$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft File: 3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json) Hash identifier: Q/DESc3+regK0Ix5+ls30KYK0RrcySI4aRWR47FY/w8= Subject key identifier: 9E:33:8B:1E:23:8E:6D:17:F9:38:66:0B:FF:31:6F:48:36:F8:2F:28 Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 Certificate issuer: /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft Manifest number: 01E5 Signing time: Wed 25 Mar 2026 02:44:28 +0000 Manifest this update: Wed 25 Mar 2026 02:44:28 +0000 Manifest next update: Wed 01 Apr 2026 02:44:28 +0000 Files and hashes: 1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: AmDpdqePrOxdxqW7WOhT5ARNK7YeaBenokfFTX1huXs=) 2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: z/CeXg1zE451kjdiV+L83Kbr1l7Vh3IeBEWeCzKi+60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45 Validity Not Before: Mar 25 02:44:28 2026 GMT Not After : Apr 1 02:44:28 2026 GMT Subject: CN=69c34c0c-034e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:f2:1e:ee:c1:2f:21:88:01:0b:95:74:ec: 48:e1:b4:f8:e2:b7:79:6a:b5:37:cb:99:27:fc:d1: 00:cf:3f:df:07:38:d0:f3:96:dd:2d:5b:f9:35:f4: 82:90:a6:98:db:fd:90:8a:68:d3:b0:26:33:96:28: e2:63:d8:9a:32:a6:42:b7:53:a0:b7:a9:0d:33:c3: bf:4d:c6:42:4d:6a:56:76:4a:44:a7:7d:91:a0:c3: f6:73:11:49:d0:6a:90:97:a8:23:cf:ea:eb:f0:9c: b9:14:49:8d:66:0c:99:6d:2e:c9:ce:d1:e3:6c:c6: a3:e4:2e:f5:51:3d:3a:57:6b:d3:5f:d4:1c:ef:ba: 6f:79:6b:d8:78:93:c3:14:97:e5:24:19:5a:f3:f3: 42:b4:63:88:77:c4:03:65:05:32:94:d6:32:a4:fa: bb:ff:40:30:52:4c:5c:f5:94:02:47:59:6a:74:38: af:09:10:cd:80:bf:c2:06:13:ad:e0:10:95:28:b6: 92:73:03:87:d3:4d:f4:86:ae:1f:15:47:46:04:20: c0:4e:89:2c:7c:e9:80:03:c5:1a:2c:05:0d:73:8b: 70:ca:80:6d:3f:f7:6e:bc:71:e2:f3:6e:b2:13:8c: 5e:57:2d:e5:84:89:f9:34:c3:9d:73:05:cb:1f:6e: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:33:8B:1E:23:8E:6D:17:F9:38:66:0B:FF:31:6F:48:36:F8:2F:28 X509v3 Authority Key Identifier: keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f8:1e:34:ce:fd:1b:7e:bb:d4:e2:0b:70:c9:5a:0a:6c:fd: 75:2f:b4:0a:ca:04:ab:78:51:61:38:65:1c:08:7b:ff:21:b4: 1c:eb:b6:fd:84:f2:75:84:34:10:f7:91:f0:c8:5b:66:dc:2c: 12:59:f2:ea:2b:27:2e:a6:8c:55:3b:87:26:b6:9d:88:fd:a6: 53:93:46:b0:40:ff:93:e5:ff:57:b2:76:b7:e9:16:9d:63:da: 9a:66:c3:ef:0e:b6:b5:72:d1:b8:8f:0e:a8:80:38:38:27:c9: 9b:f8:8d:f7:12:a0:cf:06:d0:f6:28:29:18:72:cc:72:bf:99: bb:10:89:a5:2a:51:2b:1a:9d:06:0d:b7:65:bb:58:c9:7c:c4: 1e:f2:04:b7:ec:ef:42:a0:1d:fa:fc:25:58:0b:c7:fe:cf:4c: 5a:53:8b:8e:e6:8c:ed:bb:7f:05:98:a8:82:cc:de:46:4c:f7: eb:61:0e:81:7b:15:97:32:50:a8:dd:f0:8d:aa:28:88:01:db: e4:97:9e:90:3d:71:43:a6:6a:69:50:ce:9b:20:3b:e7:99:c6: 6a:fe:a8:44:9e:56:a3:26:43:a6:0a:49:ef:a1:f3:7a:ca:5a: 79:e8:c5:4b:f5:11:c7:73:10:73:89:53:a6:b7:7f:5e:32:18: b1:55:f3:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy MTUxODJFNDUwHhcNMjYwMzI1MDI0NDI4WhcNMjYwNDAxMDI0NDI4WjAYMRYwFAYD VQQDEw02OWMzNGMwYy0wMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEPyHu7BLyGIAQuVdOxI4bT44rd5arU3y5kn/NEAzz/fBzjQ85bdLVv5NfSC kKaY2/2QimjTsCYzlijiY9iaMqZCt1Ogt6kNM8O/TcZCTWpWdkpEp32RoMP2cxFJ 0GqQl6gjz+rr8Jy5FEmNZgyZbS7JztHjbMaj5C71UT06V2vTX9Qc77pveWvYeJPD FJflJBla8/NCtGOId8QDZQUylNYypPq7/0AwUkxc9ZQCR1lqdDivCRDNgL/CBhOt 4BCVKLaScwOH0030hq4fFUdGBCDAToksfOmAA8UaLAUNc4twyoBtP/duvHHi826y E4xeVy3lhIn5NMOdcwXLH25fpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4zix4j jm0X+ThmC/8xb0g2+C8oMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2 RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfPgeNM79G3671OILcMlaCmz9dS+0CsoEq3hRYThlHAh7/yG0HOu2/YTydYQ0 EPeR8MhbZtwsElny6isnLqaMVTuHJradiP2mU5NGsED/k+X/V7J2t+kWnWPammbD 7w62tXLRuI8OqIA4OCfJm/iN9xKgzwbQ9igpGHLMcr+ZuxCJpSpRKxqdBg23ZbtY yXzEHvIEt+zvQqAd+vwlWAvH/s9MWlOLjuaM7bt/BZiogszeRkz362EOgXsVlzJQ qN3wjaooiAHb5JeekD1xQ6ZqaVDOmyA755nGav6oRJ5WoyZDpgpJ76HzespaeejF S/URx3MQc4lTprd/XjIYsVXzcw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:11 2026 by rpki-client