$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: Rk9otH27bGmT2KANQJv01XOqQOk7ZMS1fbLmO/MD1rw= Subject key identifier: C5:C5:77:76:2F:5B:74:A9:B4:F1:40:31:F4:1A:F0:F1:08:E7:77:0F Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 3523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 3523 Signing time: Tue 24 Mar 2026 15:08:18 +0000 Manifest this update: Tue 24 Mar 2026 15:08:18 +0000 Manifest next update: Tue 31 Mar 2026 15:08:18 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: 4ZtD5HZFuX/5uGr4t5QZY42uLleTiVKmDi1kafAMLhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13603 (0x3523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Mar 24 15:08:18 2026 GMT Not After : Mar 31 15:08:18 2026 GMT Subject: CN=69c2a8e2-64bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:d9:45:43:7d:74:a5:8d:01:00:5e:28:22: 31:fd:07:6a:e1:4e:61:c5:76:3d:00:ce:71:24:1d: 4c:77:67:11:d6:0e:8b:d0:19:c8:28:7d:2c:61:32: f8:8b:c4:bc:d1:29:51:07:36:d5:18:78:8e:de:06: 6b:36:33:2b:de:91:03:3c:c9:76:41:9f:57:d5:b4: 1f:1e:b4:e7:0c:1d:47:6c:66:7a:23:c9:db:42:2d: ed:07:f9:2e:bb:e2:0b:23:93:b3:a2:7e:4f:b6:a1: e3:0e:e8:1f:f8:16:26:8a:cd:34:28:ef:b3:90:c3: 12:6a:6a:98:c8:36:3d:42:81:36:50:5c:7b:79:c3: 09:d9:2b:4b:9d:f1:38:c0:6f:71:dc:4f:70:0c:f2: 8b:b5:b0:ce:9b:68:75:13:7d:34:76:ce:af:ca:2d: 41:ae:9a:d7:85:52:5d:ec:5d:1a:a5:77:a9:ce:7e: af:6c:32:a4:c3:b1:bf:57:cc:8f:d7:aa:23:41:a6: 4a:9b:14:cb:e0:50:9c:5d:1e:fd:7d:56:d3:8d:b9: 5b:66:02:c4:23:1d:28:0c:91:95:95:82:c1:07:a2: 8d:44:77:cb:50:24:24:a7:bc:2b:c2:17:05:88:3d: 06:51:e3:da:b8:e4:da:11:24:1f:f4:2d:ef:29:b3: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C5:77:76:2F:5B:74:A9:B4:F1:40:31:F4:1A:F0:F1:08:E7:77:0F X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:a5:dd:cc:eb:3c:19:12:92:87:68:84:07:a1:43:2b:8f:59: 1a:fc:0a:37:94:e8:70:48:ab:9e:af:25:c2:3b:09:f7:7e:1f: 1c:f6:4d:c5:fe:9a:a6:d1:66:75:d5:49:2d:b1:ea:79:53:8f: ef:bc:e9:81:2b:c9:66:50:0b:39:c3:f2:e5:9e:72:36:a5:bb: 5a:f1:99:62:4b:bb:20:73:a9:8c:b7:b3:92:62:ee:79:59:c1: ff:53:72:32:64:e9:85:56:20:94:9e:de:3d:86:fe:10:d3:5f: 00:33:02:8d:1d:fa:92:d2:d5:df:9d:26:5e:97:2b:7c:52:eb: a8:49:24:5b:6e:9a:dd:be:84:79:7c:f7:98:3b:67:cf:0e:af: 39:ba:53:97:9c:2b:96:43:4f:2b:8a:ee:8a:ff:7a:cc:7a:84: 94:9f:3f:7f:15:36:5e:92:8f:e7:19:05:a3:78:cd:87:eb:5f: 2d:91:7e:b4:b5:9c:2e:55:b6:c5:42:71:b3:41:c1:dc:26:36: 7f:d4:b2:5f:c7:9d:42:92:cc:2b:9e:6e:6c:43:5c:49:46:e0: 62:dd:2e:e0:77:9b:ab:74:54:ed:22:a7:54:85:85:b0:f3:c4: b9:11:5a:e2:9a:c4:58:44:b7:39:4e:5e:e8:7a:c1:f3:57:ac: d4:46:0d:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjYwMzI0MTUwODE4WhcNMjYwMzMxMTUwODE4WjAYMRYwFAYD VQQDEw02OWMyYThlMi02NGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1DZRUN9dKWNAQBeKCIx/Qdq4U5hxXY9AM5xJB1Md2cR1g6L0BnIKH0sYTL4 i8S80SlRBzbVGHiO3gZrNjMr3pEDPMl2QZ9X1bQfHrTnDB1HbGZ6I8nbQi3tB/ku u+ILI5Ozon5PtqHjDugf+BYmis00KO+zkMMSamqYyDY9QoE2UFx7ecMJ2StLnfE4 wG9x3E9wDPKLtbDOm2h1E300ds6vyi1BrprXhVJd7F0apXepzn6vbDKkw7G/V8yP 16ojQaZKmxTL4FCcXR79fVbTjblbZgLEIx0oDJGVlYLBB6KNRHfLUCQkp7wrwhcF iD0GUePauOTaESQf9C3vKbO+7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXFd3Yv W3SptPFAMfQa8PEI53cPMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2aXdzOs8GRKSh2iEB6FDK49ZGvwKN5TocEirnq8lwjsJ934fHPZNxf6aptFm ddVJLbHqeVOP77zpgSvJZlALOcPy5Z5yNqW7WvGZYku7IHOpjLezkmLueVnB/1Ny MmTphVYglJ7ePYb+ENNfADMCjR36ktLV350mXpcrfFLrqEkkW26a3b6EeXz3mDtn zw6vObpTl5wrlkNPK4ruiv96zHqElJ8/fxU2XpKP5xkFo3jNh+tfLZF+tLWcLlW2 xUJxs0HB3CY2f9SyX8edQpLMK55ubENcSUbgYt0u4Hebq3RU7SKnVIWFsPPEuRFa 4prEWES3OU5e6HrB81es1EYNBQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:01:24 2026 by rpki-client