$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: LxfORp0717xwEc5bXztq2owkzRZmECJtf4BsVl8VILU= Subject key identifier: 58:78:5B:BB:31:DD:CE:56:35:CF:57:F0:A9:14:C5:83:F2:FA:67:52 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 052B Signing time: Sat 04 Apr 2026 23:19:25 +0000 Manifest this update: Sat 04 Apr 2026 23:19:24 +0000 Manifest next update: Sat 11 Apr 2026 23:19:24 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: 0TuFF5c8tJcFUgmBZQ9adjM4zmuSD6oubBRMiQyNCYA=) 2: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=) 3: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Apr 4 23:19:24 2026 GMT Not After : Apr 11 23:19:24 2026 GMT Subject: CN=69d19c7c-3765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:d2:e1:ac:ab:bf:04:bb:0a:51:15:ff:e8: 86:52:81:80:86:9d:0d:a5:d5:ef:47:b5:e7:5b:5a: a9:d4:49:d9:42:3b:15:78:c4:14:d2:14:b2:be:62: 03:5a:27:eb:6c:c0:b4:08:a6:dc:9e:21:b4:63:4c: 03:6d:c5:56:dd:59:7b:5b:eb:cf:ed:17:bb:06:a1: 9a:11:02:b3:e2:e6:74:38:97:fe:83:83:02:37:8b: 51:34:ba:a5:70:32:3c:9a:be:da:da:97:2f:df:97: 45:e9:e4:be:9c:e2:6e:f4:31:d4:ea:b7:b0:07:17: 83:c4:62:4c:7e:59:70:5c:84:f4:3b:1c:21:01:e6: dc:7a:27:32:5c:d8:e3:d1:6c:b6:79:a0:cc:b6:f7: c2:30:48:d0:45:eb:d7:d6:08:f9:e9:40:32:9a:2c: 72:5f:cd:a7:c3:86:80:e7:5e:f1:3a:b0:58:94:4e: 97:27:12:47:9d:51:66:c2:96:31:d6:f6:bd:02:04: ef:fb:1d:31:e5:12:6e:eb:f6:0a:2c:da:aa:d0:f1: 3e:aa:66:15:8f:43:80:18:be:cc:75:72:58:c6:73: c3:ac:80:37:ee:6e:b1:86:7b:fd:cf:66:6d:26:2c: 8e:b2:c7:33:1f:8f:f8:bf:ba:80:c0:66:47:1d:a7: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:5B:BB:31:DD:CE:56:35:CF:57:F0:A9:14:C5:83:F2:FA:67:52 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:af:e4:06:2d:bc:6a:0f:8a:42:25:1f:ea:d3:39:fa:a4:1b: 6a:84:a3:a6:ed:be:60:4b:73:43:45:40:bd:dc:44:11:0b:10: 97:5d:7b:ca:45:7e:a3:17:76:e6:2d:f1:df:8b:5d:64:89:06: 75:bd:dd:da:7d:45:f1:d5:52:95:63:52:da:f8:f9:9f:e5:cc: 2b:93:f7:5f:75:9d:8f:8e:24:86:b8:82:ad:ae:2f:77:46:5d: a1:c8:7c:87:cb:50:a8:3c:d5:f7:a4:9f:63:58:b9:7e:87:c5: fd:eb:27:13:c3:c4:69:18:0b:60:ab:eb:63:fc:76:e4:10:c7: ce:7d:73:4a:ac:29:5f:66:d3:31:c1:13:a5:08:0b:49:09:57: cc:96:b0:e9:95:6e:01:e6:5d:3e:e0:be:5e:24:eb:a0:a8:42: a5:9a:f1:23:63:e1:41:cf:64:0e:df:ec:b2:37:43:c8:72:e5: 42:a2:e3:88:49:77:50:4e:3e:83:84:97:1d:d7:bd:a7:7d:1c: 48:a4:67:1c:bf:72:55:38:8b:3b:33:67:0c:92:7c:c0:36:94: e1:39:94:78:8c:4b:f3:24:19:ac:5c:9f:23:1e:ce:06:8e:63: 77:09:b5:3b:de:82:57:cb:68:ac:45:cd:25:6d:1d:3e:ef:7d: b8:dd:20:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjYwNDA0MjMxOTI0WhcNMjYwNDExMjMxOTI0WjAYMRYwFAYD VQQDEw02OWQxOWM3Yy0zNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBnS4ayrvwS7ClEV/+iGUoGAhp0NpdXvR7XnW1qp1EnZQjsVeMQU0hSyvmID WifrbMC0CKbcniG0Y0wDbcVW3Vl7W+vP7Re7BqGaEQKz4uZ0OJf+g4MCN4tRNLql cDI8mr7a2pcv35dF6eS+nOJu9DHU6rewBxeDxGJMfllwXIT0OxwhAebceicyXNjj 0Wy2eaDMtvfCMEjQRevX1gj56UAymixyX82nw4aA517xOrBYlE6XJxJHnVFmwpYx 1va9AgTv+x0x5RJu6/YKLNqq0PE+qmYVj0OAGL7MdXJYxnPDrIA37m6xhnv9z2Zt JiyOssczH4/4v7qAwGZHHafv2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh4W7sx 3c5WNc9X8KkUxYPy+mdSMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFq/kBi28ag+KQiUf6tM5+qQbaoSjpu2+YEtzQ0VAvdxEEQsQl117ykV+oxd2 5i3x34tdZIkGdb3d2n1F8dVSlWNS2vj5n+XMK5P3X3Wdj44khriCra4vd0Zdoch8 h8tQqDzV96SfY1i5fofF/esnE8PEaRgLYKvrY/x25BDHzn1zSqwpX2bTMcETpQgL SQlXzJaw6ZVuAeZdPuC+XiTroKhCpZrxI2PhQc9kDt/ssjdDyHLlQqLjiEl3UE4+ g4SXHde9p30cSKRnHL9yVTiLOzNnDJJ8wDaU4TmUeIxL8yQZrFyfIx7OBo5jdwm1 O96CV8torEXNJW0dPu99uN0gHQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:19 2026 by rpki-client