$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft File: 9R3GadtZYYTQv5SqHkHl3hWejaU.mft (raw, json) Hash identifier: Vpkao1dT4AYRZmYDUq0TtyrjP9mOi0ev53Agg8Vi0fE= Subject key identifier: 48:6E:EC:81:E7:AC:6B:77:C0:F2:DD:18:49:BB:10:45:FD:63:CE:E9 Authority key identifier: F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 Certificate issuer: /CN=A91D3D50/serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft Manifest number: 0CE6 Signing time: Tue 24 Mar 2026 18:05:45 +0000 Manifest this update: Tue 24 Mar 2026 18:05:45 +0000 Manifest next update: Tue 31 Mar 2026 18:05:45 +0000 Files and hashes: 1: 9R3GadtZYYTQv5SqHkHl3hWejaU.crl (hash: grHYtbZqDscIB8Zji0+huNx54UzmfeqN+kwoVbqeiI4=) 2: 2DE1069C050311EA93648E33C4F9AE02.roa (hash: mAWGAZYLLIP3Y6WhqMok7bqseMlhVIGtAozjDaFZhow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D50, serialNumber=F51DC669DB596184D0BF94AA1E41E5DE159E8DA5 Validity Not Before: Mar 24 18:05:45 2026 GMT Not After : Mar 31 18:05:45 2026 GMT Subject: CN=69c2d279-8e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:a4:a7:eb:0a:00:9e:6d:cb:7e:4b:cc:88: e0:b6:7e:fc:76:cf:45:00:fc:37:9d:2e:68:94:f2: ac:8a:b5:36:47:16:6b:8b:f5:9c:d5:6c:d9:ce:22: 88:cc:8a:55:ed:cc:76:a6:7c:e0:cc:cf:fd:44:8f: 08:6b:13:13:30:7a:9e:e9:52:09:f2:af:f7:28:34: ec:f9:22:5d:32:60:67:b9:7a:c2:66:c3:e4:9e:45: 62:c5:45:67:e1:45:b0:fc:41:0e:f9:cd:e8:6a:d2: 46:9a:fe:3f:ce:06:ce:44:c1:9c:d0:e6:ec:3b:34: 7f:4f:f2:78:c9:9a:69:04:46:11:fc:50:cd:8b:e9: f3:4e:65:09:fd:29:b1:d4:89:a1:ab:8f:ca:78:3f: 21:0c:27:2d:97:da:90:71:2b:f3:12:59:fe:eb:cd: 6d:fb:60:00:fc:4c:03:36:e4:8b:72:eb:04:59:a1: df:53:23:8e:80:5c:23:98:ce:f3:f2:ec:c8:c6:9f: dc:c1:78:df:b1:fb:de:bd:37:29:1d:ba:ff:c1:61: c3:0a:80:ea:4c:ad:c6:3e:ac:d8:d2:00:c3:55:7e: a4:dc:25:0b:57:c7:b3:31:44:a4:7b:dc:7a:d1:9c: 72:95:41:0d:6a:27:0d:9f:2f:d4:70:70:a6:54:21: 37:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6E:EC:81:E7:AC:6B:77:C0:F2:DD:18:49:BB:10:45:FD:63:CE:E9 X509v3 Authority Key Identifier: keyid:F5:1D:C6:69:DB:59:61:84:D0:BF:94:AA:1E:41:E5:DE:15:9E:8D:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9R3GadtZYYTQv5SqHkHl3hWejaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D50/15464FD6050111EAAD97252CC4F9AE02/9R3GadtZYYTQv5SqHkHl3hWejaU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:bd:74:55:47:37:ac:e5:5d:94:bf:93:9e:6d:0c:d4:61:e4: