$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft File: 3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json) Hash identifier: X9ZjqkCjWB6CtKjIpAKXtao1yiZziQghWHYND8P5afs= Subject key identifier: BA:65:BB:AF:D3:19:F5:51:2E:95:3A:8A:24:54:AE:46:E4:FF:F5:D6 Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 Certificate issuer: /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft Manifest number: 39 Signing time: Mon 11 May 2026 08:43:59 +0000 Manifest this update: Mon 11 May 2026 08:43:59 +0000 Manifest next update: Mon 18 May 2026 08:43:59 +0000 Files and hashes: 1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: wkjX5pybXGklMPO0cCmGPh3hy+S7Ld6WJJdK7lnYYhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Validity Not Before: May 11 08:43:59 2026 GMT Not After : May 18 08:43:59 2026 GMT Subject: CN=6a0196cf-0340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:2e:9e:a9:27:6a:5a:df:ce:79:25:79:6c: 7b:8d:5f:a5:1d:d5:35:2e:b7:63:1e:f1:14:22:3e: d8:76:30:c5:28:60:d2:77:61:b2:47:06:f5:ce:01: 35:a5:07:ee:b0:4f:85:a3:e8:d1:71:61:26:fa:fa: c6:d3:4f:b2:aa:a1:26:15:99:e8:a9:35:c2:d8:47: a2:9f:82:ce:fa:6f:20:8f:7e:ad:52:26:5d:13:6a: 0a:1b:97:35:f8:b0:45:8c:24:9f:c8:54:3a:1f:ee: 34:28:9c:bb:ec:d0:39:11:69:6f:31:36:f2:4e:3c: 74:34:d5:98:26:da:9f:64:3b:40:67:16:d7:ac:8c: 78:e5:ff:4a:68:5f:3d:46:09:1a:35:a4:cf:77:88: ae:9b:38:10:a2:2f:f4:7c:90:5d:e6:10:aa:1a:07: f7:c8:18:45:80:a5:a9:06:57:53:8f:84:b7:34:7e: e7:9e:5f:d1:f8:94:45:d8:86:3f:ca:14:33:4a:7d: 2f:65:4c:db:a8:7d:f7:f2:89:77:07:7e:4f:2d:07: 7e:44:3a:4f:5c:46:cd:ac:29:14:99:11:cd:4f:33: 8c:0d:07:6e:e1:14:dd:0f:06:45:d3:b8:2d:dd:cf: 51:51:a6:96:3f:31:3d:f6:fc:48:59:15:f4:52:73: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:65:BB:AF:D3:19:F5:51:2E:95:3A:8A:24:54:AE:46:E4:FF:F5:D6 X509v3 Authority Key Identifier: keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d7:92:d8:0e:64:85:3a:81:0f:7d:35:e1:22:ae:b4:cb:54: c3:f7:96:37:4e:00:cb:9b:fa:50:c8:71:50:05:a8:e6:ed:94: b1:8d:b6:48:31:96:07:1a:4a:d6:65:81:72:39:91:84:db:25: a1:18:a5:48:f8:8c:62:a5:95:8a:7d:30:45:4c:4f:6f:e9:94: 83:2a:69:d2:1a:e6:81:21:e5:da:f3:5b:a0:17:92:98:e6:a0: bf:af:ae:07:b6:6f:bb:00:84:6d:a1:31:a3:16:bc:aa:54:42: a6:58:84:3e:9d:c5:ad:9e:9c:72:f8:22:57:ef:0b:8f:fd:48: f1:ca:c5:b8:e7:55:33:17:f3:ca:81:03:43:30:b7:85:e9:01: da:30:c1:35:8f:ca:1c:fa:9e:c2:bf:c6:76:2a:7b:44:93:0f: e0:b0:88:c6:7d:4c:78:da:1e:3e:f5:30:28:9d:44:a0:98:e4: 8c:5f:35:9d:6c:ac:46:2c:b9:b9:7e:fa:8b:f7:b3:ff:e4:70: b3:e8:5a:8a:48:97:43:fe:2a:4e:f3:ac:84:bc:14:48:62:dd: 17:d0:48:86:0f:d0:5e:41:cb:aa:89:a2:cd:da:2b:03:e0:f0: c2:47:a2:cb:cb:78:f7:43:ae:2a:23:96:d2:ee:ab:6e:af:19: 9c:3a:83:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RThBOTExMC8GA1UEBRMoREU5NkE3MzQyMkM4RDkwNjYwODU4OUI5Q0YxNEY4NDk0 NzA2QThDMzAeFw0yNjA1MTEwODQzNTlaFw0yNjA1MTgwODQzNTlaMBgxFjAUBgNV BAMTDTZhMDE5NmNmLTAzNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZKy6eqSdqWt/OeSV5bHuNX6Ud1TUut2Me8RQiPth2MMUoYNJ3YbJHBvXOATWl B+6wT4Wj6NFxYSb6+sbTT7KqoSYVmeipNcLYR6Kfgs76byCPfq1SJl0TagoblzX4 sEWMJJ/IVDof7jQonLvs0DkRaW8xNvJOPHQ01Zgm2p9kO0BnFtesjHjl/0poXz1G CRo1pM93iK6bOBCiL/R8kF3mEKoaB/fIGEWApakGV1OPhLc0fueeX9H4lEXYhj/K FDNKfS9lTNuofffyiXcHfk8tB35EOk9cRs2sKRSZEc1PM4wNB27hFN0PBkXTuC3d z1FRppY/MT32/EhZFfRSc5vHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUumW7r9MZ 9VEulTqKJFSuRuT/9dYwHwYDVR0jBBgwFoAU3panNCLI2QZghYm5zxT4SUcGqMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0I1N0FGQzJFRkJG NzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFaZ2hZbTV6eFQ0U1VjR3FN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3Bhbk5DTEkyUVpnaFltNXp4VDRTVWNHcU1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF OEE5L0I1N0FGQzJFRkJGNzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFa Z2hZbTV6eFQ0U1VjR3FNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCK15LYDmSFOoEPfTXhIq60y1TD95Y3TgDLm/pQyHFQBajm7ZSxjbZIMZYHGkrW ZYFyOZGE2yWhGKVI+IxipZWKfTBFTE9v6ZSDKmnSGuaBIeXa81ugF5KY5qC/r64H tm+7AIRtoTGjFryqVEKmWIQ+ncWtnpxy+CJX7wuP/UjxysW451UzF/PKgQNDMLeF 6QHaMME1j8oc+p7Cv8Z2KntEkw/gsIjGfUx42h4+9TAonUSgmOSMXzWdbKxGLLm5 fvqL97P/5HCz6FqKSJdD/ipO86yEvBRIYt0X0EiGD9BeQcuqiaLN2isD4PDCR6LL y3j3Q64qI5bS7qturxmcOoMp -----END CERTIFICATE-----Generated at Wed May 13 06:35:22 2026 by rpki-client