$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft File: 31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json) Hash identifier: 3FMwefhqZsWvjlRm2EhR3yATtUQ/lIi0dAD99NC0Y6w= Subject key identifier: 43:27:06:71:BE:46:F8:A3:31:E7:C8:F7:46:78:D6:2D:79:7F:2D:90 Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E Certificate issuer: /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft Manifest number: 0108 Signing time: Wed 25 Mar 2026 05:22:01 +0000 Manifest this update: Wed 25 Mar 2026 05:22:00 +0000 Manifest next update: Wed 01 Apr 2026 05:22:00 +0000 Files and hashes: 1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: stBpoIop3Bl89VkDH/j9abKfum8UxYo8NJFrHpmihC0=) 2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: O7GN2l1hOC4SWYNKWviNJy71uZFSyoamqsxdYZS2wLU=) 3: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=) 4: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: jKoRpxjOOXlvFmPMPu0uuJygTbndhTbq5Q8qTRacm/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E Validity Not Before: Mar 25 05:22:00 2026 GMT Not After : Apr 1 05:22:00 2026 GMT Subject: CN=69c370f8-4127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:56:d1:d2:91:1f:b9:65:27:8a:0c:2f:aa: b9:7b:c5:be:7f:65:58:03:c1:90:0b:35:a4:62:73: 2a:13:e3:b1:67:a7:38:ea:4f:fc:47:3e:9a:8e:a4: f3:65:d6:4e:39:e0:cc:1a:0a:5b:12:b5:59:32:58: 4d:cd:49:9d:c6:91:97:30:ae:31:53:fd:59:1e:30: e8:00:4d:00:5d:59:1e:eb:73:ab:ac:46:5d:95:a3: 88:47:a6:cd:53:16:ee:68:f3:06:b3:d4:58:66:d7: 6e:0d:35:40:a2:dc:88:2a:ce:6c:51:ce:32:40:23: ad:ac:b3:9d:51:ad:be:21:75:9f:9d:13:4f:dd:89: a8:5f:1d:0e:22:32:77:39:ac:33:9b:97:e5:e6:0b: bd:56:79:4a:69:7f:c3:50:11:e8:b2:93:be:48:61: ae:23:66:9a:3b:56:90:5a:a9:ea:2f:9c:cd:2a:f5: 45:5b:da:d7:79:ec:7c:47:f7:e3:30:d2:d2:b2:1b: 8d:0f:33:be:b0:06:69:11:4f:2e:b8:c5:5c:cf:dc: d8:ed:5b:f3:d4:8b:7f:29:b9:14:81:be:db:8d:b8: 3b:55:69:80:36:8f:4e:84:89:95:00:d3:bb:17:fa: cf:10:ac:cc:55:58:3e:0b:88:df:d0:8f:ba:0d:9c: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:27:06:71:BE:46:F8:A3:31:E7:C8:F7:46:78:D6:2D:79:7F:2D:90 X509v3 Authority Key Identifier: keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e1:10:41:90:5a:e3:d8:32:84:de:ab:18:f1:3f:87:c4:54: 94:74:6c:00:7b:0b:ff:62:e3:cc:8c:10:f8:4b:93:b1:d8:87: 0f:21:7b:be:81:84:92:03:2d:b5:5a:27:71:42:c5:06:94:41: 44:26:bb:fc:ad:f4:33:aa:56:5c:1b:29:6b:ea:7b:f8:11:47: d3:f4:4b:67:9c:d8:14:63:09:14:bd:a8:96:b0:fa:ed:a5:67: b1:41:72:76:a0:25:2b:96:de:14:4d:1b:62:d6:94:46:76:35: 48:4e:9c:54:14:92:20:3f:3b:77:54:38:95:5b:06:2d:f3:eb: f0:e8:4e:ea:26:e9:5c:ee:da:67:1e:d5:c4:39:1d:d6:c7:57: 35:67:07:f5:c8:c7:a4:8a:cf:2f:b2:91:7a:f3:04:2e:ed:53: 03:f8:f5:5a:79:69:4e:5d:02:6e:9d:e6:47:52:77:0d:12:c1: b4:81:fb:5f:90:fd:03:be:a0:2b:4d:7d:8e:4d:5d:d4:ce:d6: d0:21:49:b8:86:29:55:0d:57:f1:81:cd:a9:e8:b8:69:2b:f3: 55:51:72:1c:c0:b3:be:55:4e:dc:7a:46:57:7c:0c:9e:28:59: 90:d0:0e:ac:33:bf:5f:78:f4:b8:d4:84:3d:b4:b7:d0:9e:47: 69:49:a7:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKERGNUZFMjFCN0M5NTUyMTU5MzQ0NzE3OTREOEIwNzA2 NjNEMkIzNEUwHhcNMjYwMzI1MDUyMjAwWhcNMjYwNDAxMDUyMjAwWjAYMRYwFAYD VQQDEw02OWMzNzBmOC00MTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmRW0dKRH7llJ4oML6q5e8W+f2VYA8GQCzWkYnMqE+OxZ6c46k/8Rz6ajqTz ZdZOOeDMGgpbErVZMlhNzUmdxpGXMK4xU/1ZHjDoAE0AXVke63OrrEZdlaOIR6bN UxbuaPMGs9RYZtduDTVAotyIKs5sUc4yQCOtrLOdUa2+IXWfnRNP3YmoXx0OIjJ3 Oawzm5fl5gu9VnlKaX/DUBHospO+SGGuI2aaO1aQWqnqL5zNKvVFW9rXeex8R/fj MNLSshuNDzO+sAZpEU8uuMVcz9zY7Vvz1It/KbkUgb7bjbg7VWmANo9OhImVANO7 F/rPEKzMVVg+C4jf0I+6DZwFBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMnBnG+ RvijMefI90Z41i15fy2QMB8GA1UdIwQYMBaAFN9f4ht8lVIVk0RxeU2LBwZj0rNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84MDJBRTY0NkEy NzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVoV1RSSEY1VFlzSEJtUFNz MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzMxX2lHM3lWVWhXVFJIRjVUWXNIQm1QU3MwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84MDJBRTY0NkEyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi8zMV9pRzN5VlVo V1RSSEY1VFlzSEJtUFNzMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUeEQQZBa49gyhN6rGPE/h8RUlHRsAHsL/2LjzIwQ+EuTsdiHDyF7voGEkgMt tVoncULFBpRBRCa7/K30M6pWXBspa+p7+BFH0/RLZ5zYFGMJFL2olrD67aVnsUFy dqAlK5beFE0bYtaURnY1SE6cVBSSID87d1Q4lVsGLfPr8OhO6ibpXO7aZx7VxDkd 1sdXNWcH9cjHpIrPL7KRevMELu1TA/j1WnlpTl0Cbp3mR1J3DRLBtIH7X5D9A76g K019jk1d1M7W0CFJuIYpVQ1X8YHNqei4aSvzVVFyHMCzvlVO3HpGV3wMnihZkNAO rDO/X3j0uNSEPbS30J5HaUmnqw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:27 2026 by rpki-client