$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft File: 3XyND0ePm-ar9znAT1tb5NyfYfg.mft (raw, json) Hash identifier: Yt1FIVTdvJ34DsKTyqVbMzgtJtRYzcWgrl3StpojJ70= Subject key identifier: 41:DC:A6:73:72:D7:DE:70:37:23:C9:D5:15:2D:28:A8:2D:23:50:88 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft Manifest number: 011B Signing time: Wed 25 Mar 2026 04:59:42 +0000 Manifest this update: Wed 25 Mar 2026 04:59:41 +0000 Manifest next update: Wed 01 Apr 2026 04:59:41 +0000 Files and hashes: 1: 3XyND0ePm-ar9znAT1tb5NyfYfg.crl (hash: pCerX8ST+gq1bffkzs4TwlONC2nmGvIN95ZIPR45nEk=) 2: EA810E6278FA11EF9043060AC4F9AE02.roa (hash: cb0xCHL1dV5N7XyIruiC/PJxxp8M1xlcJSMtvdRnQog=) 3: EAF1E48478FA11EF9043060AC4F9AE02.roa (hash: 3r7oWvZZSCAzRuaEEZfRdRU+m7LuuIxoldkPQaUgKhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Mar 25 04:59:41 2026 GMT Not After : Apr 1 04:59:41 2026 GMT Subject: CN=69c36bbe-23bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:ae:bd:4c:97:3a:87:d7:0d:7a:d5:13:cc: e1:8f:66:7f:73:37:85:db:15:9d:cd:91:67:01:48: 19:d3:46:13:f4:60:c6:fd:3f:f8:93:e8:08:91:b7: 47:81:e0:83:7f:bc:e9:f7:0b:2b:db:4b:e4:57:b2: 6d:60:8d:d3:96:6b:57:c9:50:6a:c4:14:e5:d7:50: 5d:b5:18:0f:e2:c2:69:7c:f8:d3:a4:94:36:8a:68: ca:c0:24:74:b2:20:63:28:e9:06:e0:6e:20:4f:f2: 23:6f:b5:16:09:a9:7a:6b:19:52:ef:aa:47:77:b1: 77:59:9c:68:8c:c6:d0:97:d9:15:a2:8e:40:9c:ee: ce:f1:9a:8a:17:12:1b:f6:0b:36:87:2e:8c:01:b7: 3e:3f:e2:de:7a:be:e2:95:0f:f8:7e:27:9f:3f:0e: 60:2c:7d:fc:b9:06:1c:1f:9d:76:a8:57:e5:ed:18: a8:c4:7c:0f:a8:26:12:b0:87:57:07:ab:3e:02:f1: 37:83:31:df:1b:2f:d1:d6:de:55:a8:e7:c6:86:b8: 28:e8:6a:56:42:ad:1e:f5:61:f8:5b:ec:d4:fe:2f: 4c:a8:47:87:d5:b2:f9:1e:ac:26:75:21:e4:cd:48: bb:2f:25:53:cb:f0:5d:78:75:3a:4e:58:cd:7f:b9: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DC:A6:73:72:D7:DE:70:37:23:C9:D5:15:2D:28:A8:2D:23:50:88 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:61:15:af:56:fb:0a:57:b9:94:31:8d:b5:f8:c3:b6:c6:46: a7:4d:e0:4c:17:50:c5:8b:c0:02:36:bf:4a:70:e1:c0:d4:73: 32:6e:06:73:fc:03:cc:e5:7f:da:87:01:1b:06:de:f5:4d:ed: c3:01:0f:bc:d0:c6:ae:83:2a:51:b1:83:ef:30:5e:48:92:e2: 18:54:3f:67:cf:50:4d:48:f5:94:6b:59:81:0b:01:d8:cb:37: 39:48:2d:c3:12:89:3f:4a:da:27:9d:49:35:1a:64:c7:50:78: 6c:56:72:b3:7e:9c:bb:da:d5:8e:9f:18:a7:2e:f7:02:2d:8a: 47:32:d5:75:64:5e:c9:53:f2:77:3b:7a:a3:c2:40:63:ee:d6: 5c:60:1f:10:3e:53:88:48:e0:df:8a:85:2c:a0:d8:50:14:64: 31:09:f7:90:12:4a:4f:5a:b7:1d:cb:01:4e:48:7a:a9:65:ea: 80:86:33:0a:de:46:0e:87:65:bd:79:3e:fd:7e:f3:84:d3:0d: 9d:4b:33:1b:f4:0e:db:f9:62:03:36:83:13:66:99:2e:ae:65: 2c:19:08:5f:ba:57:c8:40:31:30:67:99:38:93:de:c0:8b:05: 3c:de:da:f0:19:46:c4:71:95:8f:12:e5:83:d0:d8:0c:a8:9d: 40:dd:44:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKEREN0M4RDBGNDc4RjlCRTZBQkY3MzlDMDRGNUI1QkU0 REM5RjYxRjgwHhcNMjYwMzI1MDQ1OTQxWhcNMjYwNDAxMDQ1OTQxWjAYMRYwFAYD VQQDEw02OWMzNmJiZS0yM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FKuvUyXOofXDXrVE8zhj2Z/czeF2xWdzZFnAUgZ00YT9GDG/T/4k+gIkbdH geCDf7zp9wsr20vkV7JtYI3TlmtXyVBqxBTl11BdtRgP4sJpfPjTpJQ2imjKwCR0 siBjKOkG4G4gT/Ijb7UWCal6axlS76pHd7F3WZxojMbQl9kVoo5AnO7O8ZqKFxIb 9gs2hy6MAbc+P+Leer7ilQ/4fiefPw5gLH38uQYcH512qFfl7RioxHwPqCYSsIdX B6s+AvE3gzHfGy/R1t5VqOfGhrgo6GpWQq0e9WH4W+zU/i9MqEeH1bL5HqwmdSHk zUi7LyVTy/BdeHU6TljNf7mbrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHcpnNy 195wNyPJ1RUtKKgtI1CIMB8GA1UdIwQYMBaAFN18jQ9Hj5vmq/c5wE9bW+Tcn2H4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS80QzA5ODYyRTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0tYXI5em5BVDF0YjVOeWZZ ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55ZllmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi8zWHlORDBlUG0t YXI5em5BVDF0YjVOeWZZZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGmEVr1b7Cle5lDGNtfjDtsZGp03gTBdQxYvAAja/SnDhwNRzMm4Gc/wDzOV/ 2ocBGwbe9U3twwEPvNDGroMqUbGD7zBeSJLiGFQ/Z89QTUj1lGtZgQsB2Ms3OUgt wxKJP0raJ51JNRpkx1B4bFZys36cu9rVjp8Ypy73Ai2KRzLVdWReyVPydzt6o8JA Y+7WXGAfED5TiEjg34qFLKDYUBRkMQn3kBJKT1q3HcsBTkh6qWXqgIYzCt5GDodl vXk+/X7zhNMNnUszG/QO2/liAzaDE2aZLq5lLBkIX7pXyEAxMGeZOJPewIsFPN7a 8BlGxHGVjxLlg9DYDKidQN1Ekw== -----END CERTIFICATE-----Generated at Thu Mar 26 22:09:16 2026 by rpki-client