$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: nH5ZZJLvKmkvVEqRhyUlFzGSrXmzhmewb/o05jz6c4g= Subject key identifier: 35:E5:D3:08:EA:32:EA:8F:AD:B6:69:B2:3D:51:21:1B:6D:99:A7:18 Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 016F Signing time: Wed 25 Mar 2026 03:59:55 +0000 Manifest this update: Wed 25 Mar 2026 03:59:55 +0000 Manifest next update: Wed 01 Apr 2026 03:59:55 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: 2gE5aEz6xmb+HUL4ydqpt4PTIeqYAiw5lmmb3HqtJGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Mar 25 03:59:55 2026 GMT Not After : Apr 1 03:59:55 2026 GMT Subject: CN=69c35dbb-cfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:a2:21:c9:c5:88:1a:55:44:9f:1a:b3:17: 62:e9:0a:31:27:e6:f0:e3:be:85:1b:c6:ef:dd:70: de:8e:05:6d:44:62:2f:c3:1f:cd:20:b4:ab:80:01: 0e:34:cc:5a:13:f2:3c:06:a8:b3:24:f7:aa:ad:99: e7:2f:cd:20:17:03:a4:30:99:41:64:a8:e2:06:74: b0:ef:54:c0:fe:e8:f6:13:18:ac:4f:18:46:fe:75: e9:7e:8c:33:22:22:e5:4c:55:3f:bc:86:df:98:61: 2d:c2:55:59:a4:a7:88:7a:38:19:b8:b1:96:61:80: 4f:ce:a9:a3:b4:55:11:74:c4:8b:a1:f6:9b:4a:0d: 87:e6:74:03:1e:ee:af:36:4d:cb:6b:0c:99:c3:64: 9c:84:cd:1c:56:b1:c4:57:0c:54:e6:1f:64:dc:da: 4d:d4:68:b8:18:de:04:ab:87:0a:16:39:64:93:4e: 22:d9:c6:04:5d:2e:51:53:37:5d:a4:1b:1a:80:ae: 74:d0:47:df:3e:05:7e:60:9e:1f:20:a9:27:e9:06: 68:83:16:9c:8d:72:3d:a3:1f:26:7f:87:51:3a:c0: 07:5f:eb:54:9d:e2:f7:32:aa:43:4c:4c:a2:d2:72: 89:c5:f5:98:fc:30:af:bd:8a:db:e3:c5:7d:58:e6: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E5:D3:08:EA:32:EA:8F:AD:B6:69:B2:3D:51:21:1B:6D:99:A7:18 X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7b:03:04:db:06:50:dd:14:e3:9e:7c:9f:65:c4:5f:7a:67: 36:c5:ad:47:9a:9b:2f:f3:83:4e:65:bd:7b:2a:50:11:16:a1: 60:79:7f:2b:e8:e4:bf:c3:6d:ba:83:9d:bc:80:b1:f5:69:99: 44:fa:88:b4:e7:a2:0d:3d:29:f9:e0:20:73:87:80:3d:78:15: d8:98:ae:fb:50:65:8e:fd:93:c9:78:64:6e:ca:28:83:5d:2a: 9a:25:72:3b:9c:a1:b0:a3:9c:6a:42:99:32:d6:42:dd:55:e2: f9:f0:cf:ed:53:23:21:59:21:89:ae:4d:e1:55:91:81:1f:ee: 81:dc:7c:11:26:d6:bb:23:3c:f4:e6:f2:96:18:db:e5:62:74: 55:10:ac:fb:30:a2:d6:59:79:c6:08:4f:b7:1e:70:56:c9:ba: 65:31:22:ff:05:21:92:5e:0b:82:1c:75:ad:dd:35:5b:04:89: b1:64:7b:07:c3:34:f8:10:d6:11:3f:76:16:53:b8:e2:51:2f: 88:07:50:65:30:5b:58:e2:d0:a6:a7:e2:aa:87:68:36:83:61: 85:c7:ba:e1:67:9a:40:48:a8:d2:05:c4:9f:94:ed:97:d8:1e: 5c:f1:d6:b2:6d:d9:91:f5:12:af:86:da:af:99:f3:6b:43:62: 2c:5b:be:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjYwMzI1MDM1OTU1WhcNMjYwNDAxMDM1OTU1WjAYMRYwFAYD VQQDEw02OWMzNWRiYi1jZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8qiIcnFiBpVRJ8asxdi6QoxJ+bw476FG8bv3XDejgVtRGIvwx/NILSrgAEO NMxaE/I8BqizJPeqrZnnL80gFwOkMJlBZKjiBnSw71TA/uj2ExisTxhG/nXpfowz IiLlTFU/vIbfmGEtwlVZpKeIejgZuLGWYYBPzqmjtFURdMSLofabSg2H5nQDHu6v Nk3LawyZw2SchM0cVrHEVwxU5h9k3NpN1Gi4GN4Eq4cKFjlkk04i2cYEXS5RUzdd pBsagK500EffPgV+YJ4fIKkn6QZogxacjXI9ox8mf4dROsAHX+tUneL3MqpDTEyi 0nKJxfWY/DCvvYrb48V9WOa9hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXl0wjq MuqPrbZpsj1RIRttmacYMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcnsDBNsGUN0U4558n2XEX3pnNsWtR5qbL/ODTmW9eypQERahYHl/K+jkv8Nt uoOdvICx9WmZRPqItOeiDT0p+eAgc4eAPXgV2Jiu+1Bljv2TyXhkbsoog10qmiVy O5yhsKOcakKZMtZC3VXi+fDP7VMjIVkhia5N4VWRgR/ugdx8ESbWuyM89Obylhjb 5WJ0VRCs+zCi1ll5xghPtx5wVsm6ZTEi/wUhkl4Lghx1rd01WwSJsWR7B8M0+BDW ET92FlO44lEviAdQZTBbWOLQpqfiqodoNoNhhce64WeaQEio0gXEn5Ttl9geXPHW sm3ZkfUSr4bar5nza0NiLFu+BA== -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:14 2026 by rpki-client