$ rpki-client -vvf rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft File: S3Z_4wTU8n9REYZLp0O5R5zhSns.mft (raw, json) Hash identifier: 2TeutPHfqecN8EYCB/4PdyjCFgkKAF9cgx0aMOTuEJk= Subject key identifier: 86:53:32:58:63:41:37:03:0B:47:72:69:BE:A8:5F:F0:58:BA:1B:37 Authority key identifier: 4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B Certificate issuer: /CN=A91D53AC/serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Certificate serial: 352C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft Manifest number: 3526 Signing time: Tue 24 Mar 2026 14:50:10 +0000 Manifest this update: Tue 24 Mar 2026 14:50:09 +0000 Manifest next update: Tue 31 Mar 2026 14:50:09 +0000 Files and hashes: 1: S3Z_4wTU8n9REYZLp0O5R5zhSns.crl (hash: AgiQWilw/AfLCphIHetJ7ujYE4yBKm+l59HznDto8RE=) 2: 0C9FD154619611EEADD97F70C4F9AE02.roa (hash: nLdLNd1FqbqzPBvmomvzxR8c2GOexrERlWPqFeDBvG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13612 (0x352c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D53AC, serialNumber=4B767FE304D4F27F5111864BA743B9479CE14A7B Validity Not Before: Mar 24 14:50:09 2026 GMT Not After : Mar 31 14:50:09 2026 GMT Subject: CN=69c2a4a2-b4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dc:5b:2e:ae:9c:4e:ce:69:95:82:2c:4c:dd: 7d:d7:4f:2c:57:b5:46:40:78:df:e0:de:56:60:e5: 74:02:19:15:7a:79:10:f0:0d:55:ce:fc:e0:6c:af: 4a:d0:fb:33:73:c3:63:b9:67:f3:f2:d1:ad:2e:82: b2:7b:38:33:b0:aa:72:e8:1f:3a:de:98:f6:00:ed: e2:a7:41:d2:72:67:00:73:d7:5c:cb:10:f5:dc:3e: e1:bf:a2:53:5a:c0:93:db:86:5c:de:de:78:a6:14: a8:12:b2:69:15:16:4f:e2:d1:04:bc:72:3e:ee:96: 8e:fa:6e:e0:ff:a5:cd:50:c0:10:29:f5:f3:6e:38: 53:1b:b7:1e:2a:24:db:51:fa:c4:eb:13:9f:32:f8: 43:a0:2a:6d:37:83:15:3a:f8:3d:47:81:a8:64:2e: 64:db:ba:04:85:ce:7e:0d:9e:e0:7c:f6:cd:d0:a3: 6a:25:0f:65:f7:b8:70:b3:ce:72:71:9b:15:5c:7f: f9:fd:13:12:15:01:61:54:6d:ea:80:e2:b4:df:ed: 96:d5:7f:fa:f8:79:d8:79:13:9b:71:c2:7c:ce:8b: ba:bb:61:ae:d2:0d:85:c7:2c:9a:08:98:1a:ab:f6: de:a6:71:b5:e1:53:99:18:26:ff:67:fd:e1:13:82: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:53:32:58:63:41:37:03:0B:47:72:69:BE:A8:5F:F0:58:BA:1B:37 X509v3 Authority Key Identifier: keyid:4B:76:7F:E3:04:D4:F2:7F:51:11:86:4B:A7:43:B9:47:9C:E1:4A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3Z_4wTU8n9REYZLp0O5R5zhSns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D53AC/03168C4E1D9711E28B6C008008B02CD2/S3Z_4wTU8n9REYZLp0O5R5zhSns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9b:88:59:3e:48:4c:9c:d8:e6:12:28:7a:be:27:8b:6c:aa: 