$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft File: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json) Hash identifier: TbsnhOcvAV5D+KZZU0prEAxvvXMktOGEUfY7N35xsD0= Subject key identifier: D6:6F:64:EC:1F:5E:0A:E3:9D:23:71:3C:78:37:FC:D4:55:DA:23:FC Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0AE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft Manifest number: 0AD4 Signing time: Tue 24 Mar 2026 19:14:11 +0000 Manifest this update: Tue 24 Mar 2026 19:14:11 +0000 Manifest next update: Tue 31 Mar 2026 19:14:11 +0000 Files and hashes: 1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: 4p5CaKA2v+SFBTyOoZCE7dW2L1WCJbLb4yom2yqGEnI=) 2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Mar 24 19:14:11 2026 GMT Not After : Mar 31 19:14:11 2026 GMT Subject: CN=69c2e283-3816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b6:e6:0a:4c:01:2b:8d:27:98:a6:e2:55:b9: c1:09:84:e3:b8:1f:90:da:8d:ee:ab:37:68:d3:4f: 93:aa:6b:87:55:db:65:ab:bc:db:b9:7f:80:68:c8: ae:8a:a8:59:b3:95:82:33:d1:68:a9:2b:53:4b:b5: 81:21:c6:5d:41:20:e8:f3:7d:35:a1:a7:b3:11:52: 44:24:cd:61:eb:79:87:e9:49:42:0c:ba:66:dd:45: 7c:50:59:5b:16:4e:fb:5d:e2:e9:94:45:0f:c9:35: c3:a7:c7:00:60:4b:44:cf:37:b4:8f:f0:94:95:bc: 2c:9e:f5:af:66:2a:74:c7:b0:be:58:4e:06:e2:fa: 36:26:35:c0:61:e3:64:52:9b:a8:dd:c5:e2:84:40: ba:9e:8b:c2:fd:24:a3:a0:e0:ea:61:e8:f2:03:e3: 12:ff:cb:fa:90:dd:d5:34:29:05:93:50:9d:4b:72: c7:36:28:b2:c5:71:e1:b6:d9:24:6e:6a:fb:d4:62: 91:2d:bc:e2:df:bf:e3:e9:d0:b1:0d:0e:d3:5a:5e: e2:03:f6:2d:4e:56:52:60:dc:22:84:4e:7e:c9:9c: d0:7f:55:b1:97:19:ea:aa:17:04:8b:05:6c:93:d7: 70:ef:3c:f1:65:74:58:78:a4:a9:17:88:3a:58:08: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:64:EC:1F:5E:0A:E3:9D:23:71:3C:78:37:FC:D4:55:DA:23:FC X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0d:bf:9d:bd:83:0f:26:5b:46:53:f9:1d:ed:88:8c:66:b5: bd:cb:97:04:f6:31:48:87:11:bb:df:64:26:6f:d9:0a:30:c9: 17:7a:00:fa:f3:45:29:de:f1:aa:23:fe:8c:69:c1:88:f5:10: c3:3f:03:a1:92:8c:a4:13:d0:25:d7:eb:b8:d8:26:70:8f:f7: 9d:21:7c:54:c8:45:c3:a5:81:b8:a9:4a:6e:a7:25:8a:47:1f: d4:18:e5:53:7c:c6:1d:1e:57:53:1f:df:4f:91:e9:67:3e:d1: 98:b2:41:b7:68:c9:ea:ee:55:05:f3:9f:d1:43:a9:14:7f:9a: 95:35:7a:c1:21:86:28:ba:08:73:e4:20:b7:46:96:52:85:78: 03:a6:9e:b6:59:7c:70:ab:fd:41:4d:40:1a:78:8a:ea:a9:03: a6:e7:2d:a0:76:b5:ab:68:a1:bb:d8:47:bb:6e:40:1d:f3:e7: 79:f4:0b:76:59:08:dc:d3:96:5d:ab:e3:29:a8:92:de:7e:d4: e9:54:08:f9:54:7e:5a:4a:61:ae:14:91:61:91:69:37:86:fa: 49:a0:e1:4d:87:32:39:60:92:02:75:ba:22:e0:a0:23:c6:08: fa:fb:cf:24:9f:d8:42:5b:df:ef:ed:1b:83:94:b4:f0:89:e5: 57:75:a7:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjYwMzI0MTkxNDExWhcNMjYwMzMxMTkxNDExWjAYMRYwFAYD VQQDEw02OWMyZTI4My0zODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLbmCkwBK40nmKbiVbnBCYTjuB+Q2o3uqzdo00+TqmuHVdtlq7zbuX+AaMiu iqhZs5WCM9FoqStTS7WBIcZdQSDo8301oaezEVJEJM1h63mH6UlCDLpm3UV8UFlb Fk77XeLplEUPyTXDp8cAYEtEzze0j/CUlbwsnvWvZip0x7C+WE4G4vo2JjXAYeNk Upuo3cXihEC6novC/SSjoODqYejyA+MS/8v6kN3VNCkFk1CdS3LHNiiyxXHhttkk bmr71GKRLbzi37/j6dCxDQ7TWl7iA/YtTlZSYNwihE5+yZzQf1WxlxnqqhcEiwVs k9dw7zzxZXRYeKSpF4g6WAifhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZvZOwf XgrjnSNxPHg3/NRV2iP8MB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzZCRS80NEMyOUUwRTZCNzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxK dEEzWnUzR2x0aHhrdmJQaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhQ2/nb2DDyZbRlP5He2IjGa1vcuXBPYxSIcRu99kJm/ZCjDJF3oA+vNFKd7x qiP+jGnBiPUQwz8DoZKMpBPQJdfruNgmcI/3nSF8VMhFw6WBuKlKbqclikcf1Bjl U3zGHR5XUx/fT5HpZz7RmLJBt2jJ6u5VBfOf0UOpFH+alTV6wSGGKLoIc+Qgt0aW UoV4A6aetll8cKv9QU1AGniK6qkDpuctoHa1q2ihu9hHu25AHfPnefQLdlkI3NOW XavjKaiS3n7U6VQI+VR+WkphrhSRYZFpN4b6SaDhTYcyOWCSAnW6IuCgI8YI+vvP JJ/YQlvf7+0bg5S08InlV3WnHA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:10 2026 by rpki-client