$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft File: _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json) Hash identifier: mLwRt74skQofQBTRqRBIMFvnBUHDUcYU0Ofqs8cCUeM= Subject key identifier: 15:92:03:46:2F:16:D0:F5:A3:BA:AD:39:4F:4A:05:25:AF:FF:B8:9E Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft Manifest number: 028A Signing time: Thu 05 Mar 2026 01:03:44 +0000 Manifest this update: Thu 05 Mar 2026 01:03:44 +0000 Manifest next update: Thu 12 Mar 2026 01:03:44 +0000 Files and hashes: 1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: vFCSpoVVvQLTxLXhx13elNjy9wJRV4sBlBsrL/Rl1rE=) 2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=) 3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Mar 2026 01:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Mar 5 01:03:44 2026 GMT Not After : Mar 12 01:03:44 2026 GMT Subject: CN=69a8d670-d52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:6e:95:70:f5:92:84:34:83:f8:e2:ea:4f: 2e:69:c6:2c:4a:bf:ed:80:a7:16:83:01:f7:68:5e: 98:35:db:01:88:8b:26:2f:0b:ae:d7:d6:9a:2b:3a: a0:23:d4:1e:b0:ee:ee:e3:f9:02:f7:7f:c9:a0:72: ae:e5:a3:dc:a7:ef:c5:f3:37:75:1a:7b:e3:15:f6: 68:72:1b:c4:54:1c:9d:c2:85:58:54:d2:1c:4f:9e: 52:bf:0b:fd:e9:8a:c2:36:73:af:79:0c:8b:69:a1: 79:5c:22:ff:51:1d:c6:8e:16:86:8d:26:95:ef:a4: bb:2f:ee:88:13:5c:c5:83:ff:83:86:36:28:0f:92: ce:79:66:c6:8f:92:83:ab:62:79:e3:c9:85:f4:e0: 04:d5:5e:86:02:68:d1:2e:e0:bb:ad:f8:5a:dd:82: 28:a5:83:6c:cb:fa:67:d0:ab:0a:a6:23:00:d0:35: ff:32:86:61:bb:46:82:a1:34:34:28:1a:1a:e7:7b: 21:a6:59:ab:55:d6:81:77:fc:45:f8:4b:74:79:e9: ba:90:00:de:f7:2c:c4:a0:c0:50:11:b7:01:80:f6: 4e:2b:02:d8:c1:ca:ec:cc:ca:47:ef:de:f4:60:3a: 2d:f3:ff:1c:e2:48:74:8e:30:7a:9b:7a:c8:8e:ff: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:92:03:46:2F:16:D0:F5:A3:BA:AD:39:4F:4A:05:25:AF:FF:B8:9E X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8a:62:ca:34:58:4e:83:f3:82:e6:e3:0a:71:8c:ef:a9:fa: 46:26:eb:a4:6d:20:d0:af:da:e9:e4:75:c1:00:37:88:b7:e0: 7e:ab:18:77:bc:6d:64:be:33:47:48:2f:b1:82:05:7b:a9:ad: 54:ea:73:7d:1a:12:67:f0:4a:1e:c5:c9:4d:ce:19:75:c5:9d: 8a:14:61:46:4e:f7:be:93:13:a3:a5:ac:ae:ea:a7:f6:67:aa: d7:b9:cf:4b:6c:38:4e:09:04:03:82:05:39:76:1e:7a:f7:93: e6:a3:44:89:a0:ee:67:6a:7e:83:4c:4a:48:64:8e:6e:9b:d5: f0:a6:15:e4:be:c3:d0:9f:6d:1c:5e:40:90:0e:66:f9:ab:b4: 96:ab:5b:5d:1e:7b:86:3e:dd:1a:47:41:3b:76:4e:0d:a1:48: c4:9e:5f:1f:fe:27:f0:16:f5:4d:93:7a:db:47:b5:d9:53:06: 69:d4:85:d7:19:96:3d:28:5e:3d:68:9e:43:b4:33:1b:38:b8: 6e:ee:2e:5d:b3:d9:a6:f8:de:20:52:89:7c:2f:f1:4a:7d:b8: 25:6f:e3:f7:e0:61:43:de:48:c4:f3:a2:46:2b:b9:8a:de:69: cc:6b:df:44:d5:4d:c6:bc:54:70:bc:b0:14:5e:0c:8d:f5:85: 44:9c:59:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjYwMzA1MDEwMzQ0WhcNMjYwMzEyMDEwMzQ0WjAYMRYwFAYD VQQDEw02OWE4ZDY3MC1kNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pRulXD1koQ0g/ji6k8uacYsSr/tgKcWgwH3aF6YNdsBiIsmLwuu19aaKzqg I9QesO7u4/kC93/JoHKu5aPcp+/F8zd1GnvjFfZochvEVBydwoVYVNIcT55Svwv9 6YrCNnOveQyLaaF5XCL/UR3GjhaGjSaV76S7L+6IE1zFg/+DhjYoD5LOeWbGj5KD q2J548mF9OAE1V6GAmjRLuC7rfha3YIopYNsy/pn0KsKpiMA0DX/MoZhu0aCoTQ0 KBoa53shplmrVdaBd/xF+Et0eem6kADe9yzEoMBQEbcBgPZOKwLYwcrszMpH7970 YDot8/8c4kh0jjB6m3rIjv+qLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWSA0Yv FtD1o7qtOU9KBSWv/7ieMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTNGMi84NkEwRkIyODQ2MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURz dS15TEw5bXBlM1NDYk0yOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD4piyjRYToPzgubjCnGM76n6RibrpG0g0K/a6eR1wQA3iLfgfqsYd7xtZL4z R0gvsYIFe6mtVOpzfRoSZ/BKHsXJTc4ZdcWdihRhRk73vpMTo6Wsruqn9meq17nP S2w4TgkEA4IFOXYeeveT5qNEiaDuZ2p+g0xKSGSObpvV8KYV5L7D0J9tHF5AkA5m +au0lqtbXR57hj7dGkdBO3ZODaFIxJ5fH/4n8Bb1TZN620e12VMGadSF1xmWPShe PWieQ7QzGzi4bu4uXbPZpvjeIFKJfC/xSn24JW/j9+BhQ95IxPOiRiu5it5pzGvf RNVNxrxUcLywFF4MjfWFRJxZiA== -----END CERTIFICATE-----Generated at Thu Mar 5 23:21:31 2026 by rpki-client