$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: BjVQkJPAQLI/3YImay/L5fEVOTtLZvspF9d4PL4w3s8= Subject key identifier: 2C:05:3B:55:BE:DB:FA:61:7C:3F:96:C0:B3:1E:0A:28:85:54:B3:D8 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 0387 Signing time: Fri 27 Mar 2026 00:35:23 +0000 Manifest this update: Fri 27 Mar 2026 00:35:22 +0000 Manifest next update: Fri 03 Apr 2026 00:35:22 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: CcIuUYaAF+zIbklrsfa9/AAa1BVINMQlqdhNzCMcqdI=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: 8Ynwe+p9uI6D1qeWkMhQ/D9BQagY17JBH02rV/NaGt4=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: BJLFfTv6txJA1qp4H2illbVhs9gJxgXvN/Bl0UJLlTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: Mar 27 00:35:22 2026 GMT Not After : Apr 3 00:35:22 2026 GMT Subject: CN=69c5d0cb-9eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:d2:0e:0d:34:bb:5b:2d:91:fd:a4:b9:90: 81:89:64:e6:ca:ae:02:c4:71:ea:01:7f:a6:85:7c: a2:f2:f8:ed:e3:27:e4:ca:94:6f:da:b4:0b:62:c6: 52:5b:38:f4:fc:c1:a8:54:37:0b:b9:f1:76:18:5a: a6:8a:cb:39:3c:58:30:5d:17:15:e1:1a:17:a6:f7: 62:03:60:56:9f:a6:c7:ae:4e:22:2d:4e:79:39:1c: 44:ef:5d:e3:86:41:42:95:11:cc:ef:f6:f7:d0:2f: ee:45:d0:ed:60:a2:3e:08:a7:a0:06:69:37:28:4e: ee:64:d5:15:c7:e8:9e:61:34:f2:d5:b4:bf:ee:ad: f6:7e:58:e2:74:15:f0:21:7f:45:d8:13:f0:d5:54: d0:24:e9:79:39:df:22:99:75:02:27:11:90:d5:7b: d3:af:78:d6:7c:91:89:de:74:b0:5b:e6:37:a4:6b: fa:43:44:cf:e5:85:c9:b5:2a:a9:e2:04:a7:29:2c: bb:db:60:c6:e1:2b:d1:6d:82:1e:72:b7:d2:0d:61: 97:9e:30:6b:17:77:23:48:03:7e:f3:aa:7a:33:33: 2b:e9:c5:17:9f:3b:3b:77:ba:6c:3b:f7:b1:47:05: 87:93:aa:0c:cb:50:5c:c6:47:d2:e8:be:c1:e6:2b: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:05:3B:55:BE:DB:FA:61:7C:3F:96:C0:B3:1E:0A:28:85:54:B3:D8 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:65:a5:3d:40:b3:02:5f:25:bc:98:9f:6b:51:3f:cd:6d:43: ec:fa:bb:21:75:c6:c6:78:51:b5:e9:63:a8:f2:da:27:60:78: 6e:e0:29:27:b1:c9:0b:01:47:e9:2f:a6:23:71:b0:fc:74:9d: f4:69:6f:93:76:1f:04:a4:9e:d8:ac:97:5f:91:27:ab:84:e7: 27:f0:97:af:ca:25:09:9b:64:cb:49:39:0d:a4:9f:06:78:1e: 4e:74:74:c0:b0:93:d8:aa:b6:47:b5:ce:a6:1a:bb:48:6e:04: 42:02:77:ab:b9:bc:38:b2:c5:7e:c6:d6:0e:59:aa:9a:b3:78: a0:6d:06:16:37:66:ef:d5:18:28:c2:60:84:b0:af:6d:c5:6e: 3b:0a:03:1b:92:c7:1e:61:1e:8d:94:3a:b4:4f:81:f2:26:a5: 27:bb:a1:a8:d9:d1:5d:ba:9b:69:ed:31:f7:11:b3:d7:f9:af: db:7b:9d:71:ab:2d:67:8b:88:9a:c1:0f:5d:98:b2:bb:54:fd: 65:68:b2:34:a7:d5:63:09:e7:62:8b:41:21:e0:f7:30:cd:b0: c4:09:4c:8d:ec:85:b4:db:3f:8e:5f:38:1b:3b:98:01:3a:0a: 3a:33:c9:4a:8c:7e:ee:d0:cd:3c:fe:ec:b0:70:f5:a2:47:f1: 8f:f8:56:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjYwMzI3MDAzNTIyWhcNMjYwNDAzMDAzNTIyWjAYMRYwFAYD VQQDEw02OWM1ZDBjYi05ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8fSDg00u1stkf2kuZCBiWTmyq4CxHHqAX+mhXyi8vjt4yfkypRv2rQLYsZS Wzj0/MGoVDcLufF2GFqmiss5PFgwXRcV4RoXpvdiA2BWn6bHrk4iLU55ORxE713j hkFClRHM7/b30C/uRdDtYKI+CKegBmk3KE7uZNUVx+ieYTTy1bS/7q32fljidBXw IX9F2BPw1VTQJOl5Od8imXUCJxGQ1XvTr3jWfJGJ3nSwW+Y3pGv6Q0TP5YXJtSqp 4gSnKSy722DG4SvRbYIecrfSDWGXnjBrF3cjSAN+86p6MzMr6cUXnzs7d7psO/ex RwWHk6oMy1BcxkfS6L7B5ivKYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwFO1W+ 2/phfD+WwLMeCiiFVLPYMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG2WlPUCzAl8lvJifa1E/zW1D7Pq7IXXGxnhRteljqPLaJ2B4buApJ7HJCwFH 6S+mI3Gw/HSd9Glvk3YfBKSe2KyXX5Enq4TnJ/CXr8olCZtky0k5DaSfBngeTnR0 wLCT2Kq2R7XOphq7SG4EQgJ3q7m8OLLFfsbWDlmqmrN4oG0GFjdm79UYKMJghLCv bcVuOwoDG5LHHmEejZQ6tE+B8ialJ7uhqNnRXbqbae0x9xGz1/mv23udcastZ4uI msEPXZiyu1T9ZWiyNKfVYwnnYotBIeD3MM2wxAlMjeyFtNs/jl84GzuYAToKOjPJ Sox+7tDNPP7ssHD1okfxj/hWEw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:42 2026 by rpki-client