$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json) Hash identifier: jMGg7Vbacta7XCbeSzEYGf536YS37xBe4h7bMUrHHxg= Subject key identifier: D6:8F:C4:60:21:40:7B:D4:A7:48:3C:6F:4D:63:F0:62:1C:2F:1C:E8 Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft Manifest number: 3A Signing time: Sun 29 Mar 2026 08:12:38 +0000 Manifest this update: Sun 29 Mar 2026 08:12:38 +0000 Manifest next update: Sun 05 Apr 2026 08:12:38 +0000 Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: Wzo2t2s750E0gOnzrKmRSFf0WwDMaPpogW+IrRir1Q0=) 2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: BgD9Nozy6YrPBl3k/LaQh1iksmIlumLLGLfxZ8EsuWo=) 3: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: EjJ1CDCwau1fKrzrYHxK/Qrh8GUA8jF4SY+Z2pjXM+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 08:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Mar 29 08:12:38 2026 GMT Not After : Apr 5 08:12:38 2026 GMT Subject: CN=69c8def6-6e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:a2:05:d2:e9:42:03:1d:b3:48:38:a5:3b: a1:e3:49:16:27:7b:e3:d7:b8:b8:92:01:62:09:9e: 09:ff:9f:7d:ba:65:97:ad:17:15:b2:fa:d5:53:f0: b9:8b:97:37:69:12:9f:87:b2:91:bc:13:92:e7:cb: 09:1e:d1:ef:b6:43:b7:40:c0:5e:09:fc:5f:0d:78: e0:dd:79:95:c5:fa:c4:5d:4c:fa:0b:a6:4e:92:9b: 33:cd:09:a3:37:19:b6:6c:00:7d:eb:2d:ee:59:cf: ee:8b:20:11:09:48:49:f8:56:e7:ed:85:8b:2a:19: f2:9d:b9:72:0e:54:fd:f0:98:cb:b9:cf:b9:2b:16: 29:69:f2:8b:86:41:3e:d2:9f:e7:0e:d9:86:dc:56: 5a:27:e1:01:eb:91:96:0d:22:47:2a:82:02:70:78: 75:f9:e5:0a:e9:68:7f:e2:3b:3c:b7:dd:31:1d:08: bb:0a:df:84:f5:24:29:46:df:77:0a:f5:07:d4:2d: 2e:40:5f:7b:c1:4f:81:61:96:9e:46:01:05:c1:f8: e9:32:2b:50:b7:bb:4c:45:91:46:f1:c4:ba:57:52: 57:06:f5:94:7c:8d:6b:73:42:b0:1b:21:06:69:74: 91:7b:d5:86:fb:b4:a4:7e:16:b9:30:3e:a7:27:f5: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8F:C4:60:21:40:7B:D4:A7:48:3C:6F:4D:63:F0:62:1C:2F:1C:E8 X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9c:c7:78:d5:7e:dc:ee:a1:62:ef:32:7b:1c:1b:d6:90:fd: 4a:da:79:29:6b:33:ce:41:ce:f7:45:ad:be:12:c9:97:d1:ef: 62:69:f3:98:ec:23:29:6d:7d:22:af:97:bd:a7:d5:e1:7b:01: 8c:0a:cb:d1:0a:6b:74:e9:7e:a8:d9:49:ab:32:8c:2f:1e:ac: 8a:30:16:c5:2f:71:a5:08:12:a1:3c:be:86:6e:8f:34:75:9d: 79:6e:b4:80:e1:0a:f0:ac:9c:87:b4:90:87:48:16:ed:32:c2: ee:c5:86:02:fe:89:15:89:6c:00:38:1a:1c:76:52:8e:35:bd: 64:d9:f1:9a:85:52:55:e5:b0:fc:21:ea:6c:e8:29:07:91:ea: 29:85:b4:54:48:dd:6d:e6:f3:18:99:fa:de:5d:fc:2e:f2:3b: 69:5c:4a:e6:85:5e:d6:d3:9d:36:82:fb:29:43:60:43:86:db: d7:b5:88:75:d2:fa:41:ed:97:37:eb:6d:6b:e7:77:70:4b:17: 18:35:c5:13:7a:32:92:92:34:18:a8:c5:21:7e:5c:0a:65:53: 34:5d:f8:ac:a2:4b:25:98:da:17:cf:68:6f:e1:2f:cb:8f:b1: eb:ed:99:cc:27:f8:94:95:f7:50:05:5d:8b:b7:12:2c:f4:46: 2e:e0:02:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNjAzMjkwODEyMzhaFw0yNjA0MDUwODEyMzhaMBgxFjAUBgNV BAMTDTY5YzhkZWY2LTZlNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC83KIF0ulCAx2zSDilO6HjSRYne+PXuLiSAWIJngn/n326ZZetFxWy+tVT8LmL lzdpEp+HspG8E5Lnywke0e+2Q7dAwF4J/F8NeODdeZXF+sRdTPoLpk6SmzPNCaM3 GbZsAH3rLe5Zz+6LIBEJSEn4VufthYsqGfKduXIOVP3wmMu5z7krFilp8ouGQT7S n+cO2YbcVlon4QHrkZYNIkcqggJweHX55QrpaH/iOzy33TEdCLsK34T1JClG33cK 9QfULS5AX3vBT4Fhlp5GAQXB+OkyK1C3u0xFkUbxxLpXUlcG9ZR8jWtzQrAbIQZp dJF71Yb7tKR+FrkwPqcn9dslAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1o/EYCFA e9SnSDxvTWPwYhwvHOgwHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZX aks5aUZSMGFHZ0cyUWx2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRnMd41X7c7qFi7zJ7HBvWkP1K2nkpazPOQc73Ra2+EsmX0e9iafOY7CMpbX0i r5e9p9XhewGMCsvRCmt06X6o2UmrMowvHqyKMBbFL3GlCBKhPL6Gbo80dZ15brSA 4QrwrJyHtJCHSBbtMsLuxYYC/okViWwAOBocdlKONb1k2fGahVJV5bD8Ieps6CkH keophbRUSN1t5vMYmfreXfwu8jtpXErmhV7W0502gvspQ2BDhtvXtYh10vpB7Zc3 621r53dwSxcYNcUTejKSkjQYqMUhflwKZVM0XfisokslmNoXz2hv4S/Lj7Hr7ZnM J/iUlfdQBV2LtxIs9EYu4AKQ -----END CERTIFICATE-----Generated at Mon Mar 30 15:45:55 2026 by rpki-client