$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: wOFWEVKo50QY2egwbM5O1wlq06YP/IgMcXUG9cAkKOQ= Subject key identifier: FF:2B:87:D3:A3:EA:96:DA:89:48:70:11:AB:62:66:0C:A5:3F:A4:62 Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: 0117 Signing time: Mon 02 Mar 2026 14:38:13 +0000 Manifest this update: Mon 02 Mar 2026 14:38:13 +0000 Manifest next update: Mon 09 Mar 2026 14:38:13 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: 58npSyZNa8KBokxbuKYp6Nkf0a0fP0yl47JnFzkNrjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Mar 2 14:38:13 2026 GMT Not After : Mar 9 14:38:13 2026 GMT Subject: CN=69a5a0d5-fff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:2f:0d:88:e4:80:00:bf:6e:12:8e:c0:87: 34:c7:11:94:cf:42:4b:f3:b4:65:02:bf:19:5c:7a: 95:4e:57:6f:3a:b7:a7:f5:0f:e9:6c:4e:67:3d:72: 7a:11:14:b6:d0:b1:d6:95:58:a4:62:68:3a:ac:97: ed:f0:ef:38:da:53:c1:5e:14:34:47:4d:2e:0b:a7: db:11:e4:00:04:1c:d3:75:49:60:76:96:f1:60:89: 73:b1:e7:2e:cb:05:1a:4a:a2:84:62:7f:79:9e:6d: 84:0f:16:ac:23:5e:f3:b2:10:e1:a6:2e:b7:76:a7: 8e:7e:98:ca:65:6d:20:e9:d4:8e:cd:09:2e:6e:7a: 4f:70:8b:b4:de:6d:17:de:5d:59:5f:32:c3:df:55: a6:35:59:b7:53:50:95:28:af:a1:fb:aa:af:ea:26: 88:bc:12:a1:a8:d8:43:9b:da:9c:d1:59:69:79:52: 24:ee:ab:a6:ff:b6:85:7e:a6:ce:ba:07:1e:ad:47: fc:fa:a4:7e:15:c1:e4:c3:33:a6:d7:f8:80:ef:a2: 20:c0:d1:eb:e8:0a:a4:cd:74:47:c3:5d:92:37:58: 7c:a3:5c:ee:70:a5:f4:88:da:ef:01:f4:27:12:9d: d9:71:16:9d:d3:44:c8:30:5d:ca:81:54:ef:dc:19: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2B:87:D3:A3:EA:96:DA:89:48:70:11:AB:62:66:0C:A5:3F:A4:62 X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:58:5d:60:87:60:fc:84:72:37:0a:fc:b4:c2:77:47:db:35: d3:10:d9:ce:c2:f8:3f:7d:60:86:e8:42:69:6d:f4:82:70:26: 66:02:9c:31:65:6a:4d:e3:da:a7:2d:4d:b7:ca:58:aa:29:f5: d8:34:46:ea:a4:65:8f:fa:49:ff:27:a0:f2:b1:55:15:d8:63: b3:07:03:f9:1f:fd:a2:1a:56:37:5c:34:27:c1:0d:b6:c4:6f: 35:c4:37:de:df:b7:a0:d3:77:7d:45:e8:85:df:02:a3:07:7f: 96:a6:e4:79:50:4e:ea:cf:df:e1:e9:17:5e:61:b8:da:de:ac: 31:6b:70:90:c7:8b:db:32:ed:6f:83:bd:3e:e9:4a:aa:e4:e7: e4:38:91:37:eb:05:1a:36:35:89:23:e6:75:2b:8d:d9:5d:fe: a8:12:3a:3e:5c:f6:b1:3a:d4:e7:f7:fb:63:bd:1c:ce:a3:ca: 76:4e:ec:15:f7:9b:16:91:db:ab:13:1e:a7:2a:be:37:f5:aa: 4d:fd:6b:7e:e6:9d:80:48:ea:af:94:bc:10:49:6b:d1:07:56: 47:32:ea:2d:74:94:29:52:75:8a:9e:42:b9:b7:bf:3b:69:6c: 9d:34:0c:7f:01:88:8b:2d:f9:cd:9f:f7:57:af:59:89:77:5d: 10:b8:f3:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB MjQyNUNCOEUwHhcNMjYwMzAyMTQzODEzWhcNMjYwMzA5MTQzODEzWjAYMRYwFAYD VQQDEw02OWE1YTBkNS1mZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9EvDYjkgAC/bhKOwIc0xxGUz0JL87RlAr8ZXHqVTldvOren9Q/pbE5nPXJ6 ERS20LHWlVikYmg6rJft8O842lPBXhQ0R00uC6fbEeQABBzTdUlgdpbxYIlzsecu ywUaSqKEYn95nm2EDxasI17zshDhpi63dqeOfpjKZW0g6dSOzQkubnpPcIu03m0X 3l1ZXzLD31WmNVm3U1CVKK+h+6qv6iaIvBKhqNhDm9qc0VlpeVIk7qum/7aFfqbO ugcerUf8+qR+FcHkwzOm1/iA76IgwNHr6AqkzXRHw12SN1h8o1zucKX0iNrvAfQn Ep3ZcRad00TIMF3KgVTv3BlcdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8rh9Oj 6pbaiUhwEatiZgylP6RiMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5 NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3 SkdfR2xHTkZpdXlpUWx5NDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdFhdYIdg/IRyNwr8tMJ3R9s10xDZzsL4P31ghuhCaW30gnAmZgKcMWVqTePa py1Nt8pYqin12DRG6qRlj/pJ/yeg8rFVFdhjswcD+R/9ohpWN1w0J8ENtsRvNcQ3 3t+3oNN3fUXohd8Cowd/lqbkeVBO6s/f4ekXXmG42t6sMWtwkMeL2zLtb4O9PulK quTn5DiRN+sFGjY1iSPmdSuN2V3+qBI6Plz2sTrU5/f7Y70czqPKdk7sFfebFpHb qxMepyq+N/WqTf1rfuadgEjqr5S8EElr0QdWRzLqLXSUKVJ1ip5Cube/O2lsnTQM fwGIiy35zZ/3V69ZiXddELjzcg== -----END CERTIFICATE-----Generated at Mon Mar 2 18:35:48 2026 by rpki-client