$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: OtHvZhQjPNf6aONTSuvdl7H6QRQoBVeyQtatEafVD00= Subject key identifier: 2F:D0:8C:64:6C:C5:EE:D3:33:00:96:D1:E9:20:AE:5F:05:B8:CA:A7 Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 0204 Signing time: Tue 03 Mar 2026 02:06:07 +0000 Manifest this update: Tue 03 Mar 2026 02:06:07 +0000 Manifest next update: Tue 10 Mar 2026 02:06:07 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: lckRGg3q+va4OvHxx13a6B1+3qspkq1nhazbHeriuW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 02:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Mar 3 02:06:07 2026 GMT Not After : Mar 10 02:06:07 2026 GMT Subject: CN=69a6420f-6b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ab:07:79:05:c5:ac:f6:a9:a9:2a:19:61:b7: 12:6f:be:05:e5:6e:19:e5:ab:51:3b:ed:3a:87:de: 2c:88:27:cc:d6:95:a9:7b:1c:c3:85:7b:be:d7:9a: a9:ca:64:68:98:a5:9d:b0:bd:ea:51:2a:71:a6:0f: e4:76:fe:d2:52:1b:a5:65:3b:e7:f0:41:eb:09:78: 0e:f1:95:aa:57:ad:2a:20:1e:1e:32:95:5f:ee:a5: 10:13:05:cc:0e:5f:ff:70:f2:63:31:f7:e6:19:83: c5:fd:0f:5a:9d:10:1c:04:25:f7:42:d1:e7:1b:56: 80:89:42:59:e0:e1:a0:88:6c:f9:a6:38:13:87:3b: 05:98:4d:8d:b1:1a:3d:38:22:e5:89:8a:f8:52:cb: 43:8c:80:df:fc:09:36:aa:d0:3c:14:0a:24:5a:d5: 59:5a:bb:39:c6:44:f8:a2:a2:c7:63:6e:87:64:d4: 35:21:ea:e1:82:38:e7:34:29:5d:5e:ba:56:4c:64: db:ac:d8:01:5b:c8:f6:81:98:1e:23:9c:65:8d:c0: bf:f5:bf:11:94:ea:5e:13:28:f8:c8:56:af:6f:b8: 24:f6:de:ac:a7:e3:25:36:70:49:ee:83:84:20:30: e0:45:55:2c:04:42:df:5b:1c:a2:48:65:f8:62:5d: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D0:8C:64:6C:C5:EE:D3:33:00:96:D1:E9:20:AE:5F:05:B8:CA:A7 X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:45:0c:82:dc:f1:e9:b8:18:22:ac:0a:4e:fa:23:9b:1a:62: db:c5:27:94:e2:20:30:46:a0:39:7a:d2:44:04:13:5e:87:dd: 2f:0a:ce:de:fa:05:5f:ae:4d:b4:22:a7:88:46:b9:90:0e:7b: c0:55:0a:8d:46:4a:7a:09:7a:b7:d6:28:1f:79:bc:ff:15:da: a2:2f:38:e6:3e:bb:a1:e5:36:14:e2:5d:d9:d2:23:78:a3:2d: 3e:e3:3c:d8:ea:2c:6e:19:9d:02:33:93:b0:27:fd:da:11:f1: d1:97:1f:97:d0:76:aa:cc:e3:de:cb:93:cb:3c:c6:50:f0:b9: 67:11:9c:69:85:03:53:8a:c0:b1:77:47:85:fe:a3:4d:2c:ee: 51:d9:2a:0f:c7:03:45:5f:a5:99:a9:fd:00:1f:68:40:6b:0e: a4:c1:b1:3e:14:cd:b8:f3:6f:65:d9:ca:f4:f7:ba:f9:47:05: 46:9b:84:95:9a:61:b5:29:18:74:07:eb:2f:ac:d6:b1:21:fe: 15:ad:2d:6d:ca:2e:d9:c4:f5:18:80:fb:0b:b1:71:4b:d3:05: 6c:2f:d8:ce:1f:cb:71:4c:e4:5a:fc:55:34:50:d9:df:87:7a: eb:ef:58:3e:62:26:6e:27:be:f2:6c:25:8f:38:a7:e7:9b:cc: 91:56:11:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjYwMzAzMDIwNjA3WhcNMjYwMzEwMDIwNjA3WjAYMRYwFAYD VQQDEw02OWE2NDIwZi02YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KsHeQXFrPapqSoZYbcSb74F5W4Z5atRO+06h94siCfM1pWpexzDhXu+15qp ymRomKWdsL3qUSpxpg/kdv7SUhulZTvn8EHrCXgO8ZWqV60qIB4eMpVf7qUQEwXM Dl//cPJjMffmGYPF/Q9anRAcBCX3QtHnG1aAiUJZ4OGgiGz5pjgThzsFmE2NsRo9 OCLliYr4UstDjIDf/Ak2qtA8FAokWtVZWrs5xkT4oqLHY26HZNQ1IerhgjjnNCld XrpWTGTbrNgBW8j2gZgeI5xljcC/9b8RlOpeEyj4yFavb7gk9t6sp+MlNnBJ7oOE IDDgRVUsBELfWxyiSGX4Yl3EZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC/QjGRs xe7TMwCW0ekgrl8FuMqnMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjkUMgtzx6bgYIqwKTvojmxpi28UnlOIgMEagOXrSRAQTXofdLwrO3voFX65N tCKniEa5kA57wFUKjUZKegl6t9YoH3m8/xXaoi845j67oeU2FOJd2dIjeKMtPuM8 2OosbhmdAjOTsCf92hHx0Zcfl9B2qszj3suTyzzGUPC5ZxGcaYUDU4rAsXdHhf6j TSzuUdkqD8cDRV+lman9AB9oQGsOpMGxPhTNuPNvZdnK9Pe6+UcFRpuElZphtSkY dAfrL6zWsSH+Fa0tbcou2cT1GID7C7FxS9MFbC/Yzh/LcUzkWvxVNFDZ34d66+9Y PmImbie+8mwljzin55vMkVYRrQ== -----END CERTIFICATE-----Generated at Wed Mar 4 08:37:21 2026 by rpki-client