$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft File: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft (raw, json) Hash identifier: B2cqTg2x9id4tISGjqBJr2tNJw7MkN+sd7V7HoLUNSs= Subject key identifier: 09:0F:53:17:21:A2:78:CC:67:6A:9E:85:DB:BE:5D:AE:49:32:CC:4F Authority key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 Certificate issuer: /CN=A917C09A/serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft Manifest number: 2C Signing time: Wed 25 Mar 2026 07:53:25 +0000 Manifest this update: Wed 25 Mar 2026 07:53:25 +0000 Manifest next update: Wed 01 Apr 2026 07:53:25 +0000 Files and hashes: 1: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl (hash: NYFaRWHZLf+AIigGuQlcEJt2rprK54QGt/dlemnLB6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Validity Not Before: Mar 25 07:53:25 2026 GMT Not After : Apr 1 07:53:25 2026 GMT Subject: CN=69c39475-95c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:89:fc:dc:1d:66:19:01:32:97:6f:e0:3e: 9a:26:20:35:cd:e3:da:d1:04:d6:bd:02:ed:fb:9b: b0:43:10:c7:60:59:8a:d9:24:4a:86:be:64:cc:01: bb:49:16:d0:d7:dc:82:ab:ab:04:42:35:2b:dd:7d: b4:4d:7b:e5:ad:c1:8b:1b:6a:09:d6:66:64:38:35: 90:27:6f:99:36:21:81:12:cd:7c:1b:bb:ef:af:a8: cd:4f:42:85:05:7b:be:82:35:74:50:61:66:5c:50: 9f:60:2c:dc:05:87:7b:1a:bb:74:ac:e8:11:23:79: 1e:fd:52:b2:d0:f5:0a:00:1d:27:ff:49:ac:51:71: 3f:8f:dd:4f:90:9e:39:a0:3b:36:d6:f3:c0:89:12: 06:b2:fc:bb:41:7b:49:09:1a:67:5d:73:25:90:f7: 7a:a5:1c:55:e0:ca:9f:55:e4:92:9f:1f:24:f0:7e: 1c:1e:c8:d6:b6:c1:64:75:b9:ce:f9:bf:9a:eb:a7: b8:6d:fe:2f:4f:5d:54:f1:71:8c:f8:c5:43:18:2b: 03:8f:94:f2:d7:7b:e5:65:f1:70:9f:97:a3:be:2b: d0:2d:cd:6c:18:66:90:77:17:d7:99:3e:cc:5f:42: 5b:32:43:61:28:1a:27:f2:fb:b1:66:55:69:67:9a: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:53:17:21:A2:78:CC:67:6A:9E:85:DB:BE:5D:AE:49:32:CC:4F X509v3 Authority Key Identifier: keyid:0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d6:30:27:d3:cc:a7:4c:e3:66:64:f8:fa:de:c9:5d:e7:49: b0:66:f5:d5:63:35:ba:91:da:2c:85:31:8b:30:dd:7a:22:1a: eb:dc:f6:4a:7e:ed:03:d5:2f:46:df:bd:0f:24:ec:7c:31:36: 29:33:7d:c8:78:4f:f4:4c:f6:ec:ce:20:73:60:1e:8e:4e:9c: 21:6f:a5:a1:13:87:ea:26:39:57:4f:9b:ce:94:47:a1:41:8e: 4c:31:16:23:2c:cd:20:54:15:ca:f9:b3:94:ba:d2:a4:f6:7a: e4:df:85:2f:84:aa:96:57:8e:44:bc:a3:6b:2e:4d:f7:da:1a: df:43:19:14:9d:cd:62:d8:ba:24:28:ff:82:ce:90:20:da:e3: 4c:46:df:14:5c:9d:7d:ca:1e:a3:0d:5d:cf:64:f7:99:b0:c6: 7b:24:b2:09:8c:57:96:6f:3e:32:ab:fe:8a:98:73:98:70:69: 54:72:7d:c0:5a:ab:16:53:fb:93:b5:0c:de:15:13:6c:36:a9: fd:98:f4:1f:a2:a5:12:2a:68:28:81:bd:b6:be:55:f1:60:f8: af:98:1d:58:6b:94:c5:0a:b0:43:e8:d4:38:64:61:18:ca:3c: c5:34:89:57:6a:14:10:21:15:1c:ec:1a:c7:a5:f1:5f:ea:b0: a5:53:8e:f6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoMEYzQjVGRjE1NDUwNTI5MTQwOEM0ODQwQjEwMzZEOTJB OTMwNEVENDAeFw0yNjAzMjUwNzUzMjVaFw0yNjA0MDEwNzUzMjVaMBgxFjAUBgNV BAMTDTY5YzM5NDc1LTk1YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGi4n83B1mGQEyl2/gPpomIDXN49rRBNa9Au37m7BDEMdgWYrZJEqGvmTMAbtJ FtDX3IKrqwRCNSvdfbRNe+WtwYsbagnWZmQ4NZAnb5k2IYESzXwbu++vqM1PQoUF e76CNXRQYWZcUJ9gLNwFh3sau3Ss6BEjeR79UrLQ9QoAHSf/SaxRcT+P3U+Qnjmg OzbW88CJEgay/LtBe0kJGmddcyWQ93qlHFXgyp9V5JKfHyTwfhweyNa2wWR1uc75 v5rrp7ht/i9PXVTxcYz4xUMYKwOPlPLXe+Vl8XCfl6O+K9AtzWwYZpB3F9eZPsxf QlsyQ2EoGify+7FmVWlnmrq1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCQ9TFyGi eMxnap6F275drkkyzE8wHwYDVR0jBBgwFoAUDztf8VRQUpFAjEhAsQNtkqkwTtQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0JCNjczRjNFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBGQWpFaEFzUU50a3Frd1R0 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHp0ZjhWUlFVcEZBakVoQXNRTnRrcWt3VHRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0JCNjczRjNFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBG QWpFaEFzUU50a3Frd1R0US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBq1jAn08ynTONmZPj63sld50mwZvXVYzW6kdoshTGLMN16Ihrr3PZKfu0D1S9G 370PJOx8MTYpM33IeE/0TPbsziBzYB6OTpwhb6WhE4fqJjlXT5vOlEehQY5MMRYj LM0gVBXK+bOUutKk9nrk34UvhKqWV45EvKNrLk332hrfQxkUnc1i2LokKP+CzpAg 2uNMRt8UXJ19yh6jDV3PZPeZsMZ7JLIJjFeWbz4yq/6KmHOYcGlUcn3AWqsWU/uT tQzeFRNsNqn9mPQfoqUSKmgogb22vlXxYPivmB1Ya5TFCrBD6NQ4ZGEYyjzFNIlX ahQQIRUc7BrHpfFf6rClU472 -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:53 2026 by rpki-client