$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft File: 3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json) Hash identifier: L+DpS/cQcDQ/8DnQoVozA6XHAKzaJwUi7yTlahlD8is= Subject key identifier: 1F:B9:8E:C2:F9:A2:BE:A1:CA:11:5D:06:76:C6:D5:E0:28:EF:D0:17 Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 Certificate issuer: /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft Manifest number: 15 Signing time: Sun 01 Mar 2026 10:30:10 +0000 Manifest this update: Sun 01 Mar 2026 10:30:09 +0000 Manifest next update: Sun 08 Mar 2026 10:30:09 +0000 Files and hashes: 1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: 8IsfSmQzExHcl9g+YWm+bKfX8Pl3uhdY2muI5pqcLAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Validity Not Before: Mar 1 10:30:09 2026 GMT Not After : Mar 8 10:30:09 2026 GMT Subject: CN=69a41531-d207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f7:20:ae:19:01:f3:e4:08:16:06:74:6f:a2: e4:88:ad:c5:db:c8:5b:35:7f:5b:13:ae:a3:a6:70: 6c:12:83:13:ad:1b:56:7a:ee:b5:4f:f0:19:73:aa: 25:76:b1:8d:88:99:ce:6b:16:82:82:f9:e8:8e:f3: f3:19:c2:9c:84:12:f1:0f:87:57:ce:bb:21:f6:57: 1f:05:de:ee:e5:62:4a:eb:70:77:da:03:3a:f6:95: 87:d9:ab:24:f1:bc:03:43:4e:6b:a8:72:cd:ff:fe: d1:7f:3a:4c:19:46:9a:8b:d1:f3:08:cb:91:e6:5b: 43:bf:99:45:66:cf:fa:0e:10:a4:07:1f:3c:56:28: 42:c7:f2:14:67:47:e5:63:02:d8:6b:76:ea:82:e3: 38:82:78:47:fe:e9:f1:47:32:af:90:b2:5a:ee:2d: 79:85:e5:d0:a1:c1:4f:50:ba:1a:80:0d:ca:53:65: a3:9c:c4:53:5e:ce:d3:41:55:18:8f:72:1c:e8:db: 93:8f:8b:25:f6:c6:18:33:b7:56:0d:92:a7:96:17: 0c:4a:8b:d9:35:2b:b1:48:33:e3:13:44:4f:8c:fc: e2:12:86:d4:f4:89:4d:29:ec:ed:bd:a0:26:fe:86: f8:d8:76:8b:47:ff:d6:d9:a2:9f:92:55:50:25:2e: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B9:8E:C2:F9:A2:BE:A1:CA:11:5D:06:76:C6:D5:E0:28:EF:D0:17 X509v3 Authority Key Identifier: keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:70:7f:c7:d1:2c:13:0c:35:47:3d:fe:84:d8:02:b3:91:e0: 37:7a:05:a3:e7:21:b4:9f:26:df:72:ab:83:d9:64:c1:7b:13: ef:2d:d1:6b:32:73:1d:a5:00:29:61:69:e1:b2:da:e1:cd:29: 2f:dd:ae:49:43:39:97:d0:b9:1a:00:2d:1c:c4:29:2a:62:19: 2f:3e:f1:34:47:b6:31:2e:b2:97:01:1e:82:78:60:da:cc:78: a7:7f:ed:16:e7:a2:40:8c:67:5e:4f:a3:75:29:14:b3:82:7d: 24:00:b4:21:64:c3:86:f8:ab:6a:ba:66:99:42:4f:a3:fc:a1: d0:fc:e2:50:1d:50:c1:eb:56:7e:e4:de:5c:6b:21:4d:04:37: 4a:04:2e:eb:4f:03:98:af:c7:0e:a2:44:b2:1c:3d:f2:cf:70: 9e:a7:6a:2b:11:f0:50:60:6e:77:d8:d5:0e:d5:a0:d3:4a:e9: 03:4f:c5:71:0d:fe:83:2a:d9:f5:5f:2b:a0:91:08:9a:cc:1c: 88:6c:e9:3c:aa:dc:64:f2:d7:6b:df:c3:70:13:b5:51:bc:a7: a5:bb:c9:56:d4:87:9d:b2:be:da:32:42:d7:4d:e4:ad:27:12: 29:06:c3:ac:82:60:4d:ca:6a:32:89:2e:27:67:a6:be:41:00: 1b:5b:5b:35 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RThBOTExMC8GA1UEBRMoREU5NkE3MzQyMkM4RDkwNjYwODU4OUI5Q0YxNEY4NDk0 NzA2QThDMzAeFw0yNjAzMDExMDMwMDlaFw0yNjAzMDgxMDMwMDlaMBgxFjAUBgNV BAMTDTY5YTQxNTMxLWQyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD09yCuGQHz5AgWBnRvouSIrcXbyFs1f1sTrqOmcGwSgxOtG1Z67rVP8BlzqiV2 sY2Imc5rFoKC+eiO8/MZwpyEEvEPh1fOuyH2Vx8F3u7lYkrrcHfaAzr2lYfZqyTx vANDTmuocs3//tF/OkwZRpqL0fMIy5HmW0O/mUVmz/oOEKQHHzxWKELH8hRnR+Vj AthrduqC4ziCeEf+6fFHMq+QslruLXmF5dChwU9QuhqADcpTZaOcxFNeztNBVRiP chzo25OPiyX2xhgzt1YNkqeWFwxKi9k1K7FIM+MTRE+M/OIShtT0iU0p7O29oCb+ hvjYdotH/9bZop+SVVAlLhFZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUH7mOwvmi vqHKEV0GdsbV4Cjv0BcwHwYDVR0jBBgwFoAU3panNCLI2QZghYm5zxT4SUcGqMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0I1N0FGQzJFRkJG NzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFaZ2hZbTV6eFQ0U1VjR3FN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3Bhbk5DTEkyUVpnaFltNXp4VDRTVWNHcU1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF OEE5L0I1N0FGQzJFRkJGNzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFa Z2hZbTV6eFQ0U1VjR3FNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCWcH/H0SwTDDVHPf6E2AKzkeA3egWj5yG0nybfcquD2WTBexPvLdFrMnMdpQAp YWnhstrhzSkv3a5JQzmX0LkaAC0cxCkqYhkvPvE0R7YxLrKXAR6CeGDazHinf+0W 56JAjGdeT6N1KRSzgn0kALQhZMOG+KtqumaZQk+j/KHQ/OJQHVDB61Z+5N5cayFN BDdKBC7rTwOYr8cOokSyHD3yz3Cep2orEfBQYG532NUO1aDTSukDT8VxDf6DKtn1 XyugkQiazByIbOk8qtxk8tdr38NwE7VRvKelu8lW1Iedsr7aMkLXTeStJxIpBsOs gmBNymoyiS4nZ6a+QQAbW1s1 -----END CERTIFICATE-----Generated at Mon Mar 2 00:09:25 2026 by rpki-client