$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft File: 3ETtNb69CygywHT8LEaqsM1oL94.mft (raw, json) Hash identifier: ygf6BtDyhOR0AHF6mh0/QMV12tF0hzAQ1sy/IZTnsKY= Subject key identifier: 71:81:C9:3B:80:0E:3A:18:6A:FC:3B:F4:E4:28:BC:1C:C6:FA:09:62 Authority key identifier: DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE Certificate issuer: /CN=A9143B09/serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Certificate serial: 1123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft Manifest number: 1A52 Signing time: Tue 24 Mar 2026 17:09:05 +0000 Manifest this update: Tue 24 Mar 2026 17:09:05 +0000 Manifest next update: Tue 31 Mar 2026 17:09:05 +0000 Files and hashes: 1: 3ETtNb69CygywHT8LEaqsM1oL94.crl (hash: bkQ3jianhLUXyYDTrG6TRu4a87Z3osyqwrjVIofrw0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4387 (0x1123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B09, serialNumber=DC44ED35BEBD0B2832C074FC2C46AAB0CD682FDE Validity Not Before: Mar 24 17:09:05 2026 GMT Not After : Mar 31 17:09:05 2026 GMT Subject: CN=69c2c531-15da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:27:c0:0b:6d:a3:60:72:b0:30:6e:e4:05:68: 6a:02:6b:e2:43:54:50:b8:c9:3a:b8:ff:02:68:bd: b8:d0:9e:61:87:52:4f:6f:7f:be:50:ec:b1:d0:b9: 6f:e7:77:14:84:9c:75:a8:e5:88:3c:61:69:b5:da: eb:ff:a1:ac:39:cb:2b:9a:cb:ac:07:a4:08:17:3c: 11:18:bb:83:a6:34:51:94:2e:f3:f4:7c:74:53:fb: c4:f1:f8:f7:8c:7d:63:7e:88:33:10:d6:54:d6:c7: fb:46:07:ed:51:cf:0d:62:1c:82:cf:05:b5:19:2a: 7e:07:cd:1c:5d:2e:1c:6e:11:25:21:8b:51:a2:3e: c9:ed:4e:6e:1e:51:31:e9:6e:18:ba:de:16:d5:03: 30:c9:68:70:8d:ad:2c:01:83:3c:0f:88:0b:33:80: 84:07:a4:04:ba:f1:6c:73:84:3c:eb:91:fc:ed:d4: 75:99:d7:0b:60:52:31:f0:d2:e0:80:53:f0:48:3f: 6c:f4:2c:98:a7:7c:98:45:7a:ce:29:86:a2:25:7c: bd:05:f0:91:33:d6:aa:26:03:db:67:ec:47:1f:eb: 8f:a0:8f:40:7e:8c:1d:15:e5:d6:54:3c:29:b1:01: 8a:48:6a:fb:fe:03:5a:0e:03:46:58:a2:04:8c:d2: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:81:C9:3B:80:0E:3A:18:6A:FC:3B:F4:E4:28:BC:1C:C6:FA:09:62 X509v3 Authority Key Identifier: keyid:DC:44:ED:35:BE:BD:0B:28:32:C0:74:FC:2C:46:AA:B0:CD:68:2F:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3ETtNb69CygywHT8LEaqsM1oL94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/3ETtNb69CygywHT8LEaqsM1oL94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:52:2e:be:87:12:d4:34:5c:fe:3b:3c:33:22:51:1a:98:76: 9b:34:86:0b:a2:a5:61:27:80:5e:7c:31:13:72:e2:73:1a:84: 00:ab:fc:f6:34:2a:36:ea:d9:b3:6e:eb:c3:74:73:ed:a1:b3: c7:8c:69:04:91:82:26:cf:ce:6a:8f:84:4f:df:4d:8c:24:c7: 13:01:e3:a2:f3:00:76:60:d8:0e:e8:55:f5:e5:17:3b:9f:68: 91:2e:53:7a:52:8d:fa:49:76:7f:61:43:df:c5:ce:2d:05:3a: f2:75:a8:25:8f:f4:fe:0b:3e:27:12:b1:21:09:4f:f0:15:55: 79:c5:d7:e5:1d:76:77:4b:b1:84:ac:fb:17:02:a8:6e:4f:aa: 65:ac:6e:1e:86:cc:23:45:c6:f9:98:16:6a:8c:89:9e:2b:4f: 76:de:ac:d9:81:aa:a8:d7:36:1d:f5:18:d9:07:66:cb:76:ff: 4d:1a:d5:54:d8:ed:7a:97:5c:34:45:f2:28:e8:c7:6e:4a:06: 34:d0:3c:73:97:5a:6b:45:c3:28:3c:b7:19:87:dc:e6:02:b8: 96:c1:99:37:e4:53:58:0d:11:0d:b8:d7:82:5d:67:88:0e:7d: 2c:7d:9e:83:54:d3:19:22:50:6f:40:e1:59:d4:d7:27:ad:39: 74:cf:6d:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICESMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNCMDkxMTAvBgNVBAUTKERDNDRFRDM1QkVCRDBCMjgzMkMwNzRGQzJDNDZBQUIw Q0Q2ODJGREUwHhcNMjYwMzI0MTcwOTA1WhcNMjYwMzMxMTcwOTA1WjAYMRYwFAYD VQQDEw02OWMyYzUzMS0xNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyfAC22jYHKwMG7kBWhqAmviQ1RQuMk6uP8CaL240J5hh1JPb3++UOyx0Llv 53cUhJx1qOWIPGFptdrr/6GsOcsrmsusB6QIFzwRGLuDpjRRlC7z9Hx0U/vE8fj3 jH1jfogzENZU1sf7RgftUc8NYhyCzwW1GSp+B80cXS4cbhElIYtRoj7J7U5uHlEx 6W4Yut4W1QMwyWhwja0sAYM8D4gLM4CEB6QEuvFsc4Q865H87dR1mdcLYFIx8NLg gFPwSD9s9CyYp3yYRXrOKYaiJXy9BfCRM9aqJgPbZ+xHH+uPoI9AfowdFeXWVDwp sQGKSGr7/gNaDgNGWKIEjNKeXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGByTuA DjoYavw79OQovBzG+gliMB8GA1UdIwQYMBaAFNxE7TW+vQsoMsB0/CxGqrDNaC/e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5Z3l3SFQ4TEVhcXNNMW9M OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNFVHROYjY5Q3lneXdIVDhMRWFxc00xb0w5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0IwOS8zQjM2N0JDRTMzQjcxMUU5QUQwRjU4N0FDNEY5QUUwMi8zRVR0TmI2OUN5 Z3l3SFQ4TEVhcXNNMW9MOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGFIuvocS1DRc/js8MyJRGph2mzSGC6KlYSeAXnwxE3LicxqEAKv89jQqNurZ s27rw3Rz7aGzx4xpBJGCJs/Oao+ET99NjCTHEwHjovMAdmDYDuhV9eUXO59okS5T elKN+kl2f2FD38XOLQU68nWoJY/0/gs+JxKxIQlP8BVVecXX5R12d0uxhKz7FwKo bk+qZaxuHobMI0XG+ZgWaoyJnitPdt6s2YGqqNc2HfUY2Qdmy3b/TRrVVNjtepdc NEXyKOjHbkoGNNA8c5daa0XDKDy3GYfc5gK4lsGZN+RTWA0RDbjXgl1niA59LH2e g1TTGSJQb0DhWdTXJ605dM9tUQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:17 2026 by rpki-client