$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: ZJt13J66IPZXomDXRQu/7gS2NH1r1lm4VPKThK69DOs= Subject key identifier: 72:50:8A:38:60:08:5A:63:71:68:CF:3B:45:06:30:C2:87:47:04:A8 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0CEC Signing time: Tue 24 Mar 2026 18:02:59 +0000 Manifest this update: Tue 24 Mar 2026 18:02:58 +0000 Manifest next update: Tue 31 Mar 2026 18:02:58 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: HtA+fCOhQQpyeMqynoKzbABOh2AkRBldj3ayd2w/ylE=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Mar 24 18:02:58 2026 GMT Not After : Mar 31 18:02:58 2026 GMT Subject: CN=69c2d1d2-7e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:b7:2d:b0:19:01:4f:b5:fd:8b:df:dc:7e: 81:b9:34:a0:c0:ce:15:30:83:41:85:4a:ab:c6:f5: a5:8a:0f:1a:7f:59:0a:dd:f3:19:c7:51:24:2a:d8: f3:6e:0e:f1:3c:8b:03:64:a7:cf:69:d9:fe:f0:36: f7:63:a5:b5:51:56:12:2b:da:77:d9:98:99:25:87: 09:48:54:20:d3:a7:73:91:61:e4:d5:e3:77:d6:1a: 43:dd:58:8c:7b:96:db:a1:af:24:f4:43:ec:f3:0d: ea:3f:1f:39:f0:0e:a9:ed:fd:63:c1:97:ac:60:28: d1:75:85:da:7d:84:c3:ca:a3:f8:3f:41:4e:1c:6a: 27:16:ee:85:cc:d0:98:39:75:8b:f4:67:07:d1:e1: 1a:e0:e3:86:32:3d:2e:b4:bd:3d:60:c1:1a:1c:c7: dd:c2:38:6d:44:8f:b3:05:85:6f:cd:07:f7:94:87: a0:49:87:13:4a:6a:f4:e9:ea:3c:02:e9:cf:15:9e: 9c:29:65:d6:c6:ce:4d:40:52:00:64:bd:84:6e:d2: bb:e5:5b:cc:38:e6:5c:f0:25:4d:33:3d:9e:27:6e: d4:1d:1f:63:8f:4a:1f:9b:e9:03:8e:ec:31:2e:22: b1:4e:d9:1b:45:d6:b3:3e:98:04:2c:11:2e:46:e9: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:50:8A:38:60:08:5A:63:71:68:CF:3B:45:06:30:C2:87:47:04:A8 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9d:37:3c:33:92:68:e7:5a:35:dc:f0:cd:45:c8:c1:42:b0: 66:75:89:31:98:bc:bb:f9:16:c5:ad:8b:2c:bd:70:f0:e6:be: 91:a9:24:39:11:31:52:2a:33:c2:d7:30:39:22:c5:6c:e7:c8: dd:d2:c4:42:55:22:f5:cc:bc:05:d3:89:de:be:e1:25:89:1b: 3d:f8:8d:d9:3b:4b:be:9d:d1:e7:ed:60:79:8c:24:ea:c4:49: 0d:7b:52:29:f1:bf:a6:84:ab:fa:4e:fd:53:9d:4d:d6:41:40: ee:d3:b5:fc:aa:b1:9e:b0:00:83:04:e8:9f:0b:ce:6b:de:81: 50:68:76:1c:b4:9f:d0:e1:03:73:fe:e4:24:63:53:1a:d4:6b: a5:4c:ed:3b:5e:ee:44:bb:59:bb:b9:fd:d4:5b:84:44:7d:41: ea:2c:ea:b6:70:25:91:13:55:f9:68:da:ef:97:8f:8e:24:9c: 44:e3:5a:90:a7:d3:a6:4f:26:ac:05:a3:33:2a:ed:11:46:2b: 8e:ba:57:bb:5a:fe:58:7c:33:de:ee:36:c8:47:55:b6:e3:43: a2:fe:9a:a0:bb:02:ef:28:78:10:b9:c2:b9:f5:03:95:1e:0a: 4f:c3:75:bf:d2:b6:f8:16:15:11:b5:dd:02:2d:3c:85:53:90: ba:2d:47:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjYwMzI0MTgwMjU4WhcNMjYwMzMxMTgwMjU4WjAYMRYwFAYD VQQDEw02OWMyZDFkMi03ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjGq3LbAZAU+1/Yvf3H6BuTSgwM4VMINBhUqrxvWlig8af1kK3fMZx1EkKtjz bg7xPIsDZKfPadn+8Db3Y6W1UVYSK9p32ZiZJYcJSFQg06dzkWHk1eN31hpD3ViM e5bboa8k9EPs8w3qPx858A6p7f1jwZesYCjRdYXafYTDyqP4P0FOHGonFu6FzNCY OXWL9GcH0eEa4OOGMj0utL09YMEaHMfdwjhtRI+zBYVvzQf3lIegSYcTSmr06eo8 AunPFZ6cKWXWxs5NQFIAZL2EbtK75VvMOOZc8CVNMz2eJ27UHR9jj0ofm+kDjuwx LiKxTtkbRdazPpgELBEuRun5+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJQijhg CFpjcWjPO0UGMMKHRwSoMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU503PDOSaOdaNdzwzUXIwUKwZnWJMZi8u/kWxa2LLL1w8Oa+kakkORExUioz wtcwOSLFbOfI3dLEQlUi9cy8BdOJ3r7hJYkbPfiN2TtLvp3R5+1geYwk6sRJDXtS KfG/poSr+k79U51N1kFA7tO1/KqxnrAAgwTonwvOa96BUGh2HLSf0OEDc/7kJGNT GtRrpUztO17uRLtZu7n91FuERH1B6izqtnAlkRNV+Wja75ePjiScRONakKfTpk8m rAWjMyrtEUYrjrpXu1r+WHwz3u42yEdVtuNDov6aoLsC7yh4ELnCufUDlR4KT8N1 v9K2+BYVEbXdAi08hVOQui1Hzg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:46 2026 by rpki-client