$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft File: 3panNCLI2QZghYm5zxT4SUcGqMM.mft (raw, json) Hash identifier: wM+XjiERhGVysxGccwvzaDQznjziNUkC0EgYQMLAMUk= Subject key identifier: 59:D1:74:5A:09:C0:C4:F8:D2:12:1D:F8:9D:21:E7:AE:3F:A4:23:52 Authority key identifier: DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 Certificate issuer: /CN=A91BE8A9/serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft Manifest number: 2E Signing time: Sun 19 Apr 2026 08:17:05 +0000 Manifest this update: Sun 19 Apr 2026 08:17:04 +0000 Manifest next update: Sun 26 Apr 2026 08:17:04 +0000 Files and hashes: 1: 3panNCLI2QZghYm5zxT4SUcGqMM.crl (hash: eaB6w3zorPLk5dlCmZ2xqtrtEklWM5l/gz+MLAZuG3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8A9, serialNumber=DE96A73422C8D906608589B9CF14F8494706A8C3 Validity Not Before: Apr 19 08:17:04 2026 GMT Not After : Apr 26 08:17:04 2026 GMT Subject: CN=69e48f81-7639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:1f:9b:02:1e:cb:65:bf:3d:70:dd:53:23: 78:80:f1:12:6f:d6:c9:29:97:17:42:a8:e6:19:a0: 29:19:82:4e:00:49:40:e7:f8:86:3f:22:a1:00:8d: 0b:83:d9:0c:3a:f5:30:68:ca:6b:7b:19:7e:79:ef: c2:9e:2d:f1:f8:4a:48:1b:87:f3:7e:4c:45:2c:3b: 2d:e2:cf:e7:89:a1:b9:89:fe:d0:91:37:c6:a2:40: 9d:2a:98:93:93:d4:a1:29:d3:5b:2a:88:24:1a:e1: b5:72:b0:c0:83:3e:c6:17:81:fc:82:8e:44:b2:a2: cb:f0:34:da:0f:cb:8d:08:90:8a:39:d9:8e:ab:9d: c2:05:e2:f6:28:76:ae:a9:47:5e:fa:99:32:f9:e3: 73:55:87:fc:f4:66:41:26:50:32:73:33:7b:c0:ab: 26:47:d8:80:79:03:88:c2:9b:6c:99:83:e8:dd:8f: 2e:99:69:64:bf:22:8e:3a:58:fd:19:35:da:5f:ba: 27:e8:fb:5a:7c:9b:e7:78:6b:6e:c8:aa:8d:4c:59: 50:6a:b1:54:ab:fc:80:5f:cb:2b:96:54:a7:c1:98: 7b:13:8f:c0:29:01:9a:18:59:dc:66:42:ee:15:b0: ef:c1:d5:32:08:83:5c:61:15:98:31:fe:10:34:ac: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D1:74:5A:09:C0:C4:F8:D2:12:1D:F8:9D:21:E7:AE:3F:A4:23:52 X509v3 Authority Key Identifier: keyid:DE:96:A7:34:22:C8:D9:06:60:85:89:B9:CF:14:F8:49:47:06:A8:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3panNCLI2QZghYm5zxT4SUcGqMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/B57AFC2EFBF711F08DC1D818716F56BC/3panNCLI2QZghYm5zxT4SUcGqMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7f:5c:05:92:6f:1c:9c:63:e5:fa:a8:73:3f:05:9a:ed:ff: 44:11:03:a7:03:75:98:d5:14:d7:9c:08:c0:2f:b6:04:37:d4: b8:59:19:e2:65:87:80:f4:5e:3b:84:c6:b6:4b:ef:1b:0c:41: 8f:c6:5e:cc:59:60:c9:48:6e:3f:f8:bd:92:e8:3e:45:7b:41: 37:d3:4d:0b:ea:b1:52:1e:7c:26:ac:f5:b0:98:2f:8a:3d:2c: 45:17:ee:e7:41:75:2a:aa:64:35:03:42:2e:02:95:4b:ce:08: da:dc:ca:fa:8f:00:19:e4:ce:25:7b:27:e0:f5:13:3f:34:c8: 34:54:12:e5:af:59:db:eb:c5:fc:59:3d:df:a7:20:4e:a7:d5: 68:fc:76:60:85:e7:6a:6b:fb:e8:84:18:02:39:10:74:fc:6f: 0b:aa:21:08:25:7c:89:a2:4b:17:0d:ad:b7:47:37:4c:57:cd: e1:a0:60:63:b5:17:09:4b:66:e6:a5:6e:58:de:45:a2:60:39: ca:16:7c:7d:db:de:b9:47:5a:78:96:58:46:9b:d3:45:1a:13: ff:ed:38:fa:89:40:af:4e:60:ea:2a:22:2e:cd:e4:f0:0d:0b: b5:47:32:7a:25:ab:7f:6b:2c:af:56:5a:02:bb:a2:d7:b4:84: 3f:0f:f2:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RThBOTExMC8GA1UEBRMoREU5NkE3MzQyMkM4RDkwNjYwODU4OUI5Q0YxNEY4NDk0 NzA2QThDMzAeFw0yNjA0MTkwODE3MDRaFw0yNjA0MjYwODE3MDRaMBgxFjAUBgNV BAMTDTY5ZTQ4ZjgxLTc2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKHh+bAh7LZb89cN1TI3iA8RJv1skplxdCqOYZoCkZgk4ASUDn+IY/IqEAjQuD 2Qw69TBoymt7GX5578KeLfH4Skgbh/N+TEUsOy3iz+eJobmJ/tCRN8aiQJ0qmJOT 1KEp01sqiCQa4bVysMCDPsYXgfyCjkSyosvwNNoPy40IkIo52Y6rncIF4vYodq6p R176mTL543NVh/z0ZkEmUDJzM3vAqyZH2IB5A4jCm2yZg+jdjy6ZaWS/Io46WP0Z Ndpfuifo+1p8m+d4a27Iqo1MWVBqsVSr/IBfyyuWVKfBmHsTj8ApAZoYWdxmQu4V sO/B1TIIg1xhFZgx/hA0rOA/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWdF0WgnA xPjSEh34nSHnrj+kI1IwHwYDVR0jBBgwFoAU3panNCLI2QZghYm5zxT4SUcGqMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFOEE5L0I1N0FGQzJFRkJG NzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFaZ2hZbTV6eFQ0U1VjR3FN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM3Bhbk5DTEkyUVpnaFltNXp4VDRTVWNHcU1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF OEE5L0I1N0FGQzJFRkJGNzExRjA4REMxRDgxODcxNkY1NkJDLzNwYW5OQ0xJMlFa Z2hZbTV6eFQ0U1VjR3FNTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAGf1wFkm8cnGPl+qhzPwWa7f9EEQOnA3WY1RTXnAjAL7YEN9S4WRniZYeA9F47 hMa2S+8bDEGPxl7MWWDJSG4/+L2S6D5Fe0E3000L6rFSHnwmrPWwmC+KPSxFF+7n QXUqqmQ1A0IuApVLzgja3Mr6jwAZ5M4leyfg9RM/NMg0VBLlr1nb68X8WT3fpyBO p9Vo/HZghedqa/vohBgCORB0/G8LqiEIJXyJoksXDa23RzdMV83hoGBjtRcJS2bm pW5Y3kWiYDnKFnx92965R1p4llhGm9NFGhP/7Tj6iUCvTmDqKiIuzeTwDQu1RzJ6 Jat/ayyvVloCu6LXtIQ/D/IK -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:53 2026 by rpki-client