$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: oOM4HzVgCiqoKmmRwnpMxpy6N5Ts+AkMosXr7mKldrU= Subject key identifier: 91:A8:33:88:5E:61:2D:E0:E1:2A:03:1E:AA:BD:C3:18:54:A0:85:13 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 01C4 Signing time: Thu 21 May 2026 03:49:49 +0000 Manifest this update: Thu 21 May 2026 03:49:48 +0000 Manifest next update: Thu 28 May 2026 03:49:48 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: YydRSJL71nI5yFpE13j86caUYS7gyyNoupa9iuRuPrg=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: May 21 03:49:48 2026 GMT Not After : May 28 03:49:48 2026 GMT Subject: CN=6a0e80dd-8f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:c0:5a:ae:e3:88:a3:29:22:d6:89:79:e4: 8c:55:43:73:1f:27:6e:bf:67:81:cf:f1:a8:8d:95: 61:92:96:e7:67:97:a8:05:79:56:c8:0d:8d:f3:bf: 2e:af:f0:6c:71:ac:28:02:db:67:90:d9:17:ca:8f: bb:5d:99:47:59:89:de:90:e1:fb:e9:52:cf:ef:1e: c5:c0:0e:23:5f:b8:01:1c:87:9d:39:71:4b:9a:df: df:e9:cf:92:4b:f1:70:72:9a:63:15:d7:c6:40:be: 4d:92:08:4e:5e:e8:77:4f:eb:9b:42:2c:20:91:fc: 26:79:19:f0:a7:c7:81:8c:3e:77:b0:bf:91:7b:40: c7:14:7d:df:f4:ca:e7:59:f7:20:47:77:f2:4d:54: f0:e3:d1:4b:eb:b7:f0:4c:33:19:ad:ca:38:b3:90: 3d:08:a9:b7:2c:bf:01:77:78:f4:08:7b:22:f1:0c: 33:9c:1a:1c:3d:36:7c:3a:46:35:c0:05:f5:67:f1: 84:54:00:6b:27:77:4e:1d:d8:b9:6f:ec:43:61:3c: ad:15:80:04:91:00:09:15:5b:80:0e:71:75:6a:1a: ed:22:fa:26:90:b7:39:3f:4f:88:7f:79:aa:b1:3b: e9:54:0b:1f:72:f7:7a:ed:01:09:91:d9:fa:0c:71: 0a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A8:33:88:5E:61:2D:E0:E1:2A:03:1E:AA:BD:C3:18:54:A0:85:13 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:a8:38:01:a7:45:f9:ce:75:a8:f8:75:83:2e:58:88:48:80: 73:57:f3:35:f3:97:26:e2:b7:d9:5f:bb:06:46:6b:bb:4c:68: 02:07:08:95:de:1f:25:fc:40:6f:f6:4a:64:73:4e:f4:0b:88: 8f:49:55:62:f1:90:06:b4:1e:a8:53:05:02:65:2e:5a:6f:ef: 43:1f:f0:37:cb:b6:06:4d:3d:ef:ed:38:fa:c7:31:4c:82:99: 43:19:0b:9b:3d:c7:9b:5b:da:60:e1:c4:b8:bb:b6:7c:4e:0f: b5:59:6c:e0:a2:ae:0c:4b:0d:74:70:c6:39:87:46:46:bd:a1: 1b:36:54:92:a5:70:00:0b:4b:a9:e5:67:7f:d2:a7:3f:f7:12: c2:07:70:4d:6e:68:68:70:fc:b1:a5:9d:42:e7:2b:1e:a2:83: ae:d2:d8:7a:be:71:79:ca:18:a4:24:f1:38:a4:b3:78:ae:eb: 33:02:fa:70:1b:07:99:dd:37:6b:2b:f4:30:9e:e2:85:bb:fe: 50:9d:08:57:d1:91:fd:4c:59:47:c9:9b:60:79:97:2d:04:30: 77:f9:c7:4d:aa:9a:74:0a:1a:24:fc:b6:6e:9a:14:14:07:6f: 1d:84:a6:c9:22:c9:b4:48:26:fc:63:b6:83:86:fb:aa:ec:5d: 68:02:54:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjYwNTIxMDM0OTQ4WhcNMjYwNTI4MDM0OTQ4WjAYMRYwFAYD VQQDEw02YTBlODBkZC04ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlx/AWq7jiKMpItaJeeSMVUNzHyduv2eBz/GojZVhkpbnZ5eoBXlWyA2N878u r/BscawoAttnkNkXyo+7XZlHWYnekOH76VLP7x7FwA4jX7gBHIedOXFLmt/f6c+S S/FwcppjFdfGQL5NkghOXuh3T+ubQiwgkfwmeRnwp8eBjD53sL+Re0DHFH3f9Mrn WfcgR3fyTVTw49FL67fwTDMZrco4s5A9CKm3LL8Bd3j0CHsi8QwznBocPTZ8OkY1 wAX1Z/GEVABrJ3dOHdi5b+xDYTytFYAEkQAJFVuADnF1ahrtIvomkLc5P0+If3mq sTvpVAsfcvd67QEJkdn6DHEKfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGoM4he YS3g4SoDHqq9wxhUoIUTMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEKg4AadF+c51qPh1gy5YiEiAc1fzNfOXJuK32V+7BkZru0xoAgcIld4fJfxA b/ZKZHNO9AuIj0lVYvGQBrQeqFMFAmUuWm/vQx/wN8u2Bk097+04+scxTIKZQxkL mz3Hm1vaYOHEuLu2fE4PtVls4KKuDEsNdHDGOYdGRr2hGzZUkqVwAAtLqeVnf9Kn P/cSwgdwTW5oaHD8saWdQucrHqKDrtLYer5xecoYpCTxOKSzeK7rMwL6cBsHmd03 ayv0MJ7ihbv+UJ0IV9GR/UxZR8mbYHmXLQQwd/nHTaqadAoaJPy2bpoUFAdvHYSm ySLJtEgm/GO2g4b7quxdaAJUlw== -----END CERTIFICATE-----Generated at Thu May 21 10:39:12 2026 by rpki-client