$ rpki-client -vvf rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft File: 3owRZVEEK-jnJkvttYLwo3e7JL0.mft (raw, json) Hash identifier: vUZlsXR0b2TFSaMXVr0kwHkcrRcsXSoRtVebp4OZEGg= Subject key identifier: 7A:7B:DC:B2:09:DD:6A:44:89:C5:D8:EE:5B:02:EE:87:C0:68:4B:6C Authority key identifier: DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD Certificate issuer: /CN=A91471A0/serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft Manifest number: 3E Signing time: Sun 29 Mar 2026 08:13:37 +0000 Manifest this update: Sun 29 Mar 2026 08:13:36 +0000 Manifest next update: Sun 05 Apr 2026 08:13:36 +0000 Files and hashes: 1: 3owRZVEEK-jnJkvttYLwo3e7JL0.crl (hash: FQCoEe9TZdm9jtgtI9JzdS6a9T+g7cg+WMa3v3p2qkk=) 2: A4A022041D1B11F188B066AA103D8C67.roa (hash: 0UiK+7UG4gazEA6M9ztbhs59f2RFRj/xH1mxg/FNT2U=) 3: 9572FAF41D1B11F1B62EA9A5103D8C67.roa (hash: YxVjuj/u6cFjLolYA4vHKI/ekIe2/ZI5hcZUBzFakNE=) 4: 947595301D1B11F1B62EA9A5103D8C67.roa (hash: fyVIn40fjMUq1jfx5eUqoEzNu3Qfs0MIIOR0mSpXHec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91471A0, serialNumber=DE8C116551042BE8E7264BEDB582F0A377BB24BD Validity Not Before: Mar 29 08:13:36 2026 GMT Not After : Apr 5 08:13:36 2026 GMT Subject: CN=69c8df31-f6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7e:24:71:49:fa:0d:41:3c:6e:41:9c:96:20: e2:4d:96:cd:c8:f1:8c:00:07:e9:52:1d:2a:05:ba: 00:90:05:b6:52:12:65:d7:a1:a3:45:45:56:68:0a: 3b:1a:14:09:9f:c8:d7:a8:3d:db:67:e7:48:c8:36: 8c:cb:a0:fa:5b:7a:7e:ae:5b:22:7b:d7:58:7f:0c: 4a:20:f3:89:78:f1:a3:5f:9f:5b:49:ad:b6:59:1c: b3:0e:c0:e7:11:85:4b:59:34:50:8d:fb:8e:13:ad: 93:5c:f2:af:a5:57:be:3c:a0:e6:45:54:96:35:53: 89:a1:2b:35:fc:a0:4e:d8:9d:be:f4:35:8e:06:2a: 70:fc:05:c6:8d:78:8b:08:2e:75:97:9b:b2:b5:fc: 01:56:08:32:e1:9c:08:6a:9c:ff:00:a7:91:25:da: 77:87:c4:f6:e8:63:4a:80:ad:d5:7d:17:04:00:b9: 38:49:c0:13:6f:b7:09:cb:93:19:df:88:cc:02:73: 28:10:26:52:4f:57:70:31:d9:5c:6a:8b:70:94:1b: 9c:4b:27:eb:2c:f0:02:c3:ef:2e:4c:ed:35:5a:36: 9e:47:39:83:29:a5:42:3d:12:42:06:88:60:cb:20: 47:86:14:0b:2c:73:91:a0:04:ce:54:fc:59:22:d7: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7B:DC:B2:09:DD:6A:44:89:C5:D8:EE:5B:02:EE:87:C0:68:4B:6C X509v3 Authority Key Identifier: keyid:DE:8C:11:65:51:04:2B:E8:E7:26:4B:ED:B5:82:F0:A3:77:BB:24:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3owRZVEEK-jnJkvttYLwo3e7JL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471A0/D6994DE6DA3E11F081F5A4578ED3641D/3owRZVEEK-jnJkvttYLwo3e7JL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:85:d7:4d:41:7d:0d:ae:c6:a3:58:79:c3:c9:09:33:04:7f: