$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json) Hash identifier: 7mjZGBIazGVug3J+qT1IEH5G6XXMac6REvW20Ec2kJo= Subject key identifier: 2B:F0:90:C5:B4:17:2E:D9:A2:93:05:3C:83:9E:23:27:93:57:A3:41 Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft Manifest number: 39 Signing time: Tue 03 Mar 2026 08:08:12 +0000 Manifest this update: Tue 03 Mar 2026 08:08:11 +0000 Manifest next update: Tue 10 Mar 2026 08:08:11 +0000 Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: ZFsxKOVcN7OBlTgOTH6nLgVXOKZkWjB4sNFJHoOQ3io=) 2: C6B0BA0EC37D11F0A205F578C4F9AE02.roa (hash: +CmSda4T3YUnvvvrMYK818glj0vIe2epiTUr9j+GbE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Mar 3 08:08:11 2026 GMT Not After : Mar 10 08:08:11 2026 GMT Subject: CN=69a696ec-ed02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:48:a9:9c:d5:66:77:eb:40:73:8c:0d:17: 86:3d:29:03:89:33:df:ff:f5:54:fa:43:7f:62:2a: 4d:0d:7c:be:f7:74:da:9b:e7:31:fd:42:3f:a4:0d: 25:0f:24:40:ad:3d:15:60:75:a5:ed:cf:2d:dc:6d: 2f:92:80:31:df:74:40:ec:f8:73:5d:59:68:2c:a7: 20:29:1c:8e:37:5e:69:0e:d0:da:bd:f8:65:06:50: 72:3f:12:b7:47:1a:bc:16:62:29:54:1a:ef:7e:eb: ad:9f:04:4f:8c:e4:6e:d0:dd:f1:51:c3:8e:30:ae: af:be:f3:02:78:e9:80:87:a0:ca:7e:15:72:f8:a9: 8f:59:0e:ca:cd:53:74:f0:90:9e:bb:92:80:50:04: db:31:c3:14:91:6d:f4:e0:6c:3c:d0:e3:1f:62:a6: 77:5c:69:ec:7c:7c:99:4a:12:5e:a6:e0:0a:29:95: 71:a8:ad:35:b6:ed:b3:68:16:7a:e9:f4:16:53:38: a1:a6:fc:b4:38:b5:3b:19:fe:50:41:47:44:e3:9c: 68:bb:d0:0f:62:2c:c1:03:2a:24:51:46:fb:b7:86: f7:49:67:8d:aa:21:04:e6:76:42:f4:89:53:b4:28: 30:a1:73:5c:46:2f:89:5e:5a:01:24:17:2d:07:49: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:90:C5:B4:17:2E:D9:A2:93:05:3C:83:9E:23:27:93:57:A3:41 X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b6:c0:6c:6e:fe:18:a3:62:41:0b:cc:1d:84:3f:fa:00:3b: 57:ad:44:da:d9:46:67:33:38:ec:e7:97:d6:68:ed:1d:cb:ca: a0:ae:cc:a0:d3:90:b3:02:93:1e:7d:df:ec:dd:bc:4c:b4:37: a8:e0:97:24:de:e8:8d:03:1c:c7:f8:4f:f9:9a:4c:b1:43:72: 3a:c6:31:82:8e:e8:55:ab:ff:2d:9d:eb:80:8d:a9:e4:69:bc: 35:80:5f:63:18:61:d2:7c:22:37:9c:3a:8b:d5:24:68:ff:8e: d9:7c:c6:bf:2d:66:09:f5:98:78:53:f1:66:b4:12:0f:c1:55: e1:e8:d4:45:0f:41:36:12:f5:9e:12:2f:82:91:71:fa:03:87: b8:aa:1e:4e:fb:36:85:c7:7e:fc:30:e6:2d:d6:c9:5c:72:66: d8:84:38:a5:e9:80:d1:9d:73:e7:cc:8c:2d:eb:73:1c:9b:a1: 39:bb:63:84:cf:36:04:24:26:f4:e2:65:04:c4:cb:62:84:35: 47:05:4b:2f:2e:e7:2f:7f:51:59:8e:8d:90:4a:af:06:5f:c3: cc:62:c9:f3:e2:a5:75:26:9c:03:00:d3:27:f6:44:7b:f4:12: b1:f3:39:77:15:08:91:2f:4b:37:6a:ce:fe:91:e7:a7:b3:ed: fc:10:95:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RkJBRjExMC8GA1UEBRMoQjA0REM3QUI0ODIzMzM4OTBDMjhBNzY1NzVEOEFERTY0 MjlDM0ZDQjAeFw0yNjAzMDMwODA4MTFaFw0yNjAzMTAwODA4MTFaMBgxFjAUBgNV BAMTDTY5YTY5NmVjLWVkMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN7EipnNVmd+tAc4wNF4Y9KQOJM9//9VT6Q39iKk0NfL73dNqb5zH9Qj+kDSUP JECtPRVgdaXtzy3cbS+SgDHfdEDs+HNdWWgspyApHI43XmkO0Nq9+GUGUHI/ErdH GrwWYilUGu9+662fBE+M5G7Q3fFRw44wrq++8wJ46YCHoMp+FXL4qY9ZDsrNU3Tw kJ67koBQBNsxwxSRbfTgbDzQ4x9ipndcaex8fJlKEl6m4AoplXGorTW27bNoFnrp 9BZTOKGm/LQ4tTsZ/lBBR0TjnGi70A9iLMEDKiRRRvu3hvdJZ42qIQTmdkL0iVO0 KDChc1xGL4leWgEkFy0HSRHdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK/CQxbQX LtmikwU8g54jJ5NXo0EwHwYDVR0jBBgwFoAUsE3Hq0gjM4kMKKdlddit5kKcP8sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGQkFGLzY4MkIzOUE2QzM3 QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc0UzSHEwZ2pNNGtNS0tkbGRkaXQ1a0tjUDhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG QkFGLzY4MkIzOUE2QzM3QzExRjA5REM1QTUzMkM0RjlBRTAyL3NFM0hxMGdqTTRr TUtLZGxkZGl0NWtLY1A4cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvtsBsbv4Yo2JBC8wdhD/6ADtXrUTa2UZnMzjs55fWaO0dy8qgrsyg05CzApMe fd/s3bxMtDeo4Jck3uiNAxzH+E/5mkyxQ3I6xjGCjuhVq/8tneuAjankabw1gF9j GGHSfCI3nDqL1SRo/47ZfMa/LWYJ9Zh4U/FmtBIPwVXh6NRFD0E2EvWeEi+CkXH6 A4e4qh5O+zaFx378MOYt1slccmbYhDil6YDRnXPnzIwt63Mcm6E5u2OEzzYEJCb0 4mUExMtihDVHBUsvLucvf1FZjo2QSq8GX8PMYsnz4qV1JpwDANMn9kR79BKx8zl3 FQiRL0s3as7+keens+38EJXK -----END CERTIFICATE-----Generated at Wed Mar 4 08:19:27 2026 by rpki-client