$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json) Hash identifier: zOUQ0q5yM+xMjeIiX9EjkgWKJXmM5vb5CCIQESL9Q0k= Subject key identifier: 5D:A1:C3:1F:94:94:AF:AA:34:00:AD:EC:1D:99:2C:D0:92:2A:A0:B4 Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft Manifest number: C8 Signing time: Wed 25 Mar 2026 06:06:16 +0000 Manifest this update: Wed 25 Mar 2026 06:06:15 +0000 Manifest next update: Wed 01 Apr 2026 06:06:15 +0000 Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: gpuygzrE+n1A5aXE5SA2CyrrQOqhpn6JgNSjd3gNohA=) 2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Validity Not Before: Mar 25 06:06:15 2026 GMT Not After : Apr 1 06:06:15 2026 GMT Subject: CN=69c37b58-ed26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:4f:29:f1:39:25:cf:90:69:4d:d1:ad:ce: cf:cc:4f:5c:fa:35:7a:8c:ce:65:ac:64:75:01:3d: 75:96:b1:d7:74:db:d9:d6:e4:c9:65:09:23:59:e0: 2e:8b:9a:c1:61:89:3a:ca:5e:ed:e6:a1:a6:6d:e6: 63:39:ac:d0:fe:aa:ac:fb:89:97:13:44:9e:c1:15: b9:0b:ba:3c:99:cf:30:e5:70:83:e4:bc:59:b4:7c: 40:b3:68:d3:84:9f:c5:a5:1e:15:18:c5:af:85:8f: cd:b7:0a:db:90:3e:f5:a0:03:69:b2:57:47:b3:db: 90:1b:6a:c2:a8:77:e1:32:69:e4:44:12:ef:b2:26: a3:e9:64:d5:62:23:f0:d0:f7:47:ed:a1:cf:2f:ff: 65:87:f9:a2:b5:49:6e:f1:c6:ed:9a:71:6a:22:9d: d6:1b:f0:7c:14:b3:d0:0b:78:48:b8:4f:5e:23:0e: d2:e2:e0:24:2d:54:c6:cb:05:64:ae:a3:28:c8:40: 7c:69:2d:84:43:7e:a0:4b:94:a4:91:69:d4:ad:0b: f3:b8:f9:fd:1d:78:56:5b:cf:c5:f7:db:6d:5f:18: 45:64:3e:d5:b9:78:93:4c:31:70:f3:a8:ec:92:68: ae:ee:a9:16:41:d1:10:20:03:2f:d6:a5:91:89:91: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A1:C3:1F:94:94:AF:AA:34:00:AD:EC:1D:99:2C:D0:92:2A:A0:B4 X509v3 Authority Key Identifier: keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0d:63:a9:18:f8:29:51:d8:1f:b2:b6:b1:70:cd:12:3f:21: 5e:20:a3:d2:74:ba:17:a8:e6:27:23:1b:58:14:7f:cf:96:83: 92:55:83:26:09:b2:4f:09:61:5c:7d:f2:c0:64:d0:5d:ea:87: e6:e6:78:5c:8d:d1:54:fc:57:78:58:f3:6a:7d:7d:a9:e7:35: 17:2d:ad:0c:c3:68:c8:12:66:2f:e6:32:3f:3d:79:ec:98:59: 9e:18:14:0e:24:2b:1f:78:d9:1b:dd:00:31:2f:56:ae:bd:81: 8f:4d:5b:bd:14:9d:82:5b:f5:b5:6a:26:4a:d0:07:ba:e3:99: 08:ce:a8:d2:d8:d9:9e:66:8c:68:b9:24:48:ea:2f:f2:e1:10: 49:7d:47:c4:05:9a:26:be:12:28:b9:56:84:93:ef:e8:3d:ac: 4c:81:73:65:46:51:3d:6a:24:6b:91:07:3c:16:af:45:1e:82: 85:b0:b0:61:6a:3a:cd:bf:aa:4f:b6:86:c9:f4:a1:ce:94:ae: 3f:83:6f:38:be:4a:30:33:af:ce:20:e3:ad:6f:4e:3a:e1:6a: c1:7f:df:ac:b1:e8:66:4e:6d:fc:02:35:b2:86:37:98:4c:df: 78:d0:5a:c5:82:f2:12:c9:10:cb:bb:6b:66:7d:31:2c:9f:a1: dd:0d:c8:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDlGN0I0MkVGMThEMzQyRkRENTZBOUZEQzVGM0Q4MDFF MkQyQzFBQjcwHhcNMjYwMzI1MDYwNjE1WhcNMjYwNDAxMDYwNjE1WjAYMRYwFAYD VQQDEw02OWMzN2I1OC1lZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJNPKfE5Jc+QaU3Rrc7PzE9c+jV6jM5lrGR1AT11lrHXdNvZ1uTJZQkjWeAu i5rBYYk6yl7t5qGmbeZjOazQ/qqs+4mXE0SewRW5C7o8mc8w5XCD5LxZtHxAs2jT hJ/FpR4VGMWvhY/NtwrbkD71oANpsldHs9uQG2rCqHfhMmnkRBLvsiaj6WTVYiPw 0PdH7aHPL/9lh/mitUlu8cbtmnFqIp3WG/B8FLPQC3hIuE9eIw7S4uAkLVTGywVk rqMoyEB8aS2EQ36gS5SkkWnUrQvzuPn9HXhWW8/F99ttXxhFZD7VuXiTTDFw86js kmiu7qkWQdEQIAMv1qWRiZFK4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2hwx+U lK+qNACt7B2ZLNCSKqC0MB8GA1UdIwQYMBaAFJ97Qu8Y00L91Wqf3F89gB4tLBq3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8wNjFBQUI1MkZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2M1ZhcF9jWHoyQUhpMHNH cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODI4Mi8wNjFBQUI1MkZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2 M1ZhcF9jWHoyQUhpMHNHcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACw1jqRj4KVHYH7K2sXDNEj8hXiCj0nS6F6jmJyMbWBR/z5aDklWDJgmyTwlh XH3ywGTQXeqH5uZ4XI3RVPxXeFjzan19qec1Fy2tDMNoyBJmL+YyPz157JhZnhgU DiQrH3jZG90AMS9Wrr2Bj01bvRSdglv1tWomStAHuuOZCM6o0tjZnmaMaLkkSOov 8uEQSX1HxAWaJr4SKLlWhJPv6D2sTIFzZUZRPWoka5EHPBavRR6ChbCwYWo6zb+q T7aGyfShzpSuP4NvOL5KMDOvziDjrW9OOuFqwX/frLHoZk5t/AI1soY3mEzfeNBa xYLyEskQy7trZn0xLJ+h3Q3IUg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:10 2026 by rpki-client