$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft File: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json) Hash identifier: +aisj5PcJ7if9JtLK214IxMhqYhzF0oEdxEN7QVf24w= Subject key identifier: 98:27:A4:8C:F2:F2:82:51:23:B5:0E:52:23:B6:37:B8:3C:10:C5:3F Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft Manifest number: 03CA Signing time: Sat 21 Mar 2026 00:07:38 +0000 Manifest this update: Sat 21 Mar 2026 00:07:37 +0000 Manifest next update: Sat 28 Mar 2026 00:07:37 +0000 Files and hashes: 1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: LWxcITXV7nHcYLX0tmCQh0bQ4Y9s1CLzXPIru+yTVbM=) 2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: k2oBvP0OHpEhn0rFjfJBUkA03yXoD6fncIA5rTRi8ZU=) 3: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: kAzpZUfwrPPULu39+opOJk6qvp1ijsjz0hw+Ol5r+ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Mar 21 00:07:37 2026 GMT Not After : Mar 28 00:07:37 2026 GMT Subject: CN=69bde14a-cd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:c7:69:e8:2f:72:a6:2e:03:64:ad:fd:c7: d5:79:32:1d:55:6c:96:63:88:4e:1c:6e:01:c9:b0: 7e:73:3a:3a:24:09:2c:d8:7b:43:8c:81:d7:46:aa: f0:81:09:fa:c3:a2:3d:7c:42:ef:eb:65:f6:2f:00: ed:dd:e7:7a:51:55:9f:1b:ec:ed:90:f0:e8:bb:30: a0:14:f5:5f:12:b6:6f:aa:c5:af:46:8a:02:a3:58: 4f:6d:e7:03:55:ec:31:ff:65:72:1a:75:26:4c:e5: 21:1e:18:e9:2a:14:45:ae:d7:cb:a4:48:a6:78:db: dd:e1:34:8d:5c:93:54:6b:58:02:b4:03:09:45:97: 77:67:f4:fe:7d:29:27:92:43:7d:e2:90:86:2c:51: c3:61:ee:16:01:e6:49:0c:41:62:7f:70:f9:f7:e3: c8:4e:ec:cc:c1:18:dd:08:92:2c:de:a7:64:ad:c5: e5:bc:4b:9c:02:0d:cf:dc:a6:42:c0:32:81:72:b5: 1a:39:08:fe:24:79:c7:50:90:e2:cc:29:ed:84:5e: b2:03:99:64:50:78:36:1b:49:73:5e:73:ba:79:de: 0a:4f:74:bb:9f:a5:bb:64:d0:37:11:00:a8:04:a9: 3c:50:ac:8b:f4:79:a7:be:44:85:4e:e4:d9:09:08: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:27:A4:8C:F2:F2:82:51:23:B5:0E:52:23:B6:37:B8:3C:10:C5:3F X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:db:0d:f5:ba:c9:a1:42:b3:8e:27:1e:65:2f:06:ca:82:96: 71:f1:1c:60:7a:67:10:2c:82:63:e6:94:bf:ee:59:1e:38:77: fb:69:8b:c9:dd:3e:c5:d7:92:68:c6:41:41:24:fc:95:26:85: a2:92:f7:67:6e:c2:cd:58:3c:d1:4a:da:a3:40:77:75:ab:b8: 51:d7:6b:b2:1e:6c:06:9e:d7:f6:f0:4d:d1:a9:3c:1d:64:66: cd:6d:ba:60:1e:ba:5a:49:35:52:7a:34:c1:2e:57:c8:a4:1f: df:0a:32:13:69:da:99:74:5f:42:ad:4d:98:3f:eb:ca:9f:8f: 11:76:5a:97:4b:7e:33:c1:a6:7e:d2:66:c9:a3:17:93:4e:d7: 63:67:80:b3:35:5d:6c:1b:1b:21:36:ab:c6:1c:ba:b7:72:fb: af:b6:1f:18:84:53:48:49:b5:c6:54:93:79:f4:7d:70:60:e4: 07:84:38:24:4a:e4:76:a8:dc:5b:e2:5a:da:62:01:7e:80:ca: d1:63:a3:cb:9d:7f:1a:5a:8d:81:42:8e:8e:13:bd:05:a1:4a: b5:ba:32:6f:3f:f4:af:fc:8f:80:15:44:e7:67:2a:6d:aa:52: 1a:ec:f9:1f:9a:11:80:28:16:4f:75:df:13:2b:0d:dc:d2:83: bf:53:67:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjYwMzIxMDAwNzM3WhcNMjYwMzI4MDAwNzM3WjAYMRYwFAYD VQQDEw02OWJkZTE0YS1jZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpbHaegvcqYuA2St/cfVeTIdVWyWY4hOHG4BybB+czo6JAks2HtDjIHXRqrw gQn6w6I9fELv62X2LwDt3ed6UVWfG+ztkPDouzCgFPVfErZvqsWvRooCo1hPbecD Vewx/2VyGnUmTOUhHhjpKhRFrtfLpEimeNvd4TSNXJNUa1gCtAMJRZd3Z/T+fSkn kkN94pCGLFHDYe4WAeZJDEFif3D59+PITuzMwRjdCJIs3qdkrcXlvEucAg3P3KZC wDKBcrUaOQj+JHnHUJDizCnthF6yA5lkUHg2G0lzXnO6ed4KT3S7n6W7ZNA3EQCo BKk8UKyL9HmnvkSFTuTZCQi3bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgnpIzy 8oJRI7UOUiO2N7g8EMU/MB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkRCMy81M0FBMUJENEM2MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkw RHQ0R0tKdnh2SXhGbmJfT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs9sN9brJoUKzjiceZS8GyoKWcfEcYHpnECyCY+aUv+5ZHjh3+2mLyd0+xdeS aMZBQST8lSaFopL3Z27CzVg80Urao0B3dau4Uddrsh5sBp7X9vBN0ak8HWRmzW26 YB66Wkk1Uno0wS5XyKQf3woyE2namXRfQq1NmD/ryp+PEXZal0t+M8GmftJmyaMX k07XY2eAszVdbBsbITarxhy6t3L7r7YfGIRTSEm1xlSTefR9cGDkB4Q4JErkdqjc W+Ja2mIBfoDK0WOjy51/GlqNgUKOjhO9BaFKtboybz/0r/yPgBVE52cqbapSGuz5 H5oRgCgWT3XfEysN3NKDv1NnmA== -----END CERTIFICATE-----Generated at Sun Mar 22 00:12:39 2026 by rpki-client