$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json) Hash identifier: 4DKfDvomZXTXB+TT9cs7Qi0r4TSSJ/hAal2uloLh3n4= Subject key identifier: E1:0A:C7:61:FD:BA:11:8F:21:49:46:88:CA:3A:B7:AB:D5:F8:1D:CD Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft Manifest number: A0 Signing time: Tue 03 Mar 2026 07:06:31 +0000 Manifest this update: Tue 03 Mar 2026 07:06:31 +0000 Manifest next update: Tue 10 Mar 2026 07:06:31 +0000 Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: MofG4BleaxBaRshRGCA/kJkmKt1hzBqkqEIUu6shUUI=) 2: 375E8232C13411F0A297231CC4F9AE02.roa (hash: yKrvVx15gU/GsNavxV0bNjTS5F14yB+1otnZA4vgvnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0 Validity Not Before: Mar 3 07:06:31 2026 GMT Not After : Mar 10 07:06:31 2026 GMT Subject: CN=69a68877-ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:af:5c:7e:4e:d9:7c:6f:14:23:96:e3:69: 13:ca:e2:07:26:95:fc:9f:b8:51:74:f7:ec:d5:2b: 16:89:ae:2e:e4:75:e5:d4:ee:29:2d:06:fd:cb:e7: dd:f8:24:14:27:1d:97:d7:b1:74:db:6e:9d:6a:86: de:b5:6e:ad:42:71:c2:a3:c9:4d:58:33:7d:50:aa: c0:a7:46:bf:38:2b:c0:e6:8d:b2:2c:1b:1f:33:05: 6a:93:85:3b:9b:0a:e3:c8:52:df:a8:aa:ae:4c:74: c9:ea:c8:be:6d:af:fd:79:18:fc:d4:88:75:91:25: 55:7b:91:89:ad:17:c6:7d:73:b5:e1:a0:c7:93:cb: 02:a6:bd:fa:6a:fd:84:57:50:2b:b6:c9:4d:17:c8: 00:43:08:0e:e2:53:37:f7:c7:24:79:93:bf:90:01: 85:68:d6:9e:c0:29:47:c1:3f:ae:49:b1:4f:dd:e9: 9b:a3:53:c0:12:47:48:f5:99:ac:44:90:e9:06:ae: 9a:c0:7b:a3:a7:11:3f:f8:bb:c1:56:46:aa:a8:8b: 2d:1f:4d:94:b2:85:fa:61:4b:5e:b5:44:86:bc:ab: e2:9a:21:05:68:d9:bb:d9:9a:cc:d5:a9:c6:55:50: 00:7c:34:2a:2c:12:80:b3:48:d2:a0:0e:60:71:a6: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:C7:61:FD:BA:11:8F:21:49:46:88:CA:3A:B7:AB:D5:F8:1D:CD X509v3 Authority Key Identifier: keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:5b:69:6c:8a:ec:da:81:4f:07:70:98:df:65:cc:8c:7d:46: 3a:de:25:45:25:4d:0c:aa:8d:84:e3:10:fe:d0:96:e2:67:c7: 07:d5:75:38:ce:2b:b1:e0:7a:cb:f3:3e:33:4b:a9:1d:ea:4a: 37:da:e5:44:b6:51:64:77:fe:8a:e4:7a:1e:93:d3:b6:07:81: 00:49:da:9f:93:18:ca:e1:56:11:e8:51:39:bc:6b:85:92:90: da:57:d3:78:e2:c2:a3:3c:dd:9c:14:d3:c0:ec:5f:37:f4:aa: a5:92:6c:cb:75:06:c7:cc:22:8c:9d:0c:d5:b8:c3:89:3b:e9: 21:91:6c:e6:ad:80:4a:23:88:db:00:47:07:7e:70:b2:3b:86: 39:4b:fd:88:17:ba:b0:8e:1a:50:ab:18:97:62:ee:b1:0f:eb: 12:36:c7:7a:00:00:cd:c7:ed:77:29:e4:71:fc:13:25:3f:5a: b0:8e:f1:5f:47:64:30:ca:4d:43:2b:56:e0:bf:a3:98:b3:72: 09:0e:31:92:48:f9:95:0b:40:d3:d5:58:0a:0e:f5:e6:cf:49: e9:6c:c3:02:eb:80:19:eb:f6:90:95:a1:67:f8:85:15:87:b8: f2:3b:9c:6c:ab:1e:a6:e1:03:17:21:f8:4d:67:67:d2:f0:3e: c9:db:e4:5f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4NTcxMTAvBgNVBAUTKERFQTYzRTMxMDFCRjE1OTkwMjBBNDA4M0ZBMUMzRDk2 NEIyMTMwQzAwHhcNMjYwMzAzMDcwNjMxWhcNMjYwMzEwMDcwNjMxWjAYMRYwFAYD VQQDEw02OWE2ODg3Ny1iYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzivXH5O2XxvFCOW42kTyuIHJpX8n7hRdPfs1SsWia4u5HXl1O4pLQb9y+fd +CQUJx2X17F0226daobetW6tQnHCo8lNWDN9UKrAp0a/OCvA5o2yLBsfMwVqk4U7 mwrjyFLfqKquTHTJ6si+ba/9eRj81Ih1kSVVe5GJrRfGfXO14aDHk8sCpr36av2E V1ArtslNF8gAQwgO4lM398ckeZO/kAGFaNaewClHwT+uSbFP3embo1PAEkdI9Zms RJDpBq6awHujpxE/+LvBVkaqqIstH02UsoX6YUtetUSGvKvimiEFaNm72ZrM1anG VVAAfDQqLBKAs0jSoA5gcaa2XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEKx2H9 uhGPIUlGiMo6t6vV+B3NMB8GA1UdIwQYMBaAFN6mPjEBvxWZAgpAg/ocPZZLITDA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTg1Ny9DQjE0QkYyNjND OTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Zaa0NDa0NELWh3OWxrc2hN TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxWS1NUUdfRlprQ0NrQ0QtaHc5bGtzaE1NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTg1Ny9DQjE0QkYyNjNDOTgxMUYwQUYxMjRCMzhDNEY5QUUwMi8zcVktTVFHX0Za a0NDa0NELWh3OWxrc2hNTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJltpbIrs2oFPB3CY32XMjH1GOt4lRSVNDKqNhOMQ/tCW4mfHB9V1OM4rseB6 y/M+M0upHepKN9rlRLZRZHf+iuR6HpPTtgeBAEnan5MYyuFWEehRObxrhZKQ2lfT eOLCozzdnBTTwOxfN/SqpZJsy3UGx8wijJ0M1bjDiTvpIZFs5q2ASiOI2wBHB35w sjuGOUv9iBe6sI4aUKsYl2LusQ/rEjbHegAAzcftdynkcfwTJT9asI7xX0dkMMpN QytW4L+jmLNyCQ4xkkj5lQtA09VYCg715s9J6WzDAuuAGev2kJWhZ/iFFYe48juc bKsepuEDFyH4TWdn0vA+ydvkXw== -----END CERTIFICATE-----Generated at Wed Mar 4 14:26:00 2026 by rpki-client