$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: j52jF/v/tIUCZ0WJQ6f9gpidsXzuIs9co+KlHT7AcCk= Subject key identifier: 50:3C:64:4F:1F:5D:6E:31:EB:83:D1:60:C4:6A:A9:AF:5D:11:AE:F5 Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 017C Signing time: Wed 25 Mar 2026 03:52:28 +0000 Manifest this update: Wed 25 Mar 2026 03:52:28 +0000 Manifest next update: Wed 01 Apr 2026 03:52:28 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: IHvXBN13MGgcOeg5nL+G1qQERhGUsVW2ph/AFUfHgeY=) 2: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: F81eopWit+WRjVvoNj/Syi/UxhKzo8TJfRsuymHvyyE=) 3: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: 3aW6iUfzl0/knCHDbhr8nHXiBRl438L8ymDj1Nh8POQ=) 4: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: iGZLHjG2VueAdzLMDEEY/wlps2bNluNoPm25aV0tYgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA, serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Mar 25 03:52:28 2026 GMT Not After : Apr 1 03:52:28 2026 GMT Subject: CN=69c35bfc-6da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:7d:95:91:58:6f:c0:42:f4:f9:93:63:90: 0f:0b:19:c4:3a:d8:76:bb:e4:18:54:8e:db:51:0e: 86:7f:1b:ef:1a:8e:e8:80:7b:ee:94:f6:cb:a5:c6: c9:c7:8b:fd:46:2a:96:f1:cf:db:85:76:16:2c:df: 69:b1:f6:b2:69:e1:20:42:5d:c7:b0:c4:e2:81:85: c3:22:7f:36:f9:4c:c9:9c:5e:ec:77:eb:39:92:50: 4d:5f:8a:db:dd:1b:86:79:9c:18:70:3e:22:f4:84: ea:17:fe:7a:52:2d:2c:a6:93:dd:08:f9:3e:3a:e9: 2c:61:1e:74:09:2e:11:17:19:36:9a:02:c6:75:92: c5:59:76:80:5a:93:e6:b5:6d:0a:73:a9:a1:61:1d: 71:ab:d7:da:74:ae:8c:a3:38:74:2a:55:f2:51:f0: 68:bb:36:5f:b8:83:19:0b:62:ea:d3:6c:51:e6:14: 0c:df:b9:da:53:87:df:24:cc:35:19:0d:0a:6f:0a: a7:68:c3:24:d2:18:b9:c2:a3:94:1d:d9:61:4f:f1: 6f:9f:e0:27:d4:97:01:5b:90:38:d5:ef:a9:5c:b6: b7:76:59:e5:28:bd:a2:4e:49:a0:74:af:ea:34:13: 3b:a5:16:fb:7e:bf:ad:8b:04:93:18:f5:19:04:ed: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:64:4F:1F:5D:6E:31:EB:83:D1:60:C4:6A:A9:AF:5D:11:AE:F5 X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:1d:aa:8a:88:53:a1:58:07:02:a2:4e:bd:9d:32:27:7b:aa: 8c:6e:45:93:1f:e2:2c:d1:6f:86:e0:45:8a:5b:1f:8e:38:7f: 33:f0:86:76:41:17:90:7c:54:03:22:90:30:e1:de:b6:e7:f5: 47:f5:0e:46:77:b1:5c:e5:27:ae:c8:e6:01:12:d2:60:fb:f0: 6a:90:f6:64:99:ef:d3:87:4d:d4:74:eb:bc:f0:82:13:58:58: ea:47:74:1e:15:52:9b:33:01:2e:8b:3e:c7:48:82:3d:c4:22: 28:f2:25:c6:5d:d9:67:1e:b3:fb:47:34:28:5f:69:ef:2f:56: f9:00:9a:e9:f0:1d:27:9f:59:88:d8:0e:64:83:5b:77:05:dc: 1f:04:ef:2d:fe:c1:4e:78:7b:01:3e:fb:6d:58:99:e9:b0:c6: 6b:80:85:8f:f8:c5:46:ed:cf:a3:70:9f:17:52:69:13:95:39: 19:52:65:7a:b2:e6:2f:45:e1:d2:75:4e:ef:36:a2:f7:2c:dd: b0:2d:4a:a3:eb:4f:23:3d:e8:b7:e3:4f:eb:b6:f3:2a:c1:45: c4:5e:0f:7c:09:e4:1d:f7:a0:0e:4a:b5:2e:c7:f2:b1:5d:e9: 78:13:97:c3:06:e0:01:4d:df:44:4d:01:ee:8d:d9:91:d7:2e: 89:8a:a1:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjYwMzI1MDM1MjI4WhcNMjYwNDAxMDM1MjI4WjAYMRYwFAYD VQQDEw02OWMzNWJmYy02ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgJ9lZFYb8BC9PmTY5APCxnEOth2u+QYVI7bUQ6GfxvvGo7ogHvulPbLpcbJ x4v9RiqW8c/bhXYWLN9psfayaeEgQl3HsMTigYXDIn82+UzJnF7sd+s5klBNX4rb 3RuGeZwYcD4i9ITqF/56Ui0sppPdCPk+OuksYR50CS4RFxk2mgLGdZLFWXaAWpPm tW0Kc6mhYR1xq9fadK6Mozh0KlXyUfBouzZfuIMZC2Lq02xR5hQM37naU4ffJMw1 GQ0KbwqnaMMk0hi5wqOUHdlhT/Fvn+An1JcBW5A41e+pXLa3dlnlKL2iTkmgdK/q NBM7pRb7fr+tiwSTGPUZBO0GJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFA8ZE8f XW4x64PRYMRqqa9dEa71MB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsx2qiohToVgHAqJOvZ0yJ3uqjG5Fkx/iLNFvhuBFilsfjjh/M/CGdkEXkHxU AyKQMOHetuf1R/UORnexXOUnrsjmARLSYPvwapD2ZJnv04dN1HTrvPCCE1hY6kd0 HhVSmzMBLos+x0iCPcQiKPIlxl3ZZx6z+0c0KF9p7y9W+QCa6fAdJ59ZiNgOZINb dwXcHwTvLf7BTnh7AT77bViZ6bDGa4CFj/jFRu3Po3CfF1JpE5U5GVJlerLmL0Xh 0nVO7zai9yzdsC1Ko+tPIz3ot+NP67bzKsFFxF4PfAnkHfegDkq1LsfysV3peBOX wwbgAU3fRE0B7o3ZkdcuiYqhKg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:33 2026 by rpki-client