$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft File: SztaAaiVL7VkLSSEt_AgWufcx2E.mft (raw, json) Hash identifier: 5OkKOlvwGwBmwXolZRBgdsXb+93UZGnHbriqafETvcg= Subject key identifier: F5:97:4B:BD:BF:7F:1E:F7:59:13:2A:70:48:29:D0:7B:F2:13:47:2F Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft Manifest number: 0297 Signing time: Wed 25 Mar 2026 01:14:48 +0000 Manifest this update: Wed 25 Mar 2026 01:14:47 +0000 Manifest next update: Wed 01 Apr 2026 01:14:47 +0000 Files and hashes: 1: SztaAaiVL7VkLSSEt_AgWufcx2E.crl (hash: ejZlTScOLqpN7IgM1K0Grn5W3wJkHGSsVdDWR/xRjjg=) 2: C163E3D6170C11F1997E579B043D8C67.roa (hash: +bMsiCqkQRPGuAsovwzV+Jwx1b0r6sOT2iZqA0KUI2o=) 3: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (hash: WbC9Zi3FkuUimM2LDo18sEOCgwjkb/IqEbL/LDR9mkg=) 4: C1ECF984D07411F0B0B35C27C4F9AE02.roa (hash: 4b1qRgjlNRcZ+iubckIse8edU98Q81NltkHwnBtFg58=) 5: 2434E2E24FAD11EDA19F8316C4F9AE02.roa (hash: 0XIzwd7D2/6iAcpSl1J963JfV4yO/w+9LYIuULpKH7s=) 6: 46C3344E346611F0AF16091DC4F9AE02.roa (hash: G3atXAKqq6oFKBpr32HyeNbKvnZw8JFgcP/o+eZXrQQ=) 7: 82A6D4C4373711F0B4C22F6AC4F9AE02.roa (hash: 2dB8losCkzflgKLeyufFpykKeZbPyeG/91dZ2ar3/fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Mar 25 01:14:47 2026 GMT Not After : Apr 1 01:14:47 2026 GMT Subject: CN=69c33708-3456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1e:2e:14:74:bf:4b:c1:ba:a2:17:91:5b:23: 7c:48:59:60:aa:3c:f8:9a:a8:de:eb:81:57:4d:62: 7d:f2:5d:5a:d6:96:5d:2d:6f:9d:35:4e:2e:2f:f2: 16:59:96:5f:71:70:52:a5:b3:06:6a:12:e3:a9:0e: 49:4f:ce:df:03:68:17:8d:51:a6:79:34:61:c3:5b: da:86:1a:8a:bb:79:7a:f2:18:36:94:30:03:21:09: 0f:16:20:8e:73:7e:da:81:bb:b6:4c:cf:81:6a:54: dc:1e:07:3b:f3:9e:dc:15:17:c9:d6:e5:50:73:da: 11:fb:1b:a5:d2:a4:57:e3:cc:43:c3:5d:49:4e:29: 21:29:a5:70:0e:19:eb:5a:c2:94:69:48:ff:cf:61: c1:ed:1e:98:8b:a8:a9:4b:39:b8:d9:be:ba:29:1e: 0b:e0:85:66:d6:93:42:7f:0e:a9:88:db:c1:8a:8c: f1:7e:c6:68:1b:58:e6:e1:d0:b6:b9:56:43:83:8c: f3:15:72:64:a2:4c:f1:8d:59:0f:ad:e3:80:1a:0c: c0:6c:b3:be:82:14:94:a2:c7:36:66:b7:00:0f:fb: 7c:40:92:09:c2:2d:6c:58:74:0b:e1:06:83:1b:75: fd:2b:a1:ac:cc:5e:55:c2:a6:38:9b:5a:64:0f:99: 10:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:97:4B:BD:BF:7F:1E:F7:59:13:2A:70:48:29:D0:7B:F2:13:47:2F X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:80:84:76:53:6d:67:ac:1a:5c:8f:1c:0d:cd:83:ea:f4:a3: 90:f8:d2:d2:9d:91:e9:05:d9:ba:5d:91:50:d1:14:db:c7:43: 70:e8:50:a9:19:3d:12:d5:c9:3c:44:91:0e:5a:a0:bd:b6:1f: 4c:06:84:e5:e0:5a:50:4f:dc:7c:e4:3d:1a:8c:a1:2c:22:06: 7e:c0:b8:9a:d8:79:37:99:83:49:59:ee:de:b3:70:be:d0:7a: a5:d4:3a:40:47:e7:39:c5:c5:8c:d1:e8:af:79:09:75:3c:a5: 80:c9:36:9a:39:d6:40:42:70:95:3e:2d:ee:5a:5c:0c:2f:6d: a8:2b:ac:ab:bc:33:50:f3:da:ba:6f:2c:ed:0e:30:8a:b1:1b: 59:d1:4a:68:9b:d2:2a:34:a4:98:e9:39:44:37:12:17:60:4e: 7b:99:95:77:02:f4:2b:13:25:c1:e0:7a:74:e4:6d:c1:e3:ee: 5c:d9:2c:69:1c:70:a5:2b:a7:07:6d:6f:b7:6e:f9:ca:94:bc: d4:04:49:cb:5c:60:62:aa:e7:a0:0f:ca:bc:bf:2a:81:9f:d4: 59:38:0a:49:e9:44:38:72:fa:c1:46:8b:10:be:bd:d6:67:e2: b9:fd:6f:5e:0d:db:44:8b:3d:6d:81:1b:dc:2c:3e:c2:f2:c9: c6:aa:bf:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjYwMzI1MDExNDQ3WhcNMjYwNDAxMDExNDQ3WjAYMRYwFAYD VQQDEw02OWMzMzcwOC0zNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+R4uFHS/S8G6oheRWyN8SFlgqjz4mqje64FXTWJ98l1a1pZdLW+dNU4uL/IW WZZfcXBSpbMGahLjqQ5JT87fA2gXjVGmeTRhw1vahhqKu3l68hg2lDADIQkPFiCO c37agbu2TM+BalTcHgc7857cFRfJ1uVQc9oR+xul0qRX48xDw11JTikhKaVwDhnr WsKUaUj/z2HB7R6Yi6ipSzm42b66KR4L4IVm1pNCfw6piNvBiozxfsZoG1jm4dC2 uVZDg4zzFXJkokzxjVkPreOAGgzAbLO+ghSUosc2ZrcAD/t8QJIJwi1sWHQL4QaD G3X9K6GszF5VwqY4m1pkD5kQewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWXS72/ fx73WRMqcEgp0HvyE0cvMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzQ4RS80RDc4OTI2QTRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3 VmtMU1NFdF9BZ1d1ZmN4MkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt4CEdlNtZ6waXI8cDc2D6vSjkPjS0p2R6QXZul2RUNEU28dDcOhQqRk9EtXJ PESRDlqgvbYfTAaE5eBaUE/cfOQ9GoyhLCIGfsC4mth5N5mDSVnu3rNwvtB6pdQ6 QEfnOcXFjNHor3kJdTylgMk2mjnWQEJwlT4t7lpcDC9tqCusq7wzUPPaum8s7Q4w irEbWdFKaJvSKjSkmOk5RDcSF2BOe5mVdwL0KxMlweB6dORtwePuXNksaRxwpSun B21vt275ypS81ARJy1xgYqrnoA/KvL8qgZ/UWTgKSelEOHL6wUaLEL691mfiuf1v Xg3bRIs9bYEb3Cw+wvLJxqq/PQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:03 2026 by rpki-client