$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json) Hash identifier: szFQ6SmBScpOMi8nSEtSCEQsTIBUcXyhtUsfUC4sKj8= Subject key identifier: 2B:E8:CE:FA:D9:C5:58:CA:49:3B:32:E1:60:31:71:2F:D5:73:62:5D Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft Manifest number: E2 Signing time: Mon 09 Mar 2026 05:31:03 +0000 Manifest this update: Mon 09 Mar 2026 05:31:02 +0000 Manifest next update: Mon 16 Mar 2026 05:31:02 +0000 Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: Pa+uzqoxQdusqLHFDntZTlxqWba58FoHYcFaUejT5Ac=) 2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 05:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Validity Not Before: Mar 9 05:31:02 2026 GMT Not After : Mar 16 05:31:02 2026 GMT Subject: CN=69ae5b17-4387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:e2:5f:e1:da:22:ca:69:e5:35:f7:2b:dd:4e: f3:d6:7d:a5:78:02:9d:6d:70:b5:88:6b:9e:45:6d: a6:46:05:cf:3f:ea:6b:99:4c:d5:62:c1:b5:79:a6: a1:df:4c:5d:50:49:22:40:16:20:1a:85:51:bb:df: 1e:4a:f7:f0:31:1c:18:ea:8e:95:44:65:df:dc:bd: c7:01:79:3a:1f:f9:05:2a:27:6a:d0:b2:11:61:fe: b3:e4:2a:26:f3:3c:18:76:c8:b9:ec:8d:7a:b7:7d: ff:17:ed:53:46:bb:46:6b:a3:09:69:6d:a1:b9:b2: bd:7a:09:41:71:8a:50:89:3f:d6:50:ca:8f:18:0d: 28:fa:cd:a1:a5:05:56:91:d1:24:66:7d:df:cc:40: 5d:cb:b2:b2:c0:32:6b:c2:80:93:06:17:80:66:ec: 9e:c2:d1:8d:03:27:45:ef:c0:18:e9:f4:18:58:af: 7b:5b:aa:58:55:48:0f:a7:41:50:60:ed:e6:19:73: b6:d6:e9:32:fa:20:5e:95:6a:02:83:a8:aa:59:f7: 9b:a0:fd:02:60:f7:3b:95:49:ed:b7:75:ea:35:82: b3:84:4f:6c:ab:63:f5:77:44:0d:e9:ab:87:5b:0b: 5b:c1:39:ce:cf:5e:2b:c2:7e:00:64:d8:7d:14:74: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E8:CE:FA:D9:C5:58:CA:49:3B:32:E1:60:31:71:2F:D5:73:62:5D X509v3 Authority Key Identifier: keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:11:aa:23:24:44:13:d0:79:d3:2a:f4:05:0f:d4:8b:9d:aa: a0:89:5e:2e:5d:23:96:06:7b:a2:db:98:e9:d4:22:73:cb:f0: 6f:3d:04:7a:b1:f7:03:3e:11:72:f3:ac:a2:50:c4:d6:a4:da: b6:b0:3b:64:11:dc:44:22:88:a8:2f:72:c4:73:2a:c8:09:b8: 34:82:a7:36:32:9a:e1:86:31:8e:35:96:c3:c3:53:43:dd:e7: 54:30:a0:3b:ea:2f:43:ad:f4:91:9c:9e:7d:bc:27:67:2d:bc: 79:8f:b0:cc:d7:a6:13:44:fe:e5:68:8e:3a:d8:78:fb:55:9d: 9c:cb:49:5c:e3:b8:e3:73:41:4f:81:5d:d1:42:f7:68:4f:42: a0:03:bb:a5:70:4a:80:a5:7d:1f:eb:6f:61:2d:f6:b3:9d:76: c9:d7:7f:7d:e4:6f:e8:8d:ef:6e:12:f1:28:8f:78:8a:92:de: 3b:10:7b:0b:e0:9f:a0:30:d5:59:52:5f:6e:d9:a7:3a:37:33: 2e:cd:50:a3:10:47:70:20:fe:3c:8e:9f:cb:86:47:df:41:a9: 43:e7:d4:a6:f6:b3:8b:b1:5d:1c:24:94:97:f8:08:2b:57:d0: 9d:c5:bc:cf:ea:77:aa:33:2c:ff:8c:e2:40:d1:be:71:07:b2: cf:05:ab:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDAzNzg4RUUyQkFFNEQ4MDVFQkNEQ0E2NjE4RTJFQzFB MThBNUM0RTIwHhcNMjYwMzA5MDUzMTAyWhcNMjYwMzE2MDUzMTAyWjAYMRYwFAYD VQQDEw02OWFlNWIxNy00Mzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+eJf4doiymnlNfcr3U7z1n2leAKdbXC1iGueRW2mRgXPP+prmUzVYsG1eaah 30xdUEkiQBYgGoVRu98eSvfwMRwY6o6VRGXf3L3HAXk6H/kFKidq0LIRYf6z5Com 8zwYdsi57I16t33/F+1TRrtGa6MJaW2hubK9eglBcYpQiT/WUMqPGA0o+s2hpQVW kdEkZn3fzEBdy7KywDJrwoCTBheAZuyewtGNAydF78AY6fQYWK97W6pYVUgPp0FQ YO3mGXO21uky+iBelWoCg6iqWfeboP0CYPc7lUntt3XqNYKzhE9sq2P1d0QN6auH WwtbwTnOz14rwn4AZNh9FHTszQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvozvrZ xVjKSTsy4WAxcS/Vc2JdMB8GA1UdIwQYMBaAFAN4juK65NgF683KZhji7BoYpcTi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CRTdDQUMxMkQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJBWHJ6Y3BtR09Mc0doaWx4 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CRTdDQUMxMkQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9BM2lPNHJyazJB WHJ6Y3BtR09Mc0doaWx4T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiBGqIyREE9B50yr0BQ/Ui52qoIleLl0jlgZ7otuY6dQic8vwbz0EerH3Az4R cvOsolDE1qTatrA7ZBHcRCKIqC9yxHMqyAm4NIKnNjKa4YYxjjWWw8NTQ93nVDCg O+ovQ630kZyefbwnZy28eY+wzNemE0T+5WiOOth4+1WdnMtJXOO443NBT4Fd0UL3 aE9CoAO7pXBKgKV9H+tvYS32s512ydd/feRv6I3vbhLxKI94ipLeOxB7C+CfoDDV WVJfbtmnOjczLs1QoxBHcCD+PI6fy4ZH30GpQ+fUpvazi7FdHCSUl/gIK1fQncW8 z+p3qjMs/4ziQNG+cQeyzwWrkw== -----END CERTIFICATE-----Generated at Tue Mar 10 11:57:45 2026 by rpki-client