$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft File: k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft (raw, json) Hash identifier: gP+CnSXBEzAf3WDZdOyuK2Y+9f5fzWXECuIgMZXs89k= Subject key identifier: 97:5B:59:7E:BD:59:A7:EB:80:6D:57:6D:ED:70:66:FD:CC:86:C0:51 Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 05FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft Manifest number: 05A3 Signing time: Thu 26 Mar 2026 23:07:38 +0000 Manifest this update: Thu 26 Mar 2026 23:07:38 +0000 Manifest next update: Thu 02 Apr 2026 23:07:38 +0000 Files and hashes: 1: k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl (hash: 0RI2Y3Yxe/xXHUcuQbuG17U9pkKDPeOGiZD6ysghjmY=) 2: 39D8CF1893EB11EEB45D3A32C4F9AE02.roa (hash: p0QtasiXfN8/dE9L47jUX4sIVuhY7a3tPfYaZVlyQMU=) 3: 7879B24A3BA611EC8737B534C4F9AE02.roa (hash: 1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=) 4: B5960F8CB03111EEA45DE91DC4F9AE02.roa (hash: 9T7eAkjvrOk7zwMcNgqYoD07VX3V7BOca4enSrOlqyo=) 5: 7934717A3BA611EC8737B534C4F9AE02.roa (hash: AgzdJ8YeczC0jH58Lt1PJBql93I4ssj/fkdCRiuIJTQ=) 6: BEDF72A076B911EF95DBF27CC4F9AE02.roa (hash: EQOEyE+SLA+wjk3YozLTT2h5jMfekQ3SJQwsf3YqYKQ=) 7: 905F258E24F211EEA0863328C4F9AE02.roa (hash: 7eehH6/H/s1e1PgcHRQXB+ABMkIOWQTpfsozjtSna68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1535 (0x5ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Mar 26 23:07:38 2026 GMT Not After : Apr 2 23:07:38 2026 GMT Subject: CN=69c5bc3a-9617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fc:2d:a3:ba:67:ba:69:3b:af:b1:5c:72:13: 77:b0:76:cc:b7:a0:22:19:37:0a:a5:c5:a7:07:84: 2e:66:ca:55:31:e7:23:7a:90:7e:7b:a2:2b:3b:98: 5c:20:56:8b:5a:1a:58:e1:b5:60:3d:7e:80:1c:77: bf:e8:85:08:70:37:64:da:b4:b9:5f:b1:69:57:f6: 98:23:23:a8:72:a1:71:d5:d3:f3:af:65:37:7a:5a: 66:fe:9f:16:e6:aa:11:39:20:1d:62:3b:52:bb:41: 53:92:90:d2:07:35:94:42:9b:d2:14:76:3b:9c:8d: 56:3d:5b:f9:da:5f:5e:9d:44:2f:67:de:e3:a6:a1: 01:65:7f:42:05:8f:0e:f6:3b:5f:ff:85:bb:45:22: 07:53:ee:07:00:2b:38:0b:92:60:65:81:c0:eb:9e: bd:77:7c:ac:7d:44:9f:45:6a:6d:7a:75:49:a9:c9: fa:6a:95:da:0f:44:31:94:5e:74:49:e7:b4:7c:d1: b2:4c:a5:14:52:14:d5:83:48:95:ee:af:c6:fb:60: 39:8a:9f:de:f6:55:7c:86:11:cb:1b:2f:2e:1f:9b: 15:6a:8d:0f:69:1f:fc:2a:bf:3a:b3:4e:4b:db:3d: 90:ac:5d:f2:20:35:51:bc:9d:de:ce:5c:02:80:30: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5B:59:7E:BD:59:A7:EB:80:6D:57:6D:ED:70:66:FD:CC:86:C0:51 X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ae:6f:18:ad:37:02:7a:6c:47:3c:5d:48:27:dd:ab:15:0f: 7b:47:f4:ab:2b:b3:28:b9:7d:9d:67:63:e9:fa:81:ef:91:09: b7:c1:de:e1:ca:82:28:97:bb:c9:9e:92:d7:1d:fe:3f:af:be: c5:78:b9:ed:31:3e:a0:1e:2a:08:84:6d:bb:d9:9b:44:c1:e6: b2:f2:bc:ac:15:81:0e:8a:a1:aa:32:83:68:51:c3:8a:d4:82: 93:51:9e:18:b4:0a:a8:1f:3c:31:c0:f6:0d:14:1c:6c:e7:24: b9:41:d2:28:15:6f:90:4b:73:fe:f0:8c:a8:51:c5:72:c4:ce: 98:85:94:e9:06:84:a9:c3:76:60:04:e8:d9:d3:1f:bd:8f:3c: 1f:e2:31:ed:01:10:07:47:0d:5d:62:2a:38:64:fe:d7:77:27: a7:24:e1:bd:b2:5c:a1:c9:08:06:78:1b:92:13:b6:f7:e8:bc: 71:ce:6b:7a:59:2f:c3:f9:75:37:03:19:df:1e:20:f6:1e:49: 20:52:f7:63:e5:ed:6f:36:04:36:f6:2f:d2:1f:a5:47:e5:a7: e1:84:65:1e:2f:14:aa:3a:04:6b:57:b5:31:f8:28:1b:94:9b: 98:19:b7:ca:c6:1a:3e:66:12:66:d4:2e:37:6c:a5:1a:fd:1c: 73:90:2e:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjYwMzI2MjMwNzM4WhcNMjYwNDAyMjMwNzM4WjAYMRYwFAYD VQQDEw02OWM1YmMzYS05NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fwto7pnumk7r7FcchN3sHbMt6AiGTcKpcWnB4QuZspVMecjepB+e6IrO5hc IFaLWhpY4bVgPX6AHHe/6IUIcDdk2rS5X7FpV/aYIyOocqFx1dPzr2U3elpm/p8W 5qoROSAdYjtSu0FTkpDSBzWUQpvSFHY7nI1WPVv52l9enUQvZ97jpqEBZX9CBY8O 9jtf/4W7RSIHU+4HACs4C5JgZYHA6569d3ysfUSfRWptenVJqcn6apXaD0QxlF50 See0fNGyTKUUUhTVg0iV7q/G+2A5ip/e9lV8hhHLGy8uH5sVao0PaR/8Kr86s05L 2z2QrF3yIDVRvJ3ezlwCgDCk2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdbWX69 WafrgG1Xbe1wZv3MhsBRMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI2OC9DNzhFQkNFQTIxOTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdi dV9pemVXSkwtUk5SeksyRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAja5vGK03AnpsRzxdSCfdqxUPe0f0qyuzKLl9nWdj6fqB75EJt8He4cqCKJe7 yZ6S1x3+P6++xXi57TE+oB4qCIRtu9mbRMHmsvK8rBWBDoqhqjKDaFHDitSCk1Ge GLQKqB88McD2DRQcbOckuUHSKBVvkEtz/vCMqFHFcsTOmIWU6QaEqcN2YATo2dMf vY88H+Ix7QEQB0cNXWIqOGT+13cnpyThvbJcockIBngbkhO29+i8cc5relkvw/l1 NwMZ3x4g9h5JIFL3Y+XtbzYENvYv0h+lR+Wn4YRlHi8UqjoEa1e1MfgoG5SbmBm3 ysYaPmYSZtQuN2ylGv0cc5Au1w== -----END CERTIFICATE-----Generated at Sat Mar 28 19:47:33 2026 by rpki-client