$ rpki-client -vvf rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft File: szF8Z90Vsor6OYAEwZ0deLG_3oY.mft (raw, json) Hash identifier: 3Ry8ilF8ac8ZjA1Ivt0Qx99lhIug4yqwclFlqz2IV9Q= Subject key identifier: 4E:CD:1F:52:52:9B:A5:AC:87:2D:90:05:0A:11:A4:1F:F0:BD:00:5F Authority key identifier: B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 Certificate issuer: /CN=A91736F5/serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft Manifest number: 2E Signing time: Wed 25 Mar 2026 07:52:45 +0000 Manifest this update: Wed 25 Mar 2026 07:52:45 +0000 Manifest next update: Wed 01 Apr 2026 07:52:45 +0000 Files and hashes: 1: szF8Z90Vsor6OYAEwZ0deLG_3oY.crl (hash: LL/d3nNF526odflcCjYhT2V818Zpdj9kkk487CtGdyc=) 2: DF325558E6EE11F09FA64894636F56BC.roa (hash: vEOW1RXhvztzL2HV82vJS53AY6+1wricRf5vvLZfhIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91736F5, serialNumber=B3317C67DD15B28AFA398004C19D1D78B1BFDE86 Validity Not Before: Mar 25 07:52:45 2026 GMT Not After : Apr 1 07:52:45 2026 GMT Subject: CN=69c3944d-61ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:86:d0:f8:5b:57:56:62:54:dc:07:e5:66: 4e:e9:18:01:b3:97:38:31:30:6b:7c:77:75:ff:9c: 78:e9:64:03:ad:3d:70:ec:d0:5d:97:5f:33:b5:28: 42:f0:45:98:2b:10:b9:1b:a6:5d:3f:33:9b:69:b1: a2:a3:32:b7:b6:b2:79:e1:be:cc:01:15:34:5a:95: 38:84:c8:68:b9:6a:6f:f4:f6:e4:e1:c2:34:9b:c1: d0:69:5a:54:77:99:8a:86:c1:0e:f0:fc:17:d4:47: f7:43:0a:be:3b:04:35:11:eb:7b:bf:ea:a3:b2:4c: bd:03:d4:74:9a:d3:c2:73:1b:f6:3b:b0:c4:ea:d7: c1:62:ef:46:15:12:80:b3:89:5c:8a:14:c2:6c:44: 78:0e:16:3c:f2:3a:05:e6:77:02:fb:88:7b:89:9e: 0b:1a:3a:8a:ee:a5:ee:96:58:25:b2:40:0a:c8:1d: 94:e4:5c:0a:4c:80:05:c2:2a:5b:4f:57:bf:23:8e: e2:29:77:0b:11:54:55:bd:0a:b5:a9:5e:a4:95:00: f1:16:c5:b3:00:a9:f6:10:77:12:3c:94:95:7c:6d: 83:4c:8e:bb:5d:55:ec:74:e9:41:c8:74:47:51:cf: 3e:bc:ad:de:c9:73:04:19:b3:1b:d3:5f:65:d4:8c: f8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:1F:52:52:9B:A5:AC:87:2D:90:05:0A:11:A4:1F:F0:BD:00:5F X509v3 Authority Key Identifier: keyid:B3:31:7C:67:DD:15:B2:8A:FA:39:80:04:C1:9D:1D:78:B1:BF:DE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szF8Z90Vsor6OYAEwZ0deLG_3oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/2A50B648E6EE11F0AD095792636F56BC/szF8Z90Vsor6OYAEwZ0deLG_3oY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1f:df:a3:f4:bc:4f:07:a3:64:23:3a:58:4b:a4:c7:8a:22: 