$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft File: 4C3EOvit-NHbLnTkpsKO-WFVvxU.mft (raw, json) Hash identifier: JC1Gwvs8dF0VXG3kreCpCYjM6IKKqec+KxHcDFGZUfs= Subject key identifier: E3:1B:D8:A2:B2:44:EE:8F:B8:4F:41:CB:CE:C2:83:F6:14:71:4C:75 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 354D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft Manifest number: 3537 Signing time: Thu 26 Mar 2026 08:13:00 +0000 Manifest this update: Thu 26 Mar 2026 08:13:00 +0000 Manifest next update: Thu 02 Apr 2026 08:13:00 +0000 Files and hashes: 1: 4C3EOvit-NHbLnTkpsKO-WFVvxU.crl (hash: 4aIRZnRWXwvKPkywMKjahNFBsJsrvMFiEpTcCvc52dE=) 2: 7E50DB58DE1E11EF96BAF829C4F9AE02.roa (hash: c/FPPyduLUiS4coeluLn4U29NK61HiEUQHYUfa889+g=) 3: 1733DE66945D11F09E173B0CC4F9AE02.roa (hash: OZkX3g/64RL/qajmb4n7ihvruSABNBQqoBzJV+o1YLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 05:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13645 (0x354d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Mar 26 08:13:00 2026 GMT Not After : Apr 2 08:13:00 2026 GMT Subject: CN=69c4ea8c-7b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:67:37:4b:89:7c:41:a8:7f:3c:bc:1e:42: 12:c6:3d:a0:85:ba:de:5f:b3:5a:f4:87:d1:4a:ca: dc:93:ee:f5:8e:de:a7:df:d6:81:48:58:02:8a:75: 7f:94:68:93:ea:1f:c3:48:97:42:a9:de:08:fe:48: 6c:2b:3b:e9:3d:76:b0:5b:5f:b2:e0:fb:e0:f2:c4: 81:e9:3f:e9:f4:1f:98:28:76:c3:2e:56:a4:40:bb: 21:56:a2:b9:d1:3d:f6:98:12:16:3a:43:13:95:3e: 3e:7e:59:38:59:be:b1:7a:75:57:2e:67:13:4d:c8: 3e:bd:94:14:ef:3b:fd:d3:91:b6:22:e7:c3:d5:95: 1c:85:e7:03:45:e6:ed:76:bb:bf:77:a3:39:19:7c: d9:15:41:4b:48:ad:17:74:69:ca:15:48:a6:46:a1: 9d:db:89:2d:a3:3b:c3:eb:f1:23:c9:b4:4c:f2:98: 54:2a:ea:dd:1a:0e:6b:45:18:8b:ba:7f:bb:09:62: 50:58:96:52:55:bf:52:9a:62:4e:f4:b4:10:60:7d: c5:3f:03:72:2d:e1:f8:d8:5a:3c:12:ab:56:46:b0: 4d:8d:1a:d7:37:36:68:26:6a:a7:1e:b6:44:80:6e: 34:d9:d4:82:a9:7f:44:cc:7c:d5:e0:0a:fc:d1:5e: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1B:D8:A2:B2:44:EE:8F:B8:4F:41:CB:CE:C2:83:F6:14:71:4C:75 X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:a9:eb:7d:00:7b:77:d6:b4:1f:22:74:37:27:ff:48:2d:c4: ba:5f:aa:9e:7e:9a:8d:27:80:8f:c8:f4:4b:b0:1c:95:c7:5e: 2b:3c:bf:98:73:3c:df:37:fa:17:a7:d8:eb:72:24:01:fe:f7: 09:d9:67:79:1e:3b:42:29:3d:04:4c:d7:27:ce:c1:1c:4b:13: f7:53:29:71:2a:50:f2:0d:e8:4e:72:d9:48:17:48:04:de:9e: 6c:51:3c:79:1b:16:cd:d6:17:db:95:ce:6e:34:83:e7:39:14: 38:5d:16:5b:a4:ae:e2:93:b9:f3:2a:be:c7:a5:11:57:3b:d5: 0c:5d:a5:c7:96:59:a3:d3:4e:db:07:bf:34:f9:f1:9d:d5:f2: b3:b8:1e:36:c3:33:e9:c6:60:dc:6e:c1:28:15:67:e4:a6:72: 6b:30:2f:af:50:4b:8a:f2:8d:5b:62:df:2b:c6:5a:ca:5b:3a: 96:27:6e:1a:b9:f8:34:a6:67:de:68:1c:10:a6:8b:0a:a1:c8: 4b:55:a9:4d:16:2a:91:f3:a3:df:4e:ec:89:d0:7a:62:99:00: 11:61:26:cd:a0:81:0f:09:20:57:4d:51:a5:f9:53:61:52:74: 4f:44:a6:d5:3a:58:44:96:b3:01:b7:ab:4d:4e:e1:e5:8c:6a: 16:98:96:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjYwMzI2MDgxMzAwWhcNMjYwNDAyMDgxMzAwWjAYMRYwFAYD VQQDEw02OWM0ZWE4Yy03YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygRnN0uJfEGofzy8HkISxj2ghbreX7Na9IfRSsrck+71jt6n39aBSFgCinV/ lGiT6h/DSJdCqd4I/khsKzvpPXawW1+y4Pvg8sSB6T/p9B+YKHbDLlakQLshVqK5 0T32mBIWOkMTlT4+flk4Wb6xenVXLmcTTcg+vZQU7zv905G2IufD1ZUchecDRebt dru/d6M5GXzZFUFLSK0XdGnKFUimRqGd24ktozvD6/EjybRM8phUKurdGg5rRRiL un+7CWJQWJZSVb9SmmJO9LQQYH3FPwNyLeH42Fo8EqtWRrBNjRrXNzZoJmqnHrZE gG402dSCqX9EzHzV4Ar80V68EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMb2KKy RO6PuE9By87Cg/YUcUx1MB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDhDQi8zMjhFRDE1NDFEOEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1O SGJMblRrcHNLTy1XRlZ2eFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1KnrfQB7d9a0HyJ0Nyf/SC3Eul+qnn6ajSeAj8j0S7AclcdeKzy/mHM83zf6 F6fY63IkAf73CdlneR47Qik9BEzXJ87BHEsT91MpcSpQ8g3oTnLZSBdIBN6ebFE8 eRsWzdYX25XObjSD5zkUOF0WW6Su4pO58yq+x6URVzvVDF2lx5ZZo9NO2we/NPnx ndXys7geNsMz6cZg3G7BKBVn5KZyazAvr1BLivKNW2LfK8Zayls6liduGrn4NKZn 3mgcEKaLCqHIS1WpTRYqkfOj307sidB6YpkAEWEmzaCBDwkgV01RpflTYVJ0T0Sm 1TpYRJazAberTU7h5YxqFpiWAQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:29:19 2026 by rpki-client