$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: rzOr2ek37JlgRN6zOcpKCXAppHmvRE4ywk/QH+QTRi4= Subject key identifier: 3E:A6:9D:EC:CB:69:5D:2D:CE:AB:D9:D6:9B:F0:1F:05:32:F8:DC:CC Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1BC5 Signing time: Tue 24 Mar 2026 16:09:33 +0000 Manifest this update: Tue 24 Mar 2026 16:09:32 +0000 Manifest next update: Tue 31 Mar 2026 16:09:32 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: ug/Pcj8gMn6EgiAKfN/g7kH/QEHpqJjucamLOEV/nJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7110 (0x1bc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: Mar 24 16:09:32 2026 GMT Not After : Mar 31 16:09:32 2026 GMT Subject: CN=69c2b73c-e89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:d2:0f:1a:cb:ad:b2:86:0e:ad:ff:1a:37: 81:23:d0:b4:f9:09:ea:46:25:bb:bf:7e:9a:26:e5: 57:2a:3d:c3:f8:c3:50:78:59:98:02:ca:f7:c7:11: 97:c0:92:f8:e4:07:54:b7:41:0c:05:98:4a:cd:95: d8:35:da:a1:a4:71:4a:24:92:0a:c5:e3:d7:c9:ca: 0d:ff:29:4b:23:fe:ac:69:b6:bf:90:23:16:33:fc: c9:b8:d8:b8:7d:6f:49:70:4a:82:aa:bd:31:fe:80: 2d:ea:0a:88:a6:34:50:f6:28:85:41:b0:eb:29:3a: 80:4a:31:7d:4c:f8:c3:3b:d1:af:47:5f:57:90:b9: 20:60:d8:b0:17:70:e3:70:c1:81:7a:f8:f4:47:d1: d8:3f:40:f9:7b:64:bd:01:c0:12:18:0a:52:65:58: 08:68:f7:bc:1b:36:ff:b5:bc:31:e5:40:c8:2b:da: fa:00:16:5b:7d:33:75:44:dd:85:98:f4:a1:ac:50: 67:ef:83:2a:d0:4d:ec:b6:51:bd:24:eb:a4:cf:80: 97:d2:2f:7b:5e:67:24:31:4f:3e:04:e6:67:20:25: 3b:b5:44:3d:c1:82:2b:40:f1:33:e1:8a:1a:ef:9f: a8:3c:ba:e9:4d:33:45:8e:bb:6b:89:01:99:6d:74: b2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:9D:EC:CB:69:5D:2D:CE:AB:D9:D6:9B:F0:1F:05:32:F8:DC:CC X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6b:46:22:69:1e:81:66:98:0f:a3:0e:7a:1f:6a:9f:77:2d: e0:9f:d6:be:ce:a5:91:cc:af:51:1d:8d:4a:4e:a9:51:35:bc: f3:bb:f8:4c:3c:db:6c:63:7b:0d:35:ea:eb:74:c2:1f:fa:3b: 18:4b:a5:69:b0:7e:23:bf:c6:8a:cd:a1:0a:03:f4:ef:45:ec: a9:37:31:88:fa:f6:2d:ce:cb:de:7c:c4:fb:de:3f:23:2c:8b: ca:42:65:43:8e:3d:d3:6b:b2:b5:ac:09:f3:1b:52:d4:5c:7e: 7b:0a:f2:1b:aa:1b:d6:f7:08:75:ea:07:cf:60:e4:7c:ce:5b: 49:42:c5:2a:79:f2:c1:d9:25:8d:0d:06:7c:1f:ec:19:02:8d: cf:31:74:48:42:89:92:39:77:37:49:c8:9e:16:8d:f3:e7:be: c2:f1:0e:76:5c:e0:12:1e:d2:37:ef:10:20:20:ed:3a:84:2b: 30:11:60:e9:e6:af:52:02:fd:cc:d2:c9:2e:42:82:35:48:46: 74:0e:ab:12:35:10:bf:41:4c:73:0a:0b:3c:c8:85:a9:5e:3b: 0b:84:b0:27:2a:61:09:23:1e:95:b4:98:69:cf:43:fb:00:7f: 10:4b:ac:3d:1c:de:5b:99:fd:b1:49:37:fd:8a:a7:1a:2b:06: 24:3c:8a:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjYwMzI0MTYwOTMyWhcNMjYwMzMxMTYwOTMyWjAYMRYwFAYD VQQDEw02OWMyYjczYy1lODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH3SDxrLrbKGDq3/GjeBI9C0+QnqRiW7v36aJuVXKj3D+MNQeFmYAsr3xxGX wJL45AdUt0EMBZhKzZXYNdqhpHFKJJIKxePXycoN/ylLI/6saba/kCMWM/zJuNi4 fW9JcEqCqr0x/oAt6gqIpjRQ9iiFQbDrKTqASjF9TPjDO9GvR19XkLkgYNiwF3Dj cMGBevj0R9HYP0D5e2S9AcASGApSZVgIaPe8Gzb/tbwx5UDIK9r6ABZbfTN1RN2F mPShrFBn74Mq0E3stlG9JOukz4CX0i97XmckMU8+BOZnICU7tUQ9wYIrQPEz4Yoa 75+oPLrpTTNFjrtriQGZbXSyZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6mnezL aV0tzqvZ1pvwHwUy+NzMMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf2tGImkegWaYD6MOeh9qn3ct4J/Wvs6lkcyvUR2NSk6pUTW887v4TDzbbGN7 DTXq63TCH/o7GEulabB+I7/Gis2hCgP070XsqTcxiPr2Lc7L3nzE+94/IyyLykJl Q44902uytawJ8xtS1Fx+ewryG6ob1vcIdeoHz2DkfM5bSULFKnnywdkljQ0GfB/s GQKNzzF0SEKJkjl3N0nInhaN8+e+wvEOdlzgEh7SN+8QICDtOoQrMBFg6eavUgL9 zNLJLkKCNUhGdA6rEjUQv0FMcwoLPMiFqV47C4SwJyphCSMelbSYac9D+wB/EEus PRzeW5n9sUk3/YqnGisGJDyKvg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:03 2026 by rpki-client