$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft File: MkzIe8yExoFRzDczpQjHilxbSYo.mft (raw, json) Hash identifier: mXTIFaiqIrfo355Wr+3sxnpzfn3XH4plATmJw7uqXeE= Subject key identifier: 74:D6:A2:E4:0F:C9:87:0F:55:1B:C1:00:D7:66:69:B7:D0:B2:0D:6E Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft Manifest number: 014B Signing time: Wed 25 Mar 2026 04:24:41 +0000 Manifest this update: Wed 25 Mar 2026 04:24:41 +0000 Manifest next update: Wed 01 Apr 2026 04:24:41 +0000 Files and hashes: 1: MkzIe8yExoFRzDczpQjHilxbSYo.crl (hash: Ybr9+puCO0IY5XDWpFFbyZv8ILZMLBB4MI2s9L8mMKY=) 2: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (hash: VkwFL/OI8A+B6vWC8BoIWVksESaaV5yZy0BJNLEHdwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Validity Not Before: Mar 25 04:24:41 2026 GMT Not After : Apr 1 04:24:41 2026 GMT Subject: CN=69c36389-78da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:07:8b:7d:2a:a6:20:8b:85:3c:5c:d0:16: dd:4e:84:98:e8:2d:ca:db:7f:55:2f:b8:cd:b6:4a: 34:2f:bd:2a:5b:f0:9d:7e:a7:db:dd:28:de:52:64: 8a:81:b9:7f:bd:24:34:ac:66:64:13:15:fc:29:a2: 66:ef:87:91:fd:f5:43:66:05:b4:64:c0:d9:b2:8a: 67:e2:7b:5e:ef:90:c7:55:b1:12:0b:03:63:4b:ea: f1:63:20:db:da:86:23:80:62:68:78:03:8c:6c:2d: d1:7c:1f:45:09:11:0e:c6:58:55:d8:4a:be:28:99: 7f:95:26:5a:8a:cf:e2:29:a9:d3:4f:f1:fd:cf:d7: db:6c:34:e3:5a:c7:21:c1:87:fc:6a:c9:8a:8b:bc: f3:60:d0:4c:f7:de:29:fc:68:46:01:2d:e0:21:0c: c1:7c:08:e0:91:a4:af:d0:5a:ee:91:d1:56:e5:bd: e5:d4:f3:4f:f9:5c:a9:87:85:b0:5b:f2:c5:1f:76: 66:57:af:43:4f:87:e6:f7:f9:a2:13:d3:50:81:6a: 58:4f:68:7d:80:69:11:15:ab:61:96:42:97:19:ca: 26:74:86:a5:89:f8:b7:7e:ae:96:b3:39:8f:b5:0b: 5c:cc:4a:ff:8e:e6:a4:6d:7c:d2:75:0d:cb:1f:c6: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:A2:E4:0F:C9:87:0F:55:1B:C1:00:D7:66:69:B7:D0:B2:0D:6E X509v3 Authority Key Identifier: keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ed:df:be:3a:38:32:e8:e7:1c:df:3b:d7:96:91:1a:c3:38: 63:8b:64:ee:53:bd:79:cf:ad:e1:24:81:24:a9:d6:16:8b:42: 0c:e9:01:4d:9d:55:fb:e3:fe:06:9a:7b:e0:34:57:1d:ec:eb: 04:fa:bd:d1:3e:18:b6:64:69:79:a1:92:a0:82:b1:c7:d0:64: 28:9d:57:2d:73:a6:39:f2:ac:a9:d3:be:07:cb:d5:c4:e5:29: 21:f1:f7:3a:71:46:d7:df:5f:a4:a2:11:1c:39:79:e9:a5:84: 4a:0c:6f:2a:64:aa:f1:66:31:39:69:1f:41:1e:2e:8a:e1:40: 44:41:02:bf:71:f8:69:08:01:77:4f:cf:91:f1:03:96:4b:90: 91:b7:a0:74:3a:7b:f3:7b:e1:9b:7b:3c:5e:df:04:18:d7:60: 2a:f8:06:37:2a:e6:a2:0d:74:74:27:eb:74:09:51:e2:35:18: c7:13:89:02:c6:b1:a7:46:a8:70:9d:c9:0a:30:e0:48:fc:85: f4:b9:24:7b:6a:eb:2d:ed:45:49:5c:fb:a0:40:5e:2a:d5:51: 7b:d4:ab:3c:e0:b2:ae:ed:65:96:9d:f7:d9:e4:e7:50:8e:2a: d4:67:2b:3a:63:26:d5:04:7f:15:53:1e:66:1c:9b:c9:9b:59: ab:c7:a0:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB NUM1QjQ5OEEwHhcNMjYwMzI1MDQyNDQxWhcNMjYwNDAxMDQyNDQxWjAYMRYwFAYD VQQDEw02OWMzNjM4OS03OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCkHi30qpiCLhTxc0BbdToSY6C3K239VL7jNtko0L70qW/Cdfqfb3SjeUmSK gbl/vSQ0rGZkExX8KaJm74eR/fVDZgW0ZMDZsopn4nte75DHVbESCwNjS+rxYyDb 2oYjgGJoeAOMbC3RfB9FCREOxlhV2Eq+KJl/lSZais/iKanTT/H9z9fbbDTjWsch wYf8asmKi7zzYNBM994p/GhGAS3gIQzBfAjgkaSv0FrukdFW5b3l1PNP+Vyph4Ww W/LFH3ZmV69DT4fm9/miE9NQgWpYT2h9gGkRFathlkKXGcomdIalifi3fq6WszmP tQtczEr/juakbXzSdQ3LH8YKhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTWouQP yYcPVRvBANdmabfQsg1uMB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTZFNi9EN0QzNjIzODMxRjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhv RlJ6RGN6cFFqSGlseGJTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOe3fvjo4MujnHN8715aRGsM4Y4tk7lO9ec+t4SSBJKnWFotCDOkBTZ1V++P+ Bpp74DRXHezrBPq90T4YtmRpeaGSoIKxx9BkKJ1XLXOmOfKsqdO+B8vVxOUpIfH3 OnFG199fpKIRHDl56aWESgxvKmSq8WYxOWkfQR4uiuFAREECv3H4aQgBd0/PkfED lkuQkbegdDp783vhm3s8Xt8EGNdgKvgGNyrmog10dCfrdAlR4jUYxxOJAsaxp0ao cJ3JCjDgSPyF9Lkke2rrLe1FSVz7oEBeKtVRe9SrPOCyru1llp332eTnUI4q1Gcr OmMm1QR/FVMeZhybyZtZq8eghw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:18 2026 by rpki-client