$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: iVLKpIa27GDodYIgH3RTTt35gYsYhKjMhZnwJFGZntg= Subject key identifier: 94:DF:C2:A5:2D:B4:D5:02:F0:71:45:DB:E7:2E:D1:3B:B9:E3:D8:3A Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0525 Signing time: Tue 24 Mar 2026 23:14:33 +0000 Manifest this update: Tue 24 Mar 2026 23:14:33 +0000 Manifest next update: Tue 31 Mar 2026 23:14:33 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: fIRS0a5oqgZkEwD7i9+aDY+iSlwn7HqOq0fusOiEits=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Mar 24 23:14:33 2026 GMT Not After : Mar 31 23:14:33 2026 GMT Subject: CN=69c31ad9-9195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:b1:8d:a1:0b:2e:28:fd:08:44:01:a8:c7: 74:fb:2d:c1:bc:54:30:e7:27:1e:78:ad:66:f2:fb: 6d:30:ca:d6:61:ac:ed:b1:4d:d9:58:d5:6c:bf:e9: 5c:d4:3e:4f:10:72:0f:86:5b:1f:b3:fe:65:0c:a4: 45:5e:53:14:d4:41:bd:4b:64:18:67:ae:86:b1:a0: de:5b:19:ee:e3:52:e6:20:c1:d3:84:e2:8e:3e:1e: c4:50:f3:08:95:22:23:04:6e:bb:ec:9e:c4:57:62: ac:f4:fd:10:a7:eb:85:f8:9f:96:26:90:b4:16:4e: 69:b4:1a:4d:25:25:d4:d8:a6:df:25:5e:e9:03:5c: 59:d7:13:a6:7e:1c:55:9a:76:ad:d7:b0:04:75:69: 16:d6:22:b7:39:3d:08:b5:72:b0:63:fb:55:e2:7d: f1:6d:84:50:15:05:2b:79:2a:e0:da:5f:f7:76:a2: ee:3e:bf:67:c9:a3:d8:61:c1:86:4e:86:fa:2c:81: d7:15:bb:80:cd:5c:52:98:3c:b8:f6:12:b9:ef:76: b9:14:68:f2:d6:05:e1:44:58:a9:16:71:18:d6:96: 6e:a9:32:ba:f7:52:a0:06:e7:24:67:66:f6:82:e4: ab:55:25:26:2a:38:3f:9b:73:80:d1:b5:c5:c7:96: fb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DF:C2:A5:2D:B4:D5:02:F0:71:45:DB:E7:2E:D1:3B:B9:E3:D8:3A X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5e:b5:a8:e2:67:1f:68:3f:6e:60:7b:de:ba:c1:11:b4:b0: f1:93:d2:97:ae:14:98:24:dd:f7:c7:e5:c7:09:fc:0b:0c:68: 66:f4:4d:20:62:8f:fe:dd:d2:9d:7b:35:fb:42:40:06:87:29: e7:9f:f6:a9:8a:35:f7:4f:4b:9f:fb:a2:3a:fc:76:35:c1:ed: 50:1a:82:43:ec:41:c6:81:7f:e6:e2:2b:15:e1:9e:d4:02:d8: c6:2f:f0:6d:bf:95:f0:d3:9c:43:82:4b:b5:c3:16:e4:46:b4: 22:3d:b6:99:60:11:60:ee:f4:93:0b:2c:24:5d:78:25:a0:d8: 5c:f5:d2:9a:94:28:d2:d2:e9:48:b8:a0:8e:4c:35:e5:a2:fb: e3:dd:a2:11:7e:a1:40:db:a3:52:32:b9:62:f5:86:5b:24:43: d7:59:75:f3:5d:cb:ba:3b:6a:a2:97:b4:ad:c4:9c:9e:02:51: dc:79:fe:30:52:4b:e8:f9:42:ad:d9:98:6f:42:3e:53:c2:68: cb:63:3b:ff:a5:5f:a8:dc:f6:56:83:bf:b4:bd:31:28:59:3b: bb:1a:22:a5:15:48:72:01:32:cc:d0:03:d9:94:a3:31:bb:1b: 89:0a:70:15:11:b5:a2:c4:fe:8a:56:0e:b6:98:92:b4:e2:64: 14:23:40:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjYwMzI0MjMxNDMzWhcNMjYwMzMxMjMxNDMzWjAYMRYwFAYD VQQDEw02OWMzMWFkOS05MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Y6xjaELLij9CEQBqMd0+y3BvFQw5yceeK1m8vttMMrWYaztsU3ZWNVsv+lc 1D5PEHIPhlsfs/5lDKRFXlMU1EG9S2QYZ66GsaDeWxnu41LmIMHThOKOPh7EUPMI lSIjBG677J7EV2Ks9P0Qp+uF+J+WJpC0Fk5ptBpNJSXU2KbfJV7pA1xZ1xOmfhxV mnat17AEdWkW1iK3OT0ItXKwY/tV4n3xbYRQFQUreSrg2l/3dqLuPr9nyaPYYcGG Tob6LIHXFbuAzVxSmDy49hK573a5FGjy1gXhRFipFnEY1pZuqTK691KgBuckZ2b2 guSrVSUmKjg/m3OA0bXFx5b7LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTfwqUt tNUC8HFF2+cu0Tu549g6MB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZl61qOJnH2g/bmB73rrBEbSw8ZPSl64UmCTd98flxwn8CwxoZvRNIGKP/t3S nXs1+0JABocp55/2qYo1909Ln/uiOvx2NcHtUBqCQ+xBxoF/5uIrFeGe1ALYxi/w bb+V8NOcQ4JLtcMW5Ea0Ij22mWARYO70kwssJF14JaDYXPXSmpQo0tLpSLigjkw1 5aL7492iEX6hQNujUjK5YvWGWyRD11l1813Lujtqope0rcScngJR3Hn+MFJL6PlC rdmYb0I+U8Joy2M7/6VfqNz2VoO/tL0xKFk7uxoipRVIcgEyzNAD2ZSjMbsbiQpw FRG1osT+ilYOtpiStOJkFCNA9Q== -----END CERTIFICATE-----Generated at Thu Mar 26 04:36:33 2026 by rpki-client