$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: 81jXHXAQ01q7mnnICHUlNjMbSWlp2NsflHwV09eXaMQ= Subject key identifier: 1F:A8:BC:96:96:B5:79:9F:0A:C2:70:EE:67:6F:DC:04:2B:61:1D:AC Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: A3 Signing time: Wed 25 Mar 2026 06:30:40 +0000 Manifest this update: Wed 25 Mar 2026 06:30:40 +0000 Manifest next update: Wed 01 Apr 2026 06:30:40 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: i5KLA/U4ch94IMtA6P+B8v7WBBA9c/tO1liF3/ZtLCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Mar 25 06:30:40 2026 GMT Not After : Apr 1 06:30:40 2026 GMT Subject: CN=69c38110-2f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:99:9f:35:7d:64:2e:73:e1:b7:fa:3d:2f: 59:d1:b2:de:0a:00:41:5d:93:bb:00:cd:9d:45:00: 84:d3:97:e3:91:91:d0:45:02:24:84:ce:91:03:f9: af:02:04:59:8e:e4:c7:32:ce:d5:82:29:7b:43:2e: a6:07:aa:df:2a:1c:de:1f:71:58:51:85:13:16:c0: d8:7b:96:b6:af:ac:2e:7d:95:84:2c:dc:f3:af:62: 8e:56:9a:25:d1:1e:04:31:eb:c0:40:70:65:15:35: dd:43:d3:59:b2:0f:22:39:a7:0c:31:5b:cd:cd:2c: 3e:28:ce:d2:60:c0:a1:eb:35:be:50:56:64:54:8b: 84:66:34:55:d1:44:45:9e:39:69:2d:d6:59:0a:57: 06:60:d0:ce:aa:ca:10:c8:7e:25:f9:7a:bd:ee:7a: 20:aa:a6:d3:3e:1b:1f:11:7c:09:f7:aa:76:54:ff: d0:34:47:06:f5:19:78:21:6d:71:cb:7e:be:87:32: fc:b0:57:25:4a:cc:c8:d3:17:be:91:c8:10:53:90: 7b:ee:01:7b:cc:4c:7c:6f:ce:4b:4f:ca:a2:97:21: 11:03:26:de:e2:78:3d:82:25:8e:40:0f:54:2b:0d: b7:cc:ed:f6:f9:34:6c:52:f4:0e:70:8a:91:cc:00: 3f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A8:BC:96:96:B5:79:9F:0A:C2:70:EE:67:6F:DC:04:2B:61:1D:AC X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:6d:cb:d3:2f:68:c6:8e:c7:2e:4e:65:0b:5d:d2:7d:84:b1: a1:e3:70:1b:c7:86:a3:79:f9:90:03:d3:f2:c1:0b:8b:22:fc: 41:32:c7:bd:bb:a5:93:c0:43:00:9e:27:8b:62:60:98:02:28: 57:a1:1b:2e:a9:e2:89:6a:cd:d2:c3:52:09:b0:22:3c:44:53: eb:41:72:c4:32:fc:d9:26:a6:35:c8:b1:fa:4f:d7:4a:5d:35: 2f:84:25:9f:da:5b:2a:46:3c:ea:c1:fd:7f:9d:c9:66:fd:b2: 59:13:1f:aa:72:a5:02:c8:df:5e:93:9d:6b:65:df:24:2b:0e: 8f:20:c5:6d:f4:c6:da:11:3c:f6:c8:fc:3f:ff:93:18:93:79: 56:37:de:e1:3c:f8:cb:de:b5:91:41:c7:0e:d4:29:0f:f7:72: 97:03:f0:89:bf:f7:d5:55:2f:c3:85:05:d5:1f:9e:4d:56:0a: 47:c0:a6:90:b2:18:c3:5b:84:9f:0d:c0:0e:84:20:ee:42:3e: 4c:f5:c7:5a:da:66:45:df:1c:c1:76:dc:89:e6:d9:5c:6c:fd: ea:a6:fa:fd:18:2c:0d:74:b1:c2:e8:3b:1a:85:d4:41:54:a5: fc:cb:14:4a:e1:98:50:9e:50:97:f3:a9:dc:ee:12:ef:05:eb: 97:ba:b2:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQzkxMTAvBgNVBAUTKEJDRTlGQTZDMzc3Qzk0MzRCMTJDNzdCRUZDREQ0MkE1 QjcwMzRGRjIwHhcNMjYwMzI1MDYzMDQwWhcNMjYwNDAxMDYzMDQwWjAYMRYwFAYD VQQDEw02OWMzODExMC0yZjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntOZnzV9ZC5z4bf6PS9Z0bLeCgBBXZO7AM2dRQCE05fjkZHQRQIkhM6RA/mv AgRZjuTHMs7Vgil7Qy6mB6rfKhzeH3FYUYUTFsDYe5a2r6wufZWELNzzr2KOVpol 0R4EMevAQHBlFTXdQ9NZsg8iOacMMVvNzSw+KM7SYMCh6zW+UFZkVIuEZjRV0URF njlpLdZZClcGYNDOqsoQyH4l+Xq97nogqqbTPhsfEXwJ96p2VP/QNEcG9Rl4IW1x y36+hzL8sFclSszI0xe+kcgQU5B77gF7zEx8b85LT8qilyERAybe4ng9giWOQA9U Kw23zO32+TRsUvQOcIqRzAA/1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+ovJaW tXmfCsJw7mdv3AQrYR2sMB8GA1UdIwQYMBaAFLzp+mw3fJQ0sSx3vvzdQqW3A0/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDOS9DMTJDREFFNDMx OEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxEU3hMSGUtX04xQ3BiY0RU X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDOS9DMTJDREFFNDMxOEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxE U3hMSGUtX04xQ3BiY0RUX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ23L0y9oxo7HLk5lC13SfYSxoeNwG8eGo3n5kAPT8sELiyL8QTLHvbulk8BD AJ4ni2JgmAIoV6EbLqniiWrN0sNSCbAiPERT60FyxDL82SamNcix+k/XSl01L4Ql n9pbKkY86sH9f53JZv2yWRMfqnKlAsjfXpOda2XfJCsOjyDFbfTG2hE89sj8P/+T GJN5Vjfe4Tz4y961kUHHDtQpD/dylwPwib/31VUvw4UF1R+eTVYKR8CmkLIYw1uE nw3ADoQg7kI+TPXHWtpmRd8cwXbciebZXGz96qb6/RgsDXSxwug7GoXUQVSl/MsU SuGYUJ5Ql/Op3O4S7wXrl7qyjA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:53 2026 by rpki-client