$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft File: q34sraVZrlbMJaH2mPiFCTmIifk.mft (raw, json) Hash identifier: NvEOKKzmMSCBezAP/LAYHaA6PQHt0N8Ee3suI/o5bks= Subject key identifier: F6:1E:94:46:27:FC:2E:79:C6:D1:21:44:C3:DD:4B:8A:4B:4D:0F:D9 Authority key identifier: AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9 Certificate issuer: /CN=A91C3DEA/serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft Manifest number: 22 Signing time: Wed 25 Mar 2026 08:03:16 +0000 Manifest this update: Wed 25 Mar 2026 08:03:15 +0000 Manifest next update: Wed 01 Apr 2026 08:03:15 +0000 Files and hashes: 1: q34sraVZrlbMJaH2mPiFCTmIifk.crl (hash: vrWxOMuqk4s91XW3HcCbz3wQMh7C2JJjsRNWl1p7oGU=) 2: 18FB6A08FC9E11F09F0AC8105E6F56BC.roa (hash: +t1U6IIjEcIREP8ILzimtngggq+V6zIVth7nVFeYBis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3DEA, serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9 Validity Not Before: Mar 25 08:03:15 2026 GMT Not After : Apr 1 08:03:15 2026 GMT Subject: CN=69c396c4-3973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:93:82:a2:0b:bc:1d:83:c1:d3:01:e2:28: 89:33:0b:95:48:66:a7:ae:52:23:6c:40:e0:3c:b1: dc:b8:b9:33:49:86:14:63:1e:72:ef:58:5b:00:6f: c1:98:1c:04:40:fe:15:5f:8d:36:19:0d:7b:55:d8: 06:1f:0d:68:ef:94:b9:4a:e8:60:13:30:68:6b:fc: d1:b1:96:12:c3:0d:a7:bb:69:42:ae:14:ae:e5:b2: 79:fd:66:bf:2d:97:c8:10:8c:fc:43:a3:9a:90:c2: cb:b5:0e:43:ec:df:9c:cb:d3:21:af:d1:c4:bd:c6: 6d:f3:f2:7e:2f:f7:e7:f0:f1:fc:2a:d4:e9:5e:59: 86:74:26:99:ff:d4:46:99:7b:90:d7:0d:1c:0a:b1: ce:d5:9a:5e:5d:b8:1a:32:80:84:e2:1b:94:5c:5f: e5:81:16:48:28:ed:ab:27:f0:35:da:bc:82:6e:0c: e8:e6:d5:e6:b7:63:c3:01:60:a5:0d:1c:a8:64:4d: cf:39:c2:48:74:2b:93:21:d3:44:9d:e9:01:c5:d9: da:f4:f6:55:f5:c8:78:4d:49:fb:85:7e:12:0c:da: 92:54:4c:4e:0c:75:a3:f6:f0:31:47:f1:7f:56:42: c5:75:b0:55:f8:f2:1b:d7:97:1f:06:fa:6f:34:fc: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1E:94:46:27:FC:2E:79:C6:D1:21:44:C3:DD:4B:8A:4B:4D:0F:D9 X509v3 Authority Key Identifier: keyid:AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:22:57:25:8f:b9:26:5b:c5:c9:1e:8c:ef:6c:10:69:8e:85: 9c:5b:58:ac:04:5f:a3:75:ca:f4:45:ea:ef:a2:87:da:f7:8f: cb:e5:03:5d:ab:12:7a:d2:fd:ac:64:65:4d:05:3a:ab:dd:cc: 24:92:85:44:78:f3:09:d4:3d:83:05:89:a6:86:29:bf:2d:7b: 6c:08:9d:71:b4:27:44:39:a7:72:b0:e2:57:ad:9e:39:9b:65: 53:62:65:01:00:c4:da:d2:c9:db:67:54:1f:77:f6:e6:d9:74: b6:81:0f:5e:ea:e8:5a:69:3b:c7:b6:c3:7c:67:fa:5d:0c:16: 40:13:7c:41:2e:32:39:2c:81:2a:b3:97:65:53:99:03:9f:2a: 9e:5e:df:2a:10:ee:d8:9d:44:97:4d:ef:c1:52:78:b0:6f:87: a2:17:d6:f3:3a:32:64:f3:7e:0d:35:fb:0e:14:51:56:61:f6: 6c:51:b9:3b:74:a3:2f:ac:6a:38:52:b0:b7:db:8b:b4:dc:22: 9b:ff:90:4a:b5:af:9a:01:5d:d1:69:68:51:c8:76:02:78:6b: 38:66:6f:e9:f3:67:e9:65:42:b3:aa:cf:2d:05:e8:14:2d:54: 84:07:ce:72:a5:dd:17:bf:c6:a5:36:fc:21:60:f8:f6:f2:48: f3:0f:f2:50 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD M0RFQTExMC8GA1UEBRMoQUI3RTJDQURBNTU5QUU1NkNDMjVBMUY2OThGODg1MDkz OTg4ODlGOTAeFw0yNjAzMjUwODAzMTVaFw0yNjA0MDEwODAzMTVaMBgxFjAUBgNV BAMTDTY5YzM5NmM0LTM5NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNZJOCogu8HYPB0wHiKIkzC5VIZqeuUiNsQOA8sdy4uTNJhhRjHnLvWFsAb8GY HARA/hVfjTYZDXtV2AYfDWjvlLlK6GATMGhr/NGxlhLDDae7aUKuFK7lsnn9Zr8t l8gQjPxDo5qQwsu1DkPs35zL0yGv0cS9xm3z8n4v9+fw8fwq1OleWYZ0Jpn/1EaZ e5DXDRwKsc7Vml5duBoygITiG5RcX+WBFkgo7asn8DXavIJuDOjm1ea3Y8MBYKUN HKhkTc85wkh0K5Mh00Sd6QHF2dr09lX1yHhNSfuFfhIM2pJUTE4MdaP28DFH8X9W QsV1sFX48hvXlx8G+m80/BJbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9h6URif8 LnnG0SFEw91LiktND9kwHwYDVR0jBBgwFoAUq34sraVZrlbMJaH2mPiFCTmIifkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzREVBL0ExRkZBODEwRkM5 RDExRjA5M0U2QjE2OTVENkY1NkJDL3EzNHNyYVZacmxiTUphSDJtUGlGQ1RtSWlm ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcTM0c3JhVlpybGJNSmFIMm1QaUZDVG1JaWZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz REVBL0ExRkZBODEwRkM5RDExRjA5M0U2QjE2OTVENkY1NkJDL3EzNHNyYVZacmxi TUphSDJtUGlGQ1RtSWlmay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5Ilclj7kmW8XJHozvbBBpjoWcW1isBF+jdcr0Rervoofa94/L5QNdqxJ60v2s ZGVNBTqr3cwkkoVEePMJ1D2DBYmmhim/LXtsCJ1xtCdEOadysOJXrZ45m2VTYmUB AMTa0snbZ1Qfd/bm2XS2gQ9e6uhaaTvHtsN8Z/pdDBZAE3xBLjI5LIEqs5dlU5kD nyqeXt8qEO7YnUSXTe/BUniwb4eiF9bzOjJk834NNfsOFFFWYfZsUbk7dKMvrGo4 UrC324u03CKb/5BKta+aAV3RaWhRyHYCeGs4Zm/p82fpZUKzqs8tBegULVSEB85y pd0Xv8alNvwhYPj28kjzD/JQ -----END CERTIFICATE-----Generated at Fri Mar 27 02:28:49 2026 by rpki-client