$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json) Hash identifier: Uia110ChXHe1aTIMibJ/j8MqLQXmF6sS99lDQ/5Flzg= Subject key identifier: F6:9E:23:9C:FA:9C:28:09:94:D0:FA:2E:15:E3:64:13:32:D1:26:2C Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft Manifest number: 68 Signing time: Wed 25 Mar 2026 07:08:51 +0000 Manifest this update: Wed 25 Mar 2026 07:08:51 +0000 Manifest next update: Wed 01 Apr 2026 07:08:51 +0000 Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: JmSVvE5SWpECXyD2+23KFbYedDZGijlJxYcYC063Vdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Validity Not Before: Mar 25 07:08:51 2026 GMT Not After : Apr 1 07:08:51 2026 GMT Subject: CN=69c38a03-51b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a4:48:46:2c:44:2b:a1:4f:59:a9:8d:be:38: e6:92:bc:30:1e:bb:a5:16:30:4a:4e:df:23:1a:0e: f2:99:18:38:e6:ad:8a:47:33:88:49:58:92:d9:30: ea:46:f7:61:4f:8a:78:be:9d:ea:68:e5:fc:3f:a6: f4:b8:0c:0e:c4:5d:18:77:40:e7:6a:08:a4:33:20: 38:d8:d1:ef:e5:2f:9e:56:50:00:49:8d:7d:87:55: d8:1e:c5:18:39:2d:5a:aa:af:af:b5:2e:a3:0a:9f: c6:8e:39:ff:d9:c4:63:a5:90:b0:a6:e9:f0:91:48: 45:ba:04:85:46:35:f6:f1:4b:b2:49:26:ee:e9:e9: c8:20:e7:81:2c:d9:ce:58:e2:8a:98:b2:89:67:7e: e1:d3:6a:a8:a2:8d:55:c4:5b:f8:4b:0a:d3:1d:7c: 91:49:f8:b7:6f:99:36:55:ee:65:9a:40:0f:23:d3: 1a:5e:39:c1:84:6d:e5:32:52:9e:c5:59:01:fa:32: 05:f3:11:f9:d2:1a:5d:58:83:c6:48:2b:41:82:fb: 49:5a:72:c6:20:52:e9:0d:61:5f:c7:06:2d:05:e5: 87:1a:69:df:74:21:ff:9d:46:d7:84:f8:31:96:e9: 59:99:3d:80:fe:9e:bc:7c:11:f7:02:5a:ce:e5:cf: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:23:9C:FA:9C:28:09:94:D0:FA:2E:15:E3:64:13:32:D1:26:2C X509v3 Authority Key Identifier: keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:3e:c8:9d:1b:9c:61:c3:83:1f:5b:0c:b8:44:bc:3d:77:f6: 5b:f5:38:39:2f:36:ef:7b:33:55:20:a7:11:fa:66:ed:cc:94: 91:49:46:12:d3:5d:0c:be:25:1c:c4:6f:c2:8a:32:58:5b:ad: cb:26:1b:db:d6:0b:b6:72:5c:e9:32:36:bd:95:41:72:4a:3c: 7a:b0:88:e8:f0:be:8c:c5:4e:42:fc:09:0e:98:a9:05:80:d3: 29:bf:ad:5c:a4:a0:eb:7a:5d:db:89:7e:d5:aa:19:be:fe:12: d4:00:17:42:9f:59:fc:87:fe:d4:4e:2f:14:4c:ef:91:8a:00: b9:50:b1:43:7a:2b:ab:56:0c:ae:e1:fb:a0:8a:0a:52:cd:56: dd:d8:1e:f3:b1:ae:89:2e:b8:32:c1:bb:39:27:4e:d6:fe:71: 16:7b:12:9e:e1:d5:db:08:8b:50:96:29:65:ac:00:1f:a1:18: db:23:de:82:98:7f:27:f2:24:b1:3f:5c:98:a8:22:a8:c4:76: 77:f7:d1:27:9d:c4:d0:56:f1:66:97:f3:90:e1:af:0e:0b:ad: 20:90:68:57:50:00:4f:31:cd:1f:c0:9d:b8:b7:a2:28:a9:c4: c5:f4:89:4d:74:d7:1e:aa:f4:b7:55:b5:8c:a7:5f:f1:23:c3: 21:f0:86:60 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQ0U3MzYwQkQxQTk0RTg5MTdCRDM2NzI0MzNGODIxRUM3 ODBBOEQyODAeFw0yNjAzMjUwNzA4NTFaFw0yNjA0MDEwNzA4NTFaMBgxFjAUBgNV BAMTDTY5YzM4YTAzLTUxYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDipEhGLEQroU9ZqY2+OOaSvDAeu6UWMEpO3yMaDvKZGDjmrYpHM4hJWJLZMOpG 92FPini+nepo5fw/pvS4DA7EXRh3QOdqCKQzIDjY0e/lL55WUABJjX2HVdgexRg5 LVqqr6+1LqMKn8aOOf/ZxGOlkLCm6fCRSEW6BIVGNfbxS7JJJu7p6cgg54Es2c5Y 4oqYsolnfuHTaqiijVXEW/hLCtMdfJFJ+LdvmTZV7mWaQA8j0xpeOcGEbeUyUp7F WQH6MgXzEfnSGl1Yg8ZIK0GC+0lacsYgUukNYV/HBi0F5Ycaad90If+dRteE+DGW 6VmZPYD+nrx8EfcCWs7lz0KFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9p4jnPqc KAmU0PouFeNkEzLRJiwwHwYDVR0jBBgwFoAUznNgvRqU6JF702ckM/gh7HgKjSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0FGRTRBOTBBOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpGNzAyY2tNX2doN0hnS2pT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem5OZ3ZScVU2SkY3MDJja01fZ2g3SGdLalNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0FGRTRBOTBBOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpG NzAyY2tNX2doN0hnS2pTZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCSPsidG5xhw4MfWwy4RLw9d/Zb9Tg5LzbvezNVIKcR+mbtzJSRSUYS010MviUc xG/CijJYW63LJhvb1gu2clzpMja9lUFySjx6sIjo8L6MxU5C/AkOmKkFgNMpv61c pKDrel3biX7Vqhm+/hLUABdCn1n8h/7UTi8UTO+RigC5ULFDeiurVgyu4fugigpS zVbd2B7zsa6JLrgywbs5J07W/nEWexKe4dXbCItQlillrAAfoRjbI96CmH8n8iSx P1yYqCKoxHZ399EnncTQVvFml/OQ4a8OC60gkGhXUABPMc0fwJ24t6IoqcTF9IlN dNceqvS3VbWMp1/xI8Mh8IZg -----END CERTIFICATE-----Generated at Thu Mar 26 04:45:26 2026 by rpki-client