$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft File: 3NoGnj7_iVbAFXKBanAjUZXwZyU.mft (raw, json) Hash identifier: tmq4ockGBipUaOlJIwjnJnbGKGEL+2sOSEBlK2zocnE= Subject key identifier: 57:B2:D6:06:96:D1:F3:61:A9:35:D2:A7:B1:43:DD:DD:DB:BD:5A:BC Authority key identifier: DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 Certificate issuer: /CN=A91E9F31/serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft Manifest number: 019C Signing time: Fri 27 Mar 2026 03:48:06 +0000 Manifest this update: Fri 27 Mar 2026 03:48:05 +0000 Manifest next update: Fri 03 Apr 2026 03:48:05 +0000 Files and hashes: 1: 3NoGnj7_iVbAFXKBanAjUZXwZyU.crl (hash: ubqW1zNRDtQ2LoA0fa2BOw42KKAqBA1q8gCVA4suYQ0=) 2: 37D72D7CC17C11EE8391A218C4F9AE02.roa (hash: f0Nq6bNqAFhlnNadTuboxrgMX1sJQBWxkk0foam6u60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F31, serialNumber=DCDA069E3EFF8956C01572816A70235195F06725 Validity Not Before: Mar 27 03:48:05 2026 GMT Not After : Apr 3 03:48:05 2026 GMT Subject: CN=69c5fdf6-5858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:e9:2b:7b:e1:c3:7f:f4:1f:c7:8c:94:88: 36:fd:40:d8:50:8a:a2:b3:05:c0:e9:94:cc:2b:75: 0f:af:fe:e8:9a:65:81:a2:80:32:ef:d5:e7:ee:41: 41:f0:aa:ee:f0:a6:b2:a0:80:d3:6b:21:d6:b1:ad: fb:cd:bf:1d:d0:8f:f7:7a:2a:ce:e3:a0:3d:5f:46: 9d:d1:48:99:a0:a8:54:a2:de:b5:15:93:f1:85:3f: 1c:dc:88:10:05:4c:08:a8:ad:c8:0d:a2:1c:a7:6f: c8:39:4c:a5:b3:b2:eb:e1:9b:e3:4d:a7:87:31:66: cf:06:56:91:a1:d7:46:35:a5:35:40:3f:32:12:72: 15:0c:09:20:83:b0:1a:bb:22:39:63:a1:6d:67:e8: 61:18:ff:d5:61:65:23:ae:18:d2:d9:a5:0c:43:b1: 07:fb:50:2d:bb:72:ff:60:f2:66:9e:d7:f2:78:28: 38:59:9a:6f:ee:3c:6f:6a:2d:53:f6:6c:cd:f2:fb: c9:56:d4:cc:2b:f6:33:11:01:a7:61:97:9d:64:51: fd:8a:a2:e9:66:62:76:5c:10:54:18:aa:90:6f:7f: 6e:0b:4f:f4:71:6c:e5:34:ef:fd:40:24:ba:21:d9: ae:23:99:23:17:8b:d3:27:b4:eb:6f:ed:a4:bc:cc: f2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:D6:06:96:D1:F3:61:A9:35:D2:A7:B1:43:DD:DD:DB:BD:5A:BC X509v3 Authority Key Identifier: keyid:DC:DA:06:9E:3E:FF:89:56:C0:15:72:81:6A:70:23:51:95:F0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3NoGnj7_iVbAFXKBanAjUZXwZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F31/092D2516BE6211EE8C37CB3BC4F9AE02/3NoGnj7_iVbAFXKBanAjUZXwZyU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:41:0b:e9:e0:1e:b1:7f:6d:ed:96:84:b7:8e:ab:34:37:9b: 