$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: 0WQwAlHu3HAtUfKOZqpQdmQ91EFNfXt7zEUUSfqNQ38= Subject key identifier: 20:B0:9D:AA:18:60:1D:07:C1:F4:57:92:8C:C0:DF:D6:6F:B5:F2:4C Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 054A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 054A Signing time: Thu 26 Mar 2026 23:14:13 +0000 Manifest this update: Thu 26 Mar 2026 23:14:12 +0000 Manifest next update: Thu 02 Apr 2026 23:14:12 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: 9024dACsTIHOxehkke0U0xJtl+D7eEUVCuKa9Dd++n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1354 (0x54a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Validity Not Before: Mar 26 23:14:12 2026 GMT Not After : Apr 2 23:14:12 2026 GMT Subject: CN=69c5bdc5-d0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:25:1b:18:c2:ce:20:82:c1:23:85:06:cf: fa:e6:6b:3e:a9:2b:e7:83:08:13:5b:61:8b:26:db: 97:7c:6b:f3:58:6f:bc:05:8b:57:be:74:a7:05:35: e1:6e:89:17:2f:6b:92:b8:a3:e6:b6:41:fb:8b:39: b4:5c:46:38:fb:06:fe:15:f9:4e:45:0b:d5:e2:bf: 18:ed:84:41:6d:83:bf:af:a0:11:c5:91:3f:e0:2e: 77:f9:26:5a:b6:b8:92:c8:2c:56:b1:c3:21:41:00: a4:93:e7:2c:02:cc:5c:d2:c4:48:18:a3:22:12:73: 24:9f:74:74:60:f1:cd:a7:1d:59:c7:8d:3c:27:2e: e9:32:d6:b0:39:d9:16:c0:fd:f0:2f:95:68:6e:75: f6:f1:93:62:d7:21:17:f3:e7:b3:70:bd:65:50:a8: 18:70:73:6d:b4:15:a6:ff:36:f4:4f:ed:a0:ca:1e: df:a3:58:55:63:fc:be:37:ff:ad:72:2d:01:11:e9: f7:0a:f8:83:db:82:28:70:a5:5e:ed:56:04:88:d7: b7:43:42:13:92:ab:b1:b9:9c:14:92:42:2f:12:7b: ad:5f:79:da:dc:ff:78:3c:df:8f:d3:60:a6:a2:12: 81:1a:7c:f1:65:5b:eb:d4:93:1f:16:e2:b4:b4:4b: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B0:9D:AA:18:60:1D:07:C1:F4:57:92:8C:C0:DF:D6:6F:B5:F2:4C X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9a:5b:5a:b0:19:9f:1a:0e:eb:3b:dd:3d:22:e0:b2:69:0f: ca:c1:21:b1:c0:ac:2a:52:6e:5d:c2:f3:dd:5a:69:1d:f7:7f: d4:d9:e4:9e:c1:7e:c0:27:69:84:c9:a5:6e:ad:f0:77:90:98: 80:e9:d3:d0:60:9d:f9:df:8a:9b:9d:80:83:04:2c:42:a5:d3: 05:6d:18:dc:da:e4:4f:06:8e:4d:04:3a:35:89:21:2e:f4:54: 23:5a:be:a4:55:db:a5:8b:a4:04:34:cf:f4:75:d9:c5:aa:14: 02:d0:ad:51:2a:7a:c5:1d:f2:59:60:6f:94:52:6a:e1:eb:a9: a9:82:bf:e0:57:df:2b:0f:dc:3d:43:73:a2:dc:ba:14:70:b4: 7c:a1:9a:71:67:e3:63:df:67:78:02:26:24:36:e8:61:07:49: e7:d3:31:93:15:33:d7:94:8d:2a:f1:96:9b:c2:e1:7c:54:a3: 96:52:88:60:79:4a:ce:43:de:a8:30:d8:de:b0:72:37:6f:dd: 31:0c:58:a8:16:13:c1:47:36:d9:77:5b:ae:2c:40:b7:ee:25: 32:05:a7:ed:10:86:5a:a0:1c:2d:77:79:e7:f1:32:9d:7d:27: 0b:e8:29:29:64:b2:49:76:04:21:d6:f8:e7:d4:49:0f:f9:41: 85:b8:6b:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjYwMzI2MjMxNDEyWhcNMjYwNDAyMjMxNDEyWjAYMRYwFAYD VQQDEw02OWM1YmRjNS1kMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhjAlGxjCziCCwSOFBs/65ms+qSvngwgTW2GLJtuXfGvzWG+8BYtXvnSnBTXh bokXL2uSuKPmtkH7izm0XEY4+wb+FflORQvV4r8Y7YRBbYO/r6ARxZE/4C53+SZa triSyCxWscMhQQCkk+csAsxc0sRIGKMiEnMkn3R0YPHNpx1Zx408Jy7pMtawOdkW wP3wL5VobnX28ZNi1yEX8+ezcL1lUKgYcHNttBWm/zb0T+2gyh7fo1hVY/y+N/+t ci0BEen3CviD24IocKVe7VYEiNe3Q0ITkquxuZwUkkIvEnutX3na3P94PN+P02Cm ohKBGnzxZVvr1JMfFuK0tEu+FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCwnaoY YB0HwfRXkozA39ZvtfJMMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADppbWrAZnxoO6zvdPSLgsmkPysEhscCsKlJuXcLz3VppHfd/1NnknsF+wCdp hMmlbq3wd5CYgOnT0GCd+d+Km52AgwQsQqXTBW0Y3NrkTwaOTQQ6NYkhLvRUI1q+ pFXbpYukBDTP9HXZxaoUAtCtUSp6xR3yWWBvlFJq4eupqYK/4FffKw/cPUNzoty6 FHC0fKGacWfjY99neAImJDboYQdJ59MxkxUz15SNKvGWm8LhfFSjllKIYHlKzkPe qDDY3rByN2/dMQxYqBYTwUc22XdbrixAt+4lMgWn7RCGWqAcLXd55/EynX0nC+gp KWSySXYEIdb459RJD/lBhbhrNA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:24 2026 by rpki-client