$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: vnaOUId/iF5z31o22z6aFcK5ORW3ehdwsr2HTyey4To= Subject key identifier: 18:5C:3A:50:2F:63:48:37:06:93:DA:79:FC:0D:92:28:81:06:55:A9 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 0229 Signing time: Tue 24 Mar 2026 22:42:15 +0000 Manifest this update: Tue 24 Mar 2026 22:42:15 +0000 Manifest next update: Tue 31 Mar 2026 22:42:15 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: XdNrFi+CmzFcJMDAu0B/rroHHi6FCsY2/A2jUfV7vLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Mar 24 22:42:15 2026 GMT Not After : Mar 31 22:42:15 2026 GMT Subject: CN=69c31347-0919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a0:7a:85:dd:d1:ac:0c:c9:95:4d:ab:f2:f7: 7c:be:49:71:22:f1:ea:0f:78:21:b7:83:50:74:0f: d9:95:b0:8c:27:70:ad:15:63:f8:3b:9b:8b:44:6f: 46:c4:de:b8:7c:57:ca:d4:e5:c4:d1:cb:dd:f0:14: da:e3:92:ef:bd:d8:59:a4:35:82:61:44:3a:8f:1d: b1:d1:45:ce:be:b4:fa:83:a3:6e:d9:47:8c:61:8f: 75:54:2f:1c:6c:11:ef:22:d7:a9:db:ca:d3:28:21: e2:4a:0c:e0:93:dd:4c:9d:7c:00:3e:d5:28:31:d2: ee:49:95:2b:8a:17:b4:75:5f:f0:02:9b:af:c9:5f: 1d:c5:11:c5:f2:5d:8b:d8:b8:52:04:4e:be:88:a7: 5c:2b:fe:07:07:95:3f:a2:0c:48:0f:01:7e:79:9b: 03:23:22:5c:21:bb:21:fd:c1:cc:81:db:39:a5:e6: 1a:9a:08:0a:3d:0a:50:36:eb:17:ea:f5:67:94:50: c8:33:35:9b:77:cb:80:09:8d:ec:41:eb:fe:2d:d0: b5:d5:55:cf:2c:bc:98:42:c6:08:3c:41:4d:d7:e4: 54:a9:d8:77:43:5d:1b:a5:0b:16:cb:73:ae:10:c1: d8:6d:ef:24:df:87:e6:1f:b9:9c:a5:f7:c7:61:b1: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5C:3A:50:2F:63:48:37:06:93:DA:79:FC:0D:92:28:81:06:55:A9 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c6:78:9e:33:93:87:34:5a:43:1f:bb:fb:e1:e7:9e:19:b3: b4:f2:a9:75:9a:f1:95:2e:1b:16:2a:49:09:7a:56:3d:c9:2d: 5c:a7:1a:be:34:0e:58:10:58:b9:cc:01:15:42:50:52:25:5f: 99:6d:6f:05:ef:a6:c2:eb:7c:bb:03:98:fd:86:75:7b:ec:60: 0e:4b:90:3f:7e:8f:fd:12:c3:51:48:79:82:2e:51:7b:ee:5e: 28:9b:80:fc:4c:97:a9:7b:26:e4:6c:6e:23:16:15:5d:19:e4: 51:bd:68:81:5b:71:c8:0b:fb:48:83:b1:8b:cc:23:2f:32:61: ee:46:e8:10:1c:e9:2d:ab:79:ef:6b:b5:ab:d2:84:e8:f1:97: 1c:20:c3:52:86:07:f4:63:1b:48:5f:9c:17:3b:89:4c:03:c1: c5:98:62:78:36:1a:9d:7d:a6:15:a0:24:6d:0d:58:96:19:9b: 03:1f:37:9b:4c:79:b3:b4:fb:46:23:03:5f:3a:0e:50:81:1a: 7c:12:f6:53:86:af:43:a8:3f:e4:7b:aa:77:6b:39:3d:39:cb: e6:c5:ca:76:6d:1a:4e:87:18:b6:b7:35:08:5d:5a:80:14:8f: bf:79:f2:58:ae:38:6c:03:e0:52:5f:d2:42:8b:c1:11:0e:68: fe:35:8a:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjYwMzI0MjI0MjE1WhcNMjYwMzMxMjI0MjE1WjAYMRYwFAYD VQQDEw02OWMzMTM0Ny0wOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KB6hd3RrAzJlU2r8vd8vklxIvHqD3ght4NQdA/ZlbCMJ3CtFWP4O5uLRG9G xN64fFfK1OXE0cvd8BTa45LvvdhZpDWCYUQ6jx2x0UXOvrT6g6Nu2UeMYY91VC8c bBHvItep28rTKCHiSgzgk91MnXwAPtUoMdLuSZUrihe0dV/wApuvyV8dxRHF8l2L 2LhSBE6+iKdcK/4HB5U/ogxIDwF+eZsDIyJcIbsh/cHMgds5peYamggKPQpQNusX 6vVnlFDIMzWbd8uACY3sQev+LdC11VXPLLyYQsYIPEFN1+RUqdh3Q10bpQsWy3Ou EMHYbe8k34fmH7mcpffHYbHjnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhcOlAv Y0g3BpPaefwNkiiBBlWpMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB8Z4njOThzRaQx+7++HnnhmztPKpdZrxlS4bFipJCXpWPcktXKcavjQOWBBY ucwBFUJQUiVfmW1vBe+mwut8uwOY/YZ1e+xgDkuQP36P/RLDUUh5gi5Re+5eKJuA /EyXqXsm5GxuIxYVXRnkUb1ogVtxyAv7SIOxi8wjLzJh7kboEBzpLat572u1q9KE 6PGXHCDDUoYH9GMbSF+cFzuJTAPBxZhieDYanX2mFaAkbQ1YlhmbAx83m0x5s7T7 RiMDXzoOUIEafBL2U4avQ6g/5Huqd2s5PTnL5sXKdm0aTocYtrc1CF1agBSPv3ny WK44bAPgUl/SQovBEQ5o/jWK6A== -----END CERTIFICATE-----Generated at Thu Mar 26 00:57:57 2026 by rpki-client