$ rpki-client -vvf rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft File: 17VzlML5jR0AnPY_E_yQB2jyGN4.mft (raw, json) Hash identifier: ERT370A8mE0bL4M3vJXKRoNEL3WOAOlNhOcjQy1EToU= Subject key identifier: D7:B4:1E:67:C5:9C:61:AE:84:64:05:7C:7E:A6:9B:95:94:02:66:43 Authority key identifier: D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE Certificate issuer: /CN=A91B33AE/serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft Manifest number: 1F Signing time: Sun 05 Apr 2026 08:15:47 +0000 Manifest this update: Sun 05 Apr 2026 08:15:47 +0000 Manifest next update: Sun 12 Apr 2026 08:15:47 +0000 Files and hashes: 1: 17VzlML5jR0AnPY_E_yQB2jyGN4.crl (hash: eJZ3GSW9v71y2BHXZm8cAV11ZAwHfbeG4YBNUqnj7/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B33AE, serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Validity Not Before: Apr 5 08:15:47 2026 GMT Not After : Apr 12 08:15:47 2026 GMT Subject: CN=69d21a33-6f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:69:25:20:b3:8b:e1:be:ab:08:e3:df:7f: bd:c1:f4:f0:84:aa:a2:aa:5f:9d:40:7b:ae:28:37: 1d:10:5a:fd:cb:cb:d9:00:2e:a1:17:56:80:25:e4: 2b:6f:37:50:20:4a:ea:93:cd:0c:a9:21:25:1e:89: a9:08:67:b8:58:4f:00:b1:a4:d9:b1:45:51:c5:00: 4b:7d:0f:e5:eb:52:9b:49:38:fa:e4:84:d3:01:92: 77:36:0c:9b:98:2d:9e:f7:a3:2d:3f:da:d9:8c:ee: f7:b1:13:73:a6:65:1c:24:76:f2:67:e1:c7:7d:0a: 5f:f5:3a:43:00:3a:43:bb:e6:68:c8:12:5c:a8:c4: 79:4b:5f:01:88:b5:c9:d4:ac:ad:06:c8:bd:a1:dd: ef:26:e1:d5:e5:88:4c:13:21:e1:4d:f6:e0:c7:0c: a5:c1:1c:71:24:2c:45:97:25:77:9e:a9:82:17:48: 32:34:d5:91:f7:15:45:71:98:b0:84:6b:f0:41:5c: 40:56:59:63:10:30:1e:c3:60:73:75:26:cc:ee:87: c6:70:27:a4:49:2d:29:46:fa:bf:ba:3e:9e:06:b6: c5:1c:c1:1e:b9:d6:f2:49:91:8c:4a:7a:48:40:88: 1b:a9:8d:6a:06:53:bc:10:a3:ee:dd:2b:0f:c2:ea: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B4:1E:67:C5:9C:61:AE:84:64:05:7C:7E:A6:9B:95:94:02:66:43 X509v3 Authority Key Identifier: keyid:D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:d4:55:00:2b:1f:08:08:f7:48:90:6b:22:f9:f3:24:ac:37: 49:af:fc:92:f8:2e:c2:07:f2:31:7e:b1:dd:bb:d9:52:40:45: 3a:81:7e:f5:83:60:10:d3:23:ae:b6:bc:b6:96:25:98:9e:a8: b8:b2:ae:74:98:a6:d4:1c:f5:9e:d6:a5:b1:b4:bc:b5:fa:e5: c9:fe:ca:03:0a:e3:bf:aa:2d:cf:0b:97:40:c1:8b:06:ff:cd: 43:bb:ca:57:65:47:a9:4c:a9:e4:d6:2c:03:ec:47:d5:8e:a8: e0:b3:1a:93:af:89:dd:6e:ee:b9:98:34:bf:46:19:93:97:7b: 60:2e:e3:43:09:22:e3:76:73:6a:29:74:dc:09:ee:4f:69:6d: 72:56:bf:8b:fe:ed:5c:b1:43:fb:84:59:07:cd:ad:ce:db:08: 9c:c9:e7:b8:44:79:aa:03:3e:f3:0a:bf:3a:4b:f6:6e:86:ee: 2a:3a:0b:92:8a:78:f8:34:5f:75:54:5b:9c:51:f5:ec:e6:bd: 99:75:2e:6c:b2:53:a9:12:90:c0:2e:51:de:0d:01:00:e0:8c: 52:00:1c:08:71:9e:c7:64:c8:43:12:72:75:7c:cb:7b:92:98: a8:58:dd:c2:56:60:c1:36:9d:c1:5b:1d:dd:51:2b:f7:37:ce: 1d:4c:da:bd -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzNBRTExMC8GA1UEBRMoRDdCNTczOTRDMkY5OEQxRDAwOUNGNjNGMTNGQzkwMDc2 OEYyMThERTAeFw0yNjA0MDUwODE1NDdaFw0yNjA0MTIwODE1NDdaMBgxFjAUBgNV BAMTDTY5ZDIxYTMzLTZmMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsM2klILOL4b6rCOPff73B9PCEqqKqX51Ae64oNx0QWv3Ly9kALqEXVoAl5Ctv N1AgSuqTzQypISUeiakIZ7hYTwCxpNmxRVHFAEt9D+XrUptJOPrkhNMBknc2DJuY LZ73oy0/2tmM7vexE3OmZRwkdvJn4cd9Cl/1OkMAOkO75mjIElyoxHlLXwGItcnU rK0GyL2h3e8m4dXliEwTIeFN9uDHDKXBHHEkLEWXJXeeqYIXSDI01ZH3FUVxmLCE a/BBXEBWWWMQMB7DYHN1Jszuh8ZwJ6RJLSlG+r+6Pp4GtsUcwR651vJJkYxKekhA iBupjWoGU7wQo+7dKw/C6sB/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU17QeZ8Wc Ya6EZAV8fqablZQCZkMwHwYDVR0jBBgwFoAU17VzlML5jR0AnPY/E/yQB2jyGN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzM0FFLzg4MEEzQjgwMEIz QjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIwQW5QWV9FX3lRQjJqeUdO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTdWemxNTDVqUjBBblBZX0VfeVFCMmp5R040LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz M0FFLzg4MEEzQjgwMEIzQjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIw QW5QWV9FX3lRQjJqeUdONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA31FUAKx8ICPdIkGsi+fMkrDdJr/yS+C7CB/IxfrHdu9lSQEU6gX71g2AQ0yOu try2liWYnqi4sq50mKbUHPWe1qWxtLy1+uXJ/soDCuO/qi3PC5dAwYsG/81Du8pX ZUepTKnk1iwD7EfVjqjgsxqTr4ndbu65mDS/RhmTl3tgLuNDCSLjdnNqKXTcCe5P aW1yVr+L/u1csUP7hFkHza3O2wicyee4RHmqAz7zCr86S/Zuhu4qOguSinj4NF91 VFucUfXs5r2ZdS5sslOpEpDALlHeDQEA4IxSABwIcZ7HZMhDEnJ1fMt7kpioWN3C VmDBNp3BWx3dUSv3N84dTNq9 -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:34 2026 by rpki-client