$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft File: g3nXR_dKVe3HOg4EIcebXsDk3nY.mft (raw, json) Hash identifier: 0YbKF+EgSYRRK47uf5fDS0a1450RV8eh4xXUYoSUFOA= Subject key identifier: 4A:D2:76:27:58:8E:BC:13:DB:B4:75:A0:B8:8B:87:EC:42:F5:84:18 Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 Certificate issuer: /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft Manifest number: 0204 Signing time: Wed 25 Mar 2026 02:29:57 +0000 Manifest this update: Wed 25 Mar 2026 02:29:56 +0000 Manifest next update: Wed 01 Apr 2026 02:29:56 +0000 Files and hashes: 1: g3nXR_dKVe3HOg4EIcebXsDk3nY.crl (hash: WBfuOH7SUEhubbqiTV/WCxszFlJZHGGacX3HWbwa5nM=) 2: 3A7527ECC1F711EF8B510B86C4F9AE02.roa (hash: jH3pUBKK5O5PFYi47D0568PqN1VNWUwbSLEuD5F8T1Q=) 3: 79FC546E326611F08478D72AC4F9AE02.roa (hash: zz0/+1mPK1uuhtSz3L6I5TM++EHZrh4Brc7QpBBGUqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76 Validity Not Before: Mar 25 02:29:56 2026 GMT Not After : Apr 1 02:29:56 2026 GMT Subject: CN=69c348a5-e280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:82:83:7b:a7:6b:d3:5e:52:d9:87:88:a7: 28:5c:7c:62:8a:e1:42:4a:9a:c8:db:87:7d:0c:fc: fb:45:23:f2:3b:91:0b:79:1b:da:c6:aa:6e:58:e3: af:e3:ec:87:2f:25:61:96:f1:63:dd:8c:6d:4d:5a: 8d:ed:6f:85:f3:b7:4d:be:1b:90:f1:27:ae:55:cd: 6f:91:ed:fd:9a:2d:60:fd:ca:b5:c0:5d:6d:90:5e: 0b:17:5b:ea:75:53:c2:ea:2e:40:05:f3:7b:75:77: b2:d2:21:b7:b9:71:b0:47:2b:d1:4b:43:7b:be:8e: f7:6d:89:4d:88:2f:a4:31:72:3c:22:a8:e5:1f:b0: cf:48:34:26:89:28:39:4a:cb:f8:4c:fd:ae:a7:7a: 49:16:20:10:8b:85:81:04:d5:28:12:4e:81:21:50: d7:ae:8a:5a:68:44:81:92:8f:b3:39:45:7c:d7:71: 44:41:3e:7b:77:a7:60:e6:96:eb:ba:ea:bc:5c:e4: 38:9b:75:4b:f3:49:25:89:77:61:b1:19:f1:c3:eb: ad:c7:10:64:a9:be:e1:4f:9d:f7:6d:af:b1:02:a1: e2:c0:34:dc:0c:ab:4e:a8:af:40:b9:15:3b:bf:02: 97:8d:26:61:36:38:f5:a1:27:33:b1:49:04:04:ff: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:76:27:58:8E:BC:13:DB:B4:75:A0:B8:8B:87:EC:42:F5:84:18 X509v3 Authority Key Identifier: keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e6:2b:d0:b0:66:95:6f:f6:80:29:8b:dc:a2:58:47:56:0e: 50:07:9e:03:b2:ad:6e:2f:e4:2a:90:ce:94:1e:24:87:44:5a: 51:cf:5b:af:2f:d2:67:7f:ac:bd:aa:4f:6e:f0:60:a5:8d:b0: 3f:7d:b5:c9:e6:36:4f:87:59:93:84:5f:d2:c9:1d:ff:0a:37: 19:a0:8e:f9:e8:e6:97:fb:a1:b7:3c:64:aa:52:cd:7b:0d:7b: 5c:8c:fb:0e:c6:32:6e:80:d2:f3:d0:b0:74:ea:72:28:12:ad: 76:fa:c7:12:04:02:15:78:a0:9d:9f:6b:b7:2f:de:01:44:ec: 25:7c:d8:4e:92:8f:a1:b1:90:5d:51:b6:c9:a0:f4:b5:6a:30: 05:1a:54:0c:87:7b:b4:c8:e8:65:21:a3:77:68:e1:95:3f:73: 2f:85:0a:34:a0:ab:be:b7:22:0f:cf:15:10:95:c3:2e:26:3f: 9e:ab:85:65:06:83:47:bc:45:97:0c:55:03:c0:69:30:04:31: 01:fc:b4:b3:8b:37:6e:0a:8c:65:72:4e:87:38:d9:99:2c:5d: 2e:69:7d:f0:6f:8a:f5:b3:76:8a:a6:1d:a1:8f:c4:8a:92:31: 07:21:ba:d6:7c:fc:63:27:7e:89:e5:f5:8b:9b:f4:42:66:ee: 63:97:8e:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDNDIxMTAvBgNVBAUTKDgzNzlENzQ3Rjc0QTU1RURDNzNBMEUwNDIxQzc5QjVF QzBFNERFNzYwHhcNMjYwMzI1MDIyOTU2WhcNMjYwNDAxMDIyOTU2WjAYMRYwFAYD VQQDEw02OWMzNDhhNS1lMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+GCg3una9NeUtmHiKcoXHxiiuFCSprI24d9DPz7RSPyO5ELeRvaxqpuWOOv 4+yHLyVhlvFj3YxtTVqN7W+F87dNvhuQ8SeuVc1vke39mi1g/cq1wF1tkF4LF1vq dVPC6i5ABfN7dXey0iG3uXGwRyvRS0N7vo73bYlNiC+kMXI8IqjlH7DPSDQmiSg5 Ssv4TP2up3pJFiAQi4WBBNUoEk6BIVDXropaaESBko+zOUV813FEQT57d6dg5pbr uuq8XOQ4m3VL80kliXdhsRnxw+utxxBkqb7hT533ba+xAqHiwDTcDKtOqK9AuRU7 vwKXjSZhNjj1oSczsUkEBP89YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErSdidY jrwT27R1oLiLh+xC9YQYMB8GA1UdIwQYMBaAFIN510f3SlXtxzoOBCHHm17A5N52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM0Mi8yNEE2NUVCRTIw RDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1ZlM0hPZzRFSWNlYlhzRGsz blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9nM25YUl9kS1Zl M0hPZzRFSWNlYlhzRGszblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApOYr0LBmlW/2gCmL3KJYR1YOUAeeA7Ktbi/kKpDOlB4kh0RaUc9bry/SZ3+s vapPbvBgpY2wP321yeY2T4dZk4Rf0skd/wo3GaCO+ejml/uhtzxkqlLNew17XIz7 DsYyboDS89CwdOpyKBKtdvrHEgQCFXignZ9rty/eAUTsJXzYTpKPobGQXVG2yaD0 tWowBRpUDId7tMjoZSGjd2jhlT9zL4UKNKCrvrciD88VEJXDLiY/nquFZQaDR7xF lwxVA8BpMAQxAfy0s4s3bgqMZXJOhzjZmSxdLml98G+K9bN2iqYdoY/EipIxByG6 1nz8Yyd+ieX1i5v0QmbuY5eOog== -----END CERTIFICATE-----Generated at Thu Mar 26 00:55:17 2026 by rpki-client