$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft File: e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json) Hash identifier: DcosAT2Q3f0Q2OqBMTCZ0RR8B9Xa2F03q+LqVH902+A= Subject key identifier: 05:D8:F0:74:D5:8C:D0:6E:E3:FB:57:23:4A:06:4E:96:C5:54:00:13 Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3 Certificate issuer: /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft Manifest number: 40 Signing time: Wed 25 Mar 2026 07:41:55 +0000 Manifest this update: Wed 25 Mar 2026 07:41:54 +0000 Manifest next update: Wed 01 Apr 2026 07:41:54 +0000 Files and hashes: 1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: LQGLlehVrLwjnE2dMvSSM7vXR1jTEjAYk+5P68b6kLs=) 2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3 Validity Not Before: Mar 25 07:41:54 2026 GMT Not After : Apr 1 07:41:54 2026 GMT Subject: CN=69c391c3-c92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:88:d8:a2:c7:6d:ae:cd:3f:bc:68:ba:18: 6f:02:d2:b6:a5:8f:a2:47:77:98:47:e9:7e:b4:1b: 57:7b:d7:36:38:bf:57:b2:5e:57:f3:1d:56:ea:f6: d7:15:fc:d5:a9:3f:12:21:bb:0e:9c:b3:52:ed:3f: da:cb:91:9f:42:7a:f6:40:b7:6b:87:66:1d:4b:13: 1e:b5:3d:c4:b8:45:75:5a:c0:83:74:74:0f:35:8a: 90:1d:de:99:1c:8a:06:c3:5a:50:ca:4b:55:d5:e4: 91:b5:0e:13:d7:29:0b:d9:13:ce:23:b7:e9:0e:c9: 9a:26:1e:e3:ca:53:91:d8:a3:95:f3:60:93:f1:9a: 97:72:ec:23:42:97:4f:d9:9b:5c:00:f1:d0:31:fa: bf:6e:35:d7:bc:21:74:1a:b6:04:e9:39:1d:12:cc: 18:67:ff:fd:d5:c9:40:7b:e9:55:fc:1b:1b:bb:fa: 56:c0:b9:90:be:16:6d:d9:98:97:25:cd:1a:65:39: 70:16:79:95:d4:80:7f:50:95:c9:c3:38:71:13:e8: b1:bd:a1:6f:e9:35:de:54:f1:8a:ee:21:0c:c8:50: 35:37:3b:60:e2:1b:1f:09:65:59:51:98:93:d4:e3: 47:c1:a3:76:a5:8a:27:3c:3c:7f:c3:8f:08:33:ad: 11:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:F0:74:D5:8C:D0:6E:E3:FB:57:23:4A:06:4E:96:C5:54:00:13 X509v3 Authority Key Identifier: keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fc:be:ee:89:8c:2d:37:22:e7:6b:07:c2:81:d9:31:6a:68: 8a:a7:30:1c:ce:e2:23:d3:0a:31:ff:20:64:4a:d3:a4:09:e6: 9b:af:7e:a5:1a:1c:e6:89:9a:d9:92:fe:a6:7a:08:58:b0:73: 6e:e6:f1:9b:fe:cf:b7:c6:32:df:9e:cb:1b:c0:19:98:e9:32: 65:d0:d8:b3:a7:6e:fc:29:c4:ea:ec:05:08:e2:ae:51:a1:89: 64:99:ac:c1:2b:99:75:2b:81:54:00:44:96:51:60:4a:f3:e6: 05:ea:5f:1f:12:3a:e1:78:02:03:5e:82:ea:7e:82:01:8f:55: 24:19:c2:1b:b0:c5:df:25:1f:fc:47:94:a6:63:ca:07:eb:ff: 33:0c:74:e1:99:63:d9:e8:d9:e5:2c:6e:2b:10:08:f2:d7:27: b4:f6:51:de:8d:ea:06:66:71:79:ff:c9:fe:1e:c3:fd:c9:a6: 35:f7:e7:12:4d:07:c9:20:af:e5:25:97:b8:75:ef:f3:6e:13: 0a:89:f3:1b:49:de:b5:f4:b2:e2:cb:4f:c1:c9:c7:e0:02:8f: d6:65:d5:9f:53:72:7b:7d:fb:08:de:5c:41:af:45:a1:26:28: da:e7:62:e2:e2:fb:86:fd:07:97:6d:94:90:a3:76:64:16:48: c7:28:24:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTQ1MTExMC8GA1UEBRMoN0I3NEZCMzIyNjY2OTI3NjU0RjFGQTFFQzhCNzA5QzMw NTM1NTBFMzAeFw0yNjAzMjUwNzQxNTRaFw0yNjA0MDEwNzQxNTRaMBgxFjAUBgNV BAMTDTY5YzM5MWMzLWM5MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBxYjYosdtrs0/vGi6GG8C0ralj6JHd5hH6X60G1d71zY4v1eyXlfzHVbq9tcV /NWpPxIhuw6cs1LtP9rLkZ9CevZAt2uHZh1LEx61PcS4RXVawIN0dA81ipAd3pkc igbDWlDKS1XV5JG1DhPXKQvZE84jt+kOyZomHuPKU5HYo5XzYJPxmpdy7CNCl0/Z m1wA8dAx+r9uNde8IXQatgTpOR0SzBhn//3VyUB76VX8Gxu7+lbAuZC+Fm3ZmJcl zRplOXAWeZXUgH9QlcnDOHET6LG9oW/pNd5U8YruIQzIUDU3O2DiGx8JZVlRmJPU 40fBo3aliic8PH/DjwgzrRHxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBdjwdNWM 0G7j+1cjSgZOlsVUABMwHwYDVR0jBBgwFoAUe3T7MiZmknZU8foeyLcJwwU1UOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNDUxLzJFN0ExREJBQ0Y5 RjExRjA4ODAzNUEwQkM0RjlBRTAyL2UzVDdNaVpta25aVThmb2V5TGNKd3dVMVVP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTNUN01pWm1rblpVOGZvZXlMY0p3d1UxVU9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx NDUxLzJFN0ExREJBQ0Y5RjExRjA4ODAzNUEwQkM0RjlBRTAyL2UzVDdNaVpta25a VThmb2V5TGNKd3dVMVVPTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAl/L7uiYwtNyLnawfCgdkxamiKpzAczuIj0wox/yBkStOkCeabr36lGhzmiZrZ kv6meghYsHNu5vGb/s+3xjLfnssbwBmY6TJl0Nizp278KcTq7AUI4q5RoYlkmazB K5l1K4FUAESWUWBK8+YF6l8fEjrheAIDXoLqfoIBj1UkGcIbsMXfJR/8R5SmY8oH 6/8zDHThmWPZ6NnlLG4rEAjy1ye09lHejeoGZnF5/8n+HsP9yaY19+cSTQfJIK/l JZe4de/zbhMKifMbSd619LLiy0/BycfgAo/WZdWfU3J7ffsI3lxBr0WhJija52Li 4vuG/QeXbZSQo3ZkFkjHKCSv -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:54 2026 by rpki-client