$ rpki-client -vvf rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft File: fT3bIK_-cUyPNUllHB7oD1VgEbg.mft (raw, json) Hash identifier: /8Bvji0Yp2wck5i6OluHVg6aqbyVQwglw36hEiGZrt0= Subject key identifier: 6E:51:36:3A:20:13:2A:9C:70:F1:E7:49:1D:B6:05:C5:37:6E:92:8F Authority key identifier: 7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 Certificate issuer: /CN=A91319EA/serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft Manifest number: 0345 Signing time: Wed 25 Mar 2026 00:37:19 +0000 Manifest this update: Wed 25 Mar 2026 00:37:18 +0000 Manifest next update: Wed 01 Apr 2026 00:37:18 +0000 Files and hashes: 1: fT3bIK_-cUyPNUllHB7oD1VgEbg.crl (hash: l5xRJBNN1X7zAaKAJgbxI/jvN+6zFqGfzI53XjPrRsw=) 2: BFD5E8EAF8EB11EC9C39C677C4F9AE02.roa (hash: ogTzdNf1gHD/xTlxA8D6h7pqJeFDXQYw5yT4vowpzqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91319EA, serialNumber=7D3DDB20AFFE714C8F3549651C1EE80F556011B8 Validity Not Before: Mar 25 00:37:18 2026 GMT Not After : Apr 1 00:37:18 2026 GMT Subject: CN=69c32e3f-3dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:a4:69:82:e0:98:49:15:a6:d9:fe:c7:e1: 39:9c:06:ec:76:32:5b:ac:dc:93:e1:0d:c8:36:b7: 3f:e4:b5:75:01:63:1b:72:b7:a8:78:02:41:c5:a3: ee:d1:a5:b0:5f:d8:fc:97:af:80:c8:67:07:c7:12: 44:ca:47:b3:b7:d7:32:00:cb:9e:52:11:e0:f4:6d: ed:19:6b:21:b7:8c:91:b4:b3:5d:e8:5d:4c:57:e4: e8:3a:ef:90:b8:62:c9:26:78:d5:5f:4b:cd:d3:71: da:da:61:f7:ad:02:45:b1:41:d0:33:bc:84:81:d4: c7:a1:ac:41:f0:65:9a:cf:8e:56:ba:9e:b2:fa:34: 61:72:73:4c:ac:1f:b1:2d:1c:b4:a4:8d:bc:f6:2f: 69:61:c1:1f:10:ea:7e:fa:1a:f9:66:83:ec:fc:37: 5f:f7:e4:fc:b6:6a:47:83:15:48:61:68:a5:a7:26: cf:66:f8:d8:2c:0e:61:a0:eb:9d:68:43:52:2d:01: 50:6f:80:fe:d3:33:ef:99:58:f5:60:09:8e:44:3d: 70:ab:36:1d:ba:58:42:ee:b4:c6:b7:4a:78:76:7a: ee:88:02:c5:33:e2:cd:35:87:6b:9e:60:05:de:7c: 7b:b1:bd:6f:5c:55:75:ea:a0:e7:12:77:93:23:09: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:51:36:3A:20:13:2A:9C:70:F1:E7:49:1D:B6:05:C5:37:6E:92:8F X509v3 Authority Key Identifier: keyid:7D:3D:DB:20:AF:FE:71:4C:8F:35:49:65:1C:1E:E8:0F:55:60:11:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fT3bIK_-cUyPNUllHB7oD1VgEbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91319EA/D26C4128F8E811EC8B577271C4F9AE02/fT3bIK_-cUyPNUllHB7oD1VgEbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ff:38:0c:25:e4:b6:11:b5:41:a9:8d:35:75:97:7c:67:d2: