$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft File: 3iZtavC5PenIaScyCi6du8nPnMI.mft (raw, json) Hash identifier: 7f+UlhwqPRxs1u1K3iWHNrF/AaTi/9ile+sytGNPx/8= Subject key identifier: CC:2F:BC:2A:DD:6B:04:F3:4A:32:DF:DB:09:67:AB:3B:38:DF:A3:BA Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft Manifest number: 19 Signing time: Wed 25 Mar 2026 08:10:57 +0000 Manifest this update: Wed 25 Mar 2026 08:10:57 +0000 Manifest next update: Wed 01 Apr 2026 08:10:57 +0000 Files and hashes: 1: 3iZtavC5PenIaScyCi6du8nPnMI.crl (hash: 7qxxtpkAN0VY8eIRlE51w2pqnr9EtiQEg5LeD6a+q3k=) 2: 604F4E3C0D6611F1AAA528DE1B3D8C67.roa (hash: zn+Y2EzBvu1Td2sgtLKQfgs/gBSjMOZeXn2CBE9VYms=) 3: C4D99CDE097B11F1B8223907113D8C67.roa (hash: KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2 Validity Not Before: Mar 25 08:10:57 2026 GMT Not After : Apr 1 08:10:57 2026 GMT Subject: CN=69c39891-2f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c5:13:86:a0:c4:2c:21:64:5b:0d:5f:6f:d4: e4:38:1e:43:51:79:44:32:58:1d:1d:4d:9e:c1:47: 41:5a:94:1d:fd:f0:f2:91:56:ac:97:66:bf:91:0d: 8d:48:11:5b:e9:fa:42:96:36:90:04:9b:75:3e:59: 82:94:e3:ba:af:2c:a3:b4:c0:22:24:e6:e1:72:a4: 30:55:44:74:df:15:44:dc:b9:56:dd:15:14:e2:3e: 08:96:76:f7:04:fa:9f:44:38:69:f8:a9:e5:52:b4: ba:c3:80:8d:0a:2e:82:0b:9f:cb:4c:f0:db:4e:5d: fe:8c:84:ae:ed:8f:fd:84:f2:56:5e:12:27:dc:dd: 4d:44:75:35:26:64:05:63:4d:66:01:2c:97:f5:74: 03:68:7a:aa:e4:04:ea:fe:80:a3:6c:ae:76:ea:af: 90:f8:dd:82:ce:57:36:ee:ef:ae:d4:2a:84:39:6e: 19:fd:6a:d5:7c:c7:66:6b:cc:31:87:55:bd:54:17: 77:d8:8c:8f:73:2a:8c:9b:60:9c:04:fd:a3:19:88: eb:37:48:83:4e:b6:3a:68:6f:5b:0e:3f:bf:7f:1a: 24:cb:03:a5:28:a7:74:f3:85:59:53:e7:2f:46:12: c1:3f:1d:4e:f2:4f:a4:45:60:21:99:9d:0e:92:7f: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2F:BC:2A:DD:6B:04:F3:4A:32:DF:DB:09:67:AB:3B:38:DF:A3:BA X509v3 Authority Key Identifier: keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:40:04:a3:6c:88:ea:57:a2:64:00:ed:9a:7c:95:a4:a8:5a: dc:0f:7d:9e:58:09:f4:b2:72:ce:d7:c9:a1:aa:10:08:0c:b6: 5a:d0:4e:2c:ef:c0:0a:aa:0f:60:0a:e2:02:29:9f:fb:27:ea: 69:3d:ca:7c:30:e1:4d:43:1e:b8:fa:04:4c:07:9e:2d:c0:60: 62:21:71:21:21:44:d1:53:f2:82:88:33:63:21:da:56:4f:e2: 3b:92:ac:ba:75:ac:14:b7:77:4e:70:6b:23:bc:15:27:8b:51: c7:10:c7:b0:14:b7:8c:4e:e6:b8:7c:f9:68:af:c3:e5:ec:19: 49:bd:98:9e:5f:22:15:f1:a3:cf:6e:51:c2:46:81:60:8c:0c: 32:d1:2b:cc:e6:12:22:de:9d:88:ab:86:20:7e:58:b9:95:93: f4:5b:0b:d7:bc:95:8d:d9:ed:32:82:7c:0c:f0:e7:c8:ec:33: 31:e4:d1:4d:f9:7c:f4:90:72:dd:90:0e:2c:ee:dd:c3:b4:f7: a6:fd:a5:41:d8:8d:64:ce:8c:03:81:69:1a:a8:2f:8c:03:12: 03:06:0a:44:e8:2d:0a:5a:4d:c1:f0:b7:d2:60:fa:ef:e1:c2: e2:ae:df:f2:77:2f:1e:1d:2a:95:24:c1:d4:9a:02:fb:85:29: 7d:5e:4f:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD OUNGOUNDMjAeFw0yNjAzMjUwODEwNTdaFw0yNjA0MDEwODEwNTdaMBgxFjAUBgNV BAMTDTY5YzM5ODkxLTJmMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfxROGoMQsIWRbDV9v1OQ4HkNReUQyWB0dTZ7BR0FalB398PKRVqyXZr+RDY1I EVvp+kKWNpAEm3U+WYKU47qvLKO0wCIk5uFypDBVRHTfFUTcuVbdFRTiPgiWdvcE +p9EOGn4qeVStLrDgI0KLoILn8tM8NtOXf6MhK7tj/2E8lZeEifc3U1EdTUmZAVj TWYBLJf1dANoeqrkBOr+gKNsrnbqr5D43YLOVzbu767UKoQ5bhn9atV8x2ZrzDGH Vb1UF3fYjI9zKoybYJwE/aMZiOs3SINOtjpob1sOP79/GiTLA6Uop3TzhVlT5y9G EsE/HU7yT6RFYCGZnQ6Sf/1vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzC+8Kt1r BPNKMt/bCWerOzjfo7owHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3 QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MzE0LzM2NTk3NEM2MDk3QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVu SWFTY3lDaTZkdThuUG5NSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA5QASjbIjqV6JkAO2afJWkqFrcD32eWAn0snLO18mhqhAIDLZa0E4s78AKqg9g CuICKZ/7J+ppPcp8MOFNQx64+gRMB54twGBiIXEhIUTRU/KCiDNjIdpWT+I7kqy6 dawUt3dOcGsjvBUni1HHEMewFLeMTua4fPlor8Pl7BlJvZieXyIV8aPPblHCRoFg jAwy0SvM5hIi3p2Iq4Ygfli5lZP0WwvXvJWN2e0ygnwM8OfI7DMx5NFN+Xz0kHLd kA4s7t3DtPem/aVB2I1kzowDgWkaqC+MAxIDBgpE6C0KWk3B8LfSYPrv4cLirt/y dy8eHSqVJMHUmgL7hSl9Xk8z -----END CERTIFICATE-----Generated at Thu Mar 26 09:36:31 2026 by rpki-client