$ rpki-client -vvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft File: 3eQo-rsWskLR46Gm8A_V48OKpY8.mft (raw, json) Hash identifier: 65psRNiR9zvl+hhs1sw/yxBp3wpDmThomVGop/dHwZY= Subject key identifier: FA:A6:DE:D8:6E:34:55:AE:FD:8C:4A:65:8B:12:2A:D1:00:75:68:FD Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F Certificate issuer: /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft Manifest number: 16 Signing time: Wed 25 Mar 2026 08:11:42 +0000 Manifest this update: Wed 25 Mar 2026 08:11:41 +0000 Manifest next update: Wed 01 Apr 2026 08:11:41 +0000 Files and hashes: 1: 3eQo-rsWskLR46Gm8A_V48OKpY8.crl (hash: ggT3QArnFXZUovtSJxglqWk45MuraWy+eAYCben2rrg=) 2: 50B86BE40BE411F1BD6D7437333D8C67.roa (hash: QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F Validity Not Before: Mar 25 08:11:41 2026 GMT Not After : Apr 1 08:11:41 2026 GMT Subject: CN=69c398be-099a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:92:39:b6:3e:43:6b:31:91:9e:68:ed:88: 29:5e:de:b2:82:4f:77:fc:07:66:f6:f7:77:f9:6d: 6e:28:ee:fb:68:2d:3f:04:c5:7a:b0:de:ef:f8:bf: f0:e1:41:e7:f9:e8:40:2a:88:2d:fd:2f:59:cd:a3: 42:59:90:ab:80:80:f8:cf:7a:fa:71:f9:ec:01:36: 78:2e:f2:94:5c:1b:7e:64:62:03:bf:2e:cb:0f:7f: a2:38:6e:dc:f0:44:a2:12:90:9e:51:95:47:a7:a6: 48:2e:de:1f:f8:18:a5:5a:23:73:30:8b:f2:f9:c8: fb:70:1a:c4:c8:62:cf:7c:46:cc:0f:69:e6:3f:e6: 97:a5:8f:af:5f:52:06:61:6e:8a:3a:94:ec:d1:aa: 3e:a0:65:83:db:a3:3f:54:6f:24:26:13:3c:de:63: 2d:91:52:63:b3:df:2d:1e:7a:29:5f:3a:8e:18:45: 79:28:ef:e5:29:78:6f:fe:61:16:2c:60:51:2c:aa: 69:5d:54:b7:da:f0:15:35:cf:b8:11:e5:da:8a:2c: 8d:ec:e2:25:10:2a:11:8a:9e:cf:b5:7e:83:04:c1: b3:62:50:ca:48:34:60:7e:34:f8:e0:ca:b4:ee:70: 7f:d1:b7:92:05:03:40:74:fd:fd:2c:73:32:80:ba: 32:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A6:DE:D8:6E:34:55:AE:FD:8C:4A:65:8B:12:2A:D1:00:75:68:FD X509v3 Authority Key Identifier: keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5a:13:2a:0a:3a:c7:64:9a:3d:c9:49:dd:6c:b9:8c:f1:5d: a8:a0:44:27:2a:4c:d5:5c:b7:05:ef:4c:e1:a6:dd:69:6c:8f: 95:0d:72:aa:1d:ad:57:2d:85:0c:a2:81:3e:76:24:67:fd:b9: 22:b2:ab:3f:b4:a8:06:ee:8c:60:a5:46:2c:8d:34:80:48:65: 70:78:8e:c7:72:23:8c:5c:8a:b6:69:11:60:dc:bf:9f:8e:44: 94:e0:1d:f7:a8:5c:2a:9b:cf:0b:d4:ce:0c:c0:6c:53:05:89: bd:00:bb:26:02:07:70:06:ab:5c:2a:ed:f1:a7:a6:6c:25:86: 06:1a:bc:0e:57:7e:95:7e:ce:cf:42:e2:55:c2:4d:6f:81:0f: a1:e4:95:2a:34:e0:d0:52:00:c3:65:89:1d:bd:09:c6:79:79: b5:38:33:0c:01:74:9f:b3:bc:39:6f:31:7d:44:00:74:68:eb: 8a:3c:ba:42:be:54:b0:0d:8e:4e:2b:47:be:3a:25:31:c4:d3: 68:7b:3f:99:42:0d:5f:90:a7:c8:37:64:86:4a:51:fa:88:41: ea:ae:64:90:6f:6a:5b:77:54:28:c5:56:68:0a:52:f5:b6:61: 2a:72:51:ea:a4:00:91:84:4b:1e:ee:b0:8b:4a:37:ff:04:c4: c6:af:88:05 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjgxQTExMC8GA1UEBRMoRERFNDI4RkFCQjE2QjI0MkQxRTNBMUE2RjAwRkQ1RTND MzhBQTU4RjAeFw0yNjAzMjUwODExNDFaFw0yNjA0MDEwODExNDFaMBgxFjAUBgNV BAMTDTY5YzM5OGJlLTA5OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWo5I5tj5DazGRnmjtiCle3rKCT3f8B2b293f5bW4o7vtoLT8ExXqw3u/4v/Dh Qef56EAqiC39L1nNo0JZkKuAgPjPevpx+ewBNngu8pRcG35kYgO/LssPf6I4btzw RKISkJ5RlUenpkgu3h/4GKVaI3Mwi/L5yPtwGsTIYs98RswPaeY/5pelj69fUgZh boo6lOzRqj6gZYPboz9UbyQmEzzeYy2RUmOz3y0eeilfOo4YRXko7+UpeG/+YRYs YFEsqmldVLfa8BU1z7gR5dqKLI3s4iUQKhGKns+1foMEwbNiUMpINGB+NPjgyrTu cH/Rt5IFA0B0/f0sczKAujLvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+qbe2G40 Va79jEplixIq0QB1aP0wHwYDVR0jBBgwFoAU3eQo+rsWskLR46Gm8A/V48OKpY8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0NDMDMxOTQyMEJF MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tMUjQ2R204QV9WNDhPS3BZ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM2VRby1yc1dza0xSNDZHbThBX1Y0OE9LcFk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 ODFBL0NDMDMxOTQyMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tM UjQ2R204QV9WNDhPS3BZOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgWhMqCjrHZJo9yUndbLmM8V2ooEQnKkzVXLcF70zhpt1pbI+VDXKqHa1XLYUM ooE+diRn/bkisqs/tKgG7oxgpUYsjTSASGVweI7HciOMXIq2aRFg3L+fjkSU4B33 qFwqm88L1M4MwGxTBYm9ALsmAgdwBqtcKu3xp6ZsJYYGGrwOV36Vfs7PQuJVwk1v gQ+h5JUqNODQUgDDZYkdvQnGeXm1ODMMAXSfs7w5bzF9RAB0aOuKPLpCvlSwDY5O K0e+OiUxxNNoez+ZQg1fkKfIN2SGSlH6iEHqrmSQb2pbd1QoxVZoClL1tmEqclHq pACRhEse7rCLSjf/BMTGr4gF -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:14 2026 by rpki-client