$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft File: 3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json) Hash identifier: GUwphcNdqmULEYcsqqq0Xa6zUp85kYB0YHTNKuZ0LsI= Subject key identifier: 03:48:69:3D:99:8B:CB:8F:EA:12:EF:0A:3C:ED:75:EE:3B:D9:27:D5 Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 Certificate issuer: /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft Manifest number: 21 Signing time: Wed 25 Mar 2026 08:02:45 +0000 Manifest this update: Wed 25 Mar 2026 08:02:45 +0000 Manifest next update: Wed 01 Apr 2026 08:02:45 +0000 Files and hashes: 1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: 5OP3dVc4cs9wQZorXe6JbHQrrE5oK9cmjW+CDlPKtcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Validity Not Before: Mar 25 08:02:45 2026 GMT Not After : Apr 1 08:02:45 2026 GMT Subject: CN=69c396a5-4b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:2e:b5:eb:ee:cd:a5:d3:d9:58:7e:0d:1b: f7:f1:94:bf:ea:2f:6d:3f:5c:f3:ac:00:3d:91:e4: a9:97:64:e4:12:ac:42:59:d6:90:7f:31:01:13:dd: 0e:be:9c:f1:ac:dc:b9:07:f0:31:c4:7d:66:08:cc: e4:f0:41:9b:d1:cb:59:2c:96:66:0b:c4:ce:b7:b7: db:12:c3:93:75:80:06:b1:a3:ca:d1:38:0e:d6:f9: 2a:93:8c:e6:22:f1:23:98:30:d6:9f:c0:b4:b0:b8: de:c5:6d:b2:93:24:38:02:22:26:03:08:68:7f:03: fc:11:49:62:b3:96:b3:2e:05:62:b4:66:f2:d4:60: 66:f2:fb:8a:42:25:18:53:4f:6d:e7:85:c2:2c:dc: 0b:19:c8:69:8f:fc:19:82:62:0f:31:a4:29:ef:97: e3:00:38:99:11:88:47:3c:49:3c:c7:5a:04:06:8e: c9:a5:ff:7e:7d:7f:0b:be:47:d7:ee:e9:db:91:bf: e7:b3:77:4f:70:f4:8c:ba:ce:48:9e:f5:73:1d:44: a5:fc:37:2c:d0:0e:f9:55:14:48:81:d8:96:5a:43: b8:a2:8b:0c:7f:d2:21:62:9e:f9:f7:a3:4f:f6:93: 77:3f:a7:55:60:7f:1b:5c:11:1e:82:cf:5d:4f:ea: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:48:69:3D:99:8B:CB:8F:EA:12:EF:0A:3C:ED:75:EE:3B:D9:27:D5 X509v3 Authority Key Identifier: keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:c4:5f:b6:cf:0e:02:f0:fe:6e:b7:a2:59:a2:05:10:ff:af: c8:66:04:83:78:f7:9b:c0:5b:ad:78:93:77:ab:6d:ff:da:96: 07:77:a1:2c:7b:88:21:bc:5e:18:83:c2:c1:f2:3d:67:99:2c: c3:7f:a7:89:a0:e3:6f:82:41:a7:a0:ff:53:0a:be:8e:c6:b3: 62:e5:90:ce:99:e9:36:a7:3e:2d:bf:8a:ff:3c:d6:17:21:0d: 3f:32:76:00:71:d7:ca:d1:6b:fb:15:da:e3:01:30:19:10:36: 25:01:69:c2:4a:26:e4:ce:06:c7:d3:ae:ae:74:7a:9c:51:a9: 0f:8b:71:75:5d:62:7f:ff:65:73:e1:28:e0:6d:a1:19:97:48: 1e:d8:fe:f4:7d:be:2e:1a:7b:de:63:88:67:c9:33:c2:e0:c3: e3:a3:33:ba:24:36:5d:a1:5f:68:4d:42:a4:34:c7:03:db:e8: ba:c7:64:52:0a:78:a7:19:56:4f:1e:c6:34:ba:c2:35:52:19: f2:2e:c2:7b:77:df:0b:30:0c:f6:aa:1a:c6:82:e7:d6:72:35: 86:39:8c:35:05:cc:d1:78:2b:a1:e6:8c:9f:5d:4f:5d:ee:f1: f4:d8:ee:31:b6:2e:bc:74:ee:02:ab:4d:8a:55:4d:fb:fc:aa: 7b:48:29:59 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RThBOTExMC8GA1UEBRMoREU5NkE3MzQyMkM4RDkwNjYwODU4OUI5Q0YxNEY4NDk0 NzA2QThDMzAeFw0yNjAzMjUwODAyNDVaFw0yNjA0MDEwODAyNDVaMBgxFjAUBgNV BAMTDTY5YzM5NmE1LTRiNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCami616+7NpdPZWH4NG/fxlL/qL20/XPOsAD2R5KmXZOQSrEJZ1pB/MQET3Q6+ nPGs3LkH8DHEfWYIzOTwQZvRy1kslmYLxM63t9sSw5N1gAaxo8rROA7W+SqTjOYi 8SOYMNafwLSwuN7FbbKTJDgCIiYDCGh/A/wRSWKzlrMuBWK0ZvLUYGby+4pCJRhT T23nhcIs3AsZyGmP/BmCYg8xpCnvl+MAOJkRiEc8STzHWgQGjsml/359fwu+R9fu 6duRv+ezd09w9Iy6zkie9XMdRKX8NyzQDvlVFEiB2JZaQ7iiiwx/0iFinvn3o0/2 k3c/p1VgfxtcER6Cz11P6je3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA0hpPZmL y4/qEu8KPO117jvZJ9UwHwYDVR0jBBgwFoAU3panNCLI2QZghYm5zxT4SUcGqMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0I1N0FGQzJFRkJG NzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFaZ2hZbTV6eFQ0U1VjR3FN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3Bhbk5DTEkyUVpnaFltNXp4VDRTVWNHcU1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF OEE5L0I1N0FGQzJFRkJGNzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFa Z2hZbTV6eFQ0U1VjR3FNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDWxF+2zw4C8P5ut6JZogUQ/6/IZgSDePebwFuteJN3q23/2pYHd6Ese4ghvF4Y g8LB8j1nmSzDf6eJoONvgkGnoP9TCr6OxrNi5ZDOmek2pz4tv4r/PNYXIQ0/MnYA cdfK0Wv7FdrjATAZEDYlAWnCSibkzgbH066udHqcUakPi3F1XWJ//2Vz4SjgbaEZ l0ge2P70fb4uGnveY4hnyTPC4MPjozO6JDZdoV9oTUKkNMcD2+i6x2RSCninGVZP HsY0usI1UhnyLsJ7d98LMAz2qhrGgufWcjWGOYw1BczReCuh5oyfXU9d7vH02O4x ti68dO4Cq02KVU37/Kp7SClZ -----END CERTIFICATE-----Generated at Thu Mar 26 10:41:23 2026 by rpki-client