$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft File: cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json) Hash identifier: nlisZblzzAfvKHf2yKwYCvhEV882gdI7FqYP9cyURrk= Subject key identifier: 44:82:79:8A:F6:8E:4B:D4:FD:5D:E0:CE:9F:C8:2C:DE:15:5E:64:E9 Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 Certificate issuer: /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Certificate serial: 0EA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft Manifest number: 0EA4 Signing time: Tue 24 Mar 2026 17:33:58 +0000 Manifest this update: Tue 24 Mar 2026 17:33:58 +0000 Manifest next update: Tue 31 Mar 2026 17:33:58 +0000 Files and hashes: 1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: 73JZC73KTGvpXi2rprTHmFS5NpMHnpSdJsEfhYQx8Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3749 (0xea5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7 Validity Not Before: Mar 24 17:33:58 2026 GMT Not After : Mar 31 17:33:58 2026 GMT Subject: CN=69c2cb06-76b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:05:4c:c1:76:09:32:99:68:dd:c1:a7:f2: 51:97:38:91:4f:86:2c:0d:d8:d9:83:f1:de:8c:28: ef:c7:2d:2f:fd:a0:f0:c9:31:33:14:cb:f2:8d:3d: df:c1:e8:2d:6d:be:52:2f:8f:08:86:a3:8f:ef:f2: 33:11:d7:84:c3:ea:4e:09:da:1e:c6:c8:54:e4:3c: 8b:08:28:2d:9b:35:4a:b5:9d:31:f1:7d:d8:c2:d8: 62:ef:c4:db:06:1d:3d:17:15:39:76:c8:2a:dd:6e: 67:01:45:06:2f:7f:67:db:34:3c:80:02:48:b0:38: 2c:c9:c4:73:dc:59:6d:e5:4e:05:3a:8d:29:92:70: df:fa:0a:5a:89:7b:3a:94:df:ed:6e:07:a5:66:e0: 35:68:c4:a7:04:54:9e:11:e3:10:bd:d3:b6:20:65: df:2d:19:f7:32:da:40:dd:eb:96:c4:25:e3:af:75: d3:91:38:19:22:b9:4f:28:ac:68:58:91:76:71:ce: 40:42:8b:ca:30:c8:7d:9c:03:75:47:bb:a1:a4:a3: 14:0e:68:a1:dd:65:e6:b5:44:cd:3e:e1:8b:63:f0: 73:53:e1:aa:a0:67:11:60:90:71:13:ec:98:22:9b: eb:f0:44:e6:ce:80:b2:46:03:8a:43:5c:9e:f7:4b: da:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:82:79:8A:F6:8E:4B:D4:FD:5D:E0:CE:9F:C8:2C:DE:15:5E:64:E9 X509v3 Authority Key Identifier: keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:8b:2d:69:4a:57:74:a6:3f:a6:72:08:42:41:88:94:08:16: 33:6a:c8:44:3b:49:50:47:5d:e8:b3:72:83:74:88:4f:0e:61: 6d:59:b8:76:f0:c5:72:03:70:4c:ec:d7:83:79:15:f7:a0:c0: e0:cd:25:e3:4e:b3:e2:1b:13:f5:7a:90:fe:26:87:d3:b3:1f: 4e:ad:cd:91:b4:e9:15:12:6f:76:a4:42:71:6b:16:3d:ce:44: 29:d5:4d:cc:70:12:80:1c:b5:f4:c2:8b:e3:79:69:73:ff:27: d3:28:66:08:29:07:21:b6:c6:9b:0b:cc:1a:2f:59:4e:0b:d4: 88:e3:0f:0b:48:c2:bc:ae:e3:64:a2:0c:a6:50:3b:c7:fd:45: cd:d0:ed:4d:e8:2f:aa:4e:e8:32:37:88:5a:19:fe:54:87:07: 75:9d:7e:bb:a6:54:fe:2b:cd:95:f0:f9:cb:49:cb:0f:31:30: ae:6e:2f:78:fc:b1:34:84:c9:e1:a9:9f:e7:2a:96:a0:48:96: 74:7e:31:cc:eb:90:26:1d:67:80:e8:07:2a:54:92:a7:b2:a0: 07:96:bc:6f:02:97:9c:66:d8:b2:a2:d1:b8:81:ab:5e:d8:93: 9f:d3:bf:cb:9e:7c:7b:94:81:57:8e:ee:f3:a9:0f:bb:ea:27: b8:41:c4:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NEUxMTAvBgNVBAUTKDcxODA3MzA5OEFGMDM5NkZEOEUzMzA5QTFCOUZCNkYz RUVCMTdBRTcwHhcNMjYwMzI0MTczMzU4WhcNMjYwMzMxMTczMzU4WjAYMRYwFAYD VQQDEw02OWMyY2IwNi03NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi/MFTMF2CTKZaN3Bp/JRlziRT4YsDdjZg/HejCjvxy0v/aDwyTEzFMvyjT3f wegtbb5SL48IhqOP7/IzEdeEw+pOCdoexshU5DyLCCgtmzVKtZ0x8X3Ywthi78Tb Bh09FxU5dsgq3W5nAUUGL39n2zQ8gAJIsDgsycRz3Flt5U4FOo0pknDf+gpaiXs6 lN/tbgelZuA1aMSnBFSeEeMQvdO2IGXfLRn3MtpA3euWxCXjr3XTkTgZIrlPKKxo WJF2cc5AQovKMMh9nAN1R7uhpKMUDmih3WXmtUTNPuGLY/BzU+GqoGcRYJBxE+yY Ipvr8ETmzoCyRgOKQ1ye90vaswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESCeYr2 jkvU/V3gzp/ILN4VXmTpMB8GA1UdIwQYMBaAFHGAcwmK8Dlv2OMwmhuftvPusXrn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc0RS81NEFBMTQ5Q0FB RjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09XX1k0ekNhRzUtMjgtNnhl dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZQnpDWXJ3T1dfWTR6Q2FHNS0yOC02eGV1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTc0RS81NEFBMTQ5Q0FBRjYxMUU5OUM1RUUyNTlDNEY5QUUwMi9jWUJ6Q1lyd09X X1k0ekNhRzUtMjgtNnhldWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMostaUpXdKY/pnIIQkGIlAgWM2rIRDtJUEdd6LNyg3SITw5hbVm4dvDFcgNw TOzXg3kV96DA4M0l406z4hsT9XqQ/iaH07MfTq3NkbTpFRJvdqRCcWsWPc5EKdVN zHASgBy19MKL43lpc/8n0yhmCCkHIbbGmwvMGi9ZTgvUiOMPC0jCvK7jZKIMplA7 x/1FzdDtTegvqk7oMjeIWhn+VIcHdZ1+u6ZU/ivNlfD5y0nLDzEwrm4vePyxNITJ 4amf5yqWoEiWdH4xzOuQJh1ngOgHKlSSp7KgB5a8bwKXnGbYsqLRuIGrXtiTn9O/ y558e5SBV47u86kPu+onuEHEiQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:50 2026 by rpki-client