$ rpki-client -vvf rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft File: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft (raw, json) Hash identifier: pDBKXKD0UOQpdSjT+1e7O54WHnQ1i6GEzM6NAJtfiYA= Subject key identifier: EF:31:51:E9:35:C3:0E:57:A9:82:2C:CD:A9:4A:81:E9:57:75:00:A1 Authority key identifier: DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F Certificate issuer: /CN=A917AFE7/serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft Manifest number: 055F Signing time: Tue 24 Mar 2026 23:04:08 +0000 Manifest this update: Tue 24 Mar 2026 23:04:07 +0000 Manifest next update: Tue 31 Mar 2026 23:04:07 +0000 Files and hashes: 1: 3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl (hash: T4hlRfTKgBC6FdR6qxtzRVwldyQ1WBina5dpgd84lHM=) 2: D3D1604C2B6711EC8CD1C61FC4F9AE02.roa (hash: 5wECY0S1TItQf52Puzm7/lHfnEoyS0N/i319+RZPTPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AFE7, serialNumber=DCC07A9D8FFE378DDDAF3CD0E41A9EF6FDD3148F Validity Not Before: Mar 24 23:04:07 2026 GMT Not After : Mar 31 23:04:07 2026 GMT Subject: CN=69c31868-1c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:bc:5b:15:6d:23:75:e0:8a:33:3f:7e:a5: 7d:13:bf:0c:97:ed:86:e8:fc:ff:a0:09:9c:d2:1d: 2d:99:73:6b:5d:9a:43:93:f9:8c:c6:c0:7d:47:f0: 5d:b0:86:fd:0f:76:bd:6a:69:5f:93:58:54:e9:8c: 30:2e:11:bf:49:6e:64:52:18:c9:ad:95:ce:e6:20: dd:4d:5d:4f:c7:22:d5:44:fa:6b:28:35:11:93:93: 9e:bc:8d:51:d0:d0:40:85:8a:8d:4c:c4:47:a5:12: e6:f4:07:d6:b9:e3:23:7d:7b:69:9b:02:cc:d9:76: de:2c:75:1e:51:d7:43:b9:c5:7a:46:0f:f3:2a:35: 42:ff:cb:59:44:e8:40:ee:e9:6f:4a:59:4f:02:d3: 5f:5c:8c:24:bc:32:89:cd:ad:25:ac:80:59:42:3f: 7b:9e:b5:4e:72:7d:4d:aa:67:91:47:f2:cd:0f:bf: fd:d0:fa:3b:30:85:a8:c5:07:20:b5:99:13:d4:f8: 76:8b:7a:40:25:a0:31:2a:f5:2a:93:40:07:7e:ff: 03:91:6b:9b:66:46:59:74:65:4d:98:a0:fc:f7:b3: 62:30:47:a6:c2:c0:d8:ce:d6:f0:02:9a:3f:6c:dc: 03:a7:54:28:1f:c1:17:8d:1e:2e:78:b8:08:d3:91: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:31:51:E9:35:C3:0E:57:A9:82:2C:CD:A9:4A:81:E9:57:75:00:A1 X509v3 Authority Key Identifier: keyid:DC:C0:7A:9D:8F:FE:37:8D:DD:AF:3C:D0:E4:1A:9E:F6:FD:D3:14:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MB6nY_-N43drzzQ5Bqe9v3TFI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AFE7/F8B65374291211EC8631B854C4F9AE02/3MB6nY_-N43drzzQ5Bqe9v3TFI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:f4:6d:b9:5b:78:96:ce:eb:c3:1b:78:28:8e:ab:d0:f1: 