$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: cKtA8GQ20a1LlOgxz95iUvQ6YN+XqUYU/gT3Q1gYJSw= Subject key identifier: 1B:67:AF:ED:E5:15:EB:8D:98:D9:7D:B9:94:59:2F:F9:C9:40:BF:46 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 01B3 Signing time: Fri 17 Apr 2026 03:42:27 +0000 Manifest this update: Fri 17 Apr 2026 03:42:26 +0000 Manifest next update: Fri 24 Apr 2026 03:42:26 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: ZYXhBoSGKdO5Va8awtz/Muof7mhkIumUWrajz3oZczg=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: Apr 17 03:42:26 2026 GMT Not After : Apr 24 03:42:26 2026 GMT Subject: CN=69e1ac23-113b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:0c:f6:9b:6b:c5:40:c4:d9:37:79:26:3a: 01:69:ab:38:cb:cd:22:50:67:95:96:1f:48:02:e2: 05:9f:86:12:f1:ae:00:db:46:1d:ea:b0:f6:8c:91: d5:74:f2:a0:ce:52:74:a7:54:36:a5:47:9f:83:b9: 61:9c:e3:89:31:b3:d6:a4:9c:42:f9:ab:40:ed:b5: 20:9e:61:49:f5:e2:65:49:32:33:0b:e0:8d:13:1e: d9:c9:c7:28:e5:71:61:56:26:2c:85:1f:a0:43:cc: 3b:64:79:64:51:b3:bb:f4:e9:69:25:51:26:cf:c9: 1d:e3:35:db:47:03:ac:04:39:04:4a:ca:b6:15:e9: a3:a1:dd:67:0a:1d:86:30:b7:11:5f:42:11:ca:09: 7b:72:16:19:46:27:77:68:7e:3e:49:c5:cb:01:63: 41:77:1f:1a:eb:a9:e8:95:c4:d9:53:58:94:3b:4e: f7:ad:4e:d5:2b:91:be:6e:74:ad:2b:8e:a6:07:eb: c1:9a:47:3b:ac:c7:bf:a0:cf:6b:a8:11:c7:2d:80: 2b:91:45:46:11:e8:a2:af:ed:e5:b8:b6:9c:87:14: be:6d:31:48:1e:58:2a:dc:87:24:74:7b:9a:94:75: 63:32:de:9d:c7:84:49:6f:30:1c:b5:17:35:61:8c: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:AF:ED:E5:15:EB:8D:98:D9:7D:B9:94:59:2F:F9:C9:40:BF:46 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:53:37:69:2b:8f:89:8a:7a:2b:53:5e:e1:3b:5f:9d:2b:68: b2:39:b9:6c:60:52:05:a7:58:a2:84:14:09:44:df:6e:e4:10: 45:c2:64:08:cd:51:a6:b2:71:8d:16:c6:d1:61:b1:22:44:33: 53:cf:71:05:bc:5b:f5:9c:6e:c4:6f:c4:06:0a:f0:e5:05:f1: 0b:07:3e:ca:10:ab:e8:25:60:19:f1:1d:89:df:70:cd:b9:0f: 6a:61:8a:35:08:39:23:11:b1:09:68:2e:00:38:5a:9b:77:b0: 07:d5:d8:0e:0f:62:06:b4:0f:58:f1:14:98:7e:28:d6:e7:24: a6:bf:4b:d8:db:7a:8b:28:ec:c0:48:c3:4b:a4:97:7b:7a:06: 34:96:40:b1:f1:83:6c:0c:1c:97:1e:40:7a:04:db:e0:e1:94: a0:32:35:9e:04:de:fd:b4:18:4f:e6:a2:d0:fc:67:da:cb:21: 22:7f:59:0e:3c:05:55:39:98:d8:aa:ed:a3:56:a4:06:53:ce: f4:47:03:81:31:74:3b:f7:3b:b5:4e:e7:d9:1a:35:d1:eb:02: 11:dc:0d:8f:d2:a9:37:2b:73:6c:ab:93:51:f5:d4:b8:de:42: 92:39:12:f4:ae:db:5e:53:8c:c1:0f:b0:41:2c:fe:67:4b:1d: d7:04:1b:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjYwNDE3MDM0MjI2WhcNMjYwNDI0MDM0MjI2WjAYMRYwFAYD VQQDEw02OWUxYWMyMy0xMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw60M9ptrxUDE2Td5JjoBaas4y80iUGeVlh9IAuIFn4YS8a4A20Yd6rD2jJHV dPKgzlJ0p1Q2pUefg7lhnOOJMbPWpJxC+atA7bUgnmFJ9eJlSTIzC+CNEx7Zycco 5XFhViYshR+gQ8w7ZHlkUbO79OlpJVEmz8kd4zXbRwOsBDkESsq2Femjod1nCh2G MLcRX0IRygl7chYZRid3aH4+ScXLAWNBdx8a66nolcTZU1iUO073rU7VK5G+bnSt K46mB+vBmkc7rMe/oM9rqBHHLYArkUVGEeiir+3luLachxS+bTFIHlgq3IckdHua lHVjMt6dx4RJbzActRc1YYzlxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtnr+3l FeuNmNl9uZRZL/nJQL9GMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlM3aSuPiYp6K1Ne4TtfnStosjm5bGBSBadYooQUCUTfbuQQRcJkCM1RprJx jRbG0WGxIkQzU89xBbxb9ZxuxG/EBgrw5QXxCwc+yhCr6CVgGfEdid9wzbkPamGK NQg5IxGxCWguADham3ewB9XYDg9iBrQPWPEUmH4o1uckpr9L2Nt6iyjswEjDS6SX e3oGNJZAsfGDbAwclx5AegTb4OGUoDI1ngTe/bQYT+ai0Pxn2sshIn9ZDjwFVTmY 2Krto1akBlPO9EcDgTF0O/c7tU7n2Ro10esCEdwNj9KpNytzbKuTUfXUuN5CkjkS 9K7bXlOMwQ+wQSz+Z0sd1wQbWQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:03:42 2026 by rpki-client