$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: U0XVa6wbxunEZfywNxx2EPN/nc+56kPEsYQtEXL7kuA= Subject key identifier: 66:FB:03:88:2F:E3:CF:06:69:CB:E7:F4:FF:BA:1A:A8:6F:D9:54:A5 Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: AB Signing time: Wed 25 Mar 2026 06:36:03 +0000 Manifest this update: Wed 25 Mar 2026 06:36:03 +0000 Manifest next update: Wed 01 Apr 2026 06:36:03 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: sQbDcwIunweClfiBcSsQ4vR13KtkuRKE+B5iTcrOVRM=) 2: 375E8232C13411F0A297231CC4F9AE02.roa (hash: yKrvVx15gU/GsNavxV0bNjTS5F14yB+1otnZA4vgvnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Mar 25 06:36:03 2026 GMT Not After : Apr 1 06:36:03 2026 GMT Subject: CN=69c38253-ff17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:0a:0c:a8:b8:20:c9:0c:00:ad:80:60:c0: ac:62:fa:06:89:69:b9:0e:78:cc:8e:f6:a2:09:22: 8b:d6:b7:fa:3f:a6:f8:19:0e:d5:25:53:74:5b:7b: 33:2d:91:68:a9:8f:d3:48:ac:9d:72:01:56:45:5a: 4c:d4:77:71:b0:7e:c5:95:99:29:63:09:1e:38:a5: e7:cc:ef:e0:02:4b:42:d1:37:de:14:0e:05:a6:a5: 37:46:5d:bd:4d:1a:0c:ee:e0:a0:2a:13:56:5a:b3: 2c:55:9b:82:fc:8f:03:34:99:f2:c5:a4:4d:b8:61: 3a:73:17:ee:27:65:e4:db:08:33:96:f9:ef:b3:d5: e2:f1:9a:7c:10:45:6e:e4:1c:fd:8c:0d:7f:18:69: a5:58:f6:b5:4d:12:96:12:01:e8:fd:6a:45:34:78: 03:99:3d:71:97:48:6b:40:dc:75:1c:76:18:16:94: 57:19:7c:11:8b:ad:ab:7b:db:52:36:95:d3:e0:7f: bc:4b:eb:ab:b4:25:12:fb:7f:82:5a:b5:4c:6a:85: 57:08:ef:f4:1b:12:97:6e:45:79:72:ca:af:5c:6f: 4b:81:d5:29:40:10:28:0f:65:c9:52:5c:b0:f2:7f: 57:cd:20:6a:c0:0c:b9:b1:15:3c:c0:cd:b6:78:46: 97:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FB:03:88:2F:E3:CF:06:69:CB:E7:F4:FF:BA:1A:A8:6F:D9:54:A5 X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:6d:d2:1a:fd:11:fe:a6:8d:a0:39:9f:6f:80:32:6d:fc:c0: b6:17:e1:c7:47:85:f4:ce:5c:fe:b6:a1:fe:16:47:6d:52:ae: ad:29:5f:8a:4a:92:61:1d:75:fc:0d:a7:37:c4:59:e0:0f:62: 6e:7d:81:66:6e:2f:ea:8d:7b:d3:a3:2c:d8:22:b7:cf:b4:55: ec:da:ac:c9:c8:2d:ad:eb:2d:3f:4a:b0:a4:9b:c6:10:69:d7: 4c:d4:82:2f:14:b3:72:0c:80:21:7b:15:fa:df:1b:3a:e9:da: b4:1a:30:d0:64:59:f5:12:d2:94:ce:21:81:f2:6a:48:d4:a5: 07:d8:fd:91:a9:78:63:26:06:14:43:37:3b:dc:58:54:51:42: 9b:85:68:1b:bc:fd:1f:b1:8c:c2:6e:1c:c3:7e:b5:6a:3c:67: bc:01:07:3f:27:e6:af:c9:1c:b9:b2:d0:22:55:f2:12:46:ef: 2e:a3:e4:99:98:6f:03:77:da:db:8c:0e:63:eb:b3:51:c0:d0: 2d:6f:f1:cb:68:1a:46:bc:79:aa:5a:ea:85:1a:d0:e7:f5:ab: 7a:c3:a8:f8:ca:56:67:40:c2:1b:66:89:38:72:dc:18:04:1c: a4:79:41:3b:34:2c:0e:80:45:b0:0c:ca:18:6c:c3:e3:af:93: 35:26:ba:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwMzI1MDYzNjAzWhcNMjYwNDAxMDYzNjAzWjAYMRYwFAYD VQQDEw02OWMzODI1My1mZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rsKDKi4IMkMAK2AYMCsYvoGiWm5DnjMjvaiCSKL1rf6P6b4GQ7VJVN0W3sz LZFoqY/TSKydcgFWRVpM1HdxsH7FlZkpYwkeOKXnzO/gAktC0TfeFA4FpqU3Rl29 TRoM7uCgKhNWWrMsVZuC/I8DNJnyxaRNuGE6cxfuJ2Xk2wgzlvnvs9Xi8Zp8EEVu 5Bz9jA1/GGmlWPa1TRKWEgHo/WpFNHgDmT1xl0hrQNx1HHYYFpRXGXwRi62re9tS NpXT4H+8S+urtCUS+3+CWrVMaoVXCO/0GxKXbkV5csqvXG9LgdUpQBAoD2XJUlyw 8n9XzSBqwAy5sRU8wM22eEaXAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGb7A4gv 488Gacvn9P+6Gqhv2VSlMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DQjE0QkYyNjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Za a0NDa0NELWh3OWxrc2hNTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ23SGv0R/qaNoDmfb4AybfzAthfhx0eF9M5c/rah/hZHbVKurSlfikqSYR11 /A2nN8RZ4A9ibn2BZm4v6o1706Ms2CK3z7RV7NqsycgtrestP0qwpJvGEGnXTNSC LxSzcgyAIXsV+t8bOunatBow0GRZ9RLSlM4hgfJqSNSlB9j9kal4YyYGFEM3O9xY VFFCm4VoG7z9H7GMwm4cw361ajxnvAEHPyfmr8kcubLQIlXyEkbvLqPkmZhvA3fa 24wOY+uzUcDQLW/xy2gaRrx5qlrqhRrQ5/WresOo+MpWZ0DCG2aJOHLcGAQcpHlB OzQsDoBFsAzKGGzD46+TNSa6Xw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:26 2026 by rpki-client