b6:61:03:01:d9:b5:1c:d7:d8:77:c8:88:bf:25:62:27:c4:df: 42:81:70:c8:5a:a7:18:b3:93:42:85:ff:7c:93:68:10:ed:b3: 80:ee:aa:cc:d2:fa:82:e8:3e:ee:e0:e5:b8:d8:aa:78:50:e3: 0e:ad:c9:29:6e:4d:12:13:16:d0:cc:a5:5a:ea:66:e6:01:4f: 51:45:1f:04:ff:b2:00:3b:e8:70:f7:d4:bd:52:4d:24:5d:c9: 6a:11:7b:c8:ab:32:a7:de:56:19:44:93:6a:30:9b:28:dd:69: 1c:4b:e3:25:a1:cb:13:91:ca:bd:85:a2:07:7a:d9:33:f6:32: de:a9:dd:29:79:da:69:bf:be:e4:f2:69:0c:e7:ff:e0:0f:d3: e6:06:7e:e8:d6:df:9a:d1:c0:ef:47:ec:ff:6b:ac:93:9b:b3: a4:b7:94:9f:34:6a:0b:b5:69:2d:99:ce:0b:68:c0:5e:2b:3d: 71:d4:a2:2b:ce:df:1b:3c:93:3f:fe:75:82:6b:64:ab:a6:e8: 07:c9:d7:e8:5a:be:2c:12:8e:7a:12:ab:00:b7:5a:a4:53:b5: 37:f7:1f:e0:d5:04:0c:51:8b:de:15:36:51:44:6c:ad:36:d7: 33:35:5b:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzFBMDExMC8GA1UEBRMoREU4QzExNjU1MTA0MkJFOEU3MjY0QkVEQjU4MkYwQTM3 N0JCMjRCRDAeFw0yNjAzMjkwODEzMzZaFw0yNjA0MDUwODEzMzZaMBgxFjAUBgNV BAMTDTY5YzhkZjMxLWY2Y2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2fiRxSfoNQTxuQZyWIOJNls3I8YwAB+lSHSoFugCQBbZSEmXXoaNFRVZoCjsa FAmfyNeoPdtn50jINozLoPpben6uWyJ711h/DEog84l48aNfn1tJrbZZHLMOwOcR hUtZNFCN+44TrZNc8q+lV748oOZFVJY1U4mhKzX8oE7Ynb70NY4GKnD8BcaNeIsI LnWXm7K1/AFWCDLhnAhqnP8Ap5El2neHxPboY0qArdV9FwQAuThJwBNvtwnLkxnf iMwCcygQJlJPV3Ax2Vxqi3CUG5xLJ+ss8ALD7y5M7TVaNp5HOYMppUI9EkIGiGDL IEeGFAssc5GgBM5U/Fki18yvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUenvcsgnd akSJxdjuWwLuh8BoS2wwHwYDVR0jBBgwFoAU3owRZVEEK+jnJkvttYLwo3e7JL0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MUEwL0Q2OTk0REU2REEz RTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1qbkprdnR0WUx3bzNlN0pM MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM293UlpWRUVLLWpuSmt2dHRZTHdvM2U3SkwwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MUEwL0Q2OTk0REU2REEzRTExRjA4MUY1QTQ1NzhFRDM2NDFELzNvd1JaVkVFSy1q bkprdnR0WUx3bzNlN0pMMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCHhddNQX0NrsajWHnDyQkzBH+2YQMB2bUc19h3yIi/JWInxN9CgXDIWqcYs5NC hf98k2gQ7bOA7qrM0vqC6D7u4OW42Kp4UOMOrckpbk0SExbQzKVa6mbmAU9RRR8E /7IAO+hw99S9Uk0kXclqEXvIqzKn3lYZRJNqMJso3WkcS+MlocsTkcq9haIHetkz 9jLeqd0pedppv77k8mkM5//gD9PmBn7o1t+a0cDvR+z/a6yTm7Okt5SfNGoLtWkt mc4LaMBeKz1x1KIrzt8bPJM//nWCa2SrpugHydfoWr4sEo56EqsAt1qkU7U39x/g 1QQMUYveFTZRRGytNtczNVvY -----END CERTIFICATE-----Generated at Mon Mar 30 15:39:21 2026 by rpki-client