$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft File: 3lBUK-oQggGncsALyfJRrRf6ls0.mft (raw, json) Hash identifier: UD4e8MPmaczWVRRc3VX4xDvsAQknNX8PDKkgv0h0ZOA= Subject key identifier: 2F:4D:26:8C:6F:36:D6:36:78:71:C4:71:07:A8:F3:C4:71:48:0C:25 Authority key identifier: DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD Certificate issuer: /CN=A91DEBE3/serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Certificate serial: 0D56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft Manifest number: 0D17 Signing time: Tue 24 Mar 2026 18:03:34 +0000 Manifest this update: Tue 24 Mar 2026 18:03:33 +0000 Manifest next update: Tue 31 Mar 2026 18:03:33 +0000 Files and hashes: 1: 3lBUK-oQggGncsALyfJRrRf6ls0.crl (hash: Tdz2AbUbjB690icxI4NRV74xhcSQL6kVJt0sbx5vnuk=) 2: AF0508E8B1EE11EF93E70F63C4F9AE02.roa (hash: BzaeZavMjUN3IGfUaT3Lf9IcfaMw9rwbOTimtCjWXxE=) 3: D59CB8F4968511EF93AE8239C4F9AE02.roa (hash: wqlmOzC4r2OFFnVkKx+k6opW2fr0/I9zXCLneKuJctU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3414 (0xd56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEBE3, serialNumber=DE50542BEA108201A772C00BC9F251AD17FA96CD Validity Not Before: Mar 24 18:03:33 2026 GMT Not After : Mar 31 18:03:33 2026 GMT Subject: CN=69c2d1f6-5999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:c8:6b:a5:ca:59:a1:4d:6d:f7:47:63:9c: a1:09:82:8e:d7:1d:1e:1d:99:34:0a:d2:17:e2:0b: 4e:a1:cd:3e:ba:2f:37:6b:c5:6f:4b:a4:f2:a5:7c: c0:48:f6:06:6c:f4:c5:48:db:4d:71:ad:98:de:9a: 29:8c:74:a7:04:e2:f9:07:33:c5:12:63:b2:69:3b: 12:0d:21:1b:86:3c:c1:8a:3e:3b:a0:ca:06:80:0b: 44:c8:60:b8:d2:e2:f4:0a:f1:ac:c1:c4:3e:c2:3c: 58:d5:bc:56:bb:82:e5:80:ea:bb:f3:93:b9:ac:db: df:e1:12:d2:48:a1:25:1e:fd:a4:ed:bc:aa:84:98: 4a:a9:64:ed:04:f1:cd:24:7d:34:6e:2b:ba:c6:fd: 38:96:14:3a:17:15:5a:ba:34:5d:11:01:5f:9c:ad: 46:30:6d:aa:12:96:0e:47:4e:96:fc:b3:35:2f:10: 1f:66:fd:ae:ac:0d:ad:c9:32:2d:0f:fd:4d:16:7c: 51:ad:44:7d:19:ab:30:96:39:8e:55:69:dd:5e:6a: f0:6f:f5:95:35:7a:fb:eb:f3:cc:f0:e1:1c:c0:6f: f3:68:d3:80:54:a2:7c:20:75:fc:e4:97:3a:2b:7f: b0:42:d4:af:67:14:38:ee:38:11:70:6b:fa:41:dd: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:26:8C:6F:36:D6:36:78:71:C4:71:07:A8:F3:C4:71:48:0C:25 X509v3 Authority Key Identifier: keyid:DE:50:54:2B:EA:10:82:01:A7:72:C0:0B:C9:F2:51:AD:17:FA:96:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lBUK-oQggGncsALyfJRrRf6ls0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEBE3/80AE10C6045011EABA82C415C4F9AE02/3lBUK-oQggGncsALyfJRrRf6ls0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7b:af:bf:09:68:fa:28:a3:f1:58:98:3f:59:f4:46:4e:8a: 