$ rpki-client -vvf rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft File: r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft (raw, json) Hash identifier: Gcb1XeOs/iQDx5nAiUk0k5YVejNGkr2lpxh3WUgsQjY= Subject key identifier: 41:FF:C9:B6:6B:BB:FB:6E:C2:BD:F9:02:B8:39:47:26:85:F3:81:EE Authority key identifier: AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 Certificate issuer: /CN=A9127686/serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Certificate serial: 0557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft Manifest number: 0543 Signing time: Mon 02 Mar 2026 23:33:04 +0000 Manifest this update: Mon 02 Mar 2026 23:33:04 +0000 Manifest next update: Mon 09 Mar 2026 23:33:04 +0000 Files and hashes: 1: r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl (hash: KFoonmNz+MVdJ1b9LqF/kVRpwBrkK7NbkKd70cZc64c=) 2: 54BBE48A304411EC830F8610C4F9AE02.roa (hash: xZK353K857X3pyBMuTDvCs3K6j+a0kZMwNk0Xb/yi9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 23:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127686, serialNumber=AF71F5B16795F9B7CF2B245848077E11685BA6F0 Validity Not Before: Mar 2 23:33:04 2026 GMT Not After : Mar 9 23:33:04 2026 GMT Subject: CN=69a61e30-df79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:b4:89:00:c9:94:b9:d9:67:09:8c:4d:a4: 2a:95:54:04:d4:86:fc:c7:79:5a:fc:59:10:57:21: c5:95:46:91:48:37:ec:80:0e:6e:c0:d1:96:62:c8: 00:97:93:6a:1e:c0:6d:95:96:1b:23:5c:49:77:d8: 63:03:28:d2:98:e1:12:90:c3:af:f8:62:e5:be:ea: df:e9:8f:9d:fe:84:8d:f5:1a:22:b2:93:2c:2d:14: 54:2e:a6:3c:9b:0b:56:b6:a8:8d:60:6a:84:d6:55: d8:c9:e5:2d:47:62:5a:c8:95:e2:5d:8e:56:91:12: 43:6d:8e:0f:0f:2b:22:d7:f9:ee:68:af:7a:48:ed: fc:34:58:4f:5f:c7:cd:2d:50:b2:89:fc:21:41:7e: db:d6:b9:e7:14:d0:87:0b:bd:1f:c0:14:8b:32:61: 3d:6d:4d:19:83:fc:f7:b0:84:8b:4d:8f:38:3b:5e: b0:4d:43:ff:1f:bb:e7:0c:e1:bb:66:01:71:31:fc: d6:e6:60:7d:43:2d:1b:9c:da:39:fb:47:f9:7b:8f: 92:b4:58:83:19:8f:7e:86:bd:ec:46:13:b6:76:fc: 8a:40:fa:13:da:d6:08:0a:59:c6:cb:e8:df:fd:8a: 4b:be:b7:e6:a0:4c:a5:b0:f9:03:f2:94:78:40:97: 17:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FF:C9:B6:6B:BB:FB:6E:C2:BD:F9:02:B8:39:47:26:85:F3:81:EE X509v3 Authority Key Identifier: keyid:AF:71:F5:B1:67:95:F9:B7:CF:2B:24:58:48:07:7E:11:68:5B:A6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3H1sWeV-bfPKyRYSAd-EWhbpvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127686/C74B1FFE304211ECAF185A10C4F9AE02/r3H1sWeV-bfPKyRYSAd-EWhbpvA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6f:02:ce:36:0c:a7:97:fa:4d:71:a9:82:0f:fe:9a:e9:45: