$ rpki-client -vvf rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft File: k0_yOzjsbVimyqtwe3lVUcicMf0.mft (raw, json) Hash identifier: 3PHJ1aHUBfoAy7QsSHlfpqR22UUE/4wPL0StVhpRGtc= Subject key identifier: 59:EE:AA:22:50:F6:C1:77:0E:81:60:BD:EC:91:17:19:7D:48:C4:07 Authority key identifier: 93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD Certificate issuer: /CN=A917392B/serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Certificate serial: 0506 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft Manifest number: 04FF Signing time: Mon 02 Mar 2026 02:33:27 +0000 Manifest this update: Mon 02 Mar 2026 02:33:26 +0000 Manifest next update: Mon 09 Mar 2026 02:33:26 +0000 Files and hashes: 1: k0_yOzjsbVimyqtwe3lVUcicMf0.crl (hash: e2cuZwFfanOcHLKQWG8eiPhyrrI8Trky7LiFxhaxUm0=) 2: B7BE1DAC482511ECA1A68F13C4F9AE02.roa (hash: SOuuEngzMzJn6tRotSYMuHwkZUu/qid4gvYTernifnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:33:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1286 (0x506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917392B, serialNumber=934FF23B38EC6D58A6CAAB707B795551C89C31FD Validity Not Before: Mar 2 02:33:26 2026 GMT Not After : Mar 9 02:33:26 2026 GMT Subject: CN=69a4f6f7-21ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:2b:42:98:e3:6a:46:21:88:76:50:ec:0b: 99:da:54:23:62:51:61:cf:37:75:69:00:5b:3e:ff: f6:59:8d:d9:bf:92:d2:1d:92:e3:21:79:05:53:d8: 17:b8:21:13:c1:82:fe:80:2a:6d:54:e0:05:98:10: 2d:48:d2:d2:7b:74:31:8f:d0:11:b8:22:df:da:38: d3:71:87:e6:55:d6:b5:97:85:0d:f5:b8:b3:c9:b3: 5f:1e:7b:67:9e:00:a8:b7:7b:14:15:d0:de:47:e1: 1f:82:b3:0c:ca:07:f3:c2:5f:74:a6:9a:7b:48:ef: 63:b8:98:b5:10:5c:a0:18:43:79:30:bf:b5:4c:35: 96:7f:24:c8:16:d8:9a:99:57:2d:8d:ef:3b:40:01: 50:06:06:f2:cd:32:96:24:c3:c2:be:92:50:2e:5c: ba:55:7b:b6:87:14:57:c0:1c:97:8e:62:85:75:dd: ef:a1:8c:85:d2:05:e2:42:f7:49:af:ba:92:53:9b: d1:5c:09:2a:92:e2:47:91:56:22:81:dc:e6:bf:ff: 5e:6c:bb:77:04:30:8b:7a:e1:fd:4a:e1:38:77:a1: c0:7f:4b:28:22:37:2f:81:6f:5f:5c:f2:e6:a8:fc: cf:ba:f5:fc:95:66:c8:6b:87:f0:cf:6f:7c:38:84: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EE:AA:22:50:F6:C1:77:0E:81:60:BD:EC:91:17:19:7D:48:C4:07 X509v3 Authority Key Identifier: keyid:93:4F:F2:3B:38:EC:6D:58:A6:CA:AB:70:7B:79:55:51:C8:9C:31:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0_yOzjsbVimyqtwe3lVUcicMf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917392B/B20DAD66482311EC93768312C4F9AE02/k0_yOzjsbVimyqtwe3lVUcicMf0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:03:b1:6c:41:1d:c7:f2:35:e6:b4:81:4c:61:74:7b:0e:32: 