$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: C82sSribdEO7dPXFQf+vdo49khBa86TIeNbaoz9pMdY= Subject key identifier: 7E:17:DE:17:49:B6:8E:F1:17:CC:02:16:58:41:65:CA:56:87:EF:B5 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 021C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 021C Signing time: Mon 02 Mar 2026 02:13:18 +0000 Manifest this update: Mon 02 Mar 2026 02:13:16 +0000 Manifest next update: Mon 09 Mar 2026 02:13:16 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: 4KrIm4dJ2fVeERLgHrgy3kBPMoUOLHKAnkUWU8dCO7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Mar 2 02:13:16 2026 GMT Not After : Mar 9 02:13:16 2026 GMT Subject: CN=69a4f23e-8c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:7d:70:c0:de:39:65:c2:ea:1c:33:83:c8: b2:ee:a9:cf:c6:b4:1f:52:61:d4:6c:52:cd:17:bb: 69:3f:f8:fc:00:7a:e3:96:c2:e2:09:05:40:4b:27: af:d6:21:b8:3d:98:cd:3a:fa:3d:03:a5:90:8d:c0: c9:f4:b4:4c:d8:31:be:cf:dc:cc:45:9b:5d:5f:b1: 18:40:55:de:18:ff:50:cf:18:4a:dc:82:13:f0:3d: ab:5f:94:11:45:cd:24:fc:a2:ce:20:ec:f5:d8:c7: f7:a8:39:a6:41:0f:4c:11:69:dd:62:8e:68:a2:dc: d7:3c:c2:66:03:34:b1:49:de:2d:33:74:32:27:d1: 14:80:a5:4d:8a:b7:1d:9e:20:a7:0f:ab:d5:d4:d4: 18:b8:02:96:b2:66:90:16:3f:27:1f:33:c1:e7:6f: f0:47:0d:31:df:19:c7:79:d7:2d:bb:fd:f0:fc:e5: 09:e7:fd:fa:3d:67:a5:4d:49:a9:6c:29:02:04:c8: ad:fc:fd:ca:39:71:83:69:1a:c6:e9:df:2b:6f:6a: 6f:d9:50:fc:7d:e3:ec:47:d8:22:6a:c2:81:bb:f1: 08:3b:b9:cd:84:94:30:2e:df:68:eb:60:a0:c2:dd: 55:6b:3d:db:c9:93:04:23:4c:46:3f:56:f5:f1:fc: a3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:17:DE:17:49:B6:8E:F1:17:CC:02:16:58:41:65:CA:56:87:EF:B5 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:7d:3a:d8:3a:75:c0:09:07:08:c3:f4:17:5e:91:b8:6d:89: 52:e4:74:8d:7a:9d:ce:21:39:f1:6a:0d:46:00:e6:1f:e5:53: b9:1f:5e:c3:c5:c5:bd:86:22:bf:de:31:80:fe:51:89:c5:49: f4:62:2d:c2:c7:5f:ca:6a:8c:92:34:50:b0:2c:2c:be:b1:9e: fd:cf:07:5e:81:46:14:25:ab:05:6f:aa:b6:0e:74:36:db:65: 1f:cd:4f:8d:cb:79:1b:5a:f6:69:76:d0:0c:7b:e1:1d:4b:6b: 53:ba:63:43:97:aa:79:53:ad:c0:3a:c8:57:c4:c4:92:71:bc: 16:6f:e5:02:1b:79:4c:d2:ab:41:a5:f9:93:27:6c:a3:9c:4a: dd:9a:7b:1f:75:c8:4e:be:4b:6a:9d:27:95:ba:71:2c:df:24: c8:b4:ed:8c:1c:71:fd:7e:96:ea:96:f8:a7:c9:ef:a0:30:b4: 7b:ea:99:19:57:ae:f4:af:2a:53:ce:19:b7:11:07:27:ac:bc: 5c:76:a4:58:ea:d0:b3:7f:3d:aa:65:9e:1e:de:6a:2c:00:89: 58:e2:13:fb:bc:8d:32:df:4e:fe:26:5d:38:0f:e2:03:7a:4a: ad:fa:a1:b0:1b:7b:20:19:42:a3:f5:4a:bc:a8:3c:2b:63:30: 82:46:61:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjYwMzAyMDIxMzE2WhcNMjYwMzA5MDIxMzE2WjAYMRYwFAYD VQQDEw02OWE0ZjIzZS04Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCh9cMDeOWXC6hwzg8iy7qnPxrQfUmHUbFLNF7tpP/j8AHrjlsLiCQVASyev 1iG4PZjNOvo9A6WQjcDJ9LRM2DG+z9zMRZtdX7EYQFXeGP9QzxhK3IIT8D2rX5QR Rc0k/KLOIOz12Mf3qDmmQQ9MEWndYo5ootzXPMJmAzSxSd4tM3QyJ9EUgKVNircd niCnD6vV1NQYuAKWsmaQFj8nHzPB52/wRw0x3xnHedctu/3w/OUJ5/36PWelTUmp bCkCBMit/P3KOXGDaRrG6d8rb2pv2VD8fePsR9giasKBu/EIO7nNhJQwLt9o62Cg wt1Vaz3byZMEI0xGP1b18fyj+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4X3hdJ to7xF8wCFlhBZcpWh++1MB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVH062Dp1wAkHCMP0F16RuG2JUuR0jXqdziE58WoNRgDmH+VTuR9ew8XFvYYi v94xgP5RicVJ9GItwsdfymqMkjRQsCwsvrGe/c8HXoFGFCWrBW+qtg50NttlH81P jct5G1r2aXbQDHvhHUtrU7pjQ5eqeVOtwDrIV8TEknG8Fm/lAht5TNKrQaX5kyds o5xK3Zp7H3XITr5Lap0nlbpxLN8kyLTtjBxx/X6W6pb4p8nvoDC0e+qZGVeu9K8q U84ZtxEHJ6y8XHakWOrQs389qmWeHt5qLACJWOIT+7yNMt9O/iZdOA/iA3pKrfqh sBt7IBlCo/VKvKg8K2MwgkZh8A== -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:25 2026 by rpki-client