b8:fe:d2:86:73:bf:83:28:77:ef:64:74:70:70:17:ee:d2:6d: df:c9:e7:a3:d1:e4:40:41:66:06:5e:0b:de:1d:f4:17:9c:ba: 58:4b:84:1d:f2:d1:82:33:ec:a3:e0:47:d0:bd:1e:0b:56:5e: a9:19:6d:72:47:55:e6:af:57:7c:a1:dc:8c:f7:13:6f:5d:67: f3:c4:75:85:2c:4f:7d:ee:97:85:94:7f:07:fe:15:65:91:e7: 3c:ad:46:34:d3:bd:94:00:35:de:58:24:32:d8:b3:b6:cc:be: 67:e8:26:25:aa:73:b0:5b:f9:fc:04:7a:f6:0b:88:08:f5:23: 9d:53:e5:33:85:c0:2e:8f:cb:5a:4c:50:ee:bf:7c:5b:dc:67: 1f:b2:cc:d4:16:ad:41:e5:f0:7e:cf:89:20:7f:0c:dc:66:dd: ea:07:bf:36:10:24:4a:3c:39:6a:2b:34:27:f2:0e:ec:11:4b: 17:65:a1:08:1c:34:94:27:54:1d:94:a7:4e:0d:45:46:a8:7e: 1f:20:37:3d:d0:40:f7:4a:ca:8d:4b:a6:fb:fc:9a:2f:ba:91: 69:df:f2:6f:0f:dd:aa:0d:93:df:a2:da:f8:7a:79:c0:5f:24: 2d:44:88:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2ODYxMTAvBgNVBAUTKEFGNzFGNUIxNjc5NUY5QjdDRjJCMjQ1ODQ4MDc3RTEx Njg1QkE2RjAwHhcNMjYwMzAyMjMzMzA0WhcNMjYwMzA5MjMzMzA0WjAYMRYwFAYD VQQDEw02OWE2MWUzMC1kZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0G0iQDJlLnZZwmMTaQqlVQE1Ib8x3la/FkQVyHFlUaRSDfsgA5uwNGWYsgA l5NqHsBtlZYbI1xJd9hjAyjSmOESkMOv+GLlvurf6Y+d/oSN9RoispMsLRRULqY8 mwtWtqiNYGqE1lXYyeUtR2JayJXiXY5WkRJDbY4PDysi1/nuaK96SO38NFhPX8fN LVCyifwhQX7b1rnnFNCHC70fwBSLMmE9bU0Zg/z3sISLTY84O16wTUP/H7vnDOG7 ZgFxMfzW5mB9Qy0bnNo5+0f5e4+StFiDGY9+hr3sRhO2dvyKQPoT2tYIClnGy+jf /YpLvrfmoEylsPkD8pR4QJcX1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEH/ybZr u/tuwr35Arg5RyaF84HuMB8GA1UdIwQYMBaAFK9x9bFnlfm3zyskWEgHfhFoW6bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY4Ni9DNzRCMUZGRTMw NDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1iZlBLeVJZU0FkLUVXaGJw dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzSDFzV2VWLWJmUEt5UllTQWQtRVdoYnB2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY4Ni9DNzRCMUZGRTMwNDIxMUVDQUYxODVBMTBDNEY5QUUwMi9yM0gxc1dlVi1i ZlBLeVJZU0FkLUVXaGJwdkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdG8CzjYMp5f6TXGpgg/+mulFuP7ShnO/gyh372R0cHAX7tJt38nno9HkQEFm Bl4L3h30F5y6WEuEHfLRgjPso+BH0L0eC1ZeqRltckdV5q9XfKHcjPcTb11n88R1 hSxPfe6XhZR/B/4VZZHnPK1GNNO9lAA13lgkMtiztsy+Z+gmJapzsFv5/AR69guI CPUjnVPlM4XALo/LWkxQ7r98W9xnH7LM1BatQeXwfs+JIH8M3Gbd6ge/NhAkSjw5 ais0J/IO7BFLF2WhCBw0lCdUHZSnTg1FRqh+HyA3PdBA90rKjUum+/yaL7qRad/y bw/dqg2T36La+Hp5wF8kLUSIdA== -----END CERTIFICATE-----Generated at Wed Mar 4 14:35:31 2026 by rpki-client