$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: YiuymPbWUkuAlGo6ciga5mfHNYjHkxwYUlmDJhktM3w= Subject key identifier: B3:BD:D9:63:AB:BF:16:2F:43:89:2B:EF:B7:2D:B6:CA:0A:67:60:9D Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 0118 Signing time: Wed 25 Mar 2026 05:03:11 +0000 Manifest this update: Wed 25 Mar 2026 05:03:10 +0000 Manifest next update: Wed 01 Apr 2026 05:03:10 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: XUdCfTuAA6rr2LSfYzI73YVGkOyRSpT7CNhJhFwwTR0=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: 0/KER6jtg26LthiMhAoQFVwFGIJvGgJoOvUmyRDRsmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Mar 25 05:03:10 2026 GMT Not After : Apr 1 05:03:10 2026 GMT Subject: CN=69c36c8e-80ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:c5:19:34:e5:d5:5d:5b:a0:51:9b:bc:95: d2:e1:14:06:2d:54:6a:a8:28:8a:72:0b:76:2d:c9: 24:dc:1b:31:a4:61:ff:f1:0e:e5:9a:a2:38:7e:9e: 66:c7:aa:cc:61:2b:49:05:e2:f8:08:00:d1:29:80: 6b:c6:f0:f9:a0:a2:fb:72:69:42:f7:91:2f:13:6e: 37:07:68:04:07:df:6b:24:f4:ec:ed:0d:a4:2e:63: 3f:77:18:35:cf:83:77:e8:63:81:8a:cf:62:9e:92: d9:80:4f:e4:d4:be:ec:1a:52:97:e9:b0:6d:77:f6: e9:c1:49:bd:99:04:f0:18:3d:b5:ea:b1:66:7a:4e: 6b:ae:08:d7:1b:04:ec:24:33:17:88:dc:5c:8c:45: a6:87:a9:04:ca:75:af:a6:73:c2:e7:73:24:f3:23: 47:c7:72:04:4d:87:46:22:a7:2d:76:25:c4:20:e9: 7a:0a:11:ed:3c:89:93:1f:be:38:25:e4:3a:fb:35: cd:46:c0:fb:51:b2:f5:c4:28:04:40:6c:0a:96:b9: e1:76:8c:c7:f6:cb:4c:3a:bb:c6:c1:3b:c3:b3:e1: 44:33:10:77:61:e4:4e:b5:9b:d0:1e:63:b2:b5:85: ae:30:6d:ce:4b:3e:c4:3f:7f:a5:16:d2:2e:56:2e: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BD:D9:63:AB:BF:16:2F:43:89:2B:EF:B7:2D:B6:CA:0A:67:60:9D X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0e:ac:be:34:68:37:61:bd:6d:e8:07:b4:75:83:68:6a:6e: 8a:66:ac:2d:fb:c7:99:c4:3e:b7:d3:74:5c:8e:a2:f6:4a:fc: b5:20:56:e8:e5:5c:5f:41:99:8e:d2:7f:93:aa:38:34:ea:90: e6:ce:c4:18:0f:21:94:85:82:aa:b4:78:11:56:b7:55:4c:f3: 1b:6f:57:64:bc:d9:9c:3f:ee:04:81:61:75:29:b1:e7:76:f8: 35:92:e5:52:fa:27:a8:50:8c:54:2f:a7:b3:2b:73:fb:f8:c3: c4:81:4d:1d:6f:e6:58:60:5c:30:b0:9a:06:20:53:c5:20:04: 87:8d:a7:d5:b0:b1:86:ae:b3:a4:f3:85:62:c6:e6:6b:f7:11: a2:65:88:d1:5e:75:aa:2f:97:f3:6b:bb:3e:4b:8e:bf:0b:58: 74:a7:69:ca:3b:bf:3b:21:d4:f9:6e:c1:48:0d:b9:0c:ef:ca: ba:e9:20:a3:ef:c4:5f:20:3f:57:3d:a9:1f:56:4a:9a:f0:17: 6c:59:3f:71:a9:37:09:6f:c5:8e:4f:9a:d8:95:0a:13:b0:5d: f3:90:16:8b:3f:42:73:24:23:9d:f0:48:3b:db:4e:c6:69:6a: 70:a1:ae:30:6c:13:d7:cb:60:ea:b8:5e:b4:9b:f0:f7:02:38: c2:b7:88:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjYwMzI1MDUwMzEwWhcNMjYwNDAxMDUwMzEwWjAYMRYwFAYD VQQDEw02OWMzNmM4ZS04MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/jFGTTl1V1boFGbvJXS4RQGLVRqqCiKcgt2Lckk3BsxpGH/8Q7lmqI4fp5m x6rMYStJBeL4CADRKYBrxvD5oKL7cmlC95EvE243B2gEB99rJPTs7Q2kLmM/dxg1 z4N36GOBis9inpLZgE/k1L7sGlKX6bBtd/bpwUm9mQTwGD216rFmek5rrgjXGwTs JDMXiNxcjEWmh6kEynWvpnPC53Mk8yNHx3IETYdGIqctdiXEIOl6ChHtPImTH744 JeQ6+zXNRsD7UbL1xCgEQGwKlrnhdozH9stMOrvGwTvDs+FEMxB3YeROtZvQHmOy tYWuMG3OSz7EP3+lFtIuVi6zwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLO92WOr vxYvQ4kr77cttsoKZ2CdMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFg6svjRoN2G9begHtHWDaGpuimasLfvHmcQ+t9N0XI6i9kr8tSBW6OVcX0GZ jtJ/k6o4NOqQ5s7EGA8hlIWCqrR4EVa3VUzzG29XZLzZnD/uBIFhdSmx53b4NZLl UvonqFCMVC+nsytz+/jDxIFNHW/mWGBcMLCaBiBTxSAEh42n1bCxhq6zpPOFYsbm a/cRomWI0V51qi+X82u7PkuOvwtYdKdpyju/OyHU+W7BSA25DO/Kuukgo+/EXyA/ Vz2pH1ZKmvAXbFk/cak3CW/Fjk+a2JUKE7Bd85AWiz9CcyQjnfBIO9tOxmlqcKGu MGwT18tg6rhetJvw9wI4wreIcQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:55 2026 by rpki-client