$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: Lze8FzGNGGVJ/nzLtmr03FWx96Jdtq4sMGPmgsOVHo4= Subject key identifier: 5C:52:AF:7A:E3:71:6C:F8:07:53:B1:F6:63:F7:96:60:C1:C9:21:9F Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 0A1B Signing time: Tue 24 Mar 2026 16:33:28 +0000 Manifest this update: Tue 24 Mar 2026 16:33:28 +0000 Manifest next update: Tue 31 Mar 2026 16:33:28 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: quDeyWDekHJJgWm50R0ahqTK/Ey25HTJPh//iTyEWaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Mar 24 16:33:28 2026 GMT Not After : Mar 31 16:33:28 2026 GMT Subject: CN=69c2bcd8-df2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:5b:42:76:67:67:1f:fd:15:a8:eb:f7:c9: de:eb:56:3e:cc:26:ce:c6:91:7e:23:8b:56:f7:6c: 53:59:d7:25:63:6f:12:d3:48:54:cb:27:3c:a9:3b: 23:4d:49:3c:09:0b:f3:5b:de:e8:b7:c2:c7:7a:27: 9d:2b:ed:43:c5:c2:5f:98:c8:4f:7b:9d:7b:e7:c6: b9:c6:ac:b9:77:ce:10:53:7c:b9:98:ba:ed:0b:ee: 36:0b:14:b2:34:a1:d1:76:10:3a:07:97:b3:83:85: 78:ba:df:b2:c2:63:9a:8d:41:58:59:ac:e8:32:2e: 16:e6:8a:7d:9b:79:93:98:b9:35:d6:cd:ff:c2:de: 62:d2:08:10:0d:f5:75:0e:40:11:64:50:c5:02:6b: 65:3d:c1:3c:a8:33:2b:5c:0c:e4:8c:06:eb:9b:27: 95:d4:f4:13:6a:d0:9a:ce:b5:1f:aa:fe:9a:da:d0: 77:37:d2:8f:16:79:9c:2d:29:11:82:1a:90:c1:98: 02:99:e9:77:db:e5:69:0f:ff:b1:ee:0c:f7:56:c0: 26:fe:ca:8e:06:5d:be:f9:c6:ea:0f:16:d4:96:64: c7:73:0c:3d:76:9e:4f:61:d9:70:10:cf:0b:0f:74: ce:00:c4:c2:6f:7b:df:15:66:33:1f:70:c9:09:2b: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:52:AF:7A:E3:71:6C:F8:07:53:B1:F6:63:F7:96:60:C1:C9:21:9F X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:29:6b:fc:cb:3e:2a:f1:43:e8:b0:ae:55:ab:ee:86:7d:d9: 5b:c0:9b:0e:eb:40:f8:01:00:e6:97:f2:e5:fd:2d:49:c0:69: 59:32:d8:ac:74:25:4d:df:aa:d2:1b:c3:29:bf:f8:f8:24:ee: 65:2b:2a:70:6d:50:74:ed:0d:7a:76:e8:4d:8a:c2:59:b2:60: 44:89:2c:91:21:bf:99:0b:5d:cf:95:59:a5:13:f9:e3:0f:00: e5:c4:6a:ac:d6:e0:bc:b2:5c:fe:c5:16:fd:27:95:94:8a:fc: 9f:0c:ca:9c:5f:fb:3a:d8:f3:ce:8a:46:04:09:fe:54:5c:c1: 3d:68:ce:47:37:d8:22:8e:04:11:5c:ac:c4:7a:dd:49:a3:79: dc:58:8a:d5:b7:0b:ec:30:08:3b:71:a2:7b:e5:55:b8:04:d8: da:b9:56:94:c6:68:47:64:91:ac:fa:21:1d:10:ba:59:b4:2c: b3:15:10:8d:b8:89:ee:e7:b8:62:51:b9:c5:22:73:f6:1a:38: b8:cb:c9:7c:7d:01:09:67:55:52:15:73:c0:ee:7b:d2:20:63: 0b:1c:2f:f3:02:ee:46:68:43:68:60:bf:a2:01:ab:c0:04:3e: ec:3d:45:99:1b:91:61:1f:83:7a:d3:84:df:85:2e:44:a8:e8: 7d:66:bd:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjYwMzI0MTYzMzI4WhcNMjYwMzMxMTYzMzI4WjAYMRYwFAYD VQQDEw02OWMyYmNkOC1kZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw9bQnZnZx/9Fajr98ne61Y+zCbOxpF+I4tW92xTWdclY28S00hUyyc8qTsj TUk8CQvzW97ot8LHeiedK+1DxcJfmMhPe51758a5xqy5d84QU3y5mLrtC+42CxSy NKHRdhA6B5ezg4V4ut+ywmOajUFYWazoMi4W5op9m3mTmLk11s3/wt5i0ggQDfV1 DkARZFDFAmtlPcE8qDMrXAzkjAbrmyeV1PQTatCazrUfqv6a2tB3N9KPFnmcLSkR ghqQwZgCmel32+VpD/+x7gz3VsAm/sqOBl2++cbqDxbUlmTHcww9dp5PYdlwEM8L D3TOAMTCb3vfFWYzH3DJCStJFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxSr3rj cWz4B1Ox9mP3lmDBySGfMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAailr/Ms+KvFD6LCuVavuhn3ZW8CbDutA+AEA5pfy5f0tScBpWTLYrHQlTd+q 0hvDKb/4+CTuZSsqcG1QdO0NenboTYrCWbJgRIkskSG/mQtdz5VZpRP54w8A5cRq rNbgvLJc/sUW/SeVlIr8nwzKnF/7OtjzzopGBAn+VFzBPWjORzfYIo4EEVysxHrd SaN53FiK1bcL7DAIO3Gie+VVuATY2rlWlMZoR2SRrPohHRC6WbQssxUQjbiJ7ue4 YlG5xSJz9ho4uMvJfH0BCWdVUhVzwO570iBjCxwv8wLuRmhDaGC/ogGrwAQ+7D1F mRuRYR+DetOE34UuRKjofWa9kA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:30:34 2026 by rpki-client