$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: KFpWGu9v/gK8R83A8GaScth3ZwWurYjvLKOQHgKVUuI= Subject key identifier: 95:10:3E:0C:D4:56:3E:72:FA:4E:AE:0C:A2:D0:E3:73:64:78:79:DA Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 3529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 3529 Signing time: Sat 04 Apr 2026 15:08:15 +0000 Manifest this update: Sat 04 Apr 2026 15:08:15 +0000 Manifest next update: Sat 11 Apr 2026 15:08:15 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: nVmo5PQ3JrB86Sh1aHIw8741v2Wdjs359B6ybdGW7os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13609 (0x3529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Apr 4 15:08:15 2026 GMT Not After : Apr 11 15:08:15 2026 GMT Subject: CN=69d1295f-e812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:a6:cb:85:84:71:61:f5:5d:71:40:c6:dc: d6:26:dd:9b:a8:b2:86:b3:ab:3f:d6:af:c2:34:e4: e8:91:19:45:58:c5:48:c3:94:3c:fb:08:a7:51:56: a2:08:9a:51:a8:cd:d9:53:86:96:70:f3:9c:3e:bf: 60:31:a0:93:d2:f1:b9:1b:5a:6b:68:8c:93:37:47: f7:a1:59:ba:51:1b:d6:3e:32:91:1c:d3:3c:84:f8: 71:11:93:08:89:8d:09:84:03:64:07:9b:9c:15:4c: 61:16:b7:a6:9f:2e:02:93:78:5d:80:6c:d8:2e:19: e6:ae:89:38:1a:a9:58:b0:cc:58:54:74:55:bf:25: 27:c6:d1:6c:12:2a:be:c3:03:6f:e2:69:1b:7b:7f: 5b:d1:fe:90:42:82:c0:25:88:26:d6:ec:51:58:92: ff:06:f0:f3:5e:7d:fd:a6:5d:8d:0a:f0:53:94:ab: cd:ed:b2:eb:d2:81:76:91:96:72:40:36:da:1e:d5: 1c:e2:57:0b:03:9f:09:30:c6:91:bf:bb:f6:dc:f1: 9b:06:79:a4:77:42:20:fc:34:35:ea:ac:29:da:47: 4f:ee:4b:7f:84:c7:c1:b5:3a:36:f0:a3:c4:9b:06: af:b8:ff:49:15:b1:61:bc:6a:dc:5f:56:1e:1a:69: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:3E:0C:D4:56:3E:72:FA:4E:AE:0C:A2:D0:E3:73:64:78:79:DA X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:04:ee:1f:33:f3:16:28:8d:c1:83:80:a0:73:ee:e4:3e:b0: dc:a8:53:e2:b0:31:71:87:6e:ff:8d:ee:60:32:3b:dd:2f:cb: fa:4c:28:1d:1f:ea:dc:1c:40:d5:fc:09:41:f7:e0:21:55:dc: 39:1b:3b:ba:35:1f:12:41:c3:af:af:73:a0:12:4d:ee:32:1c: e6:99:d0:4c:1b:b4:1b:b5:ad:21:31:d0:6d:83:9a:a1:f0:5d: 7f:0b:5c:e8:6a:6e:10:45:5b:f3:f7:35:02:9b:91:2a:c1:97: 58:f8:98:9e:1a:7e:82:f2:48:81:df:c9:41:b7:ae:f2:87:2f: 82:be:9a:4a:77:f1:82:4e:03:30:91:4b:8e:ee:f5:ff:cd:be: 4a:f5:78:fd:a7:5d:76:f5:84:44:57:f3:cb:89:21:e1:7a:d0: 04:59:b8:e4:d1:96:75:73:18:ff:7f:fd:fe:f3:b5:d5:a3:40: 36:fe:ca:03:a9:5e:50:d3:d1:25:26:67:aa:16:0b:de:20:db: 98:21:9a:49:b9:8d:bb:ac:02:6a:e6:81:29:b7:5c:77:1e:a6: 09:af:fa:f1:96:e3:ae:02:92:1c:c0:63:13:02:f0:4d:c8:c3: 2f:a3:ae:74:e9:44:6c:6f:bc:9d:55:13:39:1e:b9:6b:66:30: 84:de:39:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjYwNDA0MTUwODE1WhcNMjYwNDExMTUwODE1WjAYMRYwFAYD VQQDEw02OWQxMjk1Zi1lODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt6my4WEcWH1XXFAxtzWJt2bqLKGs6s/1q/CNOTokRlFWMVIw5Q8+winUVai CJpRqM3ZU4aWcPOcPr9gMaCT0vG5G1praIyTN0f3oVm6URvWPjKRHNM8hPhxEZMI iY0JhANkB5ucFUxhFremny4Ck3hdgGzYLhnmrok4GqlYsMxYVHRVvyUnxtFsEiq+ wwNv4mkbe39b0f6QQoLAJYgm1uxRWJL/BvDzXn39pl2NCvBTlKvN7bLr0oF2kZZy QDbaHtUc4lcLA58JMMaRv7v23PGbBnmkd0Ig/DQ16qwp2kdP7kt/hMfBtTo28KPE mwavuP9JFbFhvGrcX1YeGmnXnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUQPgzU Vj5y+k6uDKLQ43NkeHnaMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACwTuHzPzFiiNwYOAoHPu5D6w3KhT4rAxcYdu/43uYDI73S/L+kwoHR/q3BxA 1fwJQffgIVXcORs7ujUfEkHDr69zoBJN7jIc5pnQTBu0G7WtITHQbYOaofBdfwtc 6GpuEEVb8/c1ApuRKsGXWPiYnhp+gvJIgd/JQbeu8ocvgr6aSnfxgk4DMJFLju71 /82+SvV4/adddvWERFfzy4kh4XrQBFm45NGWdXMY/3/9/vO11aNANv7KA6leUNPR JSZnqhYL3iDbmCGaSbmNu6wCauaBKbdcdx6mCa/68ZbjrgKSHMBjEwLwTcjDL6Ou dOlEbG+8nVUTOR65a2YwhN45Qw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:39:42 2026 by rpki-client