c7:75:71:e9:3c:1b:30:50:9d:25:82:4c:67:36:01:75:af:bc: ba:20:a2:c8:9f:dd:b6:86:0a:b3:4b:79:b6:93:46:8e:a8:ad: 0f:75:34:27:4d:20:2b:3c:b8:c7:5e:08:5c:ae:55:85:90:65: 60:05:42:2f:ed:53:b4:b7:e7:ec:97:eb:83:a5:6b:56:58:0f: e3:59:d1:ce:73:dc:45:69:97:b7:8c:ff:1d:51:60:93:80:2f: bb:aa:c6:b2:62:d9:13:56:6e:cb:b2:9c:87:a1:5b:b0:21:43: 3e:6a:60:2c:42:37:45:6e:36:8a:c1:7a:aa:48:1e:30:1f:25: d3:70:2a:a6:59:e6:d3:26:ef:5b:5a:0a:43:16:36:87:d8:6d: 36:73:f1:4b:e4:9e:39:a6:fd:64:ff:f7:a2:22:52:77:d2:c8: 4d:3d:e6:33:c1:d6:f0:f4:12:19:46:3c:69:70:c1:ce:e1:d4: 97:d9:6d:e8:be:b0:2e:c5:e5:c7:72:13:e6:35:08:bb:8c:ee: 6a:f1:bd:6c:58:80:1b:34:28:e7:10:d0:af:9f:3f:5f:9a:76: 8d:e4:c9:e0:35:7f:83:5e:4d:86:ab:4b:88:22:43:8b:d7:c3: c7:1f:56:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNENTAxMTAvBgNVBAUTKEY1MURDNjY5REI1OTYxODREMEJGOTRBQTFFNDFFNURF MTU5RThEQTUwHhcNMjYwMzI0MTgwNTQ1WhcNMjYwMzMxMTgwNTQ1WjAYMRYwFAYD VQQDEw02OWMyZDI3OS04ZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Eekp+sKAJ5ty35LzIjgtn78ds9FAPw3nS5olPKsirU2RxZri/Wc1WzZziKI zIpV7cx2pnzgzM/9RI8IaxMTMHqe6VIJ8q/3KDTs+SJdMmBnuXrCZsPknkVixUVn 4UWw/EEO+c3oatJGmv4/zgbORMGc0ObsOzR/T/J4yZppBEYR/FDNi+nzTmUJ/Smx 1Imhq4/KeD8hDCctl9qQcSvzEln+681t+2AA/EwDNuSLcusEWaHfUyOOgFwjmM7z 8uzIxp/cwXjfsfvevTcpHbr/wWHDCoDqTK3GPqzY0gDDVX6k3CULV8ezMUSke9x6 0ZxylUENaicNny/UcHCmVCE3qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhu7IHn rGt3wPLdGEm7EEX9Y87pMB8GA1UdIwQYMBaAFPUdxmnbWWGE0L+Uqh5B5d4Vno2l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q1MC8xNTQ2NEZENjA1 MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZVFF2NVNxSGtIbDNoV2Vq YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSM0dhZHRaWVlUUXY1U3FIa0hsM2hXZWphVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Q1MC8xNTQ2NEZENjA1MDExMUVBQUQ5NzI1MkNDNEY5QUUwMi85UjNHYWR0WllZ VFF2NVNxSGtIbDNoV2VqYVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz710VUc3rOVdlL+Tnm0M1GHkx3Vx6TwbMFCdJYJMZzYBda+8uiCiyJ/dtoYK s0t5tpNGjqitD3U0J00gKzy4x14IXK5VhZBlYAVCL+1TtLfn7Jfrg6VrVlgP41nR znPcRWmXt4z/HVFgk4Avu6rGsmLZE1Zuy7Kch6FbsCFDPmpgLEI3RW42isF6qkge MB8l03Aqplnm0ybvW1oKQxY2h9htNnPxS+SeOab9ZP/3oiJSd9LITT3mM8HW8PQS GUY8aXDBzuHUl9lt6L6wLsXlx3IT5jUIu4zuavG9bFiAGzQo5xDQr58/X5p2jeTJ 4DV/g15NhqtLiCJDi9fDxx9WMw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:56 2026 by rpki-client