$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft File: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft (raw, json) Hash identifier: rAEKoH459u/XpIl6TF8gQ2H7FVxEwGxGhhbC85L73+s= Subject key identifier: 21:FB:10:52:63:1F:9C:9B:4F:BD:9D:A1:12:A8:28:6A:22:B4:9A:8A Authority key identifier: DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A Certificate issuer: /CN=A91AE6B9/serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft Manifest number: 0CE6 Signing time: Thu 26 Mar 2026 18:08:13 +0000 Manifest this update: Thu 26 Mar 2026 18:08:12 +0000 Manifest next update: Thu 02 Apr 2026 18:08:12 +0000 Files and hashes: 1: 3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl (hash: +P9HBxnVk45Wsk2IYwU6lBULU3zt1hcmLe7Rd847EtQ=) 2: D91746DE044F11EA8C37D012C4F9AE02.roa (hash: 3yJDGrz0XRdPzy2//5nR0N/T7ckhtUUCQuGTGQX3Puk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE6B9, serialNumber=DEA2D0260C17095167E1E3BCD65989FE7647CB6A Validity Not Before: Mar 26 18:08:12 2026 GMT Not After : Apr 2 18:08:12 2026 GMT Subject: CN=69c5760c-0d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:77:f4:90:49:7f:12:c9:01:be:ff:32:66:b0: 11:b1:ac:5a:f5:78:43:44:3b:64:fc:a1:25:b0:0c: a2:90:86:fe:f0:3b:87:6d:41:d6:31:1e:1e:0e:b5: ad:ce:eb:45:ed:be:87:14:74:b7:cf:f0:ce:8d:49: 2e:c8:76:dc:33:93:d0:83:47:c9:06:0b:de:c0:71: 75:6d:0b:a0:64:0d:33:06:3f:27:04:bf:f4:b1:0d: f0:e1:ff:25:43:eb:57:8a:54:50:c8:55:7c:d4:c4: 99:3e:2a:e5:c6:f0:a8:a6:b6:0e:e6:a4:d0:8a:f4: 76:d4:6a:78:e1:c7:1b:ac:bb:7b:a6:dd:af:7d:16: e8:8f:38:18:5e:d6:f1:ca:72:aa:86:83:18:c4:f0: 7d:da:ae:b4:16:eb:8f:70:35:64:6d:b6:ce:44:ca: fc:66:5c:9b:87:aa:b8:fc:c7:80:50:af:f1:b3:7c: f4:af:1f:82:4b:76:69:be:1d:a0:4e:f4:ff:45:2c: 54:ec:71:c4:db:b8:a1:50:55:16:b7:56:0d:3d:9e: 57:02:c9:78:fa:06:5b:14:fa:6f:31:98:ca:5b:4d: 86:05:c9:ea:5f:2a:12:89:5b:42:20:21:d7:d9:a2: db:01:c8:f5:63:d8:16:09:62:a9:be:28:8d:87:35: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:10:52:63:1F:9C:9B:4F:BD:9D:A1:12:A8:28:6A:22:B4:9A:8A X509v3 Authority Key Identifier: keyid:DE:A2:D0:26:0C:17:09:51:67:E1:E3:BC:D6:59:89:FE:76:47:CB:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qLQJgwXCVFn4eO81lmJ_nZHy2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6B9/526E16A4044E11EA8442D40FC4F9AE02/3qLQJgwXCVFn4eO81lmJ_nZHy2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:50:ad:e4:d0:13:d1:03:a9:b7:ee:29:8f:cb:69:9e:df:ec: 8f:ad:9c:97:32:6b:16:46:8d:8e:10:e6:e4:a2:37:3f:f9:46: e3:b0:75:de:24:c2:7f:1e:cb:bd:71:3d:82:82:9e:9b:6b:d4: 56:8d:14:5d:3e:80:e0:cb:b6:43:3b:fc:96:08:c9:13:f2:64: e4:bb:ae:58:08:24:6c:ff:a7:43:66:26:c5:54:07:43:76:ce: 10:ea:0d:63:ef:a3:6c:09:85:60:7a:98:a0:23:a0:d0:9b:c7: f9:b6:c7:4c:00:dc:fe:4d:25:29:10:cd:07:45:ad:03:ee:80: 49:bb:d4:2d:7b:2f:a2:82:96:6b:e0:06:22:2d:26:5b:28:2d: 15:27:a9:68:4a:fc:20:73:51:eb:30:f9:a2:d0:b6:96:f8:33: dc:da:37:aa:d1:a9:fe:f6:92:7d:a4:ab:30:f6:6b:ab:e3:01: cd:17:09:5e:32:84:d7:72:11:15:53:60:75:87:df:e7:53:6d: 8f:82:a2:7b:67:0e:d5:d4:d5:88:6b:58:a7:1c:a5:cd:0a:ab: 54:58:f4:f2:61:f3:1c:15:67:9b:ca:e1:dc:a4:eb:45:6b:cd: c0:2d:70:87:4e:fa:bf:63:62:3d:e7:31:eb:98:97:a8:12:28: 94:e1:a0:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2QjkxMTAvBgNVBAUTKERFQTJEMDI2MEMxNzA5NTE2N0UxRTNCQ0Q2NTk4OUZF NzY0N0NCNkEwHhcNMjYwMzI2MTgwODEyWhcNMjYwNDAyMTgwODEyWjAYMRYwFAYD VQQDEw02OWM1NzYwYy0wZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3f0kEl/EskBvv8yZrARsaxa9XhDRDtk/KElsAyikIb+8DuHbUHWMR4eDrWt zutF7b6HFHS3z/DOjUkuyHbcM5PQg0fJBgvewHF1bQugZA0zBj8nBL/0sQ3w4f8l Q+tXilRQyFV81MSZPirlxvCoprYO5qTQivR21Gp44ccbrLt7pt2vfRbojzgYXtbx ynKqhoMYxPB92q60FuuPcDVkbbbORMr8Zlybh6q4/MeAUK/xs3z0rx+CS3Zpvh2g TvT/RSxU7HHE27ihUFUWt1YNPZ5XAsl4+gZbFPpvMZjKW02GBcnqXyoSiVtCICHX 2aLbAcj1Y9gWCWKpviiNhzXg5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH7EFJj H5ybT72doRKoKGoitJqKMB8GA1UdIwQYMBaAFN6i0CYMFwlRZ+HjvNZZif52R8tq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTZCOS81MjZFMTZBNDA0 NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENWRm40ZU84MWxtSl9uWkh5 Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxTFFKZ3dYQ1ZGbjRlTzgxbG1KX25aSHkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTZCOS81MjZFMTZBNDA0NEUxMUVBODQ0MkQ0MEZDNEY5QUUwMi8zcUxRSmd3WENW Rm40ZU84MWxtSl9uWkh5Mm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ1Ct5NAT0QOpt+4pj8tpnt/sj62clzJrFkaNjhDm5KI3P/lG47B13iTCfx7L vXE9goKem2vUVo0UXT6A4Mu2Qzv8lgjJE/Jk5LuuWAgkbP+nQ2YmxVQHQ3bOEOoN Y++jbAmFYHqYoCOg0JvH+bbHTADc/k0lKRDNB0WtA+6ASbvULXsvooKWa+AGIi0m WygtFSepaEr8IHNR6zD5otC2lvgz3No3qtGp/vaSfaSrMPZrq+MBzRcJXjKE13IR FVNgdYff51Ntj4Kie2cO1dTViGtYpxylzQqrVFj08mHzHBVnm8rh3KTrRWvNwC1w h076v2NiPecx65iXqBIolOGgRg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:38:02 2026 by rpki-client