e7:9b:db:84:8f:0f:ad:7c:83:12:b3:c0:f1:dd:56:9b:c1:1f: 99:6d:3c:57:15:6a:8a:fd:0e:72:1d:74:bb:10:96:f8:c0:bd: 85:68:32:04:b3:e1:45:8d:3b:08:fc:57:18:f1:92:74:69:c7: 13:35:ac:78:09:84:45:76:c5:93:75:a5:c8:30:71:8f:e8:68: 87:44:7b:ff:ae:e9:af:68:73:b2:26:9b:31:9f:1e:7d:9a:09: cb:67:c6:9f:e4:b4:42:c7:ae:ab:c4:48:9e:67:80:36:14:aa: f9:da:50:71:7b:37:8b:2d:46:d4:bc:f4:87:05:b9:86:84:0b: d7:6a:ed:ca:83:e3:09:21:e5:2b:70:fe:89:bc:dc:45:33:74: b0:48:87:06:2f:26:a1:e1:93:81:17:ff:a9:1f:1c:0f:f1:3a: 0e:0d:c1:6e:19:9b:19:73:94:c3:9b:7b:18:9f:ca:7c:36:da: 13:24:db:4f:a4:54:f9:5a:2c:c5:56:c8:18:e8:bf:af:2c:e9: 8f:52:5e:dc:22:51:cb:ae:4b:90:c2:c6:be:91:b6:c1:a9:e3: 34:3c:32:3d:3d:0a:62:50:73:37:67:71:05:b6:cd:4b:ab:37: 56:29:0a:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE5RUExMTAvBgNVBAUTKDdEM0REQjIwQUZGRTcxNEM4RjM1NDk2NTFDMUVFODBG NTU2MDExQjgwHhcNMjYwMzI1MDAzNzE4WhcNMjYwNDAxMDAzNzE4WjAYMRYwFAYD VQQDEw02OWMzMmUzZi0zZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHykaYLgmEkVptn+x+E5nAbsdjJbrNyT4Q3INrc/5LV1AWMbcreoeAJBxaPu 0aWwX9j8l6+AyGcHxxJEykezt9cyAMueUhHg9G3tGWsht4yRtLNd6F1MV+ToOu+Q uGLJJnjVX0vN03Ha2mH3rQJFsUHQM7yEgdTHoaxB8GWaz45Wup6y+jRhcnNMrB+x LRy0pI289i9pYcEfEOp++hr5ZoPs/Ddf9+T8tmpHgxVIYWilpybPZvjYLA5hoOud aENSLQFQb4D+0zPvmVj1YAmORD1wqzYdulhC7rTGt0p4dnruiALFM+LNNYdrnmAF 3nx7sb1vXFV16qDnEneTIwnx0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5RNjog EyqccPHnSR22BcU3bpKPMB8GA1UdIwQYMBaAFH092yCv/nFMjzVJZRwe6A9VYBG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTlFQS9EMjZDNDEyOEY4 RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNVeVBOVWxsSEI3b0QxVmdF YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUM2JJS18tY1V5UE5VbGxIQjdvRDFWZ0ViZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTlFQS9EMjZDNDEyOEY4RTgxMUVDOEI1NzcyNzFDNEY5QUUwMi9mVDNiSUtfLWNV eVBOVWxsSEI3b0QxVmdFYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAP84DCXkthG1QamNNXWXfGfS55vbhI8PrXyDErPA8d1Wm8EfmW08VxVqiv0O ch10uxCW+MC9hWgyBLPhRY07CPxXGPGSdGnHEzWseAmERXbFk3WlyDBxj+hoh0R7 /67pr2hzsiabMZ8efZoJy2fGn+S0Qseuq8RInmeANhSq+dpQcXs3iy1G1Lz0hwW5 hoQL12rtyoPjCSHlK3D+ibzcRTN0sEiHBi8moeGTgRf/qR8cD/E6Dg3BbhmbGXOU w5t7GJ/KfDbaEyTbT6RU+VosxVbIGOi/ryzpj1Je3CJRy65LkMLGvpG2wanjNDwy PT0KYlBzN2dxBbbNS6s3VikK9w== -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:04 2026 by rpki-client