$ rpki-client -vvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft File: 3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json) Hash identifier: 2cbLxtp+lhxg0L3wjFa0+pA/5HlyllpX0MsUSKUFOK8= Subject key identifier: DD:05:2A:CF:94:3C:B7:20:BC:67:52:6C:AB:3D:2E:C5:63:AB:1D:20 Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F Certificate issuer: /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft Manifest number: 14 Signing time: Wed 25 Mar 2026 08:14:01 +0000 Manifest this update: Wed 25 Mar 2026 08:14:00 +0000 Manifest next update: Wed 01 Apr 2026 08:14:00 +0000 Files and hashes: 1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: 99AS/qur4NK5U9hnXkUfSGzwhGREfWntDSLEq7wa3pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F Validity Not Before: Mar 25 08:14:00 2026 GMT Not After : Apr 1 08:14:00 2026 GMT Subject: CN=69c39949-f5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:82:d0:1a:ab:94:62:d8:bc:45:e5:01:9a: c2:cd:a6:e2:d5:2c:5c:e3:76:86:d2:9b:6e:6e:db: 80:46:8b:1b:65:5d:e6:7d:bf:c3:4c:84:60:e9:12: ec:80:c0:3f:3a:19:42:b3:fc:fb:c5:a7:8c:fb:b8: 99:ca:94:4a:0d:56:73:c2:28:13:70:f9:65:97:40: 04:96:b1:88:06:25:a3:4e:5d:27:c6:1f:31:5c:8a: ea:cb:90:e4:93:69:a6:6e:35:7f:c7:d8:96:49:ac: 05:9b:e2:c1:6a:fe:9c:d0:68:87:a4:c5:ad:ab:b8: 9d:1b:32:e1:24:7c:58:e3:fd:48:e2:d8:34:c0:0a: 70:a2:65:9d:f6:46:7b:a0:a5:b1:41:30:13:28:bf: de:d6:1f:8f:b1:6a:6c:8a:c5:fc:54:82:f9:45:49: 17:8a:94:d6:db:f4:98:08:29:1f:e6:40:19:d8:d4: 57:cf:59:3f:f4:17:68:ea:bf:65:b8:29:b5:29:15: 0f:37:74:6b:5c:b1:b8:5e:60:10:34:97:5a:84:fc: cb:b8:d5:4f:4c:95:6c:d1:93:2b:a5:ef:0c:ea:ad: 64:db:fd:2a:e0:28:d4:5c:1c:b4:72:98:85:89:2d: 1f:42:5b:fd:95:1d:ec:31:14:dd:77:7b:82:88:bf: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:05:2A:CF:94:3C:B7:20:BC:67:52:6C:AB:3D:2E:C5:63:AB:1D:20 X509v3 Authority Key Identifier: keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:9c:b0:02:1b:b8:b6:41:33:22:98:3a:0b:e5:20:08:68:e6: 6d:6e:74:9f:22:fc:02:47:d1:25:cf:be:59:42:dc:2b:c1:ee: cc:66:23:06:a9:3a:61:26:f6:c5:d2:4b:a7:5f:9d:89:1e:27: 2e:c5:be:8d:c4:69:92:8d:73:96:33:7d:21:f8:2d:c2:59:dd: f7:2a:a8:68:05:d9:0d:ca:0f:ea:99:77:38:88:49:35:67:de: 45:f5:f0:03:f7:e0:18:6e:6b:3b:3d:e0:f9:72:88:bb:98:64: d8:24:88:20:33:f1:2f:06:46:71:86:49:47:e9:ed:9e:65:8c: 02:8c:aa:80:93:16:53:5b:fc:51:94:64:10:c3:b3:cd:f8:5f: 74:a5:0b:d1:b0:56:9e:cd:11:db:9e:3d:57:c9:ae:85:e9:e5: 5f:74:ff:de:59:90:59:51:86:c4:74:4d:ce:6a:b5:16:65:ba: c4:fd:6e:6e:21:12:8a:af:08:f2:6d:78:67:5f:24:94:55:ff: a4:22:46:c9:c3:d5:99:46:5a:6b:84:13:cc:40:73:5f:9b:79: 54:aa:cb:e6:ba:ae:04:26:70:09:c5:06:3b:0a:b2:df:aa:3c: 99:05:3f:f3:d5:09:14:5b:da:9c:05:69:c9:61:5e:35:05:9d: a7:78:5a:59 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdFRjExMC8GA1UEBRMoREU3REM2NEY5OUY2MjQwNjI0QkExM0QyMTU0OTQ0NEM0 MjRCNTQ2RjAeFw0yNjAzMjUwODE0MDBaFw0yNjA0MDEwODE0MDBaMBgxFjAUBgNV BAMTDTY5YzM5OTQ5LWY1YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkNoLQGquUYti8ReUBmsLNpuLVLFzjdobSm25u24BGixtlXeZ9v8NMhGDpEuyA wD86GUKz/PvFp4z7uJnKlEoNVnPCKBNw+WWXQASWsYgGJaNOXSfGHzFciurLkOST aaZuNX/H2JZJrAWb4sFq/pzQaIekxa2ruJ0bMuEkfFjj/Uji2DTACnCiZZ32Rnug pbFBMBMov97WH4+xamyKxfxUgvlFSReKlNbb9JgIKR/mQBnY1FfPWT/0F2jqv2W4 KbUpFQ83dGtcsbheYBA0l1qE/Mu41U9MlWzRkyul7wzqrWTb/SrgKNRcHLRymIWJ LR9CW/2VHewxFN13e4KIv+L9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3QUqz5Q8 tyC8Z1Jsqz0uxWOrHSAwHwYDVR0jBBgwFoAU3n3GT5n2JAYkuhPSFUlETEJLVG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0VGLzVDOUM4QUMwMTEz RjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZa3VoUFNGVWxFVEVKTFZH OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM24zR1Q1bjJKQVlrdWhQU0ZVbEVURUpMVkc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0VGLzVDOUM4QUMwMTEzRjExRjE4MjFFNDhGMDIwM0Q4QzY3LzNuM0dUNW4ySkFZ a3VoUFNGVWxFVEVKTFZHOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBknLACG7i2QTMimDoL5SAIaOZtbnSfIvwCR9Elz75ZQtwrwe7MZiMGqTphJvbF 0kunX52JHicuxb6NxGmSjXOWM30h+C3CWd33KqhoBdkNyg/qmXc4iEk1Z95F9fAD 9+AYbms7PeD5coi7mGTYJIggM/EvBkZxhklH6e2eZYwCjKqAkxZTW/xRlGQQw7PN +F90pQvRsFaezRHbnj1Xya6F6eVfdP/eWZBZUYbEdE3OarUWZbrE/W5uIRKKrwjy bXhnXySUVf+kIkbJw9WZRlprhBPMQHNfm3lUqsvmuq4EJnAJxQY7CrLfqjyZBT/z 1QkUW9qcBWnJYV41BZ2neFpZ -----END CERTIFICATE-----Generated at Thu Mar 26 22:18:23 2026 by rpki-client