$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft File: 3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json) Hash identifier: +AHu5UhXE/G4mli1sRyGBDUSQietYww5+33QqQKHORw= Subject key identifier: 78:93:10:F0:F1:90:6F:02:B2:DA:3B:D1:45:7D:A8:F7:38:3C:55:A8 Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 Certificate issuer: /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft Manifest number: 1D Signing time: Wed 25 Mar 2026 08:06:44 +0000 Manifest this update: Wed 25 Mar 2026 08:06:43 +0000 Manifest next update: Wed 01 Apr 2026 08:06:43 +0000 Files and hashes: 1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: Tyyq1VlYzHpyI3mCNyIh2+OKnXjduUYuTNi64v4mf7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Validity Not Before: Mar 25 08:06:43 2026 GMT Not After : Apr 1 08:06:43 2026 GMT Subject: CN=69c39794-0d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:03:8b:74:0f:43:ba:03:e9:71:cc:1b:fd: 73:65:60:8f:58:e3:0d:ec:b2:2f:21:8a:68:aa:87: c9:fd:d3:ba:4c:82:1c:b8:aa:44:c1:8f:0c:ab:55: f7:1f:31:31:02:98:94:04:02:48:f4:ad:f3:18:89: 3f:6b:c5:a7:a0:54:ce:78:1e:f8:f2:6b:a3:e3:bf: 86:79:97:ac:08:d9:d6:e3:f0:ca:98:f8:6e:bc:9f: 8c:33:90:a1:ef:91:67:0e:0a:22:a6:87:fd:83:64: 80:6a:02:aa:7d:45:71:19:f1:2c:0f:4c:e5:5f:74: 6f:a4:af:7e:6c:15:10:b8:e4:a6:f3:42:ce:9d:94: 5e:a5:1b:f4:32:b0:db:8d:02:47:13:03:44:2f:0a: 27:40:44:87:a1:e0:4a:46:36:91:d4:77:5c:2e:a3: 5a:dd:6c:fb:b0:4f:6c:be:e8:78:4d:ce:e0:c6:fe: 34:d4:f0:af:d4:00:f3:00:a3:47:f5:37:df:bb:99: 04:89:b6:62:d1:7a:41:5c:ec:c6:c4:b1:66:09:f7: 5b:22:fc:cf:8e:c7:a5:b5:22:b1:53:a8:bf:6b:c2: 39:22:d0:0f:39:60:15:b8:28:f2:f8:33:97:3a:e7: 96:b2:4f:6d:b5:6a:db:7f:d2:5a:9e:55:03:9a:a5: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:93:10:F0:F1:90:6F:02:B2:DA:3B:D1:45:7D:A8:F7:38:3C:55:A8 X509v3 Authority Key Identifier: keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:95:36:cb:c9:48:1f:74:c0:48:04:01:2c:f7:b0:f0:3b:33: c8:b1:55:98:dc:d9:94:03:e5:1e:e3:f5:fc:12:18:75:9e:3e: 15:0c:19:2e:4f:18:b7:ce:52:f9:3a:16:e9:d8:38:32:a7:b5: 5e:ea:f5:18:e3:b5:a2:d3:ad:18:39:dc:a3:7a:81:dd:98:0b: 09:2c:ad:25:b6:e6:22:03:dc:ba:ef:02:c1:f1:06:5d:8b:75: 50:76:a3:6a:d0:b1:a3:7f:5a:c5:86:0b:ae:2f:e5:9b:c4:cd: 86:dc:88:6e:cd:5c:ee:b5:91:53:55:e2:58:1a:f4:43:39:19: cf:3d:dc:6d:30:0b:ee:02:f2:73:a6:6b:6a:9e:9e:46:82:82: 7d:ae:b4:df:03:da:7a:9f:3a:46:69:98:af:d9:6a:37:d2:da: 15:9a:18:8e:02:e1:3b:c4:6b:9c:68:5c:d3:85:e7:24:d2:d4: eb:76:ec:be:3d:1b:86:ab:9e:97:3d:a9:ef:d9:ca:fc:f4:dd: c5:28:67:00:5c:4f:cc:e4:2f:5f:7e:fa:d6:ae:86:36:2d:e2: 93:a7:6a:e3:3b:ca:fb:d6:89:9c:d0:4c:8a:52:4c:59:21:df: 1e:02:93:a8:11:69:a0:ae:45:47:d6:de:04:87:42:6b:cd:9f: f9:bb:3b:23 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoREQwQUQyREU0QTc0NEQxQTMzQjExQkI2QUJEN0U2RUFD RUZEQzA4NTAeFw0yNjAzMjUwODA2NDNaFw0yNjA0MDEwODA2NDNaMBgxFjAUBgNV BAMTDTY5YzM5Nzk0LTBkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSBAOLdA9DugPpccwb/XNlYI9Y4w3ssi8himiqh8n907pMghy4qkTBjwyrVfcf MTECmJQEAkj0rfMYiT9rxaegVM54Hvjya6Pjv4Z5l6wI2dbj8MqY+G68n4wzkKHv kWcOCiKmh/2DZIBqAqp9RXEZ8SwPTOVfdG+kr35sFRC45KbzQs6dlF6lG/QysNuN AkcTA0QvCidARIeh4EpGNpHUd1wuo1rdbPuwT2y+6HhNzuDG/jTU8K/UAPMAo0f1 N9+7mQSJtmLRekFc7MbEsWYJ91si/M+Ox6W1IrFTqL9rwjki0A85YBW4KPL4M5c6 55ayT221att/0lqeVQOapc4lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUeJMQ8PGQ bwKy2jvRRX2o9zg8VagwHwYDVR0jBBgwFoAU3QrS3kp0TRozsRu2q9fm6s79wIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzY1MEQwMEY2MDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJvenNSdTJxOWZtNnM3OXdJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1FyUzNrcDBUUm96c1J1MnE5Zm02czc5d0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzY1MEQwMEY2MDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJv enNSdTJxOWZtNnM3OXdJVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCClTbLyUgfdMBIBAEs97DwOzPIsVWY3NmUA+Ue4/X8Ehh1nj4VDBkuTxi3zlL5 Ohbp2Dgyp7Ve6vUY47Wi060YOdyjeoHdmAsJLK0ltuYiA9y67wLB8QZdi3VQdqNq 0LGjf1rFhguuL+WbxM2G3IhuzVzutZFTVeJYGvRDORnPPdxtMAvuAvJzpmtqnp5G goJ9rrTfA9p6nzpGaZiv2Wo30toVmhiOAuE7xGucaFzTheck0tTrduy+PRuGq56X Panv2cr89N3FKGcAXE/M5C9ffvrWroY2LeKTp2rjO8r71omc0EyKUkxZId8eApOo EWmgrkVH1t4Eh0JrzZ/5uzsj -----END CERTIFICATE-----Generated at Thu Mar 26 08:22:25 2026 by rpki-client