2b:15:fd:55:37:64:cf:32:b8:10:a7:b2:92:1f:c8:2e:a2:8e: 04:ce:30:92:76:a4:17:ce:0f:7d:e2:b2:04:7e:0e:5c:cf:9a: 2e:99:3a:d3:c3:fb:56:ec:ca:5d:8d:7f:a3:ab:e0:21:03:8d: 87:09:b2:46:9e:0e:14:3b:c8:25:bf:86:27:fb:d8:8d:59:51: af:94:3b:b6:5e:3a:ed:e9:d1:25:7a:a3:ac:75:f4:95:a7:a9: 4d:7d:7e:d9:1b:e8:f8:28:d0:92:c7:48:65:89:c3:41:2e:f3: 44:43:38:72:b4:2d:99:a7:bc:7e:67:60:bb:12:2d:33:9e:5a: ed:cc:20:4e:65:aa:7f:cc:02:13:5f:4d:0e:c4:3f:d7:4f:d5: b0:63:c1:1b:46:f3:45:66:33:ab:e8:c2:6f:d3:28:2f:44:7f: ef:36:4f:04:24:f7:3c:5c:be:e7:fc:8f:df:2a:b2:e6:77:ab: 3f:2a:a7:e8:41:8b:11:e8:05:3b:e0:79:4e:ab:6b:c6:5a:f8: 09:7d:07:31:ba:16:f8:e3:49:29:fa:52:be:43:e7:3e:4b:f7: 7d:ca:12:4b:c6:6f:56:ce:ad:9a:e0:a3:ee:81:5d:77:5d:2a: ef:fd:18:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzZGNTExMC8GA1UEBRMoQjMzMTdDNjdERDE1QjI4QUZBMzk4MDA0QzE5RDFENzhC MUJGREU4NjAeFw0yNjAzMjUwNzUyNDVaFw0yNjA0MDEwNzUyNDVaMBgxFjAUBgNV BAMTDTY5YzM5NDRkLTYxYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN7YbQ+FtXVmJU3AflZk7pGAGzlzgxMGt8d3X/nHjpZAOtPXDs0F2XXzO1KELw RZgrELkbpl0/M5tpsaKjMre2snnhvswBFTRalTiEyGi5am/09uThwjSbwdBpWlR3 mYqGwQ7w/BfUR/dDCr47BDUR63u/6qOyTL0D1HSa08JzG/Y7sMTq18Fi70YVEoCz iVyKFMJsRHgOFjzyOgXmdwL7iHuJngsaOorupe6WWCWyQArIHZTkXApMgAXCKltP V78jjuIpdwsRVFW9CrWpXqSVAPEWxbMAqfYQdxI8lJV8bYNMjrtdVex06UHIdEdR zz68rd7JcwQZsxvTX2XUjPh5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTs0fUlKb payHLZAFChGkH/C9AF8wHwYDVR0jBBgwFoAUszF8Z90Vsor6OYAEwZ0deLG/3oYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczNkY1LzJBNTBCNjQ4RTZF RTExRjBBRDA5NTc5MjYzNkY1NkJDL3N6RjhaOTBWc29yNk9ZQUV3WjBkZUxHXzNv WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3pGOFo5MFZzb3I2T1lBRXdaMGRlTEdfM29ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz NkY1LzJBNTBCNjQ4RTZFRTExRjBBRDA5NTc5MjYzNkY1NkJDL3N6RjhaOTBWc29y Nk9ZQUV3WjBkZUxHXzNvWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBOH9+j9LxPB6NkIzpYS6THiiIrFf1VN2TPMrgQp7KSH8guoo4EzjCSdqQXzg99 4rIEfg5cz5oumTrTw/tW7MpdjX+jq+AhA42HCbJGng4UO8glv4Yn+9iNWVGvlDu2 Xjrt6dEleqOsdfSVp6lNfX7ZG+j4KNCSx0hlicNBLvNEQzhytC2Zp7x+Z2C7Ei0z nlrtzCBOZap/zAITX00OxD/XT9WwY8EbRvNFZjOr6MJv0ygvRH/vNk8EJPc8XL7n /I/fKrLmd6s/KqfoQYsR6AU74HlOq2vGWvgJfQcxuhb440kp+lK+Q+c+S/d9yhJL xm9Wzq2a4KPugV13XSrv/Riv -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:08 2026 by rpki-client