$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: o0C5QNpg0Z9ciHj64Ep/Vx8J5u9pDjY7Sj9me2bby8M= Subject key identifier: 5B:99:08:1E:E1:42:DB:58:09:82:55:B0:51:E9:E8:69:AD:3E:80:07 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 01C0 Signing time: Wed 13 May 2026 03:54:19 +0000 Manifest this update: Wed 13 May 2026 03:54:18 +0000 Manifest next update: Wed 20 May 2026 03:54:18 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: c7e26r5zj8iT+XxRHVx1I+aCjyrdsvQSACWJOmjKLY0=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: May 13 03:54:18 2026 GMT Not After : May 20 03:54:18 2026 GMT Subject: CN=6a03f5eb-9f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:fb:bf:aa:ca:cd:83:ae:8a:db:fc:60:0f: 20:5a:17:8b:b3:81:19:1d:b4:20:45:c1:42:90:fc: fc:8c:66:41:ef:5b:f1:71:72:69:a0:8a:2b:ce:8e: 67:86:51:ee:ec:fe:5f:85:de:f4:22:37:df:ac:fd: d4:b7:6e:f9:d2:8a:89:2b:aa:d8:40:bf:28:5d:54: 5b:23:b6:58:ca:a5:73:ba:44:11:a8:79:2a:47:bd: 78:f6:17:24:73:d8:81:f6:56:ef:15:56:95:96:bd: 96:1a:a3:34:8f:93:58:d6:73:ec:e9:13:c8:f2:6b: fe:3b:d0:9f:55:f6:1c:bf:52:6c:94:41:5f:60:7d: 15:59:c5:57:75:53:48:55:c8:b0:a0:e3:aa:91:f3: 85:55:d8:93:3e:25:0c:13:24:f2:6c:fd:ef:dc:5f: 04:29:38:a5:3d:87:8d:23:48:57:16:6b:84:ed:bf: b9:7e:36:14:8b:28:71:ae:64:27:c7:6b:78:d2:be: 89:73:77:23:9d:2d:bc:ab:81:b8:85:e1:8e:18:ba: 43:2b:3f:a3:7d:bb:d1:59:92:91:0e:0c:04:73:5f: 13:d0:4c:a3:ef:d2:11:54:da:92:7e:08:a0:e6:38: c3:4e:f9:96:85:14:f1:4f:14:5d:d5:e0:5b:20:02: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:99:08:1E:E1:42:DB:58:09:82:55:B0:51:E9:E8:69:AD:3E:80:07 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bc:a9:70:61:f6:0d:74:ad:0c:a6:ba:75:eb:49:85:55:da: fa:54:cd:91:c7:2d:4c:86:c6:9b:46:b4:d5:7d:b2:dd:22:9f: cb:f9:a8:3a:fe:60:75:48:73:20:50:ee:2f:aa:38:73:36:94: 04:b6:5e:db:3c:c1:85:96:a5:9c:44:4e:ed:3e:2d:86:79:4a: e7:b1:00:89:ee:16:2b:92:93:02:16:4b:6e:cb:1f:87:dc:63: f8:5c:be:81:e4:a1:5a:ec:32:36:4f:45:07:21:8c:ab:75:22: a2:e8:bd:a3:45:a2:00:60:96:c6:d5:c4:c5:2d:16:c7:e0:6d: 9a:72:1d:cc:d6:13:8c:78:d2:e4:d5:8d:9a:96:1d:7a:3c:7e: b9:77:bf:6d:03:11:62:5b:e0:36:a1:54:71:24:f2:83:90:75: dd:4c:ad:23:6e:61:60:de:4b:22:20:e2:23:ea:67:f8:d0:44: f3:d9:4e:18:49:57:fd:00:6b:0b:65:77:a9:7e:de:85:ee:c1: 94:26:c4:1b:85:5e:3a:3d:7d:f2:bf:3e:06:dd:e2:ce:95:56: 33:70:57:91:62:e3:4e:a5:9b:63:a4:ac:fe:e5:fa:59:24:94: 30:9f:c4:41:d5:9d:e7:30:ee:2a:57:7a:7b:40:36:8e:d0:f5: 72:b6:f1:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjYwNTEzMDM1NDE4WhcNMjYwNTIwMDM1NDE4WjAYMRYwFAYD VQQDEw02YTAzZjVlYi05ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaP7v6rKzYOuitv8YA8gWheLs4EZHbQgRcFCkPz8jGZB71vxcXJpoIorzo5n hlHu7P5fhd70IjffrP3Ut2750oqJK6rYQL8oXVRbI7ZYyqVzukQRqHkqR7149hck c9iB9lbvFVaVlr2WGqM0j5NY1nPs6RPI8mv+O9CfVfYcv1JslEFfYH0VWcVXdVNI VciwoOOqkfOFVdiTPiUMEyTybP3v3F8EKTilPYeNI0hXFmuE7b+5fjYUiyhxrmQn x2t40r6Jc3cjnS28q4G4heGOGLpDKz+jfbvRWZKRDgwEc18T0Eyj79IRVNqSfgig 5jjDTvmWhRTxTxRd1eBbIAKGGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuZCB7h QttYCYJVsFHp6GmtPoAHMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbbypcGH2DXStDKa6detJhVXa+lTNkcctTIbGm0a01X2y3SKfy/moOv5gdUhz IFDuL6o4czaUBLZe2zzBhZalnERO7T4thnlK57EAie4WK5KTAhZLbssfh9xj+Fy+ geShWuwyNk9FByGMq3Uioui9o0WiAGCWxtXExS0Wx+BtmnIdzNYTjHjS5NWNmpYd ejx+uXe/bQMRYlvgNqFUcSTyg5B13UytI25hYN5LIiDiI+pn+NBE89lOGElX/QBr C2V3qX7ehe7BlCbEG4VeOj198r8+Bt3izpVWM3BXkWLjTqWbY6Ss/uX6WSSUMJ/E QdWd5zDuKld6e0A2jtD1crbxig== -----END CERTIFICATE-----Generated at Wed May 13 14:25:49 2026 by rpki-client