$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft File: wg3R4FYYZcBSLH4nS87SSTC78EU.mft (raw, json) Hash identifier: 66Ha470ajBDOb10XLp3pzGHgQOjf1JzIdO2UFill5fI= Subject key identifier: 3A:74:9A:D3:DA:9B:C7:05:93:98:DA:06:C6:11:BA:E7:FA:30:02:A3 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft Manifest number: 1CA6 Signing time: Tue 24 Mar 2026 16:26:39 +0000 Manifest this update: Tue 24 Mar 2026 16:26:38 +0000 Manifest next update: Tue 31 Mar 2026 16:26:38 +0000 Files and hashes: 1: wg3R4FYYZcBSLH4nS87SSTC78EU.crl (hash: PSKTdyZCM9aPHw2eNPlgL0Nosq4hB4TcDRQC7/oLvNE=) 2: F9D345C0DE8811F0B0147CB83D6F56BC.roa (hash: PZaD99czBStU254DRK+Fap7tqhET3faD3ruJSJv6Axc=) 3: 4A7F092A776811EFB6FA747DC4F9AE02.roa (hash: ZInSuFW4tgrnB5Y18U6CKYq95Y5K5ny1irJTF0HvAX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Mar 24 16:26:38 2026 GMT Not After : Mar 31 16:26:38 2026 GMT Subject: CN=69c2bb3f-c164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:23:04:83:d1:0c:a5:68:e3:97:83:b4:d4: bd:31:49:23:a2:bf:c7:3b:ec:7b:ef:3f:1b:a1:7a: a4:2b:e5:bf:c0:63:59:c5:b8:2b:95:1c:5f:24:0c: 1a:17:52:cb:3c:2c:43:e2:1d:19:bd:bb:8b:a0:56: 38:1f:80:f3:57:21:47:b3:66:ef:0d:6c:b8:67:d6: b1:d4:93:f9:be:76:d0:bc:e5:84:11:9a:28:a9:bf: 97:a7:a5:ad:4b:9b:85:6a:fc:5c:4a:3e:49:20:cb: 95:e4:96:c7:37:01:28:93:ed:86:0e:80:bf:5b:44: 16:a7:9e:9b:95:a2:69:06:0d:02:96:70:c7:f2:dc: f7:ab:e8:7b:e0:1a:63:ee:4e:83:35:f6:7d:6c:02: a5:eb:94:ed:8a:2f:5a:ae:30:7a:43:fc:f3:67:ec: 45:49:9a:f0:8e:95:9c:48:8f:79:76:2d:74:39:f3: 1c:9b:67:66:b5:93:39:c3:a0:35:17:fe:f0:ff:45: 95:3f:9f:19:04:7a:c7:d2:c4:38:fc:d8:f8:12:e0: a0:2e:ce:d6:ae:89:47:91:2a:2d:99:0c:a9:a7:aa: 98:8b:1a:72:8d:4b:b4:86:0b:db:df:18:7f:3c:1a: 21:22:92:aa:90:41:be:3c:df:4d:e6:db:56:8d:60: 0e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:74:9A:D3:DA:9B:C7:05:93:98:DA:06:C6:11:BA:E7:FA:30:02:A3 X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e0:4c:95:b9:15:11:b8:7c:2b:01:74:80:e9:79:35:0a:cd: 12:f9:bb:fd:55:19:28:36:e8:41:50:1d:29:85:e6:aa:39:3d: 5d:66:32:08:1f:98:33:13:0e:04:c9:d2:f9:cc:3d:26:19:9d: 4f:10:36:51:70:3e:73:a1:65:d6:d9:f2:a9:ca:ae:d4:ed:fb: 0a:d0:bd:67:42:1c:84:90:0d:b9:4b:3f:1f:66:13:4a:49:8a: 2d:13:25:7f:30:a3:45:39:cd:13:8a:fd:bb:3b:68:71:2c:ef: 0a:f8:41:06:68:ad:f2:ae:b7:cc:fe:08:77:a9:fe:90:04:89: 28:cd:c5:27:b5:84:e5:a0:91:d3:77:44:58:62:69:b1:2b:e1: de:b6:be:3c:31:3e:77:6c:5e:ab:4e:34:e3:60:39:d3:e3:6f: 65:e7:a4:6b:3c:ea:9e:e0:0f:3c:d9:dd:9a:6b:37:db:16:88: 4a:b9:da:b4:11:4f:ef:25:14:3f:42:d0:f3:99:18:a2:95:ca: 05:0b:87:00:da:48:43:5d:db:54:ed:cd:b6:10:4e:da:f5:08: b4:17:75:0d:75:56:c2:64:e9:f3:b7:ae:d3:d3:7b:22:fe:95: dc:0e:32:f0:40:70:f4:e0:02:08:4e:01:6e:2e:b1:27:b8:d2: 86:2f:41:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjYwMzI0MTYyNjM4WhcNMjYwMzMxMTYyNjM4WjAYMRYwFAYD VQQDEw02OWMyYmIzZi1jMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkojBIPRDKVo45eDtNS9MUkjor/HO+x77z8boXqkK+W/wGNZxbgrlRxfJAwa F1LLPCxD4h0ZvbuLoFY4H4DzVyFHs2bvDWy4Z9ax1JP5vnbQvOWEEZooqb+Xp6Wt S5uFavxcSj5JIMuV5JbHNwEok+2GDoC/W0QWp56blaJpBg0ClnDH8tz3q+h74Bpj 7k6DNfZ9bAKl65Ttii9arjB6Q/zzZ+xFSZrwjpWcSI95di10OfMcm2dmtZM5w6A1 F/7w/0WVP58ZBHrH0sQ4/Nj4EuCgLs7WrolHkSotmQypp6qYixpyjUu0hgvb3xh/ PBohIpKqkEG+PN9N5ttWjWAOBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDp0mtPa m8cFk5jaBsYRuuf6MAKjMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDhGNy80NzE0MzgwQUQ1OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpj QlNMSDRuUzg3U1NUQzc4RVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh+BMlbkVEbh8KwF0gOl5NQrNEvm7/VUZKDboQVAdKYXmqjk9XWYyCB+YMxMO BMnS+cw9JhmdTxA2UXA+c6Fl1tnyqcqu1O37CtC9Z0IchJANuUs/H2YTSkmKLRMl fzCjRTnNE4r9uztocSzvCvhBBmit8q63zP4Id6n+kASJKM3FJ7WE5aCR03dEWGJp sSvh3ra+PDE+d2xeq04042A50+NvZeekazzqnuAPPNndmms32xaISrnatBFP7yUU P0LQ85kYopXKBQuHANpIQ13bVO3NthBO2vUItBd1DXVWwmTp87eu09N7Iv6V3A4y 8EBw9OACCE4Bbi6xJ7jShi9BWg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:11:18 2026 by rpki-client