$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft File: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json) Hash identifier: PoLa2UdzOW4nm4CZo1CTu7IQoZAFEb0Kperctie7eUo= Subject key identifier: 50:C7:BE:0F:32:54:AC:81:B0:51:A6:80:66:8F:BA:2D:3A:FB:5B:DA Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 Certificate issuer: /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft Manifest number: 05 Signing time: Wed 25 Mar 2026 08:22:47 +0000 Manifest this update: Wed 25 Mar 2026 08:22:46 +0000 Manifest next update: Wed 01 Apr 2026 08:22:46 +0000 Files and hashes: 1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: 7y9U1Lje8Xx5iTq4BbBrTnwpv6BSD1xI1w5ovLU2iBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039 Validity Not Before: Mar 25 08:22:46 2026 GMT Not After : Apr 1 08:22:46 2026 GMT Subject: CN=69c39b56-7d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:57:1a:85:85:e2:00:a9:48:c3:72:8c:32: b8:c8:16:60:02:b2:04:6e:d4:46:1e:a9:2d:bb:08: 9c:90:38:c9:e7:e0:a6:11:ac:4a:6f:ba:eb:96:f0: 9e:ea:9f:0f:b9:b2:5e:83:2e:d1:96:11:01:9a:4d: b6:50:b3:f7:6d:d9:92:bf:47:7d:3d:f9:cc:9b:34: 8b:10:24:53:23:6d:85:da:32:66:9e:28:73:30:a7: b9:72:25:a2:47:35:4f:af:97:a5:e3:6b:1f:35:35: 2f:a4:20:a0:c7:c8:e4:10:5e:1e:a1:d9:92:7a:fc: 72:84:94:3b:ff:60:6d:43:46:07:3c:4b:29:7d:69: 85:6b:c2:df:38:ca:02:9d:09:56:87:cf:ed:12:4c: ea:20:aa:48:4c:c5:a5:63:63:b0:11:03:de:fb:4a: 4a:6a:03:69:1e:eb:bc:a5:1f:ca:7e:e4:31:a8:5e: e2:2e:1e:38:ee:cd:f9:c3:42:1c:84:39:8f:95:8b: fc:7a:8f:ab:b6:63:de:f8:b7:49:06:3e:94:c9:d7: 06:97:50:86:3b:5b:45:31:bb:ba:3a:8c:8c:7b:53: f8:a2:f1:3f:9a:4d:e3:25:ca:7d:0f:48:66:97:1f: cc:1e:cf:ed:3f:8f:38:45:fb:9c:f7:f6:45:d7:37: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C7:BE:0F:32:54:AC:81:B0:51:A6:80:66:8F:BA:2D:3A:FB:5B:DA X509v3 Authority Key Identifier: keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:1d:79:fa:7a:9e:5d:23:75:26:e4:dd:97:20:97:ec:de:6a: 86:0b:53:bf:54:9c:fe:c7:66:32:55:d3:6c:f7:48:1c:f2:b4: 79:47:28:02:26:c2:e4:66:ba:3a:22:61:d6:ae:d8:71:5d:ed: e4:af:98:cf:c0:ca:23:04:dd:5c:c1:56:6b:46:a1:c3:84:98: f2:48:02:25:7e:7e:e3:62:8e:7b:cd:61:1c:11:13:7b:1c:3b: e5:70:24:9a:24:4d:18:39:58:9c:19:4b:16:4b:98:ad:60:3e: dc:27:bf:98:1c:84:6c:4e:fb:d0:06:b9:b5:96:8f:74:22:06: 3c:ec:5f:94:e8:c6:4a:6f:90:8b:d9:ad:6d:eb:29:23:1d:b9: b6:4e:78:06:dc:28:a1:bd:f3:a2:ce:1b:50:d9:81:51:54:8e: 3a:6a:f0:f9:76:2d:e1:a4:12:f1:c9:00:96:40:27:0e:7d:d6: bd:67:e3:74:7b:52:b0:09:f4:97:b6:ed:f8:79:f5:b1:ef:a2: 26:e2:02:74:7e:4a:2a:2c:d0:6c:46:1a:51:04:0c:40:6a:c0: 31:28:c4:51:73:cd:58:83:24:fd:80:a1:ba:d1:b9:3f:fa:1b: f0:66:bd:14:29:41:e2:be:e1:52:91:e5:3f:bb:11:30:bd:5e: 9e:01:d3:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkExMDExMC8GA1UEBRMoRERBRUFBNTM0MDJCNzBBOTRGNzM3QzFCMEQ1RDk1MDFG ODI5RjAzOTAeFw0yNjAzMjUwODIyNDZaFw0yNjA0MDEwODIyNDZaMBgxFjAUBgNV BAMTDTY5YzM5YjU2LTdkOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFdFcahYXiAKlIw3KMMrjIFmACsgRu1EYeqS27CJyQOMnn4KYRrEpvuuuW8J7q nw+5sl6DLtGWEQGaTbZQs/dt2ZK/R309+cybNIsQJFMjbYXaMmaeKHMwp7lyJaJH NU+vl6Xjax81NS+kIKDHyOQQXh6h2ZJ6/HKElDv/YG1DRgc8Syl9aYVrwt84ygKd CVaHz+0STOogqkhMxaVjY7ARA977SkpqA2ke67ylH8p+5DGoXuIuHjjuzfnDQhyE OY+Vi/x6j6u2Y974t0kGPpTJ1waXUIY7W0Uxu7o6jIx7U/ii8T+aTeMlyn0PSGaX H8wez+0/jzhF+5z39kXXNwzLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUMe+DzJU rIGwUaaAZo+6LTr7W9owHwYDVR0jBBgwFoAU3a6qU0ArcKlPc3wbDV2VAfgp8Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQTEwL0U4MzMyNUVBMjMy QzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0tsUGMzd2JEVjJWQWZncDhE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM2E2cVUwQXJjS2xQYzN3YkRWMlZBZmdwOERrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QTEwL0U4MzMyNUVBMjMyQzExRjE5M0E0RDgzMkEzODMzNzczLzNhNnFVMEFyY0ts UGMzd2JEVjJWQWZncDhEay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhHXn6ep5dI3Um5N2XIJfs3mqGC1O/VJz+x2YyVdNs90gc8rR5RygCJsLkZro6 ImHWrthxXe3kr5jPwMojBN1cwVZrRqHDhJjySAIlfn7jYo57zWEcERN7HDvlcCSa JE0YOVicGUsWS5itYD7cJ7+YHIRsTvvQBrm1lo90IgY87F+U6MZKb5CL2a1t6ykj Hbm2TngG3CihvfOizhtQ2YFRVI46avD5di3hpBLxyQCWQCcOfda9Z+N0e1KwCfSX tu34efWx76Im4gJ0fkoqLNBsRhpRBAxAasAxKMRRc81YgyT9gKG60bk/+hvwZr0U KUHivuFSkeU/uxEwvV6eAdMU -----END CERTIFICATE-----Generated at Thu Mar 26 15:33:55 2026 by rpki-client