$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: 1hZzjNj7rP8iYEbKR2nZ1aVMRKprT5IgEloK8qOX6Rc= Subject key identifier: 91:9D:31:80:9A:69:D6:D4:9F:EF:17:EC:82:D2:07:76:87:E0:2D:6E Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0CEA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0CE0 Signing time: Tue 24 Mar 2026 18:05:38 +0000 Manifest this update: Tue 24 Mar 2026 18:05:37 +0000 Manifest next update: Tue 31 Mar 2026 18:05:37 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: C3lm/SUUDEjENdsHzeudhq4npMvUjqE2kERTq+6hewo=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3306 (0xcea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Mar 24 18:05:37 2026 GMT Not After : Mar 31 18:05:37 2026 GMT Subject: CN=69c2d272-09a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:0d:48:fb:dc:87:21:2a:b1:01:bb:d1:46: 63:c6:26:0a:e6:a5:70:09:21:be:48:78:8d:96:e4: 48:9e:84:97:b6:ee:7e:e9:d6:57:c6:08:6e:2d:ed: ef:70:03:3c:e7:c3:18:1a:e5:f2:13:1b:fc:84:d6: 58:c6:8a:17:d9:6f:e6:9c:99:99:2b:93:c0:f4:cb: dd:8c:75:6e:cf:6e:59:a0:cf:17:3d:4f:9f:bf:76: d2:e1:14:21:1b:d2:24:5a:8e:66:8a:04:5f:07:13: af:46:23:9f:cd:65:b8:fe:37:e2:7a:fd:32:e9:e5: 2f:2e:43:d5:02:00:c9:5d:ec:e9:9d:e3:d6:87:15: 01:5c:e6:d7:0d:2a:21:b5:bb:0f:2d:e9:6e:52:99: 6c:0e:5a:4f:99:ed:7e:a9:4c:2a:48:90:70:5f:11: 89:d9:7e:2c:94:db:1b:02:7b:71:18:31:fe:71:9e: b1:97:82:55:81:3a:e2:e6:c8:79:21:15:0b:cc:c7: 23:5d:86:46:14:1a:db:14:41:05:ba:83:19:c8:d1: c9:26:85:52:42:12:bb:27:35:ce:03:d5:93:be:33: 2e:6e:6a:72:40:63:d5:01:e1:d6:33:2a:8b:94:60: 52:09:13:39:63:66:76:bd:a1:97:43:e9:f8:cf:e3: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9D:31:80:9A:69:D6:D4:9F:EF:17:EC:82:D2:07:76:87:E0:2D:6E X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:7f:33:22:0a:56:ab:39:7e:af:09:f0:3b:75:41:6b:e1:44: 67:3c:7a:27:5c:03:f3:42:de:2a:2f:58:df:d9:b4:2c:53:68: 13:fa:c7:ee:55:99:2b:69:ac:52:bb:c6:14:11:2b:27:13:86: a4:f1:00:c2:b3:91:e3:64:d0:f8:18:37:ec:9a:ca:c4:2f:29: 22:cc:df:58:ef:11:ed:b6:ec:99:9c:7f:f7:ef:0f:33:ce:9b: 04:29:7e:b9:99:45:0e:d0:18:5b:0f:d7:a7:04:5c:5b:eb:f3: a3:f6:69:a0:22:c0:f7:f7:c3:ff:05:c9:77:14:28:6c:e1:45: d2:b5:3f:ce:2f:20:8c:73:48:4e:cb:ca:7b:ff:52:8d:1e:a3: f3:fe:dc:ea:64:74:25:0c:3f:d1:94:b7:77:e7:9b:1a:6b:9b: a9:d6:9a:aa:b8:47:6b:d0:78:6c:14:27:14:b6:86:ad:46:dc: 71:4a:7d:bf:12:e0:cb:f4:ab:7d:b8:dd:ec:d6:4d:1e:66:87: 93:18:3b:7c:16:29:0a:32:bc:91:d1:24:63:74:54:c2:25:bf: ce:11:90:54:ba:2c:67:5a:b4:d6:30:dd:dd:b6:ef:64:56:d1: 5b:72:b9:56:97:46:99:32:c6:3b:7f:ac:7e:a6:9e:6d:69:81: b1:ba:c3:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjYwMzI0MTgwNTM3WhcNMjYwMzMxMTgwNTM3WjAYMRYwFAYD VQQDEw02OWMyZDI3Mi0wOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0sNSPvchyEqsQG70UZjxiYK5qVwCSG+SHiNluRInoSXtu5+6dZXxghuLe3v cAM858MYGuXyExv8hNZYxooX2W/mnJmZK5PA9MvdjHVuz25ZoM8XPU+fv3bS4RQh G9IkWo5migRfBxOvRiOfzWW4/jfiev0y6eUvLkPVAgDJXezpnePWhxUBXObXDSoh tbsPLeluUplsDlpPme1+qUwqSJBwXxGJ2X4slNsbAntxGDH+cZ6xl4JVgTri5sh5 IRULzMcjXYZGFBrbFEEFuoMZyNHJJoVSQhK7JzXOA9WTvjMubmpyQGPVAeHWMyqL lGBSCRM5Y2Z2vaGXQ+n4z+NTuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGdMYCa adbUn+8X7ILSB3aH4C1uMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR38zIgpWqzl+rwnwO3VBa+FEZzx6J1wD80LeKi9Y39m0LFNoE/rH7lWZK2ms UrvGFBErJxOGpPEAwrOR42TQ+Bg37JrKxC8pIszfWO8R7bbsmZx/9+8PM86bBCl+ uZlFDtAYWw/XpwRcW+vzo/ZpoCLA9/fD/wXJdxQobOFF0rU/zi8gjHNITsvKe/9S jR6j8/7c6mR0JQw/0ZS3d+ebGmubqdaaqrhHa9B4bBQnFLaGrUbccUp9vxLgy/Sr fbjd7NZNHmaHkxg7fBYpCjK8kdEkY3RUwiW/zhGQVLosZ1q01jDd3bbvZFbRW3K5 VpdGmTLGO3+sfqaebWmBsbrDGA== -----END CERTIFICATE-----Generated at Thu Mar 26 13:26:02 2026 by rpki-client