$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft File: 3DHPX8nyg0g327s2g8uK9kKrSnw.mft (raw, json) Hash identifier: /bG4ycJDW5OX10nZTEU1jIdJZbCOMsjm2bHbiLmyBEc= Subject key identifier: F2:EB:FE:29:45:A8:67:82:5E:45:2C:D5:51:FD:43:B9:1A:40:5B:93 Authority key identifier: DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C Certificate issuer: /CN=A91DF85B/serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft Manifest number: 01D1 Signing time: Wed 25 Mar 2026 02:56:02 +0000 Manifest this update: Wed 25 Mar 2026 02:56:02 +0000 Manifest next update: Wed 01 Apr 2026 02:56:02 +0000 Files and hashes: 1: 3DHPX8nyg0g327s2g8uK9kKrSnw.crl (hash: MSi3EHiB8Dbg8PEM/i/Vcj6LD+2+DnUdjpvcPjw6ep8=) 2: EE28B64661D611EE9C66300EC4F9AE02.roa (hash: uTyjoAh95BFvYOGGP6YDD2msOcpdKZlwbOX4CL5Jc1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF85B, serialNumber=DC31CF5FC9F2834837DBBB3683CB8AF642AB4A7C Validity Not Before: Mar 25 02:56:02 2026 GMT Not After : Apr 1 02:56:02 2026 GMT Subject: CN=69c34ec2-4194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e9:c1:a2:55:47:77:7d:6b:d8:10:da:3b:fa: 09:15:40:8b:ef:ed:5e:37:58:86:41:76:75:88:16: d9:3b:40:2c:b1:88:49:16:2c:82:82:af:09:dd:f6: 4f:5e:2d:b8:44:06:a8:c4:d2:b7:5f:f2:d4:5d:22: e7:dd:69:12:b8:c0:f0:05:90:ff:f2:ac:2e:50:69: 53:f5:0c:be:06:84:a4:ec:d6:db:b3:53:91:0f:43: 29:1b:df:37:1c:32:59:fb:66:b5:47:86:c9:c0:6e: 78:f0:0c:73:81:38:1c:72:b1:e3:01:f3:37:f8:52: 8a:d5:87:0f:c9:10:45:4e:f9:bf:2b:63:f8:d5:71: fd:96:3f:5d:a2:e5:33:e3:b7:66:dc:8b:5d:97:e1: 4c:e0:ea:96:0c:05:cc:4e:c1:0b:4f:b4:59:72:25: 6f:ae:fe:6d:e8:50:cd:fe:00:71:c3:cd:8d:c2:49: 0a:8e:09:d2:31:5d:4b:3c:1e:47:8c:fa:d1:51:ee: 73:90:91:c7:7e:18:d3:33:3d:16:2e:fd:63:f2:37: 24:6e:e2:81:b4:8b:a6:9b:d0:53:7a:04:f0:9d:1c: 62:7f:01:de:ea:f4:40:5f:66:86:9c:20:c4:e0:02: c5:48:c3:df:e2:a0:c3:c5:b0:ca:20:dd:d5:71:2b: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EB:FE:29:45:A8:67:82:5E:45:2C:D5:51:FD:43:B9:1A:40:5B:93 X509v3 Authority Key Identifier: keyid:DC:31:CF:5F:C9:F2:83:48:37:DB:BB:36:83:CB:8A:F6:42:AB:4A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3DHPX8nyg0g327s2g8uK9kKrSnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF85B/C713C2FE61D511EEBAA04A5EC4F9AE02/3DHPX8nyg0g327s2g8uK9kKrSnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c0:a4:fd:9f:d3:7a:de:09:87:1e:87:1f:ae:83:65:2d:52: