$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json) Hash identifier: MlU/TULm+oxEcjN0RZMXBBA1A5H7LN8zROEOMo6g14c= Subject key identifier: AD:E7:61:A0:0D:24:EA:6A:C1:E3:FE:05:BF:9A:79:00:9B:3C:BF:1C Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft Manifest number: 0547 Signing time: Tue 24 Mar 2026 23:09:18 +0000 Manifest this update: Tue 24 Mar 2026 23:09:18 +0000 Manifest next update: Tue 31 Mar 2026 23:09:18 +0000 Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: K7aBFAcSyzhc/D+fssz/y/nI0fCei20Fc4M5tG1AsBk=) 2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: 8INoOCXFPbcklJdQVYuXZGAHmYI6aNH2061FTcCA0JU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Validity Not Before: Mar 24 23:09:18 2026 GMT Not After : Mar 31 23:09:18 2026 GMT Subject: CN=69c3199e-fd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:9c:b5:1d:9d:57:5e:74:23:57:fb:66:f6: f4:90:d6:cf:4a:29:5b:bb:39:aa:18:dd:67:cf:f3: 26:64:60:54:c0:53:e9:34:50:35:38:32:42:64:af: 74:f6:14:67:d2:b1:51:b5:5b:79:0d:34:5c:8e:3c: fb:54:ce:99:ea:bd:a2:64:9d:7f:f1:86:c4:80:35: 4e:ca:d3:30:58:12:d2:15:11:92:43:5d:51:99:7c: af:33:98:aa:b2:df:e2:75:0e:1e:b4:4e:e9:e2:fb: bb:5a:d4:be:81:dc:22:85:39:06:c9:30:fd:64:a8: 8e:d1:42:1c:b2:42:24:80:21:34:b2:04:a3:48:60: df:65:58:6c:57:54:94:81:f4:ee:2c:ec:55:fa:5f: d2:86:c9:cd:94:fd:88:11:80:0b:a0:c6:89:d3:e4: ba:03:72:43:94:f7:e5:b9:34:2b:7a:73:25:58:ac: e9:4c:4d:4a:4c:bb:ad:0d:97:8d:90:93:9a:39:f5: 2a:ea:6c:ed:de:a6:aa:4b:09:b4:3e:f1:af:97:e0: bb:73:f5:f3:cf:04:33:7e:bd:a0:12:5c:93:29:38: 29:46:91:d7:f9:78:9c:16:1a:4f:b6:67:24:3a:ce: 2a:20:12:69:4f:e0:61:a0:5e:40:3c:f6:49:65:e9: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E7:61:A0:0D:24:EA:6A:C1:E3:FE:05:BF:9A:79:00:9B:3C:BF:1C X509v3 Authority Key Identifier: keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:5a:7b:82:4e:fe:0b:10:1b:f6:b7:5b:ad:4b:52:cb:37:05: 01:23:ea:af:fb:4d:4a:97:c1:3a:f4:62:00:f8:35:fb:12:d8: 3f:30:53:f6:7e:8d:90:4d:c5:77:c5:b4:46:a9:72:ca:f9:75: 25:a7:ba:34:8e:b0:e6:bd:c7:0b:d6:5d:22:97:66:a5:03:0d: 90:06:5b:6b:fe:fd:e5:79:14:e9:88:0f:a5:4f:7c:f3:b2:a1: 71:5b:20:28:4d:19:e6:8b:59:86:b3:eb:a9:4e:c3:37:4d:cb: 80:48:8c:4d:f4:1c:ac:3f:1d:4d:e1:45:a0:6d:aa:e5:d4:e8: ca:fa:f6:9a:37:ba:ba:e9:2f:9e:b7:5f:e3:9d:6e:75:31:4f: 84:c6:19:cb:92:23:ac:65:d2:50:8a:67:ca:f5:81:80:5e:c4: b5:dd:b2:0b:07:33:db:fa:58:01:9b:20:d5:ce:8b:28:c6:0a: 20:1d:72:e7:90:93:ac:1d:dd:dc:cb:7e:17:16:7c:d7:7a:cc: 90:02:8e:9f:d6:42:c4:ad:f4:3d:af:09:78:8e:5e:d1:dd:8d: 19:e2:17:4a:10:ce:50:81:6b:26:2b:93:f9:1e:a2:d0:26:59: 76:c4:8b:ab:78:68:cd:0f:23:3e:b4:32:29:60:13:63:e0:22: bb:cd:7c:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw OTFCOEZCOTQwHhcNMjYwMzI0MjMwOTE4WhcNMjYwMzMxMjMwOTE4WjAYMRYwFAYD VQQDEw02OWMzMTk5ZS1mZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+yctR2dV150I1f7Zvb0kNbPSilbuzmqGN1nz/MmZGBUwFPpNFA1ODJCZK90 9hRn0rFRtVt5DTRcjjz7VM6Z6r2iZJ1/8YbEgDVOytMwWBLSFRGSQ11RmXyvM5iq st/idQ4etE7p4vu7WtS+gdwihTkGyTD9ZKiO0UIcskIkgCE0sgSjSGDfZVhsV1SU gfTuLOxV+l/ShsnNlP2IEYALoMaJ0+S6A3JDlPfluTQrenMlWKzpTE1KTLutDZeN kJOaOfUq6mzt3qaqSwm0PvGvl+C7c/XzzwQzfr2gElyTKTgpRpHX+XicFhpPtmck Os4qIBJpT+BhoF5APPZJZelECQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3nYaAN JOpqweP+Bb+aeQCbPL8cMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu U3ZGblFabEJENXNKRzQtNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAllp7gk7+CxAb9rdbrUtSyzcFASPqr/tNSpfBOvRiAPg1+xLYPzBT9n6NkE3F d8W0Rqlyyvl1Jae6NI6w5r3HC9ZdIpdmpQMNkAZba/795XkU6YgPpU9887KhcVsg KE0Z5otZhrPrqU7DN03LgEiMTfQcrD8dTeFFoG2q5dToyvr2mje6uukvnrdf451u dTFPhMYZy5IjrGXSUIpnyvWBgF7Etd2yCwcz2/pYAZsg1c6LKMYKIB1y55CTrB3d 3Mt+FxZ813rMkAKOn9ZCxK30Pa8JeI5e0d2NGeIXShDOUIFrJiuT+R6i0CZZdsSL q3hozQ8jPrQyKWATY+Aiu818Yg== -----END CERTIFICATE-----Generated at Thu Mar 26 11:59:43 2026 by rpki-client