88:07:6c:79:38:15:02:d2:c4:b4:5b:83:2d:a3:8c:4a:d0:67: af:06:89:ad:ed:61:80:1b:80:56:12:e1:7b:2e:08:56:ec:81: fd:bb:1a:f8:06:a9:a6:ff:4a:0f:c5:4b:9e:3a:6c:21:18:aa: a6:43:d3:ac:69:f0:13:a2:a1:60:b9:a3:47:c8:4d:bc:33:d4: b8:cf:61:9f:e3:6c:69:d0:92:71:26:c5:f2:c0:79:02:ff:b1: 55:47:7c:2e:68:c2:36:44:06:a6:fe:83:58:59:2d:f0:7d:88: ef:57:0d:c7:a1:33:e4:79:28:fa:00:9e:9f:1a:9f:4a:48:50: 09:3a:b4:8e:f9:89:cb:cd:5d:1a:ae:93:12:d6:f9:59:dd:3d: 0e:38:f5:a8:5f:bb:b7:85:46:70:27:4d:b8:eb:ff:24:17:8a: cb:bd:72:f2:66:96:e2:4c:0a:b1:1d:3f:2a:7e:92:f7:cd:10: 1a:a7:d0:4c:4f:16:47:82:ac:ba:70:2c:ea:44:6f:03:ad:40: 7b:9e:10:ac:87:f7:0f:23:d8:dd:96:22:11:af:11:de:eb:1b: ee:69:95:0b:74:ec:c2:8e:b4:c4:7b:e8:73:34:dd:cd:62:9e: 11:c9:96:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGRTcxMTAvBgNVBAUTKERDQzA3QTlEOEZGRTM3OEREREFGM0NEMEU0MUE5RUY2 RkREMzE0OEYwHhcNMjYwMzI0MjMwNDA3WhcNMjYwMzMxMjMwNDA3WjAYMRYwFAYD VQQDEw02OWMzMTg2OC0xYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbK8WxVtI3XgijM/fqV9E78Ml+2G6Pz/oAmc0h0tmXNrXZpDk/mMxsB9R/Bd sIb9D3a9amlfk1hU6YwwLhG/SW5kUhjJrZXO5iDdTV1PxyLVRPprKDURk5OevI1R 0NBAhYqNTMRHpRLm9AfWueMjfXtpmwLM2XbeLHUeUddDucV6Rg/zKjVC/8tZROhA 7ulvSllPAtNfXIwkvDKJza0lrIBZQj97nrVOcn1NqmeRR/LND7/90Po7MIWoxQcg tZkT1Ph2i3pAJaAxKvUqk0AHfv8DkWubZkZZdGVNmKD897NiMEemwsDYztbwApo/ bNwDp1QoH8EXjR4ueLgI05EyHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8xUek1 ww5XqYIszalKgelXdQChMB8GA1UdIwQYMBaAFNzAep2P/jeN3a880OQanvb90xSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUZFNy9GOEI2NTM3NDI5 MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40M2RyenpRNUJxZTl2M1RG STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNQjZuWV8tTjQzZHJ6elE1QnFlOXYzVEZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUZFNy9GOEI2NTM3NDI5MTIxMUVDODYzMUI4NTRDNEY5QUUwMi8zTUI2bllfLU40 M2RyenpRNUJxZTl2M1RGSTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF4X0bblbeJbO68MbeCiOq9DxiAdseTgVAtLEtFuDLaOMStBnrwaJre1hgBuA VhLhey4IVuyB/bsa+Aappv9KD8VLnjpsIRiqpkPTrGnwE6KhYLmjR8hNvDPUuM9h n+NsadCScSbF8sB5Av+xVUd8LmjCNkQGpv6DWFkt8H2I71cNx6Ez5Hko+gCenxqf SkhQCTq0jvmJy81dGq6TEtb5Wd09Djj1qF+7t4VGcCdNuOv/JBeKy71y8maW4kwK sR0/Kn6S980QGqfQTE8WR4KsunAs6kRvA61Ae54QrIf3DyPY3ZYiEa8R3usb7mmV C3Tswo60xHvoczTdzWKeEcmWOw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:49 2026 by rpki-client