$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: SV2kMIpw1a9CfmBECabWByNIe17pq4FebaNTT+ql1+g= Subject key identifier: 99:A1:33:B5:0E:AF:4D:DC:9E:E6:53:1C:C9:C8:16:53:31:5C:AB:55 Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 0300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 02EC Signing time: Wed 25 Mar 2026 00:58:22 +0000 Manifest this update: Wed 25 Mar 2026 00:58:22 +0000 Manifest next update: Wed 01 Apr 2026 00:58:22 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: mQjnoyhuIbCE0FYyEkPC6CfZkE81NNHFYBpQxkZg9Go=) 2: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: GLugrqwwQZmmzbcCNZXH5Ie9zKy10oZO0jW/+Bq1pvo=) 3: 899B070834D511ED99B1921FC4F9AE02.roa (hash: LSg6DX28WaeWtngQ2Zn9zwO7f5A+q2ZTTUwMeuMJ6JY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E, serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Mar 25 00:58:22 2026 GMT Not After : Apr 1 00:58:22 2026 GMT Subject: CN=69c3332e-3b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:da:ad:6d:5d:3d:86:b8:7c:8b:d2:ae:9f:e7: ea:8a:82:e3:b2:ce:8d:c4:72:a0:78:a5:2b:96:90: 2d:fc:d2:87:34:e3:af:ba:eb:43:15:43:99:f2:11: a5:c9:9e:a6:9e:f7:a5:d0:8d:3d:ad:51:6a:90:e6: 3e:c8:28:e7:5d:9e:46:14:fa:0c:6b:28:b9:ec:da: bc:2f:b1:cf:b8:8e:14:d7:74:31:9e:8b:54:5d:57: b4:a3:39:03:e2:d0:95:91:d6:cd:85:01:17:e8:6d: 61:fd:2e:df:2a:30:b4:39:f7:60:f0:cc:bc:0b:36: 2f:ae:ed:72:94:b8:3c:5c:74:8d:89:27:55:52:e5: e6:f5:c3:8c:42:76:8a:86:b0:c6:c2:e7:b9:48:3d: b1:86:75:5b:63:7c:3a:d9:0a:70:3f:dd:77:ca:f5: 0f:e6:53:9f:ce:aa:a2:e4:cf:8f:e6:7e:b6:76:6f: ba:0c:52:95:3b:bc:30:b7:d7:d2:ee:9b:9b:26:f8: bb:5b:2f:83:f3:8e:d5:a3:0a:3b:29:90:ea:19:1b: 06:1e:23:8a:96:dc:f9:04:d0:9f:9b:6f:45:2a:51: d6:72:3d:3f:b5:1f:09:b8:ca:63:2e:38:95:59:f6: 91:c8:66:70:0d:3d:ff:a9:f7:a0:54:ee:dd:55:ce: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A1:33:B5:0E:AF:4D:DC:9E:E6:53:1C:C9:C8:16:53:31:5C:AB:55 X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ab:39:6f:81:4d:41:4c:03:15:0e:d9:13:5b:c8:0d:56:fa: b3:58:c1:4a:0e:5e:14:1e:28:b7:52:8a:0f:c1:9b:38:0b:1f: cb:1f:70:d7:64:29:20:5d:3c:27:e5:45:91:df:d6:aa:80:45: ed:a9:4f:25:66:47:51:51:d6:96:6b:23:8d:d7:30:70:54:8e: bb:6c:e8:31:db:d8:f2:51:24:28:48:77:b5:3b:9c:48:8a:6b: 6d:11:d4:9d:a8:40:10:38:f3:c3:57:f5:da:75:53:25:6f:93: c3:28:1e:bf:2e:a3:72:83:5d:b7:d7:f9:92:a5:fd:c6:7f:8f: 1f:ef:5f:a8:a4:da:cc:f3:1d:e1:a2:36:e0:82:0c:19:9a:a6: b4:3b:26:74:63:47:e2:02:28:68:8a:23:46:73:9e:b8:6a:67: ea:07:29:60:71:a4:43:f9:5f:1d:98:0f:0d:68:0c:9e:4a:04: 07:ae:3f:09:11:fb:1c:92:b8:f9:b5:b7:57:70:da:ed:6b:8f: a5:40:00:24:eb:d8:aa:47:21:a5:9d:4a:b3:ce:07:e0:59:5b: 7e:c5:7a:75:3e:75:f6:7b:63:d5:a5:29:27:d1:16:aa:a7:c6: e0:de:86:cf:84:cf:97:4f:64:54:ec:98:c1:5b:68:ae:14:eb: 6e:68:3b:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjYwMzI1MDA1ODIyWhcNMjYwNDAxMDA1ODIyWjAYMRYwFAYD VQQDEw02OWMzMzMyZS0zYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69qtbV09hrh8i9Kun+fqioLjss6NxHKgeKUrlpAt/NKHNOOvuutDFUOZ8hGl yZ6mnvel0I09rVFqkOY+yCjnXZ5GFPoMayi57Nq8L7HPuI4U13QxnotUXVe0ozkD 4tCVkdbNhQEX6G1h/S7fKjC0Ofdg8My8CzYvru1ylLg8XHSNiSdVUuXm9cOMQnaK hrDGwue5SD2xhnVbY3w62QpwP913yvUP5lOfzqqi5M+P5n62dm+6DFKVO7wwt9fS 7pubJvi7Wy+D847Vowo7KZDqGRsGHiOKltz5BNCfm29FKlHWcj0/tR8JuMpjLjiV WfaRyGZwDT3/qfegVO7dVc6swQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmhM7UO r03cnuZTHMnIFlMxXKtVMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC6s5b4FNQUwDFQ7ZE1vIDVb6s1jBSg5eFB4ot1KKD8GbOAsfyx9w12QpIF08 J+VFkd/WqoBF7alPJWZHUVHWlmsjjdcwcFSOu2zoMdvY8lEkKEh3tTucSIprbRHU nahAEDjzw1f12nVTJW+Twygevy6jcoNdt9f5kqX9xn+PH+9fqKTazPMd4aI24IIM GZqmtDsmdGNH4gIoaIojRnOeuGpn6gcpYHGkQ/lfHZgPDWgMnkoEB64/CRH7HJK4 +bW3V3Da7WuPpUAAJOvYqkchpZ1Ks84H4FlbfsV6dT519ntj1aUpJ9EWqqfG4N6G z4TPl09kVOyYwVtorhTrbmg7xQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:27:03 2026 by rpki-client