$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: pewsmb8+wUSShEQq77ku0JbkxjfXiPK1Vl0zZKiV31k= Subject key identifier: 65:0B:E6:CB:2C:66:9D:17:52:BD:ED:51:F8:7C:28:78:13:6D:E2:DD Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 3C Signing time: Wed 25 Mar 2026 07:43:12 +0000 Manifest this update: Wed 25 Mar 2026 07:43:11 +0000 Manifest next update: Wed 01 Apr 2026 07:43:11 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: jMNdnTNjH6C95JPs2k8LYWxBV1jHLRenAb4qlnQ1KPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Mar 25 07:43:11 2026 GMT Not After : Apr 1 07:43:11 2026 GMT Subject: CN=69c39210-690f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:b6:8a:e8:17:11:7d:74:dd:35:68:88:85: e7:fa:73:16:b2:89:0c:5f:6b:c4:15:91:fa:ca:96: 7e:f0:25:5b:50:93:1a:cc:71:10:ca:37:fd:df:8b: 9d:54:83:28:5d:6c:80:e2:15:45:29:b3:fc:ab:7e: fc:a5:dc:d9:7d:17:f0:c3:b9:93:c5:5a:06:a5:d2: bd:1f:b9:e4:95:f0:ed:be:90:d2:24:33:51:a2:8a: 75:59:ae:4e:98:4b:a8:90:bc:1c:7f:c3:19:ba:26: 1c:0d:a9:26:2f:10:b9:2c:41:f7:61:f3:d2:a6:c4: 9d:33:35:bd:d5:26:87:81:c4:70:bb:ff:9b:3c:c5: 2b:8d:31:0b:5c:7b:ce:56:48:3c:db:f5:6a:9e:20: a2:1d:41:f3:df:d5:1d:58:9b:4f:9d:8d:a0:77:10: b2:23:72:a9:b1:9a:32:94:a6:9f:0e:af:a3:d3:5e: bf:8d:57:64:a9:89:1e:4f:d0:38:c6:6f:87:7c:8b: 45:9f:d2:4e:e2:3f:15:d5:bc:37:3e:33:7d:de:c2: e1:4d:90:ad:2e:3e:ff:66:93:3a:8e:51:b1:7c:44: 66:68:f2:3e:6a:c6:97:2b:1e:a1:a2:6e:c8:33:0f: ff:68:0e:37:89:c5:c2:d8:3a:05:20:e1:9c:c0:e0: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0B:E6:CB:2C:66:9D:17:52:BD:ED:51:F8:7C:28:78:13:6D:E2:DD X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:cf:77:ef:52:05:35:18:f8:e1:62:ea:f8:ee:38:a7:e8:1a: 37:fd:90:16:b2:9e:b2:49:4e:d3:78:0e:ea:00:2e:ad:db:96: 64:bd:fe:d6:75:b0:41:84:aa:ac:d7:a5:b9:72:3c:d9:df:23: e2:de:fc:47:88:71:93:37:fc:c7:88:81:0b:7b:e1:e8:d4:6c: 45:63:05:f4:b5:d4:f9:ae:70:29:04:d9:28:88:76:7f:59:3d: af:b6:ba:7c:a4:0a:0b:ca:f8:5b:11:ba:e2:c6:72:17:d3:22: af:d9:40:ca:3f:3a:c1:43:c3:39:8e:d5:2d:bc:d1:59:70:88: 84:16:cc:81:17:df:5e:63:57:7d:c9:ae:6c:a6:a4:4b:12:ae: 5e:d7:45:72:8b:67:9e:38:c0:24:a1:55:36:9e:41:4e:f8:d3: 79:cc:dd:99:bd:a6:66:4e:01:b9:23:4c:af:b6:10:2d:3e:99: 75:f1:b3:6e:89:f8:a5:d5:b6:a4:c8:b1:97:ec:c7:ef:4a:1c: c3:23:82:a5:d0:49:df:54:9b:c4:57:ee:f8:e2:a9:84:84:e4: 0d:d6:9c:c8:fe:e2:cf:26:b8:6e:c4:7d:2e:ee:d0:98:16:0b: 77:f6:30:05:e6:27:49:96:8d:d6:f6:2a:d0:02:7b:c6:50:8c: c3:59:10:e6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNjAzMjUwNzQzMTFaFw0yNjA0MDEwNzQzMTFaMBgxFjAUBgNV BAMTDTY5YzM5MjEwLTY5MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc87aK6BcRfXTdNWiIhef6cxayiQxfa8QVkfrKln7wJVtQkxrMcRDKN/3fi51U gyhdbIDiFUUps/yrfvyl3Nl9F/DDuZPFWgal0r0fueSV8O2+kNIkM1GiinVZrk6Y S6iQvBx/wxm6JhwNqSYvELksQfdh89KmxJ0zNb3VJoeBxHC7/5s8xSuNMQtce85W SDzb9WqeIKIdQfPf1R1Ym0+djaB3ELIjcqmxmjKUpp8Or6PTXr+NV2SpiR5P0DjG b4d8i0Wf0k7iPxXVvDc+M33ewuFNkK0uPv9mkzqOUbF8RGZo8j5qxpcrHqGibsgz D/9oDjeJxcLYOgUg4ZzA4IAVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZQvmyyxm nRdSve1R+HwoeBNt4t0wHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBSz3fvUgU1GPjhYur47jin6Bo3/ZAWsp6ySU7TeA7qAC6t25Zkvf7WdbBBhKqs 16W5cjzZ3yPi3vxHiHGTN/zHiIELe+Ho1GxFYwX0tdT5rnApBNkoiHZ/WT2vtrp8 pAoLyvhbEbrixnIX0yKv2UDKPzrBQ8M5jtUtvNFZcIiEFsyBF99eY1d9ya5spqRL Eq5e10Vyi2eeOMAkoVU2nkFO+NN5zN2ZvaZmTgG5I0yvthAtPpl18bNuifil1bak yLGX7MfvShzDI4Kl0EnfVJvEV+744qmEhOQN1pzI/uLPJrhuxH0u7tCYFgt39jAF 5idJlo3W9irQAnvGUIzDWRDm -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:16 2026 by rpki-client