$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: Wrj7RgAgJ9AfAkCgoT64IeJEHMATUM8KB+KW84cKCa4= Subject key identifier: 06:C6:B5:41:B2:0C:5D:F5:84:64:97:CB:93:5F:91:47:93:B7:54:13 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 01A7 Signing time: Wed 25 Mar 2026 03:24:04 +0000 Manifest this update: Wed 25 Mar 2026 03:24:03 +0000 Manifest next update: Wed 01 Apr 2026 03:24:03 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: TVHm+uWdrdSjMamaXEh7m4Ydn6m/ZeH5lP2Ct0PO910=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Mar 25 03:24:03 2026 GMT Not After : Apr 1 03:24:03 2026 GMT Subject: CN=69c35554-dd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b9:8e:e9:9b:c0:80:dc:e0:cb:bb:45:0f:7d: 8c:44:90:46:e6:2a:2b:27:32:62:85:2c:72:05:22: 4d:68:ef:34:34:fb:ec:9b:b3:27:af:df:dc:75:05: 04:f8:60:db:70:10:71:1b:6d:c6:de:e0:f7:71:15: 2a:ec:f5:17:f9:54:21:39:06:3d:70:4d:14:8c:90: cd:3b:67:e0:10:bc:f1:7c:70:e2:d4:28:5d:d4:92: a9:91:58:0d:da:6f:1c:0b:db:be:42:c1:98:f7:b4: 18:a9:8b:51:37:7c:74:6a:ef:6e:80:62:77:0b:e6: 89:e1:74:74:8d:74:7f:05:51:75:79:33:85:b6:c4: cf:94:81:00:f5:af:bf:8b:7f:a2:d7:7b:7f:21:d2: b4:44:51:c2:b1:63:6a:47:92:13:58:b4:1b:8a:e4: e4:cf:2f:29:f4:56:85:d1:bd:73:83:f2:6f:71:46: 10:b8:5d:e3:81:32:48:b5:76:38:a4:f3:d7:73:1b: f4:a7:b6:86:54:46:ea:76:e3:63:41:a3:54:63:c9: 73:72:96:5e:f1:1e:db:65:23:92:aa:19:32:35:60: f4:ba:eb:dd:2e:2e:f4:90:86:15:90:0b:90:77:11: 52:3e:7c:40:3c:49:9c:0b:77:df:30:77:f3:f9:60: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C6:B5:41:B2:0C:5D:F5:84:64:97:CB:93:5F:91:47:93:B7:54:13 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:0a:67:90:ba:88:e9:93:8a:6b:3f:34:40:33:cc:28:4c:03: a8:10:d3:d6:b3:bf:fe:95:82:85:0a:a5:d9:66:9d:eb:3e:fd: 66:a0:61:2c:48:47:a6:f6:13:f9:7a:cb:58:bf:eb:03:9e:cd: 45:98:0e:d7:fc:84:a3:37:18:69:39:c9:cf:b8:36:99:27:74: fe:da:e5:26:82:98:f1:97:1f:48:59:f5:a5:6d:61:5e:9f:d8: 7f:74:7b:d7:ba:bc:97:56:ce:f0:e2:cb:a0:f3:e6:93:04:7c: 79:6b:78:d5:b1:27:4b:7b:f5:e0:ac:48:d5:37:9d:38:77:08: 4f:69:80:78:c7:2c:87:9e:63:68:a0:8f:16:9f:8e:3e:c8:71: 09:b4:40:cf:a5:c1:e5:26:17:e0:55:db:b4:7e:f3:b8:02:22: 16:4f:a1:c0:ca:98:d2:03:66:5e:70:54:5d:30:45:cb:ef:9c: ed:0a:69:1b:99:f9:1b:7b:01:49:bc:c5:82:d0:75:06:07:9f: a3:2d:2f:48:e9:27:1f:4a:b7:6d:f5:8a:6b:8b:af:9f:6a:70: f9:05:74:c7:4c:bd:b6:97:68:fb:1e:37:0e:d4:6a:ca:64:17: 8c:b3:cf:3d:1d:52:07:38:e3:49:7d:09:45:95:2d:29:c7:5b: ea:98:04:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjYwMzI1MDMyNDAzWhcNMjYwNDAxMDMyNDAzWjAYMRYwFAYD VQQDEw02OWMzNTU1NC1kZDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi7mO6ZvAgNzgy7tFD32MRJBG5iorJzJihSxyBSJNaO80NPvsm7Mnr9/cdQUE +GDbcBBxG23G3uD3cRUq7PUX+VQhOQY9cE0UjJDNO2fgELzxfHDi1Chd1JKpkVgN 2m8cC9u+QsGY97QYqYtRN3x0au9ugGJ3C+aJ4XR0jXR/BVF1eTOFtsTPlIEA9a+/ i3+i13t/IdK0RFHCsWNqR5ITWLQbiuTkzy8p9FaF0b1zg/JvcUYQuF3jgTJItXY4 pPPXcxv0p7aGVEbqduNjQaNUY8lzcpZe8R7bZSOSqhkyNWD0uuvdLi70kIYVkAuQ dxFSPnxAPEmcC3ffMHfz+WDoXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbGtUGy DF31hGSXy5NfkUeTt1QTMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUwpnkLqI6ZOKaz80QDPMKEwDqBDT1rO//pWChQql2Wad6z79ZqBhLEhHpvYT +XrLWL/rA57NRZgO1/yEozcYaTnJz7g2mSd0/trlJoKY8ZcfSFn1pW1hXp/Yf3R7 17q8l1bO8OLLoPPmkwR8eWt41bEnS3v14KxI1TedOHcIT2mAeMcsh55jaKCPFp+O PshxCbRAz6XB5SYX4FXbtH7zuAIiFk+hwMqY0gNmXnBUXTBFy++c7QppG5n5G3sB SbzFgtB1Bgefoy0vSOknH0q3bfWKa4uvn2pw+QV0x0y9tpdo+x43DtRqymQXjLPP PR1SBzjjSX0JRZUtKcdb6pgEqg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:04 2026 by rpki-client