$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft File: 3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json) Hash identifier: XttHJVQPcm4V8uCBOCXXs/lFfXkfAAeJuvh5OCVZ4UE= Subject key identifier: B4:86:B4:07:8C:85:A7:4E:D9:3C:06:E6:30:B4:A9:9F:13:20:42:18 Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 Certificate issuer: /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft Manifest number: 2D5F Signing time: Tue 24 Mar 2026 16:39:26 +0000 Manifest this update: Tue 24 Mar 2026 16:39:26 +0000 Manifest next update: Tue 31 Mar 2026 16:39:26 +0000 Files and hashes: 1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: 2Txm4oRCss43YqGHfR1TDfHLCW2J639PX5knoaGmOjg=) 2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: GUsLBn574ELIPHrzNZ8A3QgbJIsg7VbDm7V6sVO40ak=) 3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: DnRwHb+zGanKOnKDBhnJEheD17mYmVP+lAVvotZJElo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8 Validity Not Before: Mar 24 16:39:26 2026 GMT Not After : Mar 31 16:39:26 2026 GMT Subject: CN=69c2be3e-b4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:0f:5b:c4:79:23:d8:6b:58:b1:cc:99:25: ef:8b:7d:f6:60:e3:db:08:91:45:9d:02:38:74:e0: 5b:c8:be:1d:91:47:c1:47:67:bc:03:65:ba:b9:a0: dc:93:80:7d:dd:d9:aa:e3:2d:69:22:1d:b1:51:d4: 72:ec:d1:8c:8c:b5:80:60:7f:2d:fe:dd:e6:ad:61: bb:73:06:d5:89:5c:f3:33:ca:d4:6e:06:3f:3a:f1: cb:56:3b:98:8a:2c:42:8b:34:5d:df:3d:ee:f1:88: 89:5a:90:51:d4:54:47:35:83:71:cf:2c:1f:2f:14: 71:dd:c8:3f:a1:42:87:8e:81:49:ae:57:11:35:cc: 33:eb:6c:86:19:db:c8:fe:c5:3b:be:a6:9f:1a:b6: 75:90:92:27:7d:3b:88:f7:a7:3f:bb:38:1e:60:36: 63:b9:54:fa:9f:6d:a5:fb:02:54:0c:8a:e2:d9:26: 49:75:38:1d:16:20:ac:ab:ea:66:e6:31:7d:4a:10: 7f:15:d7:1e:20:96:d8:4d:25:ff:7f:05:7a:ed:a0: 09:1d:f3:e0:7e:96:97:25:ed:f0:f4:c9:28:cd:71: a6:ba:61:41:b3:d9:e5:8c:97:0c:9b:f4:b4:2e:91: d9:a7:89:58:9a:9e:eb:03:0f:d2:f8:51:32:4c:09: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:86:B4:07:8C:85:A7:4E:D9:3C:06:E6:30:B4:A9:9F:13:20:42:18 X509v3 Authority Key Identifier: keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a1:fb:f5:02:61:4a:40:13:a1:78:93:b9:96:15:a7:26:9d: 4c:3f:24:90:3c:e5:bb:b4:ec:72:89:e5:f1:86:bc:7c:3f:f6: 09:3b:81:ad:65:8b:e9:c0:21:1c:f1:16:28:50:cf:a7:de:2c: 1b:ec:4f:bf:60:cc:63:43:93:8c:b7:a1:71:56:38:c2:3f:dd: 57:b9:74:05:71:e5:a2:ae:e7:e9:52:bc:d3:b8:44:e9:df:42: d7:a5:10:36:e8:a6:5c:5e:6f:5a:84:75:5a:b5:2f:2e:5d:56: 95:ad:73:a8:b9:58:ae:bd:6a:af:1e:9e:d9:1d:bb:52:aa:7b: 7b:1c:b9:b9:ec:cf:3f:c0:ed:01:a9:e8:46:9f:80:2e:3e:31: d7:1e:45:06:77:90:95:61:e6:dd:8b:69:3a:e8:aa:29:8f:33: ae:29:24:3b:1f:d6:13:b8:a7:ab:ae:ed:e5:83:ca:b8:04:60: 4a:65:6c:6a:f9:1e:1a:35:cb:47:85:64:bd:c7:52:93:15:58: 39:21:59:70:50:85:f5:ff:53:e9:24:07:70:45:3e:d8:7b:04: 9c:2d:e1:87:98:d1:cd:06:85:9e:dd:1f:89:4a:21:f6:15:23: bd:27:f7:20:5d:92:48:20:d5:a9:19:f9:d6:6b:0b:75:a9:a1: 38:52:7e:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKERERDUzRjUyMjVFRDJGOERBOEQwOUU3QUFEOTgyQzgw QjZDRUFEQTgwHhcNMjYwMzI0MTYzOTI2WhcNMjYwMzMxMTYzOTI2WjAYMRYwFAYD VQQDEw02OWMyYmUzZS1iNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT4PW8R5I9hrWLHMmSXvi332YOPbCJFFnQI4dOBbyL4dkUfBR2e8A2W6uaDc k4B93dmq4y1pIh2xUdRy7NGMjLWAYH8t/t3mrWG7cwbViVzzM8rUbgY/OvHLVjuY iixCizRd3z3u8YiJWpBR1FRHNYNxzywfLxRx3cg/oUKHjoFJrlcRNcwz62yGGdvI /sU7vqafGrZ1kJInfTuI96c/uzgeYDZjuVT6n22l+wJUDIri2SZJdTgdFiCsq+pm 5jF9ShB/FdceIJbYTSX/fwV67aAJHfPgfpaXJe3w9MkozXGmumFBs9nljJcMm/S0 LpHZp4lYmp7rAw/S+FEyTAmowQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSGtAeM hadO2TwG5jC0qZ8TIEIYMB8GA1UdIwQYMBaAFN3VP1Il7S+NqNCeeq2YLIC2zq2o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0Mm8wSjU2clpnc2dMYk9y YWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNkVV9VaVh0TDQybzBKNTZyWmdzZ0xiT3JhZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi8zZFVfVWlYdEw0 Mm8wSjU2clpnc2dMYk9yYWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARaH79QJhSkAToXiTuZYVpyadTD8kkDzlu7Tsconl8Ya8fD/2CTuBrWWL6cAh HPEWKFDPp94sG+xPv2DMY0OTjLehcVY4wj/dV7l0BXHloq7n6VK807hE6d9C16UQ NuimXF5vWoR1WrUvLl1Wla1zqLlYrr1qrx6e2R27Uqp7exy5uezPP8DtAanoRp+A Lj4x1x5FBneQlWHm3YtpOuiqKY8zrikkOx/WE7inq67t5YPKuARgSmVsavkeGjXL R4VkvcdSkxVYOSFZcFCF9f9T6SQHcEU+2HsEnC3hh5jRzQaFnt0fiUoh9hUjvSf3 IF2SSCDVqRn51msLdamhOFJ+lQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:32 2026 by rpki-client