$ rpki-client -vvf rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft File: 17VzlML5jR0AnPY_E_yQB2jyGN4.mft (raw, json) Hash identifier: e8HIdUdB7N15c8jUbJPND51b3L/XN0o+5HazCdhj8yQ= Subject key identifier: 60:56:D8:AD:D4:84:99:9E:7D:CC:BE:91:D8:EF:FB:B9:92:50:E9:39 Authority key identifier: D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE Certificate issuer: /CN=A91B33AE/serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft Manifest number: 0D Signing time: Sun 01 Mar 2026 10:39:41 +0000 Manifest this update: Sun 01 Mar 2026 10:39:41 +0000 Manifest next update: Sun 08 Mar 2026 10:39:41 +0000 Files and hashes: 1: 17VzlML5jR0AnPY_E_yQB2jyGN4.crl (hash: z1wQZfFq8JZtABdhTucSqSwCnETxjEIJJ3acSWaAomk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B33AE, serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Validity Not Before: Mar 1 10:39:41 2026 GMT Not After : Mar 8 10:39:41 2026 GMT Subject: CN=69a4176d-6c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:0a:80:29:0c:a7:e8:d9:16:48:ab:b2:09: 54:3c:41:43:77:cc:6f:38:ee:ba:89:65:b7:5d:ad: 14:ab:cd:0f:bb:52:f2:cc:ce:39:96:b3:0d:4d:f9: d0:15:1d:81:45:20:54:98:ac:58:aa:08:61:a2:de: 7e:05:e7:88:ab:d2:6b:9a:e8:77:b5:3d:44:54:1e: 96:45:0c:3c:ed:a6:6a:8d:b3:18:54:89:f4:55:84: 41:e1:d6:c8:e8:42:93:a0:83:ca:82:c1:fc:6b:4d: 4e:91:62:87:48:ae:3b:7f:ce:17:48:13:7b:ed:c1: 3a:a6:b7:6c:66:40:f2:2d:f0:1b:66:c5:d7:59:ae: 1f:b7:d6:d1:e3:a8:c2:05:4b:09:54:2d:2e:fd:4a: f0:85:e4:ce:8a:4d:8b:f7:e5:9d:b2:46:52:a2:11: 67:c8:ca:4c:39:ea:92:67:d5:0b:40:ba:13:cb:3e: 4a:12:d2:1d:87:5f:30:13:1a:29:7a:fd:f2:b5:be: dc:b8:d7:1c:8d:02:09:0d:29:ed:51:d0:1b:9c:98: 8c:59:5d:d3:bb:c9:38:0e:75:80:31:02:50:03:aa: f4:d8:af:3a:54:7d:5f:75:d9:e6:77:7a:e9:92:ad: 35:eb:f8:a5:9a:6e:6c:7d:8e:20:b2:f9:89:92:cd: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:56:D8:AD:D4:84:99:9E:7D:CC:BE:91:D8:EF:FB:B9:92:50:E9:39 X509v3 Authority Key Identifier: keyid:D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d8:9a:2b:8a:22:fb:ac:6d:c7:01:67:fd:9f:44:c1:23:99: e8:06:a0:22:b7:26:f7:60:96:99:a5:79:b0:7a:b1:2a:ad:ea: ce:66:d2:3b:aa:bd:7e:43:8f:97:3e:2c:27:1e:13:c1:9b:49: b1:3b:14:d4:ba:8e:62:f8:29:88:ee:2f:81:a5:e2:ba:1a:54: 80:1e:f3:c5:d1:11:d1:ab:75:a2:eb:0f:8b:af:84:dc:d9:cd: 04:81:62:8d:7c:93:8c:e8:36:b6:87:59:53:f0:37:3c:9a:7d: cc:33:a9:e7:67:48:f3:82:ee:36:00:04:01:9c:7b:61:28:b3: 93:4f:df:5c:23:4b:f2:8f:72:18:eb:28:5f:3e:47:34:fc:12: 17:18:fa:59:b7:9c:8d:83:70:f1:48:26:85:cd:b7:5e:e6:10: 66:da:2e:c3:15:1b:29:fd:e2:32:b5:87:2f:2d:9f:88:d1:d2: 5a:66:ae:ae:00:f9:5a:5a:1e:a7:90:d1:d4:64:ad:97:33:a2: 3c:82:99:19:b7:cd:6e:a2:a0:18:88:06:51:4f:10:86:3a:f9: 5d:76:27:03:cf:9f:86:23:2d:3e:7d:0b:64:6b:f3:b9:8a:c3: d3:ee:f8:a0:9e:90:96:42:bc:fb:ce:15:e5:96:43:45:19:c6: 11:47:95:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzNBRTExMC8GA1UEBRMoRDdCNTczOTRDMkY5OEQxRDAwOUNGNjNGMTNGQzkwMDc2 OEYyMThERTAeFw0yNjAzMDExMDM5NDFaFw0yNjAzMDgxMDM5NDFaMBgxFjAUBgNV BAMTDTY5YTQxNzZkLTZjOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9mwqAKQyn6NkWSKuyCVQ8QUN3zG847rqJZbddrRSrzQ+7UvLMzjmWsw1N+dAV HYFFIFSYrFiqCGGi3n4F54ir0mua6He1PURUHpZFDDztpmqNsxhUifRVhEHh1sjo QpOgg8qCwfxrTU6RYodIrjt/zhdIE3vtwTqmt2xmQPIt8BtmxddZrh+31tHjqMIF SwlULS79SvCF5M6KTYv35Z2yRlKiEWfIykw56pJn1QtAuhPLPkoS0h2HXzATGil6 /fK1vty41xyNAgkNKe1R0BucmIxZXdO7yTgOdYAxAlADqvTYrzpUfV912eZ3eumS rTXr+KWabmx9jiCy+YmSzRsRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYFbYrdSE mZ59zL6R2O/7uZJQ6TkwHwYDVR0jBBgwFoAU17VzlML5jR0AnPY/E/yQB2jyGN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzM0FFLzg4MEEzQjgwMEIz QjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIwQW5QWV9FX3lRQjJqeUdO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTdWemxNTDVqUjBBblBZX0VfeVFCMmp5R040LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz M0FFLzg4MEEzQjgwMEIzQjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIw QW5QWV9FX3lRQjJqeUdONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZ2JoriiL7rG3HAWf9n0TBI5noBqAityb3YJaZpXmwerEqrerOZtI7qr1+Q4+X PiwnHhPBm0mxOxTUuo5i+CmI7i+BpeK6GlSAHvPF0RHRq3Wi6w+Lr4Tc2c0EgWKN fJOM6Da2h1lT8Dc8mn3MM6nnZ0jzgu42AAQBnHthKLOTT99cI0vyj3IY6yhfPkc0 /BIXGPpZt5yNg3DxSCaFzbde5hBm2i7DFRsp/eIytYcvLZ+I0dJaZq6uAPlaWh6n kNHUZK2XM6I8gpkZt81uoqAYiAZRTxCGOvlddicDz5+GIy0+fQtka/O5isPT7vig npCWQrz7zhXllkNFGcYRR5Xr -----END CERTIFICATE-----Generated at Mon Mar 2 13:14:11 2026 by rpki-client