9d:c6:38:f3:45:3f:70:f3:78:6f:4f:b3:ba:d3:c2:73:6b:be: 40:08:0a:61:78:63:46:e6:a5:eb:be:f8:31:37:d5:a2:77:e7: a9:ac:5f:58:e6:ea:5f:a1:2b:f2:da:19:56:77:fb:e1:62:e3: 28:08:44:3c:f2:ba:ec:a4:25:49:f9:90:fc:f4:a1:06:29:d1: 27:a7:81:3f:d8:5f:5f:91:86:fd:d9:80:b1:e1:ac:a6:73:af: e0:3e:7e:be:50:79:23:cd:5b:f6:b1:1c:34:d4:9a:d4:0e:0a: f2:0b:72:30:e3:16:08:91:04:89:cd:ad:85:6e:4f:76:5d:40: 01:d6:0d:7e:95:75:0c:fa:47:c0:2a:12:61:dc:c3:42:46:3c: 34:ef:22:9c:b8:28:ca:45:ba:23:08:ff:c4:cd:c1:db:97:6d: 8f:d0:f8:7a:94:0b:a2:48:77:6a:c4:2b:df:a7:d5:7c:31:8a: f9:30:97:53:e0:2c:a6:16:f6:32:b2:51:ee:2a:b7:e0:db:72: 3d:62:dc:50:1a:13:ca:ee:5d:9d:6f:ec:a0:e8:f8:1d:0b:90: 87:d0:8f:7c:77:74:f5:58:e3:f4:ac:a4:32:34:36:6e:26:d0: 3c:66:87:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGMzExMTAvBgNVBAUTKERDREEwNjlFM0VGRjg5NTZDMDE1NzI4MTZBNzAyMzUx OTVGMDY3MjUwHhcNMjYwMzI3MDM0ODA1WhcNMjYwNDAzMDM0ODA1WjAYMRYwFAYD VQQDEw02OWM1ZmRmNi01ODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF/pK3vhw3/0H8eMlIg2/UDYUIqiswXA6ZTMK3UPr/7ommWBooAy79Xn7kFB 8Kru8KayoIDTayHWsa37zb8d0I/3eirO46A9X0ad0UiZoKhUot61FZPxhT8c3IgQ BUwIqK3IDaIcp2/IOUyls7Lr4ZvjTaeHMWbPBlaRoddGNaU1QD8yEnIVDAkgg7Aa uyI5Y6FtZ+hhGP/VYWUjrhjS2aUMQ7EH+1Atu3L/YPJmntfyeCg4WZpv7jxvai1T 9mzN8vvJVtTMK/YzEQGnYZedZFH9iqLpZmJ2XBBUGKqQb39uC0/0cWzlNO/9QCS6 IdmuI5kjF4vTJ7Trb+2kvMzynQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFey1gaW 0fNhqTXSp7FD3d3bvVq8MB8GA1UdIwQYMBaAFNzaBp4+/4lWwBVygWpwI1GV8Gcl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUYzMS8wOTJEMjUxNkJF NjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lWYkFGWEtCYW5BalVaWHda eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNOb0duajdfaVZiQUZYS0JhbkFqVVpYd1p5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUYzMS8wOTJEMjUxNkJFNjIxMUVFOEMzN0NCM0JDNEY5QUUwMi8zTm9Hbmo3X2lW YkFGWEtCYW5BalVaWHdaeVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAikEL6eAesX9t7ZaEt46rNDebncY480U/cPN4b0+zutPCc2u+QAgKYXhjRual 6774MTfVonfnqaxfWObqX6Er8toZVnf74WLjKAhEPPK67KQlSfmQ/PShBinRJ6eB P9hfX5GG/dmAseGspnOv4D5+vlB5I81b9rEcNNSa1A4K8gtyMOMWCJEEic2thW5P dl1AAdYNfpV1DPpHwCoSYdzDQkY8NO8inLgoykW6Iwj/xM3B25dtj9D4epQLokh3 asQr36fVfDGK+TCXU+Asphb2MrJR7iq34NtyPWLcUBoTyu5dnW/soOj4HQuQh9CP fHd09Vjj9KykMjQ2bibQPGaHHA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:36 2026 by rpki-client