02:c4:5a:ed:0c:42:8e:66:12:3d:39:ac:35:28:85:eb:2e:25: cd:01:2a:b3:08:fa:45:8d:4d:71:19:06:21:55:b1:d5:7c:ba: 29:21:d8:dc:a8:75:03:50:55:2e:9d:ba:81:83:72:49:fc:21: 14:73:8b:ea:b2:9e:78:d2:f7:b8:9f:de:1e:1f:c3:dd:0e:3f: 25:f9:ca:0c:aa:e2:7d:31:63:5d:a5:58:93:43:49:81:c2:d3: c8:42:6e:cb:e9:c1:0e:47:3a:33:13:9d:12:da:46:83:4a:97: 0f:bf:b2:b3:70:17:0f:33:b5:45:20:a7:d2:3f:8e:2a:ff:90: 57:b2:15:41:a0:f4:30:0f:91:e3:ec:23:1e:b8:31:36:6f:4a: 25:8e:88:d7:a1:5a:89:f9:2d:a6:0b:b7:65:d2:a3:3e:f4:73: c2:6f:f8:b3:d4:eb:d0:9f:54:8a:89:6d:ba:81:e9:2c:38:d9: e0:13:2f:6f:40:62:f6:e8:e9:04:ed:b4:9f:41:c1:28:b7:e0: dc:53:c3:85:d0:51:51:d0:d6:38:45:0f:29:72:9e:e8:e6:31: ce:83:9d:9c:5c:23:51:c0:7f:2c:f2:a0:9e:0d:68:0d:9b:81: 67:4f:aa:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM5MkIxMTAvBgNVBAUTKDkzNEZGMjNCMzhFQzZENThBNkNBQUI3MDdCNzk1NTUx Qzg5QzMxRkQwHhcNMjYwMzAyMDIzMzI2WhcNMjYwMzA5MDIzMzI2WjAYMRYwFAYD VQQDEw02OWE0ZjZmNy0yMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3scrQpjjakYhiHZQ7AuZ2lQjYlFhzzd1aQBbPv/2WY3Zv5LSHZLjIXkFU9gX uCETwYL+gCptVOAFmBAtSNLSe3Qxj9ARuCLf2jjTcYfmVda1l4UN9bizybNfHntn ngCot3sUFdDeR+EfgrMMygfzwl90ppp7SO9juJi1EFygGEN5ML+1TDWWfyTIFtia mVctje87QAFQBgbyzTKWJMPCvpJQLly6VXu2hxRXwByXjmKFdd3voYyF0gXiQvdJ r7qSU5vRXAkqkuJHkVYigdzmv/9ebLt3BDCLeuH9SuE4d6HAf0soIjcvgW9fXPLm qPzPuvX8lWbIa4fwz298OIRGowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnuqiJQ 9sF3DoFgveyRFxl9SMQHMB8GA1UdIwQYMBaAFJNP8js47G1YpsqrcHt5VVHInDH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzkyQi9CMjBEQUQ2NjQ4 MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JWaW15cXR3ZTNsVlVjaWNN ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swX3lPempzYlZpbXlxdHdlM2xWVWNpY01mMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzkyQi9CMjBEQUQ2NjQ4MjMxMUVDOTM3NjgzMTJDNEY5QUUwMi9rMF95T3pqc2JW aW15cXR3ZTNsVlVjaWNNZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQQOxbEEdx/I15rSBTGF0ew4yAsRa7QxCjmYSPTmsNSiF6y4lzQEqswj6RY1N cRkGIVWx1Xy6KSHY3Kh1A1BVLp26gYNySfwhFHOL6rKeeNL3uJ/eHh/D3Q4/JfnK DKrifTFjXaVYk0NJgcLTyEJuy+nBDkc6MxOdEtpGg0qXD7+ys3AXDzO1RSCn0j+O Kv+QV7IVQaD0MA+R4+wjHrgxNm9KJY6I16Faifktpgu3ZdKjPvRzwm/4s9Tr0J9U ioltuoHpLDjZ4BMvb0Bi9ujpBO20n0HBKLfg3FPDhdBRUdDWOEUPKXKe6OYxzoOd nFwjUcB/LPKgng1oDZuBZ0+qDA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:12 2026 by rpki-client