$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft File: 3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json) Hash identifier: Quk0yNwKt0SqOIMhKR7aYb71+B5dPiRqx90uD0Lfw80= Subject key identifier: 2C:38:88:85:28:4A:80:EB:18:73:08:D7:D8:34:3F:46:ED:05:A7:6E Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 Certificate issuer: /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft Manifest number: 11 Signing time: Sun 01 Mar 2026 10:34:42 +0000 Manifest this update: Sun 01 Mar 2026 10:34:41 +0000 Manifest next update: Sun 08 Mar 2026 10:34:41 +0000 Files and hashes: 1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: gU0+r8Z67Zj8t8DPIqkuNY6XbhRj9de3TEMcBmyenaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085 Validity Not Before: Mar 1 10:34:41 2026 GMT Not After : Mar 8 10:34:41 2026 GMT Subject: CN=69a41642-3aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:dc:bd:09:fc:3a:bf:e1:63:d1:7d:eb:69: b5:79:1d:52:1e:6c:7a:63:a7:3d:6b:ff:eb:66:63: 2d:3d:33:f2:89:35:25:25:63:62:ad:5b:4f:b1:ec: fb:ab:22:0b:3e:dd:19:f1:6e:20:f1:ae:ec:af:ef: b0:42:fb:7b:d7:37:4d:e6:65:a0:59:a5:ec:84:d4: a0:40:a4:dd:6b:84:a6:a8:7b:c5:f1:25:82:f9:e2: fb:ac:e7:e8:75:ef:8c:96:c0:17:1e:0c:96:aa:f4: 3b:a3:c2:ea:c9:72:a8:92:21:e1:16:c1:20:ef:09: 88:33:c7:5f:55:a0:8c:fb:6d:f2:3c:66:92:ec:d4: b3:a2:ec:c7:43:3a:38:a7:39:32:38:2a:88:ae:32: 8b:7e:c3:21:9f:c7:60:43:96:5d:7a:7c:b1:66:86: 43:44:9b:ed:06:dd:e3:9e:59:42:d1:27:9d:94:ad: 7d:63:c1:8b:8c:c3:e4:02:ff:7f:06:8d:1d:62:3e: 8a:3d:1a:e2:15:fe:a5:5c:37:c9:36:3c:8e:d3:e5: 4c:48:5f:6b:6b:5f:84:eb:ed:c4:26:34:31:66:fd: cc:9a:b5:3a:16:ab:c0:e1:d2:99:30:64:1b:32:37: d5:a2:2f:97:08:cc:64:eb:b7:84:12:1d:b8:bc:b3: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:38:88:85:28:4A:80:EB:18:73:08:D7:D8:34:3F:46:ED:05:A7:6E X509v3 Authority Key Identifier: keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f2:3c:3d:e4:e5:fe:14:a3:72:32:3e:c0:71:70:f7:47:22: 00:f7:b7:16:e7:4c:c6:dd:eb:cd:03:2f:b9:50:fe:4b:eb:95: 64:da:f2:70:8a:1d:aa:79:d8:ce:93:6b:aa:fa:d6:d3:87:19: a3:09:bb:ad:9d:5c:4a:d8:da:12:47:d3:6b:85:e8:bb:82:18: a5:50:a8:f1:00:f7:a2:c6:e4:af:44:b0:a5:5c:c8:33:6a:34: b9:e3:a4:df:8e:fe:c9:a6:11:ae:f6:4e:ec:e9:49:22:7d:33: 88:22:6b:b2:20:3b:61:fa:d6:5f:ea:81:7c:53:be:14:41:d2: 80:c0:6f:f8:2c:0d:2b:53:62:b5:93:c0:51:cd:dd:9b:54:92: d5:e6:c9:2f:37:5d:be:d6:52:98:13:35:6c:6d:f1:74:06:93: 1e:2c:26:94:59:00:ba:59:8b:ac:81:a7:e3:49:96:05:65:60: 9a:c6:48:46:81:69:c2:f7:8d:8c:34:c1:d4:de:a5:e7:f3:f2: 60:72:82:60:a8:e7:04:03:ae:bf:52:b8:4c:b8:48:3a:4f:1c: 0e:a3:02:46:52:57:54:82:5b:45:d2:47:4f:9a:08:90:62:a9: a4:33:bf:66:d7:13:ef:be:a0:80:8c:82:2e:ef:1a:d5:6a:8e: 85:0c:ca:8f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoREQwQUQyREU0QTc0NEQxQTMzQjExQkI2QUJEN0U2RUFD RUZEQzA4NTAeFw0yNjAzMDExMDM0NDFaFw0yNjAzMDgxMDM0NDFaMBgxFjAUBgNV BAMTDTY5YTQxNjQyLTNhZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC25ty9Cfw6v+Fj0X3rabV5HVIebHpjpz1r/+tmYy09M/KJNSUlY2KtW0+x7Pur Igs+3RnxbiDxruyv77BC+3vXN03mZaBZpeyE1KBApN1rhKaoe8XxJYL54vus5+h1 74yWwBceDJaq9DujwurJcqiSIeEWwSDvCYgzx19VoIz7bfI8ZpLs1LOi7MdDOjin OTI4KoiuMot+wyGfx2BDll16fLFmhkNEm+0G3eOeWULRJ52UrX1jwYuMw+QC/38G jR1iPoo9GuIV/qVcN8k2PI7T5UxIX2trX4Tr7cQmNDFm/cyatToWq8Dh0pkwZBsy N9WiL5cIzGTrt4QSHbi8swE3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULDiIhShK gOsYcwjX2DQ/Ru0Fp24wHwYDVR0jBBgwFoAU3QrS3kp0TRozsRu2q9fm6s79wIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzY1MEQwMEY2MDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJvenNSdTJxOWZtNnM3OXdJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM1FyUzNrcDBUUm96c1J1MnE5Zm02czc5d0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzY1MEQwMEY2MDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDLzNRclMza3AwVFJv enNSdTJxOWZtNnM3OXdJVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCc8jw95OX+FKNyMj7AcXD3RyIA97cW50zG3evNAy+5UP5L65Vk2vJwih2qedjO k2uq+tbThxmjCbutnVxK2NoSR9Nrhei7ghilUKjxAPeixuSvRLClXMgzajS546Tf jv7JphGu9k7s6UkifTOIImuyIDth+tZf6oF8U74UQdKAwG/4LA0rU2K1k8BRzd2b VJLV5skvN12+1lKYEzVsbfF0BpMeLCaUWQC6WYusgafjSZYFZWCaxkhGgWnC942M NMHU3qXn8/JgcoJgqOcEA66/UrhMuEg6TxwOowJGUldUgltF0kdPmgiQYqmkM79m 1xPvvqCAjIIu7xrVao6FDMqP -----END CERTIFICATE-----Generated at Mon Mar 2 01:06:22 2026 by rpki-client