d6:0b:9c:10:8f:31:e7:90:68:9e:c5:26:52:54:c6:dd:16:d7: 78:b1:22:5f:c2:ed:55:39:ff:b1:1a:fa:28:3e:7c:28:fc:53: fa:33:7e:17:b7:54:81:e9:07:76:09:78:f4:52:da:26:61:a4: 0d:cf:90:b7:7f:c8:0f:b3:d5:02:f8:1a:fa:e9:0e:80:9f:70: 00:b4:1c:ee:cf:00:d3:f6:9e:fa:fc:f8:f9:60:e5:a4:1f:77: 6b:e2:ba:86:01:63:a4:7f:5b:58:0e:0d:cf:7b:38:62:e5:40: 37:26:d6:6a:75:e8:c2:27:1b:a9:69:96:c6:87:01:df:37:fb: 16:89:9c:11:93:34:5a:f1:c3:ec:17:e3:fd:ff:94:43:36:3b: e1:0a:52:0f:b5:dc:23:d5:d4:e8:6d:e3:f1:08:0e:de:cd:1f: ae:a1:cf:af:9f:35:8f:14:17:f3:d8:ad:c8:0a:f4:fa:d7:3a: ba:40:9c:75:72:0f:93:09:b2:45:8e:db:ca:1e:8e:b1:c0:a4: ad:5d:e1:c0:f3:bc:83:8e:73:ac:49:95:73:47:38:6d:e2:42: 53:c4:49:a3:99:40:69:60:cf:0e:e4:f6:f8:67:7e:c6:2f:4d: 98:4d:b8:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NUIxMTAvBgNVBAUTKERDMzFDRjVGQzlGMjgzNDgzN0RCQkIzNjgzQ0I4QUY2 NDJBQjRBN0MwHhcNMjYwMzI1MDI1NjAyWhcNMjYwNDAxMDI1NjAyWjAYMRYwFAYD VQQDEw02OWMzNGVjMi00MTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+nBolVHd31r2BDaO/oJFUCL7+1eN1iGQXZ1iBbZO0AssYhJFiyCgq8J3fZP Xi24RAaoxNK3X/LUXSLn3WkSuMDwBZD/8qwuUGlT9Qy+BoSk7Nbbs1ORD0MpG983 HDJZ+2a1R4bJwG548AxzgTgccrHjAfM3+FKK1YcPyRBFTvm/K2P41XH9lj9douUz 47dm3Itdl+FM4OqWDAXMTsELT7RZciVvrv5t6FDN/gBxw82NwkkKjgnSMV1LPB5H jPrRUe5zkJHHfhjTMz0WLv1j8jckbuKBtIumm9BTegTwnRxifwHe6vRAX2aGnCDE 4ALFSMPf4qDDxbDKIN3VcSs6tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLr/ilF qGeCXkUs1VH9Q7kaQFuTMB8GA1UdIwQYMBaAFNwxz1/J8oNIN9u7NoPLivZCq0p8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Qi9DNzEzQzJGRTYx RDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcwZzMyN3MyZzh1SzlrS3JT bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNESFBYOG55ZzBnMzI3czJnOHVLOWtLclNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1Qi9DNzEzQzJGRTYxRDUxMUVFQkFBMDRBNUVDNEY5QUUwMi8zREhQWDhueWcw ZzMyN3MyZzh1SzlrS3JTbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArcCk/Z/Tet4Jhx6HH66DZS1S1gucEI8x55BonsUmUlTG3RbXeLEiX8LtVTn/ sRr6KD58KPxT+jN+F7dUgekHdgl49FLaJmGkDc+Qt3/ID7PVAvga+ukOgJ9wALQc 7s8A0/ae+vz4+WDlpB93a+K6hgFjpH9bWA4Nz3s4YuVANybWanXowicbqWmWxocB 3zf7FomcEZM0WvHD7Bfj/f+UQzY74QpSD7XcI9XU6G3j8QgO3s0frqHPr581jxQX 89ityAr0+tc6ukCcdXIPkwmyRY7byh6OscCkrV3hwPO8g45zrEmVc0c4beJCU8RJ o5lAaWDPDuT2+Gd+xi9NmE24jw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:36 2026 by rpki-client