$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: SSFyCNIKXB7Lq4E7UKcFEFGknqPjUOEWun7sddeur98= Subject key identifier: A7:EE:68:11:0F:3D:D5:8B:E5:12:82:C0:43:A8:E3:CC:D3:85:A6:AE Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 09A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3D4B Signing time: Sat 04 Apr 2026 15:17:50 +0000 Manifest this update: Sat 04 Apr 2026 15:17:50 +0000 Manifest next update: Sat 11 Apr 2026 15:17:50 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: OUTdy9npWxRIHt1Rgd4DxMMPQiVIW4Frn7mv9rPeyJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2468 (0x9a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Apr 4 15:17:50 2026 GMT Not After : Apr 11 15:17:50 2026 GMT Subject: CN=69d12b9e-ccdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:5c:30:c9:19:93:0c:20:58:b7:e1:ae:49: 6d:17:87:5c:98:81:bc:86:6d:42:0f:1c:68:b6:ad: d0:7a:d1:29:63:10:2d:0e:c0:6a:0c:cd:ae:bf:3a: 02:d4:0a:7d:a8:75:ac:b4:22:87:95:b3:61:48:ea: 1b:97:31:df:50:e7:41:58:f1:47:c7:9b:d3:24:90: 6f:9b:77:dd:d2:a5:07:54:39:57:76:27:5f:7e:bf: 01:fe:c2:a6:fc:54:c5:d2:ae:1a:57:95:9a:f6:0f: af:84:cb:48:f6:fd:a4:1f:0e:c4:0c:dd:e9:e9:12: c4:4c:60:47:85:1d:0a:f9:14:25:1a:70:12:d1:03: 89:e8:94:f6:41:20:f8:ae:01:48:b1:50:1e:9e:cb: cb:46:ea:23:5d:a6:74:2e:fe:c7:ca:fa:cf:2f:cb: 28:6f:7f:e8:d8:f8:48:e4:b5:16:a7:f3:ce:aa:46: 9e:84:e4:f4:4c:8c:f1:a4:69:7b:81:a2:e6:c1:ac: 7b:13:32:92:e6:71:bf:c7:9d:6a:c3:6b:b1:ae:a7: 20:2a:e2:10:cf:0e:fa:8d:4c:d9:87:96:8d:6d:27: 26:04:f3:b2:c0:c6:a4:75:24:fc:af:d3:b9:4b:63: a0:26:dc:56:64:df:a5:1b:55:8a:a7:b3:b5:92:3a: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EE:68:11:0F:3D:D5:8B:E5:12:82:C0:43:A8:E3:CC:D3:85:A6:AE X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:10:32:66:36:75:b6:63:e3:61:6e:59:0c:b1:60:b6:3a:3f: e0:53:de:32:ec:ed:3e:33:7d:c4:dd:32:af:10:b9:48:9d:d8: 9b:62:f1:00:95:b5:f0:3a:48:c5:a2:20:80:35:43:cf:88:b1: bd:9c:1f:27:ae:9e:fe:22:11:05:b4:01:a0:05:dc:f1:71:90: 4f:8b:f2:34:6a:b1:e4:05:8b:b5:d6:78:96:b2:b3:6d:5f:51: 4b:a2:e5:59:dc:a5:c4:15:c0:66:f9:56:62:27:e7:f0:b4:7a: 20:6c:35:54:86:d2:bc:9c:d7:af:65:65:1d:31:78:01:26:34: 7a:0a:82:7a:02:08:82:ae:9f:01:f1:2f:20:de:d8:a6:94:fc: 0d:23:7f:a3:55:2d:25:57:43:f6:8f:31:7a:dd:86:87:a2:29: 82:9c:d1:5d:ce:fe:3c:56:71:c4:88:9f:fe:75:0c:3e:88:39: 1d:28:47:93:4c:97:e0:37:39:a3:9c:da:b3:e3:b6:27:dc:e2: b0:3e:2f:34:5a:5e:98:90:4f:64:16:65:f6:17:a5:ae:06:99: d9:48:5f:c7:fc:fd:c6:f7:17:ba:3e:56:2e:81:1d:5d:17:6a: a8:2f:73:5f:22:f4:fc:dc:fb:0c:d7:1b:d5:5e:d6:36:5f:45: b4:0d:09:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjYwNDA0MTUxNzUwWhcNMjYwNDExMTUxNzUwWjAYMRYwFAYD VQQDEw02OWQxMmI5ZS1jY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUpcMMkZkwwgWLfhrkltF4dcmIG8hm1CDxxotq3QetEpYxAtDsBqDM2uvzoC 1Ap9qHWstCKHlbNhSOoblzHfUOdBWPFHx5vTJJBvm3fd0qUHVDlXdidffr8B/sKm /FTF0q4aV5Wa9g+vhMtI9v2kHw7EDN3p6RLETGBHhR0K+RQlGnAS0QOJ6JT2QSD4 rgFIsVAensvLRuojXaZ0Lv7HyvrPL8sob3/o2PhI5LUWp/POqkaehOT0TIzxpGl7 gaLmwax7EzKS5nG/x51qw2uxrqcgKuIQzw76jUzZh5aNbScmBPOywMakdST8r9O5 S2OgJtxWZN+lG1WKp7O1kjou4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKfuaBEP PdWL5RKCwEOo48zThaauMB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqRAyZjZ1tmPjYW5ZDLFgtjo/4FPeMuztPjN9xN0yrxC5SJ3Ym2LxAJW18DpI xaIggDVDz4ixvZwfJ66e/iIRBbQBoAXc8XGQT4vyNGqx5AWLtdZ4lrKzbV9RS6Ll WdylxBXAZvlWYifn8LR6IGw1VIbSvJzXr2VlHTF4ASY0egqCegIIgq6fAfEvIN7Y ppT8DSN/o1UtJVdD9o8xet2Gh6IpgpzRXc7+PFZxxIif/nUMPog5HShHk0yX4Dc5 o5zas+O2J9zisD4vNFpemJBPZBZl9helrgaZ2Uhfx/z9xvcXuj5WLoEdXRdqqC9z XyL0/Nz7DNcb1V7WNl9FtA0Jaw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:51 2026 by rpki-client