$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json) Hash identifier: fWv2mkvgHN4luGG+7yNRDjfhnQE0AccvhBLI2JSpoM8= Subject key identifier: 0B:BB:9B:D3:BF:CE:14:B7:66:D8:56:CF:C6:29:3B:55:57:E1:F5:17 Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft Manifest number: 44 Signing time: Wed 25 Mar 2026 07:32:26 +0000 Manifest this update: Wed 25 Mar 2026 07:32:25 +0000 Manifest next update: Wed 01 Apr 2026 07:32:25 +0000 Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: rrvz1GzpO/+N3vJAZdH7t0VjAsSBKW5s0YZGNbifSOI=) 2: C6B0BA0EC37D11F0A205F578C4F9AE02.roa (hash: +CmSda4T3YUnvvvrMYK818glj0vIe2epiTUr9j+GbE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Mar 25 07:32:25 2026 GMT Not After : Apr 1 07:32:25 2026 GMT Subject: CN=69c38f8a-166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:89:1f:0c:a7:d7:1b:68:69:6d:0a:5a:c0: fa:26:95:fe:56:6a:e8:97:ee:05:97:f1:ec:23:7d: 8c:ea:bf:28:c6:ec:7f:d9:ec:28:8c:4f:62:6e:5d: 84:24:1b:6a:e0:d2:a7:9e:94:6e:a6:ca:89:e8:44: 5f:e3:db:6c:76:ee:da:93:a2:ec:52:cb:df:53:6b: 1d:88:21:74:b1:23:0b:1b:0a:29:da:87:44:12:c8: b8:a5:a5:d0:a2:d9:d6:b0:05:94:41:db:1b:ee:91: 8f:82:6d:d4:4f:6a:e8:26:32:c9:81:5d:61:32:9b: 79:8c:0c:34:89:b0:ed:8a:fd:2c:a9:38:e9:32:90: 97:f0:7e:e5:53:94:24:99:a9:f0:95:7a:1d:98:0a: 00:09:29:64:c7:f9:67:f6:db:6e:9e:0a:65:c7:8d: 96:f3:ed:ab:4f:5c:76:b6:32:da:4a:06:99:dd:ec: 35:43:d8:0c:d2:37:21:74:fc:d8:e6:75:b8:43:f2: 7d:7c:35:04:a4:dc:ae:6d:bd:83:62:89:e3:37:d3: 20:a1:24:15:b6:f4:e1:f4:d1:e0:f2:2f:24:5e:26: 39:3b:39:f2:c2:09:04:09:c4:70:18:2b:c4:43:58: bf:f1:23:77:c3:aa:73:a4:49:ab:ce:d0:0d:1a:0e: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BB:9B:D3:BF:CE:14:B7:66:D8:56:CF:C6:29:3B:55:57:E1:F5:17 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3e:08:e4:df:ae:79:3e:4a:ba:b4:e3:6c:b6:b5:a8:86:a4: 59:5c:89:f9:b2:15:a9:2b:ca:6a:05:cc:17:70:57:3e:88:b8: 2f:57:89:f7:db:08:ea:6e:12:47:e2:28:88:c8:66:51:45:43: b6:12:c3:db:c9:09:76:4b:4d:5e:fe:27:6d:27:82:b6:f8:1f: e6:aa:b4:d7:d3:52:6f:a3:14:10:a0:2e:b5:b2:16:18:c0:ba: 4f:67:ac:a1:dc:fc:63:29:f2:5a:90:f2:6e:16:05:5a:10:c9: ee:f3:38:03:a8:0a:f4:08:44:62:b8:a1:90:ec:d1:05:e4:d8: 61:d4:d3:9f:dd:9a:3e:c5:32:50:c0:70:f1:92:89:48:de:5d: b5:0b:80:55:76:c2:63:18:e8:4e:11:c8:e4:64:58:52:68:68: 9c:34:2a:7f:99:fa:4f:e2:eb:fa:88:87:28:cb:c9:ac:b8:5a: 22:de:73:36:92:51:79:5b:3f:a5:0c:a3:9c:f9:ba:09:a1:64: c5:e3:fa:e1:0e:10:10:a3:a8:a5:bf:42:7b:6f:5e:05:fe:59: 2a:a8:46:0f:d5:5f:bc:c2:61:9b:af:ea:79:0d:7d:78:9a:2a: 8f:a0:60:5e:78:d3:33:33:f5:3f:99:ac:20:dc:46:cd:a9:68: 4e:09:ec:13 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNjAzMjUwNzMyMjVaFw0yNjA0MDEwNzMyMjVaMBgxFjAUBgNV BAMTDTY5YzM4ZjhhLTE2NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZCYkfDKfXG2hpbQpawPomlf5WauiX7gWX8ewjfYzqvyjG7H/Z7CiMT2JuXYQk G2rg0qeelG6myonoRF/j22x27tqTouxSy99Tax2IIXSxIwsbCinah0QSyLilpdCi 2dawBZRB2xvukY+CbdRPaugmMsmBXWEym3mMDDSJsO2K/SypOOkykJfwfuVTlCSZ qfCVeh2YCgAJKWTH+Wf2226eCmXHjZbz7atPXHa2MtpKBpnd7DVD2AzSNyF0/Njm dbhD8n18NQSk3K5tvYNiieM30yChJBW29OH00eDyLyReJjk7OfLCCQQJxHAYK8RD WL/xI3fDqnOkSavO0A0aDmoVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC7ub07/O FLdm2FbPxik7VVfh9RcwHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzY4MkIzOUE2QzM3QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRr TUtLZGxkZGl0NWtLY1A4cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWPgjk3655Pkq6tONstrWohqRZXIn5shWpK8pqBcwXcFc+iLgvV4n32wjqbhJH 4iiIyGZRRUO2EsPbyQl2S01e/idtJ4K2+B/mqrTX01JvoxQQoC61shYYwLpPZ6yh 3PxjKfJakPJuFgVaEMnu8zgDqAr0CERiuKGQ7NEF5Nhh1NOf3Zo+xTJQwHDxkolI 3l21C4BVdsJjGOhOEcjkZFhSaGicNCp/mfpP4uv6iIcoy8msuFoi3nM2klF5Wz+l DKOc+boJoWTF4/rhDhAQo6ilv0J7b14F/lkqqEYP1V+8wmGbr+p5DX14miqPoGBe eNMzM/U/mawg3EbNqWhOCewT -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:30 2026 by rpki-client