$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: t8sRrmv2XCL2dWMWdZMMbJ/tYNBzyXroY1fzKb9R3f0= Subject key identifier: 3D:31:83:1D:73:2D:8D:6F:C7:BB:AC:DF:B2:01:09:33:1E:75:FE:CE Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 23F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 23E5 Signing time: Thu 26 Mar 2026 15:48:27 +0000 Manifest this update: Thu 26 Mar 2026 15:48:26 +0000 Manifest next update: Thu 02 Apr 2026 15:48:26 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: DZcjAkOsl57d+R2WuMO3Py7r/1a3TGv3AtO6AeWkq0A=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t4RiKC6653Plu7Nba6sPuJDiD6/DW8iHgAWcMFWwJEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9207 (0x23f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Mar 26 15:48:26 2026 GMT Not After : Apr 2 15:48:26 2026 GMT Subject: CN=69c5554b-9980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d3:f5:37:78:6d:79:08:04:fa:56:15:ad:9a: 8a:12:07:2c:ee:cb:94:89:61:90:b4:d5:3a:0c:b3: 9d:d2:71:0c:07:32:cc:cd:6e:16:c1:67:74:ea:e7: f2:3d:a4:18:f2:61:32:3e:b1:4f:f3:85:ad:3e:98: 48:55:4e:0e:cb:d7:df:7d:a5:11:e3:c9:74:3c:fb: f2:13:e8:3c:fc:ef:72:10:c7:2c:ee:58:8e:8a:3b: 9f:b3:80:0b:57:f7:2f:58:76:8a:1b:23:49:e7:9b: 04:cb:eb:1c:fe:ec:42:62:31:a6:a8:16:8e:15:d1: 96:1e:db:92:fd:c3:55:92:e6:22:1a:39:ef:c4:e1: 1a:3e:b0:04:42:01:49:92:ba:66:36:4d:87:73:5e: 29:72:4e:56:a1:ad:46:e0:b6:6e:94:f6:d8:4b:19: f3:5d:b6:9a:7b:03:74:b7:bd:ba:c7:59:e7:8b:45: e9:4b:31:8a:48:df:c2:a9:b1:5a:cb:ba:b5:5f:14: de:22:35:88:c3:a7:2a:81:e0:ed:86:72:68:a4:8b: dd:52:ee:bb:b4:a7:19:80:2d:71:8f:cc:24:25:12: 4b:6e:f2:4f:c8:82:37:f8:2f:21:7d:58:44:fe:ac: 4a:75:42:f1:b0:74:cc:97:71:58:6e:4e:e2:19:ec: bd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:83:1D:73:2D:8D:6F:C7:BB:AC:DF:B2:01:09:33:1E:75:FE:CE X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c1:26:9b:10:98:2b:7f:d9:69:45:a2:29:15:fc:d7:1c:8d: 4c:55:a9:57:ee:5f:a9:e2:26:3d:f8:56:02:a2:8a:42:a0:e8: 72:e7:71:cb:c5:9f:81:e9:32:ef:1e:21:d7:e7:f7:e9:69:69: 44:5d:81:a3:cd:93:9e:17:18:d6:77:1c:98:0d:91:18:10:1d: 9a:1a:08:37:c4:5d:a6:c6:b7:cc:42:b0:00:7e:56:f7:4d:d5: 00:f4:96:07:75:89:d3:2f:28:cb:25:bf:b8:47:36:42:de:ca: 04:8f:4b:d6:c2:1c:19:75:95:0d:d0:a5:2a:2e:ed:f7:ba:17: ec:c6:d8:e1:ca:d8:43:72:ad:2f:f8:a6:cd:77:2b:b8:44:7d: 6b:7a:1a:19:1f:fd:87:64:f6:e1:2f:fc:cb:75:5a:0c:14:55: bb:a1:0c:80:b9:cf:2b:5c:5b:66:c8:46:2a:b0:32:f5:76:19: 88:59:5d:ae:0d:f6:ab:39:fb:59:93:db:d1:57:48:09:22:58: 89:21:38:64:c7:0c:67:80:f8:21:8d:c0:2e:4e:99:53:a5:f1: f8:dd:5d:7c:37:88:df:a1:ac:63:5f:1d:de:c2:f2:36:46:d9: d8:51:3d:ee:67:e0:35:29:e6:b4:7c:98:08:7c:76:08:3c:ac: ac:50:88:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjYwMzI2MTU0ODI2WhcNMjYwNDAyMTU0ODI2WjAYMRYwFAYD VQQDEw02OWM1NTU0Yi05OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjtP1N3hteQgE+lYVrZqKEgcs7suUiWGQtNU6DLOd0nEMBzLMzW4WwWd06ufy PaQY8mEyPrFP84WtPphIVU4Oy9fffaUR48l0PPvyE+g8/O9yEMcs7liOijufs4AL V/cvWHaKGyNJ55sEy+sc/uxCYjGmqBaOFdGWHtuS/cNVkuYiGjnvxOEaPrAEQgFJ krpmNk2Hc14pck5Woa1G4LZulPbYSxnzXbaaewN0t726x1nni0XpSzGKSN/CqbFa y7q1XxTeIjWIw6cqgeDthnJopIvdUu67tKcZgC1xj8wkJRJLbvJPyII3+C8hfVhE /qxKdULxsHTMl3FYbk7iGey9xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0xgx1z LY1vx7us37IBCTMedf7OMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt8EmmxCYK3/ZaUWiKRX81xyNTFWpV+5fqeImPfhWAqKKQqDocudxy8Wfgeky 7x4h1+f36WlpRF2Bo82TnhcY1nccmA2RGBAdmhoIN8Rdpsa3zEKwAH5W903VAPSW B3WJ0y8oyyW/uEc2Qt7KBI9L1sIcGXWVDdClKi7t97oX7MbY4crYQ3KtL/imzXcr uER9a3oaGR/9h2T24S/8y3VaDBRVu6EMgLnPK1xbZshGKrAy9XYZiFldrg32qzn7 WZPb0VdICSJYiSE4ZMcMZ4D4IY3ALk6ZU6Xx+N1dfDeI36GsY18d3sLyNkbZ2FE9 7mfgNSnmtHyYCHx2CDysrFCIeA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:48 2026 by rpki-client