$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft File: t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json) Hash identifier: srCj7Ibd7GE/adZptl6kWcGzmxcm9UMNR/izdU1xiME= Subject key identifier: 0F:90:A9:43:DF:BB:D2:55:4F:46:FF:E7:C5:9A:78:F4:D8:B7:AD:4B Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A Certificate issuer: /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft Manifest number: 0499 Signing time: Tue 24 Mar 2026 23:38:47 +0000 Manifest this update: Tue 24 Mar 2026 23:38:47 +0000 Manifest next update: Tue 31 Mar 2026 23:38:47 +0000 Files and hashes: 1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: 6QUCMFFS4i4FIbRjM/l1vCHk4kOQUEG+JVg+7W9HpJQ=) 2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2RXStLDjyOeuSTsmkifmHRekLcbCRcqX4watjvDv81g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A Validity Not Before: Mar 24 23:38:47 2026 GMT Not After : Mar 31 23:38:47 2026 GMT Subject: CN=69c32087-81f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:92:4a:f5:24:f9:68:9f:f7:78:1c:63:30: 8d:ec:78:4d:d1:5e:e4:cf:3c:ef:ad:c7:45:b4:99: ac:f6:72:c3:40:66:9b:3f:c1:b5:dc:8c:67:18:71: 35:ed:f4:1d:ad:eb:b1:14:d9:a9:5f:41:9a:51:70: bf:5b:f5:4d:49:33:1c:e3:1f:02:7f:d1:21:88:28: 0b:de:e9:05:d7:03:e3:37:2d:29:ee:23:49:3e:6f: c6:ff:e8:77:a2:71:7b:87:61:dd:08:e1:6c:50:23: dd:c5:80:31:13:84:29:3b:d7:5f:4e:1b:cf:b2:31: d1:18:7c:95:db:a6:26:7a:32:1b:cb:3b:db:db:5a: ef:d7:d1:f1:81:82:62:e9:1f:9d:61:66:4d:af:42: 6e:61:32:a9:f8:e3:a0:70:73:6e:15:8f:5e:9b:02: 6b:84:dd:56:49:1f:56:b2:dc:70:70:c8:bb:a1:c4: fd:87:23:15:95:e9:c9:ee:4d:2e:c5:56:71:3e:ba: 87:c1:41:e1:c9:5c:b1:c3:8a:0e:62:c8:70:eb:46: 5e:19:59:71:ac:2a:7b:b8:2f:5f:d6:d9:f1:60:ea: fe:d3:4c:ea:9f:16:e1:36:4d:06:2e:1e:6b:b4:13: f8:22:85:a0:23:50:68:3e:cb:b7:54:7a:7d:3d:36: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:90:A9:43:DF:BB:D2:55:4F:46:FF:E7:C5:9A:78:F4:D8:B7:AD:4B X509v3 Authority Key Identifier: keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ff:c2:58:26:e9:71:20:43:21:c8:b4:61:e2:1b:ac:76:b1: 48:8a:35:41:1b:d4:c6:cf:ec:a5:03:33:73:98:d6:2e:29:a1: e9:8a:ca:27:ee:85:2e:a6:81:40:fc:35:25:3e:ce:ef:e9:cd: 09:c9:a8:92:83:a3:4d:80:fc:5f:98:29:96:46:97:9a:b5:39: 97:7c:ea:ef:8e:ab:da:79:36:58:64:5d:db:2e:82:bd:ce:4d: 8d:7a:5d:11:68:e4:4a:db:bb:bb:9a:80:4b:26:8a:5f:7e:41: ff:14:0c:a0:f1:1c:07:47:67:c2:92:20:56:b3:90:1a:8a:64: 79:de:fa:c8:16:19:6a:17:90:2b:27:2e:14:db:1e:7b:a8:10: e0:7b:85:08:dc:a0:13:87:37:a9:0c:0c:af:62:d3:ec:e0:5a: d5:9d:a5:89:15:84:7e:94:7c:ca:0c:14:a4:92:04:45:ce:10: 35:e7:5c:e1:28:65:80:39:1c:e0:2e:db:da:c8:f6:58:f8:e4: 28:31:a7:a9:02:eb:23:3e:89:88:77:09:ac:98:c9:d4:2f:23: 4f:ce:90:c5:02:71:9b:55:6b:5d:5d:c2:bd:da:60:5e:33:29: c6:25:91:78:ce:1e:ff:cb:eb:57:b0:f9:16:ff:84:45:12:4a: 89:6f:eb:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3MkQxMTAvBgNVBAUTKEI3NzI5MTdDQjVDMDc2N0REOEI5RTk0QzQwQzFBN0FB QTY1OURGMkEwHhcNMjYwMzI0MjMzODQ3WhcNMjYwMzMxMjMzODQ3WjAYMRYwFAYD VQQDEw02OWMzMjA4Ny04MWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC2SSvUk+Wif93gcYzCN7HhN0V7kzzzvrcdFtJms9nLDQGabP8G13IxnGHE1 7fQdreuxFNmpX0GaUXC/W/VNSTMc4x8Cf9EhiCgL3ukF1wPjNy0p7iNJPm/G/+h3 onF7h2HdCOFsUCPdxYAxE4QpO9dfThvPsjHRGHyV26YmejIbyzvb21rv19HxgYJi 6R+dYWZNr0JuYTKp+OOgcHNuFY9emwJrhN1WSR9WstxwcMi7ocT9hyMVlenJ7k0u xVZxPrqHwUHhyVyxw4oOYshw60ZeGVlxrCp7uC9f1tnxYOr+00zqnxbhNk0GLh5r tBP4IoWgI1BoPsu3VHp9PTbFiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+QqUPf u9JVT0b/58WaePTYt61LMB8GA1UdIwQYMBaAFLdykXy1wHZ92LnpTEDBp6qmWd8q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjcyRC84NDg1RjI0QTcz Q0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRuM1l1ZWxNUU1HbnFxWloz eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS1JmTFhBZG4zWXVlbE1RTUducXFaWjN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjcyRC84NDg1RjI0QTczQ0YxMUVDQkMzNTU0ODVDNEY5QUUwMi90M0tSZkxYQWRu M1l1ZWxNUU1HbnFxWlozeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdP/CWCbpcSBDIci0YeIbrHaxSIo1QRvUxs/spQMzc5jWLimh6YrKJ+6FLqaB QPw1JT7O7+nNCcmokoOjTYD8X5gplkaXmrU5l3zq746r2nk2WGRd2y6Cvc5NjXpd EWjkStu7u5qASyaKX35B/xQMoPEcB0dnwpIgVrOQGopked76yBYZaheQKycuFNse e6gQ4HuFCNygE4c3qQwMr2LT7OBa1Z2liRWEfpR8ygwUpJIERc4QNedc4ShlgDkc 4C7b2sj2WPjkKDGnqQLrIz6JiHcJrJjJ1C8jT86QxQJxm1VrXV3CvdpgXjMpxiWR eM4e/8vrV7D5Fv+ERRJKiW/rfA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:11:05 2026 by rpki-client