Rqf7mBW04mfGG3zAW8JVltCF2UECiIZVUwlo7oaLGBa4vDNNkiehjB9fFoWdez1 HQQcE8LKKjcY+Ab6nSr55etJv9zDuQitipNUH6xJl4JZKKNEq8xWd/1mxqIKMKG0 JL4JsLt0EkNVfsiMvdvfquIdoRURmrdhKlsj2YhIOUDNSr/qEEMy2nL+/Ff6GX9i C17BEFaOZczYkKkUGeOTQOQ8Ag== -----END CERTIFICATE-----Generated at Thu Mar 26 21:48:50 2026 by rpki-client