$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: Xu5l0cmB6Pi6nqfqOGRaRmmQnXUFVkdbXAHEnYg0rmw= Subject key identifier: E3:C4:2C:D0:73:4C:85:D7:A4:0D:91:8F:1B:14:98:1D:05:59:61:FC Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 0215 Signing time: Wed 25 Mar 2026 02:19:35 +0000 Manifest this update: Wed 25 Mar 2026 02:19:34 +0000 Manifest next update: Wed 01 Apr 2026 02:19:34 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: U5BxiPsqNuWilFTge5UGVNKjuZ/VIXIeuMDPs/DNikw=) 2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: 0B4BKsEG1wa08J+lgPO912Kog9bxXq5IB8X43UFFcls=) 3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: eIw4Uvs7+0h1YsqxH/qfh6oIU/c0LpW3ku/O5IbbbMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Mar 25 02:19:34 2026 GMT Not After : Apr 1 02:19:34 2026 GMT Subject: CN=69c34637-ff28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:d2:a0:91:bd:91:ca:43:36:a0:44:1a:31: 37:6f:5e:ec:2e:04:c8:9a:50:54:a0:9e:fa:97:b0: 04:71:89:96:49:e2:09:61:c1:6f:45:74:16:bb:c3: ce:3e:42:19:e9:4a:69:e6:5e:2d:da:8d:49:54:e6: 1d:af:bb:68:78:0c:6c:bb:71:36:5e:29:73:c3:31: 3c:45:60:b7:8d:c4:1d:e4:62:9f:8c:34:7f:27:76: b7:02:43:95:85:64:c9:a0:45:67:8f:ba:0d:4b:12: da:35:95:da:c0:3f:23:c7:09:f0:c3:c2:39:61:78: 78:a5:dc:21:63:64:de:cc:79:c4:10:82:33:31:52: e4:d7:b0:69:2e:99:e5:4d:af:1c:9b:65:28:b2:c4: 23:21:06:13:c8:86:0d:77:1d:5c:2e:86:62:df:e7: e0:a9:8e:d4:ce:85:50:30:74:7d:29:0c:fd:be:95: e7:a8:44:de:1d:f6:86:07:c0:df:82:87:54:7e:31: 0f:d8:ea:2b:25:80:95:3c:51:7e:cd:7b:90:ef:b1: 84:c9:ba:a4:ab:7b:8e:ab:4f:aa:e6:c8:58:62:2c: 68:80:41:94:0f:60:54:88:8f:67:da:fb:95:cf:7a: c3:df:cc:ad:86:c6:08:dc:bb:fa:12:89:20:71:28: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:2C:D0:73:4C:85:D7:A4:0D:91:8F:1B:14:98:1D:05:59:61:FC X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bb:71:a7:91:d0:d8:c2:7d:e7:1d:55:3e:9e:d8:57:56:fc: 97:63:55:5e:d8:c8:92:18:9e:8d:f3:1f:15:a9:3e:4a:4e:3d: b2:d9:d1:6c:f9:8f:21:e0:72:49:e1:77:f8:bd:03:a8:68:4b: 86:a3:c8:76:a1:ff:cd:53:70:c0:fd:75:24:52:74:0f:79:28: eb:58:40:e6:d4:c6:d3:b6:5a:93:42:6e:01:19:da:14:6c:2f: 70:57:9f:55:9a:dc:3a:42:e6:23:e7:23:23:95:50:b7:60:6c: 6c:2c:a3:82:c6:04:f6:05:0c:59:b1:75:b6:7e:68:31:01:96: 6a:b2:5e:b0:7a:07:1c:32:81:75:df:29:99:5e:f4:59:5c:39: d9:cf:7d:2b:ba:81:ee:87:4b:33:73:81:b8:0b:18:2f:ae:6b: c1:aa:ab:2f:04:fb:23:e4:07:57:e4:64:17:05:2b:ac:00:d5: d6:7a:f2:eb:b7:6f:f8:4b:5f:09:b2:db:f8:e1:9a:55:0f:9b: 37:5d:57:34:07:64:1f:5b:73:80:49:e2:0d:11:fb:ed:39:76: 78:93:3d:cf:61:c5:65:98:16:19:d5:41:64:bd:2f:b2:56:d3: c1:2a:91:2f:d1:28:8b:28:e6:5c:5c:6b:c4:a4:97:0d:a3:be: d4:f9:85:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjYwMzI1MDIxOTM0WhcNMjYwNDAxMDIxOTM0WjAYMRYwFAYD VQQDEw02OWMzNDYzNy1mZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06vSoJG9kcpDNqBEGjE3b17sLgTImlBUoJ76l7AEcYmWSeIJYcFvRXQWu8PO PkIZ6Upp5l4t2o1JVOYdr7toeAxsu3E2XilzwzE8RWC3jcQd5GKfjDR/J3a3AkOV hWTJoEVnj7oNSxLaNZXawD8jxwnww8I5YXh4pdwhY2TezHnEEIIzMVLk17BpLpnl Ta8cm2UossQjIQYTyIYNdx1cLoZi3+fgqY7UzoVQMHR9KQz9vpXnqETeHfaGB8Df godUfjEP2OorJYCVPFF+zXuQ77GEybqkq3uOq0+q5shYYixogEGUD2BUiI9n2vuV z3rD38ythsYI3Lv6EokgcShUawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOPELNBz TIXXpA2RjxsUmB0FWWH8MB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7txp5HQ2MJ95x1VPp7YV1b8l2NVXtjIkhiejfMfFak+Sk49stnRbPmPIeBy SeF3+L0DqGhLhqPIdqH/zVNwwP11JFJ0D3ko61hA5tTG07Zak0JuARnaFGwvcFef VZrcOkLmI+cjI5VQt2BsbCyjgsYE9gUMWbF1tn5oMQGWarJesHoHHDKBdd8pmV70 WVw52c99K7qB7odLM3OBuAsYL65rwaqrLwT7I+QHV+RkFwUrrADV1nry67dv+Etf CbLb+OGaVQ+bN11XNAdkH1tzgEniDRH77Tl2eJM9z2HFZZgWGdVBZL0vslbTwSqR L9EoiyjmXFxrxKSXDaO+1PmFTQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:21 2026 by rpki-client