$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft File: zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json) Hash identifier: C5VkAcxrdlz8TEkhdIuxz6/IAo5HGM10n8vIxllv8cM= Subject key identifier: 1A:48:37:50:78:D4:DD:DD:BB:D8:E2:2B:9C:2B:5B:74:E9:9F:08:12 Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft Manifest number: CF Signing time: Wed 25 Mar 2026 06:00:58 +0000 Manifest this update: Wed 25 Mar 2026 06:00:57 +0000 Manifest next update: Wed 01 Apr 2026 06:00:57 +0000 Files and hashes: 1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: ZQlkwuyCw4Eb60NA66aFlVi2LUNXYdc8POmtWvQGOgM=) 2: 7B2FAA3C209711F196D22F2D3A3D8C67.roa (hash: fNYoYPakkf+6waREJ15JGyDkIOiOTFhmU2u5dDkTIU4=) 3: 37783B4E20CC11F18B0BA4B30A3D8C67.roa (hash: 17iEav5VXfyebIk1Lzsm3/eDHbY8rmkP6Y6HY3kn4T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Validity Not Before: Mar 25 06:00:57 2026 GMT Not After : Apr 1 06:00:57 2026 GMT Subject: CN=69c37a1a-889d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:b6:ad:a9:ce:5e:65:07:3e:24:20:52:a8: 4b:6d:02:e6:7e:50:cb:e4:7f:4e:64:2b:22:be:92: de:e9:fb:67:9b:fb:8a:bd:e7:b3:7a:26:56:32:50: 3e:21:53:58:dc:34:08:bd:e5:c2:5d:8f:d3:15:a9: 63:a9:01:e4:14:f0:ab:ca:8d:28:3d:99:b9:03:8e: a7:23:1d:c5:37:66:fa:72:85:5f:66:97:2a:3c:21: 63:6a:f8:34:f9:63:c2:b3:0b:f4:5b:2e:4d:64:fc: 58:72:60:97:ca:83:c9:44:fa:fd:82:93:b0:7c:f6: a8:99:6f:f5:d4:8c:57:2b:b9:91:27:45:2a:ae:06: 13:94:f2:32:3c:7b:a0:b9:1c:7b:b7:ed:3a:7f:7d: 84:16:e5:15:77:e0:5d:36:cf:5f:86:1b:31:69:5a: 57:6f:d6:69:87:5e:3c:11:bc:c7:95:61:a8:cf:67: 38:39:df:ee:c2:22:5a:3e:50:42:3c:af:10:ae:77: e4:bf:cf:51:72:dd:77:2a:de:3b:b9:8e:8d:f5:ec: d5:10:fe:e8:ec:62:45:09:d5:c3:04:34:1e:82:8d: a5:30:2c:01:51:cc:9d:83:c6:11:fb:c4:8d:29:2c: 93:1a:91:a2:ca:4e:f0:cc:7a:21:3e:9f:28:f1:17: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:48:37:50:78:D4:DD:DD:BB:D8:E2:2B:9C:2B:5B:74:E9:9F:08:12 X509v3 Authority Key Identifier: keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cd:b5:16:c6:11:94:65:b7:d2:e5:75:ed:96:7f:84:cb:2f: 0f:31:de:26:c1:9f:cd:61:ca:d0:3e:b9:86:18:00:f2:6b:6b: 15:8f:3b:b9:72:e0:cd:62:25:d5:77:3d:f6:bf:f9:61:4f:3c: 14:ee:4a:36:7c:27:82:3a:a8:27:e8:76:b6:f3:81:2a:4e:4a: d6:86:46:ba:87:2b:67:c7:f7:66:c4:a9:5d:d2:35:9c:22:e1: 80:d3:3e:9d:fa:77:97:5f:f9:32:94:50:51:7e:9e:e6:62:8d: b8:f3:98:23:89:07:c2:e1:1b:23:49:8f:1b:34:79:81:46:a5: 74:d1:a8:bc:dc:f6:72:c2:48:5c:92:35:ff:7d:9a:18:0a:7f: 7f:6f:6c:da:f0:2a:57:1a:a2:5f:5c:e3:bf:9d:23:ed:b1:73: 83:92:72:77:c0:4b:4b:f1:11:db:8c:72:77:d9:59:f9:19:d9: d1:de:2c:b0:a1:d8:8f:59:0a:8a:70:07:92:8a:ae:91:a7:3e: d4:7d:ed:9b:24:84:60:00:12:92:54:82:9b:5b:89:9d:ff:32: 4b:ae:a6:ae:a7:78:8d:06:7a:0d:a0:36:c0:02:73:e8:76:01: ce:ad:6a:33:40:96:f1:b9:35:b6:b5:3e:1c:a2:a3:29:63:41: c6:08:0b:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY1QzYxMTAvBgNVBAUTKENENTM1QzdFQjMxQTQwQTNGREI4QUM0RDVENTc3QUY5 RDZDNTg4NDgwHhcNMjYwMzI1MDYwMDU3WhcNMjYwNDAxMDYwMDU3WjAYMRYwFAYD VQQDEw02OWMzN2ExYS04ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3u2ranOXmUHPiQgUqhLbQLmflDL5H9OZCsivpLe6ftnm/uKveezeiZWMlA+ IVNY3DQIveXCXY/TFaljqQHkFPCryo0oPZm5A46nIx3FN2b6coVfZpcqPCFjavg0 +WPCswv0Wy5NZPxYcmCXyoPJRPr9gpOwfPaomW/11IxXK7mRJ0UqrgYTlPIyPHug uRx7t+06f32EFuUVd+BdNs9fhhsxaVpXb9Zph148EbzHlWGoz2c4Od/uwiJaPlBC PK8Qrnfkv89Rct13Kt47uY6N9ezVEP7o7GJFCdXDBDQego2lMCwBUcydg8YR+8SN KSyTGpGiyk7wzHohPp8o8Rf/XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBpIN1B4 1N3du9jiK5wrW3TpnwgSMB8GA1UdIwQYMBaAFM1TXH6zGkCj/bisTV1XevnWxYhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjVDNi9EMjY1QjBDNkY0 MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFLUDl1S3hOWFZkNi1kYkZp RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWTmNmck1hUUtQOXVLeE5YVmQ2LWRiRmlFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjVDNi9EMjY1QjBDNkY0MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFL UDl1S3hOWFZkNi1kYkZpRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKs21FsYRlGW30uV17ZZ/hMsvDzHeJsGfzWHK0D65hhgA8mtrFY87uXLgzWIl 1Xc99r/5YU88FO5KNnwngjqoJ+h2tvOBKk5K1oZGuocrZ8f3ZsSpXdI1nCLhgNM+ nfp3l1/5MpRQUX6e5mKNuPOYI4kHwuEbI0mPGzR5gUaldNGovNz2csJIXJI1/32a GAp/f29s2vAqVxqiX1zjv50j7bFzg5Jyd8BLS/ER24xyd9lZ+RnZ0d4ssKHYj1kK inAHkoqukac+1H3tmySEYAASklSCm1uJnf8yS66mrqd4jQZ6DaA2wAJz6HYBzq1q M0CW8bk1trU+HKKjKWNBxggLUA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:26:27 2026 by rpki-client