$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft File: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft (raw, json) Hash identifier: o3AeEipReX7vcwx/8EXu/MiGjKwo7kldmd9nxjFTO5Y= Subject key identifier: 46:86:F0:E3:48:64:A4:16:8E:90:EE:31:78:49:4E:40:65:BA:0E:36 Authority key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 Certificate issuer: /CN=A917C09A/serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft Manifest number: 20 Signing time: Sun 01 Mar 2026 10:19:59 +0000 Manifest this update: Sun 01 Mar 2026 10:19:58 +0000 Manifest next update: Sun 08 Mar 2026 10:19:58 +0000 Files and hashes: 1: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl (hash: sUj85rLHnhlMhPPg0VsXqHUlSFgQXA/G8jsnN29I9oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Validity Not Before: Mar 1 10:19:58 2026 GMT Not After : Mar 8 10:19:58 2026 GMT Subject: CN=69a412cf-5c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:67:cc:1d:2d:3a:75:fb:9b:23:84:36:a9: 4a:4c:a6:6e:2e:1c:d5:97:40:1a:46:db:b4:b6:3b: 0f:61:91:eb:f1:3a:96:ec:d7:c9:68:7e:13:13:f5: 12:e0:95:a1:d5:49:97:38:14:9d:f6:95:62:f4:37: 2c:d5:81:ce:b7:04:40:4f:c4:4c:69:be:b5:b7:b9: ca:e2:43:d1:63:39:05:79:df:3e:d0:65:2c:68:c0: 4b:bc:a5:67:e7:19:36:ac:c5:6d:46:63:4b:5e:9f: 24:b6:dd:cb:67:44:b2:a9:7b:8b:89:62:0e:16:c5: d2:40:f2:e4:0e:70:ba:db:2b:25:8b:1a:23:e4:df: a3:34:8a:da:8b:1c:51:1e:fc:29:79:e7:27:c7:ef: 64:84:53:f8:e8:ac:fb:31:fc:64:0f:72:6a:f5:26: 9f:32:ff:13:a5:cc:68:0a:4e:74:af:ca:79:39:32: f7:f1:25:fc:f9:9e:4d:dd:2e:28:33:f1:bc:ae:3a: b9:01:71:a9:07:6e:2b:6b:44:bb:c7:41:df:59:53: 7d:6b:a6:e4:17:7b:b6:c0:5f:c7:6a:4f:67:04:91: 8f:e0:a5:9a:a1:b9:dc:5f:4b:b2:d1:f5:e5:17:72: dd:3d:b6:e5:63:3c:90:ba:79:41:62:6a:25:ed:0a: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:F0:E3:48:64:A4:16:8E:90:EE:31:78:49:4E:40:65:BA:0E:36 X509v3 Authority Key Identifier: keyid:0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:df:5a:5b:40:ab:d6:2e:78:0a:81:e6:c3:b3:7e:92:57:5f: fe:bd:94:38:8f:ec:07:5f:07:1b:a0:49:1f:07:3a:19:14:da: ff:f4:44:c7:63:d3:bc:4f:3f:2a:cf:84:c0:fe:be:db:05:30: 53:02:ad:d4:ba:23:c0:1d:42:c7:7e:ce:44:23:a1:3a:f3:9b: 29:43:ab:1b:d1:d1:f7:92:4b:93:70:63:52:4b:b6:4c:48:01: b8:c2:37:35:0a:3e:0e:be:27:d3:4d:84:de:1e:81:bd:a0:eb: 02:d4:01:3c:ce:da:9a:a9:ff:1c:60:3f:47:09:e7:41:1f:f1: 03:2f:fc:99:da:04:e2:66:3a:ba:7a:b8:3f:b1:95:0d:77:5e: 40:a1:86:c1:60:e7:65:d0:2b:10:5b:95:e4:cf:74:9f:00:64: 44:d5:8b:b0:4c:9d:8c:ee:21:0e:79:b4:f1:40:5d:68:d0:3c: 09:47:e6:d1:c6:94:98:b1:34:a5:27:bc:10:73:83:14:ab:37: 70:f8:32:92:cb:96:a2:a1:b4:3b:0a:a8:ba:8b:cd:05:e5:b6: 98:5e:37:15:49:75:18:35:b4:67:c6:f5:07:04:83:44:82:85: da:49:1b:b1:31:2b:3c:5c:b4:dd:c6:59:dc:5c:17:52:82:7e: 9b:ed:a6:06 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoMEYzQjVGRjE1NDUwNTI5MTQwOEM0ODQwQjEwMzZEOTJB OTMwNEVENDAeFw0yNjAzMDExMDE5NThaFw0yNjAzMDgxMDE5NThaMBgxFjAUBgNV BAMTDTY5YTQxMmNmLTVjOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuhGfMHS06dfubI4Q2qUpMpm4uHNWXQBpG27S2Ow9hkevxOpbs18lofhMT9RLg laHVSZc4FJ32lWL0NyzVgc63BEBPxExpvrW3ucriQ9FjOQV53z7QZSxowEu8pWfn GTasxW1GY0tenyS23ctnRLKpe4uJYg4WxdJA8uQOcLrbKyWLGiPk36M0itqLHFEe /Cl55yfH72SEU/jorPsx/GQPcmr1Jp8y/xOlzGgKTnSvynk5MvfxJfz5nk3dLigz 8byuOrkBcakHbitrRLvHQd9ZU31rpuQXe7bAX8dqT2cEkY/gpZqhudxfS7LR9eUX ct09tuVjPJC6eUFiaiXtCpu7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURobw40hk pBaOkO4xeElOQGW6DjYwHwYDVR0jBBgwFoAUDztf8VRQUpFAjEhAsQNtkqkwTtQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0JCNjczRjNFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBGQWpFaEFzUU50a3Frd1R0 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHp0ZjhWUlFVcEZBakVoQXNRTnRrcWt3VHRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0JCNjczRjNFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBG QWpFaEFzUU50a3Frd1R0US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCC31pbQKvWLngKgebDs36SV1/+vZQ4j+wHXwcboEkfBzoZFNr/9ETHY9O8Tz8q z4TA/r7bBTBTAq3UuiPAHULHfs5EI6E685spQ6sb0dH3kkuTcGNSS7ZMSAG4wjc1 Cj4OvifTTYTeHoG9oOsC1AE8ztqaqf8cYD9HCedBH/EDL/yZ2gTiZjq6erg/sZUN d15AoYbBYOdl0CsQW5Xkz3SfAGRE1YuwTJ2M7iEOebTxQF1o0DwJR+bRxpSYsTSl J7wQc4MUqzdw+DKSy5aiobQ7Cqi6i80F5baYXjcVSXUYNbRnxvUHBINEgoXaSRux MSs8XLTdxlncXBdSgn6b7aYG -----END CERTIFICATE-----Generated at Mon Mar 2 07:41:45 2026 by rpki-client