$ rpki-client -vvf rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft File: 17VzlML5jR0AnPY_E_yQB2jyGN4.mft (raw, json) Hash identifier: Porf/uPj/FD0rzz599AxO44RdR5dd+ZhIWjS/DGRw6Q= Subject key identifier: DF:5A:59:68:7A:FF:8A:84:79:A3:43:0A:27:EB:96:80:58:FC:F1:77 Authority key identifier: D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE Certificate issuer: /CN=A91B33AE/serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft Manifest number: 19 Signing time: Wed 25 Mar 2026 08:11:24 +0000 Manifest this update: Wed 25 Mar 2026 08:11:23 +0000 Manifest next update: Wed 01 Apr 2026 08:11:23 +0000 Files and hashes: 1: 17VzlML5jR0AnPY_E_yQB2jyGN4.crl (hash: YbTQuJkmzXjlVudYau8MRHw8DY19JQIo/ry83VT+3tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B33AE, serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Validity Not Before: Mar 25 08:11:23 2026 GMT Not After : Apr 1 08:11:23 2026 GMT Subject: CN=69c398ab-a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:47:19:02:e4:9a:1e:ae:5f:32:18:e1:a5: ff:0f:17:12:5f:22:5e:eb:30:c1:2a:6e:64:34:bc: 31:68:0e:55:55:b6:03:0b:c7:29:0b:02:53:84:00: ae:0d:ca:17:99:37:ac:1e:16:34:9c:70:40:bd:21: 4c:d1:77:80:4c:de:21:65:5e:a2:98:ba:3d:40:42: 94:65:09:d4:23:a7:65:f3:62:b2:d3:e0:18:9e:19: 66:8b:a8:af:61:ff:ca:80:c8:5f:fb:40:fa:16:8c: 51:c6:90:af:fe:59:d4:80:7f:1d:d0:1b:1e:63:a8: 85:1b:77:f8:bf:45:83:1c:f4:97:4b:3f:91:81:75: f1:fb:28:f3:c3:f5:71:9f:6b:58:57:32:79:fa:86: 18:31:f0:f7:76:8f:17:5b:fb:39:3b:04:a2:99:0b: 4c:d8:d9:92:24:fc:ca:f0:1c:90:6d:8c:78:75:2f: 0f:9d:2e:26:69:9d:c9:f4:9d:42:cc:eb:ab:f4:d1: 20:05:f4:af:48:ff:5f:b7:43:5a:e4:42:4a:4f:4e: a6:62:ea:c2:00:e3:10:77:84:0a:bd:d8:98:7f:ef: fd:68:e1:1c:79:07:1b:9d:3f:93:3b:ea:34:9b:96: 4c:77:3f:69:05:15:21:25:18:d4:72:76:ed:0c:0f: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5A:59:68:7A:FF:8A:84:79:A3:43:0A:27:EB:96:80:58:FC:F1:77 X509v3 Authority Key Identifier: keyid:D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:24:ea:cd:0b:4e:2c:56:67:e1:d2:e1:58:f7:d9:69:58:f1: f1:2c:73:09:92:0f:45:38:f8:73:b7:99:7c:34:15:1c:74:89: a1:91:8d:b7:a3:1c:22:cd:74:9d:d3:de:a3:25:fb:7c:52:b2: 43:9b:cf:00:e0:b6:6c:1c:80:dd:a4:7c:04:20:b7:68:6a:cc: de:07:14:27:6e:57:d4:cc:8e:38:a2:f5:41:8e:03:92:e1:10: 14:da:b8:2e:a3:58:c8:1a:5a:42:24:ac:40:b8:98:39:23:c1: c1:7d:96:46:c8:dd:7e:d8:a9:d2:e3:57:31:14:40:a2:c4:09: 7a:fd:ab:e9:d0:c9:f4:ae:9a:56:8a:01:38:cb:dd:fe:61:62: 6e:45:89:23:ab:c9:61:eb:d3:dd:12:b8:56:06:85:16:43:6a: 5d:ed:46:d4:6e:d7:2c:82:9b:fa:78:5e:23:a9:80:1a:d4:fc: ce:42:9f:29:1f:2f:35:a4:e1:2d:4b:6e:66:b0:49:6d:b0:5b: 12:0a:ab:f1:f0:2f:1d:ac:e3:a7:46:02:47:fb:75:7c:34:c2: 11:62:19:a2:76:2a:cc:35:63:e1:9e:d8:81:45:d4:65:1b:68: 52:42:69:d9:f6:5f:89:ca:4d:bb:85:b0:03:2a:92:9d:51:41: a4:c4:62:a5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzNBRTExMC8GA1UEBRMoRDdCNTczOTRDMkY5OEQxRDAwOUNGNjNGMTNGQzkwMDc2 OEYyMThERTAeFw0yNjAzMjUwODExMjNaFw0yNjA0MDEwODExMjNaMBgxFjAUBgNV BAMTDTY5YzM5OGFiLWEzYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2d0cZAuSaHq5fMhjhpf8PFxJfIl7rMMEqbmQ0vDFoDlVVtgMLxykLAlOEAK4N yheZN6weFjSccEC9IUzRd4BM3iFlXqKYuj1AQpRlCdQjp2XzYrLT4BieGWaLqK9h /8qAyF/7QPoWjFHGkK/+WdSAfx3QGx5jqIUbd/i/RYMc9JdLP5GBdfH7KPPD9XGf a1hXMnn6hhgx8Pd2jxdb+zk7BKKZC0zY2ZIk/MrwHJBtjHh1Lw+dLiZpncn0nULM 66v00SAF9K9I/1+3Q1rkQkpPTqZi6sIA4xB3hAq92Jh/7/1o4Rx5BxudP5M76jSb lkx3P2kFFSElGNRydu0MD8D/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU31pZaHr/ ioR5o0MKJ+uWgFj88XcwHwYDVR0jBBgwFoAU17VzlML5jR0AnPY/E/yQB2jyGN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzM0FFLzg4MEEzQjgwMEIz QjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIwQW5QWV9FX3lRQjJqeUdO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTdWemxNTDVqUjBBblBZX0VfeVFCMmp5R040LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz M0FFLzg4MEEzQjgwMEIzQjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIw QW5QWV9FX3lRQjJqeUdONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDTJOrNC04sVmfh0uFY99lpWPHxLHMJkg9FOPhzt5l8NBUcdImhkY23oxwizXSd 096jJft8UrJDm88A4LZsHIDdpHwEILdoaszeBxQnblfUzI44ovVBjgOS4RAU2rgu o1jIGlpCJKxAuJg5I8HBfZZGyN1+2KnS41cxFECixAl6/avp0Mn0rppWigE4y93+ YWJuRYkjq8lh69PdErhWBoUWQ2pd7UbUbtcsgpv6eF4jqYAa1PzOQp8pHy81pOEt S25msEltsFsSCqvx8C8drOOnRgJH+3V8NMIRYhmidirMNWPhntiBRdRlG2hSQmnZ 9l+Jyk27hbADKpKdUUGkxGKl -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:24 2026 by rpki-client