$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: rRe1rjzrwjfAx4qkERgbm3t+wnI/4/I0wVz6AB9HuxM= Subject key identifier: 1D:B8:FF:97:6D:17:46:A7:29:41:4F:DC:67:E5:DC:C5:CC:72:B6:29 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 3A Signing time: Wed 25 Mar 2026 07:46:03 +0000 Manifest this update: Wed 25 Mar 2026 07:46:03 +0000 Manifest next update: Wed 01 Apr 2026 07:46:03 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: tV64gwjTYodj/AAeO8vctrk4Eo8rTLmGH+r3USlxdx8=) 2: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: rogl+yV8mqomZi5XFY8zGIncIfCI6Ju2NLYZxXN71x0=) 3: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: Enic89W+OV3hzIdxS0CHvDqgnWq3iYz6oFq51hnxs94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Mar 25 07:46:03 2026 GMT Not After : Apr 1 07:46:03 2026 GMT Subject: CN=69c392bb-762d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:a7:2a:0c:4d:c9:51:22:ff:6f:66:16:e7: a9:af:b0:71:f4:0f:d8:6f:b0:91:70:19:47:41:21: 6e:de:62:f9:78:d3:b7:b1:fb:28:26:b5:40:1c:7c: 15:55:85:f5:41:ae:ef:e2:f5:0e:85:bd:e8:e5:ef: b2:74:06:1e:5a:d8:98:9a:5f:a3:f5:14:5f:ba:8a: 51:86:8d:fc:a6:5e:48:e3:21:c7:6b:25:a0:63:a7: 0b:6a:78:a7:8f:d4:3b:7f:dc:4f:60:54:4d:1e:5d: f2:6a:94:a9:9d:97:1a:80:d4:58:b5:d4:21:5c:00: 52:4f:27:88:26:7e:83:29:a0:21:13:4a:97:fc:70: 0d:ac:95:fb:52:03:17:14:3a:b4:d7:5a:71:47:6e: 6d:12:85:fc:cb:12:8f:71:1b:6b:22:41:e6:a7:b6: 77:eb:0a:51:14:f8:b6:49:19:41:f2:91:01:8d:92: 87:75:93:74:1c:63:8e:c8:f2:fb:9e:bf:b1:69:48: 9c:91:10:45:a6:db:ff:8c:d2:11:a2:0b:72:8e:a7: c9:bd:fe:d8:33:20:82:ae:56:5e:81:a4:92:d7:c1: d3:21:5e:a4:b3:bc:cc:24:25:d8:27:53:ec:da:80: 3a:09:3a:54:11:b6:ce:42:16:33:1d:2c:c5:a9:13: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B8:FF:97:6D:17:46:A7:29:41:4F:DC:67:E5:DC:C5:CC:72:B6:29 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:02:df:a4:51:74:8a:6a:ee:a8:a8:cf:b1:93:32:e0:42:e0: 9e:f7:37:9c:a8:84:c9:6e:2b:e2:14:b1:6a:d2:15:80:39:e7: 29:09:91:23:32:56:c4:34:8a:7a:1b:8c:26:d0:3a:ab:23:56: ef:de:cf:b5:84:28:df:7d:69:a9:93:aa:3a:63:c3:85:ec:16: 8d:b7:99:8e:58:4a:42:65:9b:29:ce:89:66:dd:25:d8:6c:ee: 7d:84:8b:a5:76:0e:7a:60:10:8f:b5:f3:25:6a:aa:0b:5e:7c: 54:8f:20:6a:3b:ad:3d:29:16:41:94:fb:5d:44:08:15:38:e7: 96:c2:e7:24:b9:78:16:5e:ad:bf:63:99:2d:d9:4b:fc:8a:30: e9:92:e5:8e:40:7c:3f:d5:c1:af:1b:57:1a:9e:95:5d:55:48: d5:3e:44:ac:1a:36:8f:79:4d:3c:4f:8c:17:fe:f7:87:70:0a: 3b:bc:2a:14:f3:1d:de:1d:b8:77:89:ce:3b:79:9b:98:62:b2: 11:5e:bf:1e:79:f0:93:94:e2:39:c8:d3:dd:35:e7:5d:ff:f0: c4:c4:24:1f:ed:10:4d:02:3b:46:91:fb:0b:ec:59:ba:0a:10: 08:76:31:52:56:bc:fe:bc:11:1a:59:9f:38:94:e5:f0:b5:58: cc:f3:91:64 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjAzMjUwNzQ2MDNaFw0yNjA0MDEwNzQ2MDNaMBgxFjAUBgNV BAMTDTY5YzM5MmJiLTc2MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2LKcqDE3JUSL/b2YW56mvsHH0D9hvsJFwGUdBIW7eYvl407ex+ygmtUAcfBVV hfVBru/i9Q6Fvejl77J0Bh5a2JiaX6P1FF+6ilGGjfymXkjjIcdrJaBjpwtqeKeP 1Dt/3E9gVE0eXfJqlKmdlxqA1Fi11CFcAFJPJ4gmfoMpoCETSpf8cA2slftSAxcU OrTXWnFHbm0ShfzLEo9xG2siQeantnfrClEU+LZJGUHykQGNkod1k3QcY47I8vue v7FpSJyREEWm2/+M0hGiC3KOp8m9/tgzIIKuVl6BpJLXwdMhXqSzvMwkJdgnU+za gDoJOlQRts5CFjMdLMWpE3kzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHbj/l20X RqcpQU/cZ+XcxcxytikwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkAt+kUXSKau6oqM+xkzLgQuCe9zecqITJbiviFLFq0hWAOecpCZEjMlbENIp6 G4wm0DqrI1bv3s+1hCjffWmpk6o6Y8OF7BaNt5mOWEpCZZspzolm3SXYbO59hIul dg56YBCPtfMlaqoLXnxUjyBqO609KRZBlPtdRAgVOOeWwuckuXgWXq2/Y5kt2Uv8 ijDpkuWOQHw/1cGvG1canpVdVUjVPkSsGjaPeU08T4wX/veHcAo7vCoU8x3eHbh3 ic47eZuYYrIRXr8eefCTlOI5yNPdNedd//DExCQf7RBNAjtGkfsL7Fm6ChAIdjFS Vrz+vBEaWZ84lOXwtVjM85Fk -----END CERTIFICATE-----Generated at Thu Mar 26 04:25:05 2026 by rpki-client