$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft File: su3iAzROnKc1AcVRQvmugWCeiYc.mft (raw, json) Hash identifier: UU12DVjh3E/Yr1qMM8laACbUd7SwQt++/m096Vft7Gk= Subject key identifier: F4:74:0F:F3:71:41:12:67:4E:0F:AD:3C:6C:39:EB:EA:CA:75:79:66 Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Certificate serial: 0D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft Manifest number: 0D04 Signing time: Thu 26 Mar 2026 18:05:15 +0000 Manifest this update: Thu 26 Mar 2026 18:05:15 +0000 Manifest next update: Thu 02 Apr 2026 18:05:15 +0000 Files and hashes: 1: su3iAzROnKc1AcVRQvmugWCeiYc.crl (hash: qxG6yehKVJrXDFKMd5/7PZH+Xz6l+SdLbKPCr8Woems=) 2: CE094B08006B11EAA2719060C4F9AE02.roa (hash: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987 Validity Not Before: Mar 26 18:05:15 2026 GMT Not After : Apr 2 18:05:15 2026 GMT Subject: CN=69c5755b-584d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:e7:4c:5c:3b:8b:31:46:0b:0d:a6:c2:36: d8:f3:ca:80:90:58:cf:cd:56:b0:be:44:34:15:10: 17:c0:46:ab:d2:d5:17:bb:8f:07:f8:00:8c:e0:3b: be:a3:79:5b:d6:17:b3:5b:65:60:e7:fd:34:36:c2: fd:95:83:a4:cd:9d:71:a0:03:66:52:07:58:e8:0e: 91:fe:2d:ac:17:fe:f9:12:b2:4c:72:d2:f1:a3:e7: 92:53:03:4b:b7:35:10:82:e5:ee:48:50:86:37:f6: 5b:36:13:e7:89:6e:9f:66:6c:91:a6:25:22:d4:ab: 58:85:7e:e5:fa:ff:52:3d:3f:c8:a0:44:fe:85:89: 1b:c4:f0:25:35:e0:3b:48:e6:1b:a3:90:be:ce:33: 8e:90:4e:b6:76:82:7c:50:75:39:44:81:2e:da:a2: fd:57:1d:4e:db:27:50:d4:13:60:44:48:7c:2d:a2: 58:d3:3b:91:a4:27:0f:2c:04:e4:1f:a5:21:b4:da: d3:09:2b:df:68:d3:1b:29:ee:c9:e9:9e:2f:30:dc: 11:92:16:c5:6f:8a:f5:45:ac:90:68:0e:be:ba:05: 55:67:78:8c:76:7a:75:f3:9b:06:1d:e0:70:28:f7: 78:5a:b9:b1:87:ff:f7:f5:98:0e:ae:c6:16:83:51: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:74:0F:F3:71:41:12:67:4E:0F:AD:3C:6C:39:EB:EA:CA:75:79:66 X509v3 Authority Key Identifier: keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8c:87:f5:bb:bd:37:7a:8d:e9:72:4a:03:e4:58:d5:e8:11: 87:c9:28:a1:6e:c1:1d:5e:39:ec:b0:95:9d:09:fb:b9:58:3e: b2:99:24:5d:05:03:88:08:80:53:85:e3:e0:eb:b1:99:a2:67: 47:92:2f:0a:40:3d:3c:8f:4f:0b:24:6b:b9:49:a3:1c:75:d6: e4:96:46:cb:fe:82:5f:ca:3e:9d:e2:0e:84:fa:43:cd:97:8b: 23:ae:12:ec:35:ba:02:f7:3a:ca:53:b4:62:03:cb:e2:e8:42: 3c:65:7d:73:c5:f2:0e:77:01:59:67:67:44:d9:89:a1:26:79: 8a:4f:59:06:d6:14:01:8e:6a:fb:b1:66:fe:9a:b5:f7:67:cc: a5:cd:0a:41:d7:05:d3:42:c8:2c:78:6c:36:47:4b:e7:2a:63: 74:5a:a0:92:0b:01:27:a3:bd:13:b8:b8:72:58:da:5a:d5:2a: c3:00:ef:c9:6a:35:79:f7:76:05:41:c1:d3:9d:dc:34:49:70: e7:1a:c5:33:84:36:97:90:16:eb:23:96:f5:b6:58:12:69:67: 16:59:b2:0a:51:c2:76:a0:f2:5e:0f:97:63:52:8d:d6:36:12: 98:8d:53:ed:11:9e:c1:c3:8e:da:0c:13:e8:4b:37:87:4e:99: bd:e4:81:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2QTUxMTAvBgNVBAUTKEIyRURFMjAzMzQ0RTlDQTczNTAxQzU1MTQyRjlBRTgx NjA5RTg5ODcwHhcNMjYwMzI2MTgwNTE1WhcNMjYwNDAyMTgwNTE1WjAYMRYwFAYD VQQDEw02OWM1NzU1Yi01ODRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjjnTFw7izFGCw2mwjbY88qAkFjPzVawvkQ0FRAXwEar0tUXu48H+ACM4Du+ o3lb1hezW2Vg5/00NsL9lYOkzZ1xoANmUgdY6A6R/i2sF/75ErJMctLxo+eSUwNL tzUQguXuSFCGN/ZbNhPniW6fZmyRpiUi1KtYhX7l+v9SPT/IoET+hYkbxPAlNeA7 SOYbo5C+zjOOkE62doJ8UHU5RIEu2qL9Vx1O2ydQ1BNgREh8LaJY0zuRpCcPLATk H6UhtNrTCSvfaNMbKe7J6Z4vMNwRkhbFb4r1RayQaA6+ugVVZ3iMdnp185sGHeBw KPd4Wrmxh//39ZgOrsYWg1F9wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPR0D/Nx QRJnTg+tPGw56+rKdXlmMB8GA1UdIwQYMBaAFLLt4gM0TpynNQHFUUL5roFgnomH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZBNS8wMjMxQzE1NDAw NkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25LYzFBY1ZSUXZtdWdXQ2Vp WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1M2lBelJPbktjMUFjVlJRdm11Z1dDZWlZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZBNS8wMjMxQzE1NDAwNkIxMUVBOTdDMUJENUZDNEY5QUUwMi9zdTNpQXpST25L YzFBY1ZSUXZtdWdXQ2VpWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd4yH9bu9N3qN6XJKA+RY1egRh8kooW7BHV457LCVnQn7uVg+spkkXQUDiAiA U4Xj4OuxmaJnR5IvCkA9PI9PCyRruUmjHHXW5JZGy/6CX8o+neIOhPpDzZeLI64S 7DW6Avc6ylO0YgPL4uhCPGV9c8XyDncBWWdnRNmJoSZ5ik9ZBtYUAY5q+7Fm/pq1 92fMpc0KQdcF00LILHhsNkdL5ypjdFqgkgsBJ6O9E7i4cljaWtUqwwDvyWo1efd2 BUHB053cNElw5xrFM4Q2l5AW6yOW9bZYEmlnFlmyClHCdqDyXg+XY1KN1jYSmI1T 7RGewcOO2gwT6Es3h06ZveSBXg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:33:55 2026 by rpki-client