$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft File: m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json) Hash identifier: txexFLdWwNJC0QiqTRHKKCrQKRuLrGzCTXLfUIbbMLg= Subject key identifier: 16:BC:E5:62:F5:E6:83:53:40:DB:F6:60:15:84:0B:0F:98:D9:88:20 Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 Certificate issuer: /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft Manifest number: 67 Signing time: Wed 25 Mar 2026 07:08:31 +0000 Manifest this update: Wed 25 Mar 2026 07:08:31 +0000 Manifest next update: Wed 01 Apr 2026 07:08:31 +0000 Files and hashes: 1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: afeFF5MQRgN4Z1ojLuKJ6E95MSyt3Xh4EsCGGxSxA+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1 Validity Not Before: Mar 25 07:08:31 2026 GMT Not After : Apr 1 07:08:31 2026 GMT Subject: CN=69c389ef-0d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:0c:69:ee:5f:f2:7a:f4:d6:0f:26:5f:bf: 30:b0:b0:1b:01:a0:c9:31:7d:69:be:a1:a5:9e:bb: df:b1:6b:01:36:36:43:d1:a0:b1:e9:70:8a:fa:ad: 42:30:43:75:5e:ae:2a:30:61:64:05:65:05:10:64: 1c:3e:aa:e1:68:9e:6b:2b:13:a6:6c:21:0f:dd:ca: 27:0a:dc:2a:ef:c4:a1:8b:4f:70:2c:ba:a4:b1:b0: 62:0a:c2:58:34:fc:5a:d1:ed:c0:c5:ea:b6:30:7f: 9c:ea:ea:e5:04:a6:e8:9e:25:8c:3e:b7:d5:d9:2f: 16:3c:41:1b:26:d7:78:a7:d9:97:c8:17:02:cc:7b: 64:d6:54:e6:0a:71:ad:f3:37:90:6c:f5:9d:b6:87: 47:b7:89:55:e0:7a:56:6a:b0:09:35:78:dd:7b:ff: b8:e2:b1:9b:c1:a7:b3:51:5a:89:4c:d5:63:04:53: 0c:77:8a:a3:c8:1c:f4:f8:1d:35:a2:8f:e0:e9:0c: f6:ef:c5:54:9c:e0:26:9b:71:f4:25:31:80:44:c7: 58:cf:16:e5:e9:a0:d6:4a:a0:d4:1f:67:a5:18:e6: cf:17:7d:5f:f4:2d:2e:3f:15:6b:9f:df:83:de:50: e7:22:e6:9a:58:1f:b9:e5:91:06:48:36:b5:fb:c3: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BC:E5:62:F5:E6:83:53:40:DB:F6:60:15:84:0B:0F:98:D9:88:20 X509v3 Authority Key Identifier: keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:25:12:f5:5a:a2:c0:d0:8e:4d:d3:59:aa:f5:7f:51:93:6d: 05:29:1b:03:1c:01:cd:d6:a3:7e:da:92:3a:28:ea:a0:0e:ec: 0b:de:cc:41:bc:de:d5:75:32:71:c5:ff:3b:6b:41:69:49:48: be:8c:15:51:94:ce:38:10:9a:3a:5d:a4:d0:f0:36:7f:58:d2: 75:13:ae:28:a6:46:02:a4:80:e7:ee:00:b9:bb:d8:03:5a:9f: 85:4d:da:1b:09:c7:bb:71:2d:a1:ec:f4:72:2a:01:84:5a:70: 8f:32:77:0c:af:4b:5a:8c:87:1e:57:0d:5a:36:6c:2a:52:41: 77:a5:0d:72:73:f4:80:1f:89:f1:7e:52:c0:87:11:56:07:ee: 06:54:1a:06:ec:23:33:5f:0b:18:cf:89:f7:92:27:6f:90:7b: 73:88:e6:b9:d5:86:64:54:ed:8c:f5:73:a5:f6:7c:70:a1:63: bc:5a:de:b7:19:35:35:e6:de:dd:5c:af:56:0b:16:93:5c:06: d3:70:55:12:54:80:41:16:6e:e0:ea:3c:5f:14:7c:b8:b4:f5: 82:4c:d8:0e:15:82:73:91:99:9c:fa:a8:1f:32:fd:5d:42:c5: 73:9f:c8:b5:1c:d5:28:6d:64:49:c0:a2:84:83:8d:2e:66:f7: f1:2e:4e:7f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoOUI3MTk3NkRGNzBBNTM0NzM1MDI0Mzc1MkIyMjA5MjFF MDBEMkZBMTAeFw0yNjAzMjUwNzA4MzFaFw0yNjA0MDEwNzA4MzFaMBgxFjAUBgNV BAMTDTY5YzM4OWVmLTBkMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ8wxp7l/yevTWDyZfvzCwsBsBoMkxfWm+oaWeu9+xawE2NkPRoLHpcIr6rUIw Q3VeriowYWQFZQUQZBw+quFonmsrE6ZsIQ/dyicK3CrvxKGLT3AsuqSxsGIKwlg0 /FrR7cDF6rYwf5zq6uUEpuieJYw+t9XZLxY8QRsm13in2ZfIFwLMe2TWVOYKca3z N5Bs9Z22h0e3iVXgelZqsAk1eN17/7jisZvBp7NRWolM1WMEUwx3iqPIHPT4HTWi j+DpDPbvxVSc4CabcfQlMYBEx1jPFuXpoNZKoNQfZ6UY5s8XfV/0LS4/FWuf34Pe UOci5ppYH7nlkQZINrX7wzKpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFrzlYvXm g1NA2/ZgFYQLD5jZiCAwHwYDVR0jBBgwFoAUm3GXbfcKU0c1AkN1KyIJIeANL6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0IwQjI4RkE2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBjMUFrTjFLeUlKSWVBTkw2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTNHWGJmY0tVMGMxQWtOMUt5SUpJZUFOTDZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0IwQjI4RkE2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL20zR1hiZmNLVTBj MUFrTjFLeUlKSWVBTkw2RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA9JRL1WqLA0I5N01mq9X9Rk20FKRsDHAHN1qN+2pI6KOqgDuwL3sxBvN7VdTJx xf87a0FpSUi+jBVRlM44EJo6XaTQ8DZ/WNJ1E64opkYCpIDn7gC5u9gDWp+FTdob Cce7cS2h7PRyKgGEWnCPMncMr0tajIceVw1aNmwqUkF3pQ1yc/SAH4nxflLAhxFW B+4GVBoG7CMzXwsYz4n3kidvkHtziOa51YZkVO2M9XOl9nxwoWO8Wt63GTU15t7d XK9WCxaTXAbTcFUSVIBBFm7g6jxfFHy4tPWCTNgOFYJzkZmc+qgfMv1dQsVzn8i1 HNUobWRJwKKEg40uZvfxLk5/ -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:53 2026 by rpki-client