$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: lScHa0La0n8yasIAYQ1NW5VaXJ35TJ8g838nIaIYBEE= Subject key identifier: D0:D1:72:7C:81:E3:0A:E5:8D:C4:42:7F:C2:F5:B2:9C:AE:94:35:48 Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 0161 Signing time: Sun 01 Mar 2026 05:53:40 +0000 Manifest this update: Sun 01 Mar 2026 05:53:39 +0000 Manifest next update: Sun 08 Mar 2026 05:53:39 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: PH+eN69KHOjfiSXPN14YWLfDedccCOartdGfBl1f4OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Mar 1 05:53:39 2026 GMT Not After : Mar 8 05:53:39 2026 GMT Subject: CN=69a3d464-d961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:e9:9c:9c:e1:4d:5c:2c:a6:45:ce:5b:e3: 68:b2:4f:ec:7a:e7:0c:ce:f4:3f:2e:98:e9:25:e6: 11:a3:c2:1e:a5:14:27:09:96:8f:65:70:b7:cf:49: 80:eb:14:cc:9c:5d:4d:fc:a8:7e:28:b7:92:cb:29: d9:d4:44:c0:ad:b3:98:04:75:b9:68:d5:2f:c3:bb: 66:25:f1:14:15:88:d3:f6:3b:19:97:be:36:62:4a: cc:d7:fd:f1:75:98:8c:84:b7:0c:88:f7:a3:cd:32: 9a:77:3e:01:80:17:eb:5e:9a:a0:09:b7:a7:6b:e7: 9c:7c:cc:54:a3:63:d1:36:ac:a6:47:bb:4f:2c:89: b1:0f:3f:8e:2d:65:3b:fd:69:9b:aa:7b:04:7e:af: 40:99:c3:14:c3:1f:0e:52:c9:df:a5:ae:a9:71:72: a3:41:d9:71:4b:15:f5:ed:48:8e:3b:c5:ae:7a:bc: 71:ed:df:b6:44:60:c5:cd:7f:7e:45:a3:bc:4c:0c: fd:24:8b:46:ec:b4:f0:81:c5:1c:9d:2d:4a:1c:c5: 71:a9:49:d1:1c:bf:0d:6b:54:3b:dd:4a:d3:d2:68: 27:84:fe:af:65:bb:26:2b:1c:97:2d:d2:0d:de:90: f1:30:d8:b9:61:6f:dd:ff:87:46:10:b2:d3:21:cd: 48:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D1:72:7C:81:E3:0A:E5:8D:C4:42:7F:C2:F5:B2:9C:AE:94:35:48 X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:40:7d:4c:eb:b3:67:74:49:92:cd:d0:fa:c9:b2:ea:d6:d2: 48:66:22:12:8b:0d:16:41:54:9a:6c:c3:9e:80:4a:1f:22:ed: ec:8f:d4:48:c5:31:c4:32:62:4c:ad:88:31:88:c7:d8:cd:fb: 3c:78:52:65:d6:01:77:04:80:cb:12:fa:89:bc:61:ab:d1:57: d6:b8:18:c9:f8:32:3f:44:05:c8:98:c3:28:32:a3:1c:02:cf: ca:01:bf:2c:14:f6:4a:fe:d4:60:b3:79:2b:7b:9c:c5:54:c7: 53:da:93:6e:47:64:4f:92:6c:5f:d6:85:00:0c:46:6d:dc:bb: ba:f0:58:45:aa:ad:35:09:9b:1b:cd:31:cc:c5:d1:1b:58:59: bf:43:03:11:dc:50:ec:97:5f:66:f8:37:74:a7:19:d7:ad:df: 98:8e:d8:40:33:82:7e:0b:39:09:27:e1:77:96:c5:cf:94:52: b7:da:da:0f:21:a0:88:9d:77:ef:ef:38:36:32:06:2e:58:e8: 56:59:04:cc:44:9d:4c:fe:5c:d0:8f:da:9b:a9:2b:c4:8c:19: d5:91:b7:1a:aa:95:b0:17:b8:62:a6:c8:20:c3:38:5e:53:34: a5:dd:1f:3c:02:b8:19:f8:60:97:82:a3:b4:09:77:89:79:24: 5a:3c:f8:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjYwMzAxMDU1MzM5WhcNMjYwMzA4MDU1MzM5WjAYMRYwFAYD VQQDEw02OWEzZDQ2NC1kOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNPpnJzhTVwspkXOW+Nosk/seucMzvQ/LpjpJeYRo8IepRQnCZaPZXC3z0mA 6xTMnF1N/Kh+KLeSyynZ1ETArbOYBHW5aNUvw7tmJfEUFYjT9jsZl742YkrM1/3x dZiMhLcMiPejzTKadz4BgBfrXpqgCbena+ecfMxUo2PRNqymR7tPLImxDz+OLWU7 /WmbqnsEfq9AmcMUwx8OUsnfpa6pcXKjQdlxSxX17UiOO8Wuerxx7d+2RGDFzX9+ RaO8TAz9JItG7LTwgcUcnS1KHMVxqUnRHL8Na1Q73UrT0mgnhP6vZbsmKxyXLdIN 3pDxMNi5YW/d/4dGELLTIc1IxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDRcnyB 4wrljcRCf8L1spyulDVIMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiUB9TOuzZ3RJks3Q+smy6tbSSGYiEosNFkFUmmzDnoBKHyLt7I/USMUxxDJi TK2IMYjH2M37PHhSZdYBdwSAyxL6ibxhq9FX1rgYyfgyP0QFyJjDKDKjHALPygG/ LBT2Sv7UYLN5K3ucxVTHU9qTbkdkT5JsX9aFAAxGbdy7uvBYRaqtNQmbG80xzMXR G1hZv0MDEdxQ7JdfZvg3dKcZ163fmI7YQDOCfgs5CSfhd5bFz5RSt9raDyGgiJ13 7+84NjIGLljoVlkEzESdTP5c0I/am6krxIwZ1ZG3GqqVsBe4YqbIIMM4XlM0pd0f PAK4Gfhgl4KjtAl3iXkkWjz42Q== -----END CERTIFICATE-----Generated at Mon Mar 2 09:24:30 2026 by rpki-client