$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft File: 3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json) Hash identifier: eLFUmLif+OpeiNv9PwGMf3h/IhflEtJvoF8Mk9Sp21g= Subject key identifier: 71:02:A4:51:2F:B9:4E:4E:1B:E4:65:44:92:9C:53:94:74:7C:F8:5B Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 Certificate issuer: /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft Manifest number: 012A Signing time: Wed 25 Mar 2026 04:51:08 +0000 Manifest this update: Wed 25 Mar 2026 04:51:08 +0000 Manifest next update: Wed 01 Apr 2026 04:51:08 +0000 Files and hashes: 1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: Y8I/QE85qCg2MWk8zKfAfISAcGP/DVeO0YMkAL2Xfdc=) 2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: rjCr6k0hES4hJ4HPyOEdmEOZBWpRclb2qE3oqjX2XnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357 Validity Not Before: Mar 25 04:51:08 2026 GMT Not After : Apr 1 04:51:08 2026 GMT Subject: CN=69c369bc-d9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:c7:ed:35:6e:d1:df:db:8c:31:8a:26:83: ed:f1:18:b6:f5:8d:df:69:12:32:84:37:6e:41:e8: 2b:2f:9a:b4:5e:d0:20:d9:66:41:64:83:13:75:eb: 2e:dd:04:e9:72:76:dc:6f:5d:5e:61:a2:76:51:db: 49:4b:19:38:de:eb:0b:05:29:4d:6a:1e:70:2d:18: e5:4c:f0:7f:d1:c5:c0:2e:67:02:03:3b:1d:63:df: 03:aa:4b:33:e9:79:31:93:44:ba:6e:a9:76:82:11: 69:b6:ad:9a:89:dd:99:b7:cd:32:1d:ee:b7:59:5f: 8c:ce:49:32:c6:dd:7b:43:ac:7b:d5:4b:3f:eb:cd: 12:da:48:82:c4:91:0d:c6:2b:cd:31:83:c1:a0:45: f0:79:dd:98:56:85:2a:b3:90:3b:87:69:52:31:50: 6d:b0:cb:b4:0c:3c:fb:85:59:51:ef:09:ab:89:22: ea:78:83:c1:6f:5e:ac:71:47:58:bf:a7:74:39:e5: 7d:c7:a4:31:90:02:15:5a:56:a4:24:9a:9f:d8:fc: 61:42:62:f4:70:97:ab:0a:5c:66:54:c6:b5:4a:a0: bd:a1:f6:c0:85:50:11:40:96:eb:0c:0d:ea:ba:43: 4a:08:71:a4:f6:e1:f8:cb:e0:db:a2:54:c0:5a:30: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:02:A4:51:2F:B9:4E:4E:1B:E4:65:44:92:9C:53:94:74:7C:F8:5B X509v3 Authority Key Identifier: keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:78:49:9f:c8:98:1d:9b:78:98:71:ee:15:b2:3a:2d:e5:9f: 5b:07:89:fe:93:5e:c4:d8:bf:dc:c4:44:96:0b:0e:d5:88:93: 67:b1:bb:3d:79:34:03:e3:6f:6c:9a:d5:00:d0:c9:f2:22:50: a4:d1:ab:05:5e:e6:e3:41:6c:31:62:26:08:ba:fe:4f:b4:a2: 7f:84:29:f1:d2:12:81:83:b4:ba:4e:77:0e:c2:be:8f:54:42: 86:52:5d:cc:85:0d:57:be:c0:d7:70:b2:68:14:35:75:4b:67: d6:e1:50:d9:dc:aa:8c:99:74:14:d1:bd:fb:6d:d2:83:33:07: 28:3f:b5:a6:e8:e7:72:f6:6e:36:85:82:d4:68:31:a2:b1:4b: ed:55:1d:46:d5:cd:37:a7:2e:aa:c2:23:ea:73:ef:2e:56:18: 59:12:b1:23:f7:03:c9:d7:3b:0f:24:1e:dc:77:bb:bf:06:c5: b9:a2:09:55:b3:63:b0:85:ea:47:75:81:19:18:6e:cc:01:96: e2:81:8d:63:c1:9d:93:16:c1:e6:40:b8:92:dc:3d:62:fc:3f: 56:c1:75:c7:a8:27:6f:d6:de:41:9b:43:8c:e0:84:c0:10:c4: bf:4e:94:e2:57:fa:e6:77:e2:18:90:6a:b1:71:63:55:48:2d: 93:c0:e0:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1NkMxMTAvBgNVBAUTKERDNzU1OUVFNUEyMjUwNjAzOTczMzhGQ0FBMzgwM0ZG QUE0QjIzNTcwHhcNMjYwMzI1MDQ1MTA4WhcNMjYwNDAxMDQ1MTA4WjAYMRYwFAYD VQQDEw02OWMzNjliYy1kOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WfH7TVu0d/bjDGKJoPt8Ri29Y3faRIyhDduQegrL5q0XtAg2WZBZIMTdesu 3QTpcnbcb11eYaJ2UdtJSxk43usLBSlNah5wLRjlTPB/0cXALmcCAzsdY98Dqksz 6Xkxk0S6bql2ghFptq2aid2Zt80yHe63WV+Mzkkyxt17Q6x71Us/680S2kiCxJEN xivNMYPBoEXwed2YVoUqs5A7h2lSMVBtsMu0DDz7hVlR7wmriSLqeIPBb16scUdY v6d0OeV9x6QxkAIVWlakJJqf2PxhQmL0cJerClxmVMa1SqC9ofbAhVARQJbrDA3q ukNKCHGk9uH4y+DbolTAWjDk+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHECpFEv uU5OG+RlRJKcU5R0fPhbMB8GA1UdIwQYMBaAFNx1We5aIlBgOXM4/Ko4A/+qSyNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTU2Qy9ERERFOEM0ODY0 RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVHQTVjemo4cWpnRF82cExJ MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIVlo3bG9pVUdBNWN6ajhxamdEXzZwTEkxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTU2Qy9ERERFOEM0ODY0RkYxMUVGQTVBODExNThDNEY5QUUwMi8zSFZaN2xvaVVH QTVjemo4cWpnRF82cExJMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdXhJn8iYHZt4mHHuFbI6LeWfWweJ/pNexNi/3MRElgsO1YiTZ7G7PXk0A+Nv bJrVANDJ8iJQpNGrBV7m40FsMWImCLr+T7Sif4Qp8dISgYO0uk53DsK+j1RChlJd zIUNV77A13CyaBQ1dUtn1uFQ2dyqjJl0FNG9+23SgzMHKD+1pujncvZuNoWC1Ggx orFL7VUdRtXNN6cuqsIj6nPvLlYYWRKxI/cDydc7DyQe3He7vwbFuaIJVbNjsIXq R3WBGRhuzAGW4oGNY8GdkxbB5kC4ktw9Yvw/VsF1x6gnb9beQZtDjOCEwBDEv06U 4lf65nfiGJBqsXFjVUgtk8Dgvw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:50 2026 by rpki-client