$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft File: z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json) Hash identifier: Ks6u4iO4LHLFEuIO/8lTHYztkedSXZJ27s9G+dgRPtQ= Subject key identifier: 92:7F:FA:2A:2B:27:CD:E7:7F:AE:43:F5:FA:51:77:2C:EE:E0:7F:9A Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C Certificate issuer: /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft Manifest number: 8F Signing time: Fri 27 Mar 2026 07:04:27 +0000 Manifest this update: Fri 27 Mar 2026 07:04:26 +0000 Manifest next update: Fri 03 Apr 2026 07:04:26 +0000 Files and hashes: 1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: Joi5EDkC1fWtPxTN2elKBHHchVz9dsknqir9jSj3jqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C Validity Not Before: Mar 27 07:04:26 2026 GMT Not After : Apr 3 07:04:26 2026 GMT Subject: CN=69c62bfb-d3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:00:00:5f:29:dc:dc:41:06:6b:6d:fe:c1: 48:98:02:d6:da:c1:69:db:62:2a:dc:2c:55:af:a0: 5e:b3:c6:96:4c:e6:63:3b:4e:03:b7:28:73:3b:73: 6d:60:61:5c:ab:f4:21:cb:e3:cc:48:1e:60:4d:27: da:75:d8:0a:6d:ab:7a:01:92:e5:85:35:a1:55:bd: 98:33:29:a4:30:9f:89:cb:b1:0e:41:b1:ef:84:14: be:ee:45:df:5f:52:d2:e2:52:dc:d4:31:e7:3e:2e: 06:db:81:27:0d:d4:90:72:98:b4:d8:2b:db:de:25: 60:4c:03:09:a6:9b:a9:f7:7c:e3:09:74:2a:bf:1f: 23:72:88:07:38:66:41:87:bd:14:e4:32:cf:db:58: 4f:3b:8f:af:85:b6:9a:68:9f:91:03:2c:a9:f5:ce: 8b:b1:4c:8e:43:dc:bf:84:51:ff:dd:e0:b5:82:2d: 2c:ad:c4:92:00:f7:be:81:09:cd:75:4a:70:ee:e7: 1b:2a:2c:fb:53:c0:1d:c9:19:04:9c:f1:81:0c:e6: 34:ba:04:51:64:b4:38:6c:fb:30:86:c2:3f:27:9e: ee:68:6c:ec:bf:38:d8:39:ac:45:e5:78:cc:f3:e8: ae:94:5f:c0:1d:9f:b6:5d:51:d9:ad:14:0d:e0:24: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7F:FA:2A:2B:27:CD:E7:7F:AE:43:F5:FA:51:77:2C:EE:E0:7F:9A X509v3 Authority Key Identifier: keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b9:93:94:80:ac:f1:34:03:77:09:95:65:59:05:3c:d0:b8: d4:b1:86:01:5d:29:64:33:6b:b8:a8:63:78:21:12:71:ea:2d: 4d:50:94:a2:15:61:53:01:00:79:d0:80:c0:51:59:82:85:9b: 05:44:02:7f:57:69:cf:72:31:e0:8e:40:b2:d3:1e:85:87:2b: a9:ae:5b:c1:2b:8f:6f:b3:59:e6:fc:16:9e:00:90:bc:47:64: e2:e6:cc:79:0a:a9:64:18:60:81:e4:1b:fd:6d:36:84:b0:fc: 4f:d6:4b:69:6b:09:64:b6:cc:d2:f9:03:74:2e:55:1d:c9:d5: 49:98:88:02:4a:b1:1f:ad:8f:bb:a5:15:fa:d1:9b:7b:ce:c0: 8a:82:ce:c8:49:b4:20:bd:15:6e:0e:d1:89:17:78:4a:b7:eb: 1a:1c:ea:1e:b2:c0:3b:bd:46:a2:57:30:0a:38:89:93:1a:20: b9:b7:98:22:f3:76:2d:0d:60:9b:3b:2d:42:0d:68:7f:62:46: 9f:ab:13:cd:dd:98:65:8c:de:be:6a:05:aa:b2:83:55:74:1e: 28:15:d6:cb:ee:a3:d6:42:ce:25:e0:4e:7d:b4:bc:87:fc:fd: c0:60:62:ec:6d:78:a2:74:8b:f8:37:2c:46:91:56:1f:26:55: a5:51:8c:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI1QzgxMTAvBgNVBAUTKENGNkYxMkRCREU0QkU5MTM0NTgxNThGNUM3Nzg1Qzcx MjkwODU1NUMwHhcNMjYwMzI3MDcwNDI2WhcNMjYwNDAzMDcwNDI2WjAYMRYwFAYD VQQDEw02OWM2MmJmYi1kM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1oAAF8p3NxBBmtt/sFImALW2sFp22Iq3CxVr6Bes8aWTOZjO04DtyhzO3Nt YGFcq/Qhy+PMSB5gTSfaddgKbat6AZLlhTWhVb2YMymkMJ+Jy7EOQbHvhBS+7kXf X1LS4lLc1DHnPi4G24EnDdSQcpi02Cvb3iVgTAMJppup93zjCXQqvx8jcogHOGZB h70U5DLP21hPO4+vhbaaaJ+RAyyp9c6LsUyOQ9y/hFH/3eC1gi0srcSSAPe+gQnN dUpw7ucbKiz7U8AdyRkEnPGBDOY0ugRRZLQ4bPswhsI/J57uaGzsvzjYOaxF5XjM 8+iulF/AHZ+2XVHZrRQN4CSkpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJ/+ior J83nf65D9fpRdyzu4H+aMB8GA1UdIwQYMBaAFM9vEtveS+kTRYFY9cd4XHEpCFVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjVDOC8zQkNEMUJFQTU1 OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZSTkZnVmoxeDNoY2NTa0lW VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyOFMyOTVMNlJORmdWajF4M2hjY1NrSVZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjVDOC8zQkNEMUJFQTU1OTUxMUYwQTkzNUQyMkZDNEY5QUUwMi96MjhTMjk1TDZS TkZnVmoxeDNoY2NTa0lWVncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWrmTlICs8TQDdwmVZVkFPNC41LGGAV0pZDNruKhjeCESceotTVCUohVhUwEA edCAwFFZgoWbBUQCf1dpz3Ix4I5AstMehYcrqa5bwSuPb7NZ5vwWngCQvEdk4ubM eQqpZBhggeQb/W02hLD8T9ZLaWsJZLbM0vkDdC5VHcnVSZiIAkqxH62Pu6UV+tGb e87AioLOyEm0IL0Vbg7RiRd4SrfrGhzqHrLAO71GolcwCjiJkxogubeYIvN2LQ1g mzstQg1of2JGn6sTzd2YZYzevmoFqrKDVXQeKBXWy+6j1kLOJeBOfbS8h/z9wGBi 7G14onSL+DcsRpFWHyZVpVGMmA== -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:39 2026 by rpki-client