$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft File: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft (raw, json) Hash identifier: AMngTC+GfsKhmqlP8LmkLYlBT8dt60vMc5ocFGxsPV0= Subject key identifier: C0:D2:A8:59:33:BF:A2:01:A6:FA:EB:2A:A2:3D:49:5B:A6:22:76:38 Authority key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 Certificate issuer: /CN=A917C09A/serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft Manifest number: 32 Signing time: Sun 05 Apr 2026 07:57:52 +0000 Manifest this update: Sun 05 Apr 2026 07:57:51 +0000 Manifest next update: Sun 12 Apr 2026 07:57:51 +0000 Files and hashes: 1: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl (hash: Lv8x1n3TNIghS0oVyHD48HwGydolyX1E5ZQ+s/0oBx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4 Validity Not Before: Apr 5 07:57:51 2026 GMT Not After : Apr 12 07:57:51 2026 GMT Subject: CN=69d21600-ef35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:90:e0:35:99:48:f3:50:57:46:a8:d4:a1: 75:5f:9c:c6:16:1b:62:1b:71:c3:9d:45:33:a2:d5: 95:02:7d:71:74:8c:c3:9d:d7:e1:bc:04:0e:93:ac: ec:cc:a9:5a:e0:20:a3:b5:2e:a6:d9:62:95:28:af: 6f:b8:26:cf:65:88:38:e0:ef:92:7d:a8:87:13:78: f3:c9:24:1e:1c:55:9d:b0:ca:8b:a8:4a:92:69:15: 60:3a:9b:b8:6f:f7:a4:2e:e2:fe:38:9d:fb:d9:70: 61:19:58:0d:23:03:1d:ce:d0:d8:c6:20:4b:cd:d8: a8:68:48:8c:a3:14:56:a8:df:22:ba:a8:f8:7b:fd: f2:18:0f:6e:9d:7f:08:63:a0:2a:5e:26:91:84:d8: ff:23:59:1f:3a:73:0c:1a:36:c2:a4:7b:d7:81:a5: 39:9f:73:be:72:4c:df:03:36:85:c6:fa:ff:45:60: 9a:9c:e7:ce:3a:c8:2f:7c:c5:d3:f5:06:f3:13:17: a7:72:ec:97:1f:90:32:5e:a6:77:e8:87:33:f0:b4: 19:ba:ce:a2:62:9e:89:3f:02:7a:3d:03:c0:e7:75: ab:09:cb:a2:9c:a6:0d:43:71:31:86:32:f7:ae:79: ee:16:77:a2:01:3a:e3:9f:04:e1:ac:79:44:e6:b3: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D2:A8:59:33:BF:A2:01:A6:FA:EB:2A:A2:3D:49:5B:A6:22:76:38 X509v3 Authority Key Identifier: keyid:0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e3:3e:95:52:a2:eb:67:8c:fb:2b:58:1e:5f:a4:67:57:88: 11:64:b9:c1:5c:48:4a:f3:90:5e:76:64:57:6a:11:c3:f8:f7: 59:8a:73:ca:32:ba:44:1b:3e:d4:ce:3a:78:9e:82:35:85:11: 57:ef:b3:9b:f6:ca:74:3f:94:ce:ed:d5:30:80:e3:62:09:fb: 3b:09:b9:ce:d0:41:9b:7e:64:8c:b6:a6:bc:ce:6c:cb:26:c7: 52:c2:ed:5a:de:a6:0d:3b:c1:29:d9:85:f9:9b:07:1b:72:87: f8:19:66:e1:92:73:fa:af:d0:8b:4a:35:41:70:de:1c:9e:f8: 71:3f:38:e7:84:4f:91:82:44:81:15:8f:28:04:c3:0b:9b:e4: 98:0c:74:cd:5e:35:9b:19:75:ca:1f:ac:68:a0:c7:1b:c2:55: 6f:e6:31:f4:a7:86:a3:04:7f:6e:ed:09:23:a8:ab:b8:5f:11: 47:e3:ed:25:22:7a:8a:ba:cc:66:1e:c1:58:e7:e7:ac:c9:c5: 7c:9c:55:66:e3:17:75:32:d9:97:45:37:1d:d3:9e:7b:1b:87: 9d:d9:fb:cc:55:a5:6a:1b:dd:4b:d2:25:59:e8:22:ef:78:2f: 35:f3:3c:19:0e:ff:3c:37:f7:04:2d:4b:f7:5f:e6:c6:5b:fd: 5b:6b:15:05 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzA5QTExMC8GA1UEBRMoMEYzQjVGRjE1NDUwNTI5MTQwOEM0ODQwQjEwMzZEOTJB OTMwNEVENDAeFw0yNjA0MDUwNzU3NTFaFw0yNjA0MTIwNzU3NTFaMBgxFjAUBgNV BAMTDTY5ZDIxNjAwLWVmMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJJZDgNZlI81BXRqjUoXVfnMYWG2IbccOdRTOi1ZUCfXF0jMOd1+G8BA6TrOzM qVrgIKO1LqbZYpUor2+4Js9liDjg75J9qIcTePPJJB4cVZ2wyouoSpJpFWA6m7hv 96Qu4v44nfvZcGEZWA0jAx3O0NjGIEvN2KhoSIyjFFao3yK6qPh7/fIYD26dfwhj oCpeJpGE2P8jWR86cwwaNsKke9eBpTmfc75yTN8DNoXG+v9FYJqc5846yC98xdP1 BvMTF6dy7JcfkDJepnfohzPwtBm6zqJinok/Ano9A8DndasJy6Kcpg1DcTGGMveu ee4Wd6IBOuOfBOGseUTms65lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwNKoWTO/ ogGm+usqoj1JW6YidjgwHwYDVR0jBBgwFoAUDztf8VRQUpFAjEhAsQNtkqkwTtQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0JCNjczRjNFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBGQWpFaEFzUU50a3Frd1R0 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRHp0ZjhWUlFVcEZBakVoQXNRTnRrcWt3VHRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0JCNjczRjNFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL0R6dGY4VlJRVXBG QWpFaEFzUU50a3Frd1R0US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA64z6VUqLrZ4z7K1geX6RnV4gRZLnBXEhK85BedmRXahHD+PdZinPKMrpEGz7U zjp4noI1hRFX77Ob9sp0P5TO7dUwgONiCfs7CbnO0EGbfmSMtqa8zmzLJsdSwu1a 3qYNO8Ep2YX5mwcbcof4GWbhknP6r9CLSjVBcN4cnvhxPzjnhE+RgkSBFY8oBMML m+SYDHTNXjWbGXXKH6xooMcbwlVv5jH0p4ajBH9u7QkjqKu4XxFH4+0lInqKusxm HsFY5+esycV8nFVm4xd1MtmXRTcd0557G4ed2fvMVaVqG91L0iVZ6CLveC818zwZ Dv88N/cELUv3X+bGW/1baxUF -----END CERTIFICATE-----Generated at Sun Apr 5 19:53:19 2026 by rpki-client