28:1b:09:2d:7c:a6:c6:ba:15:0d:24:27:6d:3d:1b:8e:97:5b: a9:d6:cf:db:2f:5a:cd:f7:1b:34:b5:b4:bb:d4:8c:45:f5:85: 54:57:19:49:ba:ea:c9:b3:82:91:9e:2a:f4:7e:bb:9a:fe:64: f7:59:d9:2d:92:4e:b5:c3:45:f0:3f:cc:55:cb:76:d1:4e:5a: 95:00:e5:bf:26:6f:f4:34:fd:2e:f4:c4:f7:c2:3a:2a:52:e2: 30:76:5b:30:fe:60:e7:9f:c5:ed:d1:b7:c2:7d:fb:74:f7:a2: 56:bd:af:56:9d:50:11:2b:31:a2:84:bf:94:c5:b0:67:30:11: f0:10:65:6e:6c:fc:5d:8f:29:f0:15:46:00:d5:36:7b:82:3e: 14:82:f7:2c:1c:5f:d0:c2:06:c0:a5:f8:f7:30:64:24:13:3a: f4:c7:51:06:a1:e0:13:2e:61:95:b7:8e:3a:a9:2e:fe:51:ed: 61:77:d9:84:17:7d:f5:03:f0:c2:6a:d2:62:4c:30:d7:a8:fe: de:1c:b2:55:e7:f2:37:da:3a:51:ec:7c:a3:4e:8e:1e:1a:12: e4:36:5d:0f:23:6a:d2:8e:8f:61:a6:fb:6f:5f:fb:36:5f:bc: 5d:43:10:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCRTMxMTAvBgNVBAUTKERFNTA1NDJCRUExMDgyMDFBNzcyQzAwQkM5RjI1MUFE MTdGQTk2Q0QwHhcNMjYwMzI0MTgwMzMzWhcNMjYwMzMxMTgwMzMzWjAYMRYwFAYD VQQDEw02OWMyZDFmNi01OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRHIa6XKWaFNbfdHY5yhCYKO1x0eHZk0CtIX4gtOoc0+ui83a8VvS6TypXzA SPYGbPTFSNtNca2Y3popjHSnBOL5BzPFEmOyaTsSDSEbhjzBij47oMoGgAtEyGC4 0uL0CvGswcQ+wjxY1bxWu4LlgOq785O5rNvf4RLSSKElHv2k7byqhJhKqWTtBPHN JH00biu6xv04lhQ6FxVaujRdEQFfnK1GMG2qEpYOR06W/LM1LxAfZv2urA2tyTIt D/1NFnxRrUR9GaswljmOVWndXmrwb/WVNXr76/PM8OEcwG/zaNOAVKJ8IHX85Jc6 K3+wQtSvZxQ47jgRcGv6Qd2BiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9NJoxv NtY2eHHEcQeo88RxSAwlMB8GA1UdIwQYMBaAFN5QVCvqEIIBp3LAC8nyUa0X+pbN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUJFMy84MEFFMTBDNjA0 NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdnR25jc0FMeWZKUnJSZjZs czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsQlVLLW9RZ2dHbmNzQUx5ZkpSclJmNmxzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUJFMy84MEFFMTBDNjA0NTAxMUVBQkE4MkM0MTVDNEY5QUUwMi8zbEJVSy1vUWdn R25jc0FMeWZKUnJSZjZsczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3uvvwlo+iij8ViYP1n0Rk6KKBsJLXymxroVDSQnbT0bjpdbqdbP2y9azfcb NLW0u9SMRfWFVFcZSbrqybOCkZ4q9H67mv5k91nZLZJOtcNF8D/MVct20U5alQDl vyZv9DT9LvTE98I6KlLiMHZbMP5g55/F7dG3wn37dPeiVr2vVp1QESsxooS/lMWw ZzAR8BBlbmz8XY8p8BVGANU2e4I+FIL3LBxf0MIGwKX49zBkJBM69MdRBqHgEy5h lbeOOqku/lHtYXfZhBd99QPwwmrSYkww16j+3hyyVefyN9o6Uex8o06OHhoS5DZd DyNq0o6PYab7b1/7Nl+8XUMQHQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:26 2026 by rpki-client