$ rpki-client -vvf rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft File: kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft (raw, json) Hash identifier: ywgjDp7PdL3Ah2VCAT1S4CFqFC99uLWTs4Xbp8okkac= Subject key identifier: 80:AE:37:97:48:5F:D1:EF:5D:C7:4A:2A:F6:C6:4F:50:21:C1:1B:84 Authority key identifier: 91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E Certificate issuer: /CN=A9179386/serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft Manifest number: 57 Signing time: Sun 01 Mar 2026 09:35:53 +0000 Manifest this update: Sun 01 Mar 2026 09:35:53 +0000 Manifest next update: Sun 08 Mar 2026 09:35:53 +0000 Files and hashes: 1: kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl (hash: e7rykAWyyHXq1XjIXmIUDbARf1qK5dbxC5B1cJ09AZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179386, serialNumber=914E18544CCA4D310A5E5F09190829F68D51407E Validity Not Before: Mar 1 09:35:53 2026 GMT Not After : Mar 8 09:35:53 2026 GMT Subject: CN=69a40879-da39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:49:3d:b2:5e:5f:19:a6:38:1e:6b:9c:ee: 1d:20:a7:0f:85:58:bc:b2:0a:40:20:43:6e:ab:23: f6:5b:28:18:77:3a:ab:61:1c:79:b4:33:0c:93:06: be:90:ab:fd:7b:c5:2f:49:ab:8a:72:9d:b9:fc:29: 44:dd:cf:bd:ee:88:2c:43:50:ee:20:e6:b5:11:1f: 29:7a:02:9c:79:a5:8e:59:81:3f:61:8c:29:09:d3: 80:ba:e0:80:07:80:14:15:b1:70:d8:f6:4b:da:a6: d3:7f:fc:92:d9:b1:66:51:a3:12:0e:ff:3d:cf:5f: 3d:07:91:30:d6:85:ed:24:1f:b4:53:9a:df:76:91: 11:ac:e5:58:4b:48:c3:8a:b5:5d:60:ec:8f:1b:56: 8a:4e:3d:01:e1:b6:ee:db:c8:99:a7:ce:eb:19:a8: 90:f3:be:37:17:b2:fb:a0:d4:42:64:a7:35:5d:db: 59:fa:cb:1e:f8:a3:7c:ff:f2:ef:5c:fb:55:56:d6: 7c:76:b7:66:3b:a0:d5:d0:4b:2c:1a:4e:4d:71:c8: 34:f9:8e:b7:8d:aa:63:7a:0f:9e:a4:85:2a:07:85: 8e:dd:29:d8:10:fc:43:b5:52:5a:b1:5c:b7:90:90: 1e:43:54:66:50:7b:0e:41:d8:52:64:f4:12:e0:37: 38:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AE:37:97:48:5F:D1:EF:5D:C7:4A:2A:F6:C6:4F:50:21:C1:1B:84 X509v3 Authority Key Identifier: keyid:91:4E:18:54:4C:CA:4D:31:0A:5E:5F:09:19:08:29:F6:8D:51:40:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kU4YVEzKTTEKXl8JGQgp9o1RQH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179386/2E657BCE97E811F0A9A95064C4F9AE02/kU4YVEzKTTEKXl8JGQgp9o1RQH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:f1:f9:db:1a:40:12:4f:6e:7a:62:13:76:4f:24:c1:ca:8d: 42:44:8a:fe:2f:b1:31:79:15:4d:2d:9d:b3:65:b9:04:c0:76: 16:c9:67:92:5a:11:bb:c1:f4:f3:65:6c:a4:35:ce:99:70:e1: ff:0f:fb:34:c5:61:70:3f:23:50:b9:ba:3c:e6:43:57:46:f2: d4:0c:b9:8b:bf:4c:18:be:d6:8b:4a:7d:20:17:6f:ec:10:9e: 0c:11:c7:fb:e6:af:53:73:cb:cc:7d:c3:5a:35:09:d4:3a:7e: 66:12:b9:1a:10:bc:6e:0a:14:1f:1b:41:84:fb:b4:ee:e3:f5: a5:1e:ea:73:ee:40:34:2a:fd:9d:83:04:cd:a3:f7:d2:f7:35: c8:5d:19:77:45:10:ed:72:eb:b7:2b:40:33:61:84:80:71:fb: 39:22:83:91:78:69:ee:83:8b:83:81:f9:4f:f5:20:95:c4:20: ca:5d:aa:4c:ac:31:f8:8f:40:37:1e:e2:52:a7:b2:83:d4:8c: 36:df:87:8b:b4:cf:43:f1:81:3e:90:8f:87:24:f1:bc:41:53: 23:62:13:a5:9f:27:7a:3c:21:39:5b:f9:a0:51:54:5b:59:62: 9a:a7:05:09:30:63:58:d1:13:c8:0c:ef:0a:65:7c:46:e7:a9: b5:b2:8d:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTM4NjExMC8GA1UEBRMoOTE0RTE4NTQ0Q0NBNEQzMTBBNUU1RjA5MTkwODI5RjY4 RDUxNDA3RTAeFw0yNjAzMDEwOTM1NTNaFw0yNjAzMDgwOTM1NTNaMBgxFjAUBgNV BAMTDTY5YTQwODc5LWRhMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeVUk9sl5fGaY4Hmuc7h0gpw+FWLyyCkAgQ26rI/ZbKBh3OqthHHm0MwyTBr6Q q/17xS9Jq4pynbn8KUTdz73uiCxDUO4g5rURHyl6Apx5pY5ZgT9hjCkJ04C64IAH gBQVsXDY9kvaptN//JLZsWZRoxIO/z3PXz0HkTDWhe0kH7RTmt92kRGs5VhLSMOK tV1g7I8bVopOPQHhtu7byJmnzusZqJDzvjcXsvug1EJkpzVd21n6yx74o3z/8u9c +1VW1nx2t2Y7oNXQSywaTk1xyDT5jreNqmN6D56khSoHhY7dKdgQ/EO1UlqxXLeQ kB5DVGZQew5B2FJk9BLgNzjxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgK43l0hf 0e9dx0oq9sZPUCHBG4QwHwYDVR0jBBgwFoAUkU4YVEzKTTEKXl8JGQgp9o1RQH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5Mzg2LzJFNjU3QkNFOTdF ODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRFS1hsOEpHUWdwOW8xUlFI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1U0WVZFektUVEVLWGw4SkdRZ3A5bzFSUUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 Mzg2LzJFNjU3QkNFOTdFODExRjBBOUE5NTA2NEM0RjlBRTAyL2tVNFlWRXpLVFRF S1hsOEpHUWdwOW8xUlFINC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDF8fnbGkAST256YhN2TyTByo1CRIr+L7ExeRVNLZ2zZbkEwHYWyWeSWhG7wfTz ZWykNc6ZcOH/D/s0xWFwPyNQubo85kNXRvLUDLmLv0wYvtaLSn0gF2/sEJ4MEcf7 5q9Tc8vMfcNaNQnUOn5mErkaELxuChQfG0GE+7Tu4/WlHupz7kA0Kv2dgwTNo/fS 9zXIXRl3RRDtcuu3K0AzYYSAcfs5IoOReGnug4uDgflP9SCVxCDKXapMrDH4j0A3 HuJSp7KD1Iw234eLtM9D8YE+kI+HJPG8QVMjYhOlnyd6PCE5W/mgUVRbWWKapwUJ MGNY0RPIDO8KZXxG56m1so2j -----END CERTIFICATE-----Generated at Mon Mar 2 22:48:17 2026 by rpki-client