$ rpki-client -vvf rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft File: 3Fys5yJTQlYHBjKHYfkTyTZJius.mft (raw, json) Hash identifier: zvxny30M7dXdn/mRqdMwxawghXGBSlBcA57LvyPzo74= Subject key identifier: 81:B9:8F:06:36:C6:FB:63:DE:4B:E6:D9:A6:87:EB:49:F1:3A:B8:13 Authority key identifier: DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB Certificate issuer: /CN=A91317CB/serialNumber=DC5CACE7225342560706328761F913C936498AEB Certificate serial: 15B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft Manifest number: 15AD Signing time: Tue 24 Mar 2026 16:39:11 +0000 Manifest this update: Tue 24 Mar 2026 16:39:10 +0000 Manifest next update: Tue 31 Mar 2026 16:39:10 +0000 Files and hashes: 1: 3Fys5yJTQlYHBjKHYfkTyTZJius.crl (hash: 8bOpj1MYevs1xK9eVbgOTCRxlXF3KasFtuxfw5Q3RDo=) 2: CBA65F7C4AB411E887FB7E29C4F9AE02.roa (hash: 3tk4QPsr03ML5SuwBLsP7qy8OTNJWI4sJQvwqcILBHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:39:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5559 (0x15b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317CB, serialNumber=DC5CACE7225342560706328761F913C936498AEB Validity Not Before: Mar 24 16:39:10 2026 GMT Not After : Mar 31 16:39:10 2026 GMT Subject: CN=69c2be2e-92a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:39:6b:39:b5:11:c7:ad:7e:fb:bc:42:4e:62: ca:89:80:cb:56:d4:47:00:4e:81:13:38:99:f2:a4: 36:21:5b:aa:23:79:d6:52:2f:cc:65:69:e5:b1:8c: a3:2d:d5:c1:4b:e8:18:de:8c:bb:e8:e2:8a:eb:2e: 17:bc:11:5c:2a:33:de:94:55:6c:c9:14:2a:16:57: 84:9e:56:ed:44:fe:a1:54:c4:eb:b7:d4:7e:9d:fa: 56:34:5e:5f:ec:65:a2:40:67:5e:a5:9f:0d:4f:db: 73:51:e4:ce:12:a8:65:bc:ca:65:f2:53:4e:25:5f: de:03:a6:0f:94:4e:83:d1:52:f2:77:ef:3e:99:c6: d1:5e:e8:4b:9d:9b:0a:63:ba:50:4d:38:e5:77:31: 68:f3:9a:f0:0b:cd:12:79:58:b8:0a:c2:4c:c7:2c: 9e:6d:11:fb:10:94:52:c0:df:00:8f:52:37:d1:33: 73:13:0b:10:51:df:d0:ba:a9:8e:f4:0a:4d:4c:45: 90:21:46:eb:fa:21:d5:a6:af:6a:3b:15:59:22:04: a2:b2:4f:ce:fc:43:2c:04:2a:9f:cd:b2:a6:ac:11: 64:bb:b1:aa:92:70:ca:bf:37:d9:65:e6:2b:dc:89: f5:a4:20:6b:70:63:dd:f7:75:92:bd:c7:40:14:4e: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:8F:06:36:C6:FB:63:DE:4B:E6:D9:A6:87:EB:49:F1:3A:B8:13 X509v3 Authority Key Identifier: keyid:DC:5C:AC:E7:22:53:42:56:07:06:32:87:61:F9:13:C9:36:49:8A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Fys5yJTQlYHBjKHYfkTyTZJius.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317CB/CB73F7864AB311E8AD4D1E28C4F9AE02/3Fys5yJTQlYHBjKHYfkTyTZJius.