$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft File: k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json) Hash identifier: 1i3IQhezxFtGh+GltjUh+jGxR9kwXJe3uNvYx0BP+rI= Subject key identifier: 13:02:29:38:9E:D2:B5:FC:EA:D3:57:9B:DA:17:FE:20:B5:41:C3:80 Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF Certificate issuer: /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft Manifest number: 3C Signing time: Tue 03 Mar 2026 08:06:05 +0000 Manifest this update: Tue 03 Mar 2026 08:06:05 +0000 Manifest next update: Tue 10 Mar 2026 08:06:05 +0000 Files and hashes: 1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: 9mdrHJHRa9FDnOYAxVJRbjaLpaHiEssaKq+H5tKlEfU=) 2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF Validity Not Before: Mar 3 08:06:05 2026 GMT Not After : Mar 10 08:06:05 2026 GMT Subject: CN=69a6966d-708f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bc:3a:a0:93:6d:3b:46:85:55:2d:8a:38:2f: ef:ec:0f:8d:3c:5a:a5:1a:e0:a5:af:85:9a:2b:5b: 69:d1:3f:23:44:b4:8a:c6:83:ea:42:5b:8c:41:72: df:d0:3f:c7:7b:88:36:12:13:a4:20:40:d4:c6:ae: 74:90:59:af:c7:de:6c:d2:24:f6:4f:ed:55:1e:60: 44:02:88:05:1c:d4:6f:c1:64:fa:b5:16:84:13:43: 7b:f8:c6:1a:56:c0:35:dd:7a:9b:2d:74:5b:d8:94: b1:09:24:54:df:68:fc:39:71:fc:07:d5:d0:ba:41: a2:02:1b:df:34:a3:1e:44:de:f5:bb:e2:64:15:ad: f2:f2:aa:4f:0f:e0:fe:50:fc:f6:4b:cc:b5:ef:83: 4b:cc:81:ca:10:c6:a7:d9:c4:3f:0d:ff:cb:d4:64: 44:35:f8:8a:ce:f0:d5:fb:48:ac:c7:23:e3:7e:d9: 2c:3e:6b:b5:fa:58:17:df:8b:a3:c7:ee:ae:fc:41: e0:26:59:bb:49:5f:0f:0a:cb:3f:c0:11:60:ce:74: 2a:37:c5:e8:c6:47:a9:ff:e3:6d:bb:e3:1c:1c:6d: c7:cd:d8:81:6a:4e:d9:25:50:ea:40:86:c3:8b:81: d8:9d:7a:ae:82:d2:2a:7b:b5:70:99:f7:2e:88:80: f2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:29:38:9E:D2:B5:FC:EA:D3:57:9B:DA:17:FE:20:B5:41:C3:80 X509v3 Authority Key Identifier: keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:55:e9:a1:bb:c7:39:d1:d6:ea:6a:ed:e0:bc:4b:ba:33:f9: dd:47:95:87:12:39:bb:dc:cb:80:f3:80:b8:c8:57:bd:60:32: f4:08:ab:01:ab:2c:ba:26:1f:b9:a1:bc:d4:60:3f:37:14:50: b4:66:7e:7e:ae:c3:bf:37:a0:a7:dc:8d:d7:0a:94:82:eb:fe: fb:73:76:75:f8:52:ea:ec:e7:d6:ab:93:fd:06:5e:21:d3:47: 74:30:d6:4c:7b:d9:2b:bf:69:3c:7e:30:c4:2e:36:44:6c:4f: d7:9a:af:13:aa:a7:75:75:01:05:db:47:8d:66:fb:cb:48:a4: 78:a2:c6:0c:26:8d:67:d3:cf:49:40:d9:30:02:ed:a5:71:7c: d0:88:9c:65:2a:bb:45:66:2c:4c:33:25:4b:4f:33:7e:f1:ab: c6:a9:53:a8:30:40:e0:8d:d1:c4:8c:4b:cd:88:b6:ff:37:77: 14:c4:55:d3:1d:49:ac:14:fd:48:0a:10:5a:f1:f1:a6:f5:a4: bd:93:e9:77:72:af:fc:26:09:88:5c:dd:17:b9:cb:7b:b9:1f: e6:f5:09:5a:b7:25:29:3c:b6:b2:df:49:3d:89:a8:cb:c4:8b: b8:c1:05:b0:b1:48:b3:7f:d7:90:08:f3:0a:4d:30:d7:02:a0: dd:76:45:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NTdGQzExMC8GA1UEBRMoOTNFNkNDOUNCQzk0QzZCNEU4QzdEOTg2NDE4MzBERTY2 MzkxQjlERjAeFw0yNjAzMDMwODA2MDVaFw0yNjAzMTAwODA2MDVaMBgxFjAUBgNV BAMTDTY5YTY5NjZkLTcwOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlvDqgk207RoVVLYo4L+/sD408WqUa4KWvhZorW2nRPyNEtIrGg+pCW4xBct/Q P8d7iDYSE6QgQNTGrnSQWa/H3mzSJPZP7VUeYEQCiAUc1G/BZPq1FoQTQ3v4xhpW wDXdepstdFvYlLEJJFTfaPw5cfwH1dC6QaICG980ox5E3vW74mQVrfLyqk8P4P5Q /PZLzLXvg0vMgcoQxqfZxD8N/8vUZEQ1+IrO8NX7SKzHI+N+2Sw+a7X6WBffi6PH 7q78QeAmWbtJXw8Kyz/AEWDOdCo3xejGR6n/42274xwcbcfN2IFqTtklUOpAhsOL gdideq6C0ip7tXCZ9y6IgPJfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEwIpOJ7S tfzq01eb2hf+ILVBw4AwHwYDVR0jBBgwFoAUk+bMnLyUxrTox9mGQYMN5mORud8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1N0ZDLzg4NDU3MkQ0QkRG OTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlVeHJUb3g5bUdRWU1ONW1PUnVk OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvay1iTW5MeVV4clRveDltR1FZTU41bU9SdWQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 N0ZDLzg4NDU3MkQ0QkRGOTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlVeHJU b3g5bUdRWU1ONW1PUnVkOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBaVemhu8c50dbqau3gvEu6M/ndR5WHEjm73MuA84C4yFe9YDL0CKsBqyy6Jh+5 obzUYD83FFC0Zn5+rsO/N6Cn3I3XCpSC6/77c3Z1+FLq7OfWq5P9Bl4h00d0MNZM e9krv2k8fjDELjZEbE/Xmq8Tqqd1dQEF20eNZvvLSKR4osYMJo1n089JQNkwAu2l cXzQiJxlKrtFZixMMyVLTzN+8avGqVOoMEDgjdHEjEvNiLb/N3cUxFXTHUmsFP1I ChBa8fGm9aS9k+l3cq/8JgmIXN0Xuct7uR/m9QlatyUpPLay30k9iajLxIu4wQWw sUizf9eQCPMKTTDXAqDddkWf -----END CERTIFICATE-----Generated at Wed Mar 4 08:21:06 2026 by rpki-client