$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: 07BycijufMmhecldlQt/acP0i8L14hovxP2kHqehVx4= Subject key identifier: 65:46:21:1E:3F:6B:0A:67:0E:4F:07:71:48:8F:EF:59:24:0E:B9:B3 Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 02A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 0295 Signing time: Fri 27 Mar 2026 01:18:06 +0000 Manifest this update: Fri 27 Mar 2026 01:18:05 +0000 Manifest next update: Fri 03 Apr 2026 01:18:05 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: RWWIorNHE7WimqFHFqtPR7JRZlfzTU2B0793e/Ekm+I=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Mar 27 01:18:05 2026 GMT Not After : Apr 3 01:18:05 2026 GMT Subject: CN=69c5dace-7268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:f5:a7:4d:68:25:9c:65:ac:c4:69:2a:68: eb:32:2a:41:e2:78:d3:50:0a:9e:fd:02:2a:ce:ec: cc:b9:44:d7:84:a0:58:4c:1c:19:61:27:eb:1d:f5: 61:1c:37:bb:0a:07:aa:80:0f:34:7a:3f:f0:51:29: 4f:0c:a3:de:02:40:b4:6b:05:07:7b:72:10:4d:61: 4a:e7:6c:95:22:67:26:d3:67:2c:b7:82:00:9c:a2: fb:1f:03:f1:ca:37:cf:f8:2d:1b:0f:49:a0:29:c8: e3:4f:38:18:06:21:4a:dc:e8:5f:f2:28:f0:b3:9c: 13:18:a0:0e:24:dd:26:3f:f5:13:95:e6:f6:7b:7f: 2e:02:e1:81:54:66:69:56:bc:df:29:0e:62:0f:67: c8:ed:c0:b1:49:54:99:35:65:b9:7a:a6:a1:e2:06: 3e:c9:86:58:44:f7:87:3f:d2:66:d3:2d:e3:75:e8: 33:c8:24:cb:45:41:a8:53:71:59:d7:52:c9:33:f5: 75:07:71:f8:c2:a1:d5:f7:9c:f6:42:78:aa:cd:29: 1d:1a:09:94:cd:05:bc:db:57:27:ac:a0:20:69:bd: 15:0e:46:2d:3b:b3:16:7a:11:5a:9a:da:52:5c:4c: e2:33:d0:c8:74:de:94:2a:e8:f8:62:89:36:29:cd: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:46:21:1E:3F:6B:0A:67:0E:4F:07:71:48:8F:EF:59:24:0E:B9:B3 X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c6:c8:58:48:49:96:df:40:a9:0c:f9:09:a0:53:39:fe:28: fb:b1:12:66:51:53:de:8b:9a:8e:68:14:33:d6:3e:a4:46:0b: dc:ad:69:00:dc:4c:4a:27:21:44:8c:9e:c7:d8:d3:56:9e:28: 96:f8:5c:d0:79:79:43:04:ab:24:68:b9:7f:0a:74:be:77:f6: f3:5d:d2:72:40:5e:92:7a:6e:75:77:f7:b2:72:13:ae:cc:b7: 40:67:9a:36:9b:2b:4c:96:fc:1c:77:7d:17:76:f4:7b:99:9a: c7:5d:70:be:f8:c8:3a:ba:38:6e:86:73:95:54:3c:d3:ac:95: b2:cf:62:c2:36:ec:87:46:a6:5d:ce:8d:61:25:29:5f:cf:7e: 0c:ee:8a:59:40:bb:b9:13:87:63:db:f3:85:7a:8c:84:ca:45: 7a:05:56:1f:2c:d6:3d:25:38:c3:4d:43:87:af:4a:3c:7d:74: ab:04:e0:a4:5d:4a:a9:7d:30:9c:ab:3c:68:11:d7:16:5e:0a: fb:e3:46:c5:7d:ee:49:53:d8:9d:a3:7e:cb:5d:8f:ad:ac:cb: 80:b1:54:66:e6:a1:19:b0:cb:8d:2c:99:f1:29:d4:49:67:02: 30:28:3b:97:45:e2:0f:c7:6e:53:65:4a:a1:c3:00:5b:b2:79: 40:ff:41:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjYwMzI3MDExODA1WhcNMjYwNDAzMDExODA1WjAYMRYwFAYD VQQDEw02OWM1ZGFjZS03MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+j1p01oJZxlrMRpKmjrMipB4njTUAqe/QIqzuzMuUTXhKBYTBwZYSfrHfVh HDe7CgeqgA80ej/wUSlPDKPeAkC0awUHe3IQTWFK52yVImcm02cst4IAnKL7HwPx yjfP+C0bD0mgKcjjTzgYBiFK3Ohf8ijws5wTGKAOJN0mP/UTleb2e38uAuGBVGZp VrzfKQ5iD2fI7cCxSVSZNWW5eqah4gY+yYZYRPeHP9Jm0y3jdegzyCTLRUGoU3FZ 11LJM/V1B3H4wqHV95z2QniqzSkdGgmUzQW821cnrKAgab0VDkYtO7MWehFamtpS XEziM9DIdN6UKuj4Yok2Kc2yDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGVGIR4/ awpnDk8HcUiP71kkDrmzMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV8bIWEhJlt9AqQz5CaBTOf4o+7ESZlFT3ouajmgUM9Y+pEYL3K1pANxMSich RIyex9jTVp4olvhc0Hl5QwSrJGi5fwp0vnf2813SckBeknpudXf3snITrsy3QGea NpsrTJb8HHd9F3b0e5max11wvvjIOro4boZzlVQ806yVss9iwjbsh0amXc6NYSUp X89+DO6KWUC7uROHY9vzhXqMhMpFegVWHyzWPSU4w01Dh69KPH10qwTgpF1KqX0w nKs8aBHXFl4K++NGxX3uSVPYnaN+y12PrazLgLFUZuahGbDLjSyZ8SnUSWcCMCg7 l0XiD8duU2VKocMAW7J5QP9Bag== -----END CERTIFICATE-----Generated at Sat Mar 28 10:44:18 2026 by rpki-client