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:32:5d:a7:ce:0f:64:9d:51:ca:d8:38:bc:0a:85:60:0b:95: 1f:a9:e5:50:b4:f1:85:f0:d8:04:35:d3:b4:3b:f0:8a:f1:5b: f7:87:69:d0:ea:73:6d:f6:34:88:4d:6a:fa:dc:d2:c9:ca:be: b5:21:bc:a8:62:28:43:3b:dd:94:e8:c5:1f:76:af:37:74:f0: a6:81:0a:e8:bd:56:5d:3f:d1:c3:62:f4:fd:6d:80:d5:17:06: 83:fe:1a:38:ee:c6:ba:c2:60:15:fa:8f:d0:b3:89:11:5e:8e: 0e:13:7f:d8:1f:4c:dd:f0:8a:97:b9:49:89:8c:17:2f:19:87: 0d:6c:7d:72:aa:4d:6a:e4:cb:9f:30:3a:42:2f:1f:2a:a6:20: fd:5b:55:4a:22:d6:f3:14:74:79:e3:df:9e:16:85:70:5f:20: 2c:1d:24:e3:20:e1:80:0d:c3:27:94:1f:52:95:b3:cf:78:5a: 45:2a:87:dd:f2:81:19:91:77:6a:81:b2:12:1d:32:f7:2c:92: 62:3b:2e:a9:59:8b:8e:04:eb:4c:13:a3:e5:fd:22:a6:83:45: 57:d3:c6:27:24:81:7f:be:87:6d:af:1e:f6:10:aa:61:fb:9e: 2d:bf:a3:67:85:0b:b2:cc:18:cb:b1:aa:6b:3b:7b:76:1c:24: c3:d9:d8:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3Q0IxMTAvBgNVBAUTKERDNUNBQ0U3MjI1MzQyNTYwNzA2MzI4NzYxRjkxM0M5 MzY0OThBRUIwHhcNMjYwMzI0MTYzOTEwWhcNMjYwMzMxMTYzOTEwWjAYMRYwFAYD VQQDEw02OWMyYmUyZS05MmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszlrObURx61++7xCTmLKiYDLVtRHAE6BEziZ8qQ2IVuqI3nWUi/MZWnlsYyj LdXBS+gY3oy76OKK6y4XvBFcKjPelFVsyRQqFleEnlbtRP6hVMTrt9R+nfpWNF5f 7GWiQGdepZ8NT9tzUeTOEqhlvMpl8lNOJV/eA6YPlE6D0VLyd+8+mcbRXuhLnZsK Y7pQTTjldzFo85rwC80SeVi4CsJMxyyebRH7EJRSwN8Aj1I30TNzEwsQUd/QuqmO 9ApNTEWQIUbr+iHVpq9qOxVZIgSisk/O/EMsBCqfzbKmrBFku7GqknDKvzfZZeYr 3In1pCBrcGPd93WSvcdAFE5QwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIG5jwY2 xvtj3kvm2aaH60nxOrgTMB8GA1UdIwQYMBaAFNxcrOciU0JWBwYyh2H5E8k2SYrr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdDQi9DQjczRjc4NjRB QjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFsWUhCaktIWWZrVHlUWkpp dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGeXM1eUpUUWxZSEJqS0hZZmtUeVRaSml1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdDQi9DQjczRjc4NjRBQjMxMUU4QUQ0RDFFMjhDNEY5QUUwMi8zRnlzNXlKVFFs WUhCaktIWWZrVHlUWkppdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGTJdp84PZJ1Rytg4vAqFYAuVH6nlULTxhfDYBDXTtDvwivFb94dp0OpzbfY0 iE1q+tzSycq+tSG8qGIoQzvdlOjFH3avN3TwpoEK6L1WXT/Rw2L0/W2A1RcGg/4a OO7GusJgFfqP0LOJEV6ODhN/2B9M3fCKl7lJiYwXLxmHDWx9cqpNauTLnzA6Qi8f KqYg/VtVSiLW8xR0eePfnhaFcF8gLB0k4yDhgA3DJ5QfUpWzz3haRSqH3fKBGZF3 aoGyEh0y9yySYjsuqVmLjgTrTBOj5f0ipoNFV9PGJySBf76Hba8e9hCqYfueLb+j Z4ULsswYy7Gqazt7dhwkw9nYJw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:32:55 2026 by rpki-client