$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: IfzENXr0capRy1/VJV+fMJepVIAsFz1FR3quZKFh+7c= Subject key identifier: F5:8D:EE:AF:6A:EB:8C:D5:56:6F:7E:AB:57:8F:48:C6:DD:AC:C1:12 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 0220 Signing time: Fri 06 Mar 2026 22:44:16 +0000 Manifest this update: Fri 06 Mar 2026 22:44:15 +0000 Manifest next update: Fri 13 Mar 2026 22:44:15 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: jrN0FDK+byiSdMz5e3iMn9M0lVgKsexqsXvBX87/6Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 22:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Mar 6 22:44:15 2026 GMT Not After : Mar 13 22:44:15 2026 GMT Subject: CN=69ab58c0-2f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:5e:63:68:15:ed:10:94:89:5e:94:fb:b4:3a: 9d:fc:07:0b:c9:91:e4:dc:9b:93:fd:9b:7c:fd:0b: 9c:9a:ba:9e:20:5e:31:77:13:9b:2c:c8:b1:c2:21: fe:42:23:d9:70:f4:85:c7:9b:f8:2e:e4:d4:4d:8d: cb:55:75:8b:94:c2:3c:e6:9c:93:ed:ef:97:20:28: 54:9a:35:91:17:d5:2a:3a:4e:47:d9:a5:79:ef:57: 1e:16:1f:e2:a7:d8:05:fa:23:80:5e:31:95:71:ce: 0d:e6:75:ae:f3:bc:5c:64:43:e9:79:3c:f7:ef:62: 90:43:f5:b6:1e:00:9e:3c:2d:fd:25:29:2f:1c:82: d4:77:ab:83:d9:11:0b:c2:c6:75:e7:77:5f:03:c3: 4b:d2:6e:ff:3b:5f:22:db:97:f2:2d:32:71:41:68: 13:ef:43:f0:b3:e8:62:ff:24:36:5d:8c:df:74:49: 5a:5d:cc:f0:c1:0c:2b:0e:86:48:c2:ec:c9:be:f5: 9f:67:19:c5:e5:d7:d5:65:ca:de:45:72:ed:61:a6: 88:c7:2c:a2:23:2c:e4:fa:aa:89:2a:32:e1:ed:de: 35:78:67:1e:e2:21:c4:cb:65:00:3b:d3:a1:01:9c: d8:9c:55:2d:c2:cc:25:04:70:3f:dc:bb:21:fc:b3: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8D:EE:AF:6A:EB:8C:D5:56:6F:7E:AB:57:8F:48:C6:DD:AC:C1:12 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f2:0e:a0:11:3e:ac:d5:a6:33:dd:b1:df:44:f2:18:12:70: 0a:00:dc:98:a0:0d:f7:75:29:1c:f7:47:2e:85:a0:a9:de:bf: 80:0a:7b:13:12:5a:7d:94:68:cd:78:91:24:4e:50:d8:4b:3c: 61:14:35:f5:23:2d:59:12:60:c0:39:32:ef:ef:b1:61:84:e2: c0:a8:33:e5:e3:fd:a5:f0:d2:85:b6:87:26:df:e2:09:d6:ab: 20:89:21:66:b5:e3:28:b0:e6:23:c9:eb:ce:1f:12:f4:a8:82: f0:67:62:df:dd:e1:80:bb:77:c0:c5:d2:98:49:bf:9b:ac:4e: b5:ff:4a:1a:7d:20:c4:d5:8d:e5:84:25:b2:fa:66:99:80:32: 02:cc:1d:d7:c3:be:e9:ea:74:2f:a0:8a:b2:a7:ff:e7:c7:d8: 83:2f:0b:37:49:7d:b8:44:5c:ee:02:f4:18:f6:74:e9:a0:30: 6a:7c:37:4b:a2:0b:9c:c1:b7:0f:0e:4d:48:67:36:d7:29:11: 3e:64:fa:1b:82:89:b8:a8:5f:42:4c:06:28:ab:af:cb:b4:5f: ed:ed:ab:d1:9b:45:52:c9:bb:58:f9:d8:fc:24:3a:81:b8:42: 04:cc:1c:a9:ac:68:ab:cb:d6:95:22:19:0f:b7:97:e8:92:2c: 0c:a1:89:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjYwMzA2MjI0NDE1WhcNMjYwMzEzMjI0NDE1WjAYMRYwFAYD VQQDEw02OWFiNThjMC0yZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9l5jaBXtEJSJXpT7tDqd/AcLyZHk3JuT/Zt8/QucmrqeIF4xdxObLMixwiH+ QiPZcPSFx5v4LuTUTY3LVXWLlMI85pyT7e+XIChUmjWRF9UqOk5H2aV571ceFh/i p9gF+iOAXjGVcc4N5nWu87xcZEPpeTz372KQQ/W2HgCePC39JSkvHILUd6uD2REL wsZ153dfA8NL0m7/O18i25fyLTJxQWgT70Pws+hi/yQ2XYzfdElaXczwwQwrDoZI wuzJvvWfZxnF5dfVZcreRXLtYaaIxyyiIyzk+qqJKjLh7d41eGce4iHEy2UAO9Oh AZzYnFUtwswlBHA/3Lsh/LO+ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWN7q9q 64zVVm9+q1ePSMbdrMESMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXvIOoBE+rNWmM92x30TyGBJwCgDcmKAN93UpHPdHLoWgqd6/gAp7ExJafZRo zXiRJE5Q2Es8YRQ19SMtWRJgwDky7++xYYTiwKgz5eP9pfDShbaHJt/iCdarIIkh ZrXjKLDmI8nrzh8S9KiC8Gdi393hgLt3wMXSmEm/m6xOtf9KGn0gxNWN5YQlsvpm mYAyAswd18O+6ep0L6CKsqf/58fYgy8LN0l9uERc7gL0GPZ06aAwanw3S6ILnMG3 Dw5NSGc21ykRPmT6G4KJuKhfQkwGKKuvy7Rf7e2r0ZtFUsm7WPnY/CQ6gbhCBMwc qaxoq8vWlSIZD7eX6JIsDKGJuA== -----END CERTIFICATE-----Generated at Sat Mar 7 14:38:16 2026 by rpki-client