$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft File: Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft (raw, json) Hash identifier: fxO/ZG+6tqg8uRAi6gu9321OPkdZ/RVy8f/Rk8bbEVg= Subject key identifier: A8:AD:F6:03:DA:5F:6A:EE:7C:D3:0A:03:B8:34:0D:31:26:88:71:D5 Authority key identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D Certificate issuer: /CN=A913270F/serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft Manifest number: 1D Signing time: Sun 01 Mar 2026 10:23:46 +0000 Manifest this update: Sun 01 Mar 2026 10:23:46 +0000 Manifest next update: Sun 08 Mar 2026 10:23:46 +0000 Files and hashes: 1: Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl (hash: wAeCvd4Wdp8BMVw2+R1efEljhF0bntDyVBeYSaKlpew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913270F, serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D Validity Not Before: Mar 1 10:23:46 2026 GMT Not After : Mar 8 10:23:46 2026 GMT Subject: CN=69a413b2-1954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:19:45:f5:e9:17:37:05:4f:b7:63:43:51: e3:95:8a:d2:07:01:35:81:b4:99:70:3e:d9:81:37: 75:55:24:63:77:3d:3b:33:42:47:45:6f:d8:81:f6: 36:58:89:4f:62:0a:c9:93:3d:46:2c:21:7d:f4:1f: 88:a6:cc:62:e3:0e:a5:56:36:b0:a8:0c:1e:af:4c: bd:05:fa:22:b5:64:bf:fc:5d:95:32:ec:65:b4:c0: 36:58:c8:d2:0f:62:9b:21:c0:1f:82:cb:55:24:7d: fc:69:22:a2:d1:5e:90:79:03:4d:fa:d4:92:86:19: 21:2b:27:33:e2:3d:e7:89:ab:28:e4:c6:f5:af:49: db:38:f4:0c:be:fd:a6:a6:99:4e:78:1e:7c:ca:a3: 94:33:e8:b2:c7:3a:1f:90:d0:30:0d:e0:3c:d9:eb: bb:19:be:e7:4f:06:1a:f1:71:00:f3:e8:a3:ca:89: bb:c1:9b:02:b3:bb:2c:3e:8f:97:94:e1:0c:01:ac: d7:f4:cf:68:6b:42:91:94:92:96:45:a3:86:05:8d: a7:72:83:29:21:90:8e:99:5b:48:9b:2a:a3:98:67: d5:b8:85:7c:b4:dc:7b:e2:c0:02:e8:7e:e1:5f:d3: 5a:eb:5e:60:5b:4b:eb:42:bd:e9:57:d0:3e:74:24: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AD:F6:03:DA:5F:6A:EE:7C:D3:0A:03:B8:34:0D:31:26:88:71:D5 X509v3 Authority Key Identifier: keyid:31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:95:ae:48:78:da:09:bf:fb:49:0b:06:b9:e1:7a:46:07:a6: 09:ed:d7:c6:1c:6a:e5:08:fe:83:f4:77:e2:29:9f:69:d9:df: 21:c7:0a:c1:0d:1d:80:c0:c8:45:66:37:e8:5d:a2:54:18:e2: 1e:7c:a9:ba:ce:54:73:18:1c:7a:e5:b7:49:e0:56:1d:3b:85: 57:68:eb:2f:aa:73:1e:b4:e7:d4:a6:33:9f:c0:c4:9a:ae:18: d1:24:1e:f9:c2:e5:2e:50:52:11:dc:6c:0f:8b:39:60:37:6a: d2:4d:77:a7:41:7b:ba:69:19:95:1e:70:dc:30:77:7b:06:ef: dd:da:dd:36:a2:40:db:ad:dd:0d:6c:cc:f0:b3:90:26:a8:f6: 82:ec:af:76:1d:3e:88:06:85:51:56:60:bb:18:f9:84:4f:4b: 48:92:31:8f:fb:a7:60:78:97:51:ae:39:3e:ce:51:5e:04:34: b8:8c:27:e1:09:33:03:a2:e7:94:2e:1f:23:5b:75:94:5d:ae: 85:0e:ad:73:ed:a7:de:33:c0:91:b3:f1:63:bf:7d:bb:21:c5: b1:29:54:da:56:87:fa:1b:6c:58:40:0e:54:b0:72:13:33:bf: c2:0d:b7:84:92:e4:8c:c6:db:d7:34:33:54:2f:23:da:bc:a7: 92:c2:55:fb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MjcwRjExMC8GA1UEBRMoMzFCRkMxMzczRkIzN0MxMzlBMkVFN0MzQTk2REZFQzRF N0UzNzkxRDAeFw0yNjAzMDExMDIzNDZaFw0yNjAzMDgxMDIzNDZaMBgxFjAUBgNV BAMTDTY5YTQxM2IyLTE5NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbWxlF9ekXNwVPt2NDUeOVitIHATWBtJlwPtmBN3VVJGN3PTszQkdFb9iB9jZY iU9iCsmTPUYsIX30H4imzGLjDqVWNrCoDB6vTL0F+iK1ZL/8XZUy7GW0wDZYyNIP YpshwB+Cy1UkffxpIqLRXpB5A0361JKGGSErJzPiPeeJqyjkxvWvSds49Ay+/aam mU54HnzKo5Qz6LLHOh+Q0DAN4DzZ67sZvudPBhrxcQDz6KPKibvBmwKzuyw+j5eU 4QwBrNf0z2hrQpGUkpZFo4YFjadygykhkI6ZW0ibKqOYZ9W4hXy03HviwALofuFf 01rrXmBbS+tCvelX0D50JBqzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqK32A9pf au580woDuDQNMSaIcdUwHwYDVR0jBBgwFoAUMb/BNz+zfBOaLufDqW3+xOfjeR0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMyNzBGL0Y0QTM2RjYyRUY5 RjExRjBCOEQ1QjNFRjY4NkY1NkJDL01iX0JOei16ZkJPYUx1ZkRxVzMteE9mamVS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWJfQk56LXpmQk9hTHVmRHFXMy14T2ZqZVIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMy NzBGL0Y0QTM2RjYyRUY5RjExRjBCOEQ1QjNFRjY4NkY1NkJDL01iX0JOei16ZkJP YUx1ZkRxVzMteE9mamVSMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAAla5IeNoJv/tJCwa54XpGB6YJ7dfGHGrlCP6D9HfiKZ9p2d8hxwrBDR2AwMhF ZjfoXaJUGOIefKm6zlRzGBx65bdJ4FYdO4VXaOsvqnMetOfUpjOfwMSarhjRJB75 wuUuUFIR3GwPizlgN2rSTXenQXu6aRmVHnDcMHd7Bu/d2t02okDbrd0NbMzws5Am qPaC7K92HT6IBoVRVmC7GPmET0tIkjGP+6dgeJdRrjk+zlFeBDS4jCfhCTMDoueU Lh8jW3WUXa6FDq1z7afeM8CRs/Fjv327IcWxKVTaVof6G2xYQA5UsHITM7/CDbeE kuSMxtvXNDNULyPavKeSwlX7 -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:54 2026 by rpki-client