75:c6:8c:fa:fe:a3:29:21:1d:ee:83:46:65:11:33:e4:47:ae: 2d:97:0d:31:fc:91:c2:20:3d:1f:4f:72:c8:42:6a:09:ad:1d: 41:93:ae:3c:51:d5:05:80:00:97:24:3f:ef:25:f3:bf:39:0f: 73:a4:0a:88:04:52:12:c1:00:4a:87:b5:26:86:f5:17:a4:aa: a0:68:9e:91:d9:fd:19:c7:73:c8:09:49:7d:11:74:80:76:56: 15:0a:9f:8f:2a:ca:84:00:6b:7e:7c:59:df:75:e5:c5:64:a5: 6c:07:3f:60:81:a5:fb:3d:35:32:84:2e:52:bd:db:a7:1f:43: 7b:93:05:64:5e:37:1a:6f:58:9e:6d:97:6d:f8:05:8a:c7:2f: be:8a:ba:93:4d:4c:0c:1c:f3:7c:33:13:f4:ae:4e:01:14:d5: f1:c8:08:a0:0d:cb:d7:95:c3:f6:af:99:b1:42:7d:8b:74:55: 72:de:fe:8a:af:be:cb:3a:28:66:f0:8b:9b:a7:89:8b:2f:08: 38:16:f9:16:58:96:10:bb:9b:4e:42:ed:fc:29:c9:13:7e:c2: 79:9c:62:ab:91:75:06:ee:37:ab:68:c8:29:93:28:a8:e1:28: 58:b2:2b:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzQUMxMTAvBgNVBAUTKDRCNzY3RkUzMDRENEYyN0Y1MTExODY0QkE3NDNCOTQ3 OUNFMTRBN0IwHhcNMjYwMzI0MTQ1MDA5WhcNMjYwMzMxMTQ1MDA5WjAYMRYwFAYD VQQDEw02OWMyYTRhMi1iNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNxbLq6cTs5plYIsTN19108sV7VGQHjf4N5WYOV0AhkVenkQ8A1VzvzgbK9K 0Pszc8NjuWfz8tGtLoKyezgzsKpy6B863pj2AO3ip0HScmcAc9dcyxD13D7hv6JT WsCT24Zc3t54phSoErJpFRZP4tEEvHI+7paO+m7g/6XNUMAQKfXzbjhTG7ceKiTb UfrE6xOfMvhDoCptN4MVOvg9R4GoZC5k27oEhc5+DZ7gfPbN0KNqJQ9l97hws85y cZsVXH/5/RMSFQFhVG3qgOK03+2W1X/6+HnYeRObccJ8zou6u2Gu0g2FxyyaCJga q/bepnG14VOZGCb/Z/3hE4JyVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZTMlhj QTcDC0dyab6oX/BYuhs3MB8GA1UdIwQYMBaAFEt2f+ME1PJ/URGGS6dDuUec4Up7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTNBQy8wMzE2OEM0RTFE OTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThuOVJFWVpMcDBPNVI1emhT bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzWl80d1RVOG45UkVZWkxwME81UjV6aFNucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTNBQy8wMzE2OEM0RTFEOTcxMUUyOEI2QzAwODAwOEIwMkNEMi9TM1pfNHdUVThu OVJFWVpMcDBPNVI1emhTbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAApuIWT5ITJzY5hIoer4ni2yqdcaM+v6jKSEd7oNGZREz5EeuLZcNMfyRwiA9 H09yyEJqCa0dQZOuPFHVBYAAlyQ/7yXzvzkPc6QKiARSEsEASoe1Job1F6SqoGie kdn9GcdzyAlJfRF0gHZWFQqfjyrKhABrfnxZ33XlxWSlbAc/YIGl+z01MoQuUr3b px9De5MFZF43Gm9Ynm2XbfgFiscvvoq6k01MDBzzfDMT9K5OARTV8cgIoA3L15XD 9q+ZsUJ9i3RVct7+iq++yzooZvCLm6eJiy8IOBb5FliWELubTkLt/CnJE37CeZxi q5F1Bu43q2jIKZMoqOEoWLIrEg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:24 2026 by rpki-client