$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft File: Zi7Jore2zkLSOlI4U0xldiIyU3I.mft (raw, json) Hash identifier: WLmtQAfwP01+IvUjNy+CTAA5Fr8MBQ3Ctcdl/qNHciU= Subject key identifier: 9D:F8:36:B4:E2:28:9E:7E:1B:3C:B0:C9:63:D8:41:FB:41:9C:C4:60 Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 Certificate issuer: /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft Manifest number: 32 Signing time: Wed 25 Mar 2026 07:53:16 +0000 Manifest this update: Wed 25 Mar 2026 07:53:15 +0000 Manifest next update: Wed 01 Apr 2026 07:53:15 +0000 Files and hashes: 1: Zi7Jore2zkLSOlI4U0xldiIyU3I.crl (hash: xB//mtnjaZ75SaS3CnAEhuUBnidboaKFHNfzE1YL5AU=) 2: 41527E061CFB11F1BAE9C5A3413D8C67.roa (hash: AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372 Validity Not Before: Mar 25 07:53:15 2026 GMT Not After : Apr 1 07:53:15 2026 GMT Subject: CN=69c3946c-642a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:37:f3:50:17:cd:d0:45:18:bb:ff:be:4a:f0: 6a:06:bb:e4:ae:72:6a:10:9d:28:b5:60:83:2b:69: 4a:02:20:55:a6:7a:04:98:e6:d6:ad:24:bb:fc:1a: eb:d4:16:11:ae:c4:61:bb:8d:b5:62:96:c0:1d:73: 56:c6:89:b8:18:2f:7a:0f:40:8d:ed:03:ab:73:43: b3:f4:db:fe:18:f7:ae:0e:1e:f6:d9:91:fb:9c:0c: a8:83:db:c8:96:3a:e8:ab:06:0b:ce:b7:3c:d1:c1: 57:8d:56:a7:61:93:6f:68:e0:06:76:28:12:99:25: 35:ea:fb:4c:04:56:7d:0b:93:f1:41:9e:be:35:7b: a3:20:a1:2a:12:48:15:05:49:35:98:05:bb:1e:de: a9:27:3c:e7:c2:86:f9:96:a3:0e:3f:06:80:19:21: 3f:9d:1b:74:fe:f5:ac:7a:c4:7b:b0:24:6f:08:10: 43:70:fb:9f:e0:8f:9a:b0:ec:7d:48:21:7e:dc:fa: 86:dd:1e:0c:e1:27:bd:58:4c:ee:13:f7:98:fc:52: e8:ce:34:f0:27:f8:5c:91:dd:4f:df:9a:61:6f:90: c3:72:a5:7d:3a:14:27:77:79:53:f6:2c:49:6c:08: 85:7b:e2:40:23:2c:a2:6f:00:9f:3b:8c:ab:17:9c: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F8:36:B4:E2:28:9E:7E:1B:3C:B0:C9:63:D8:41:FB:41:9C:C4:60 X509v3 Authority Key Identifier: keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:7b:9c:81:07:f2:19:af:a9:07:d2:5e:5e:37:ee:68:6d:08: af:d1:7b:2f:c6:58:ec:49:31:32:c6:dc:fd:c3:c4:37:2a:a5: 09:5e:c3:c0:55:7e:ee:2d:c5:4e:9c:bc:fb:b6:0f:8d:d8:d6: d5:13:46:d6:2c:9d:d4:15:32:a2:1f:47:63:d0:07:7f:2a:12: 17:fc:17:ad:82:0e:3f:92:3e:fc:0d:bb:01:ad:2b:0a:95:40: 59:09:a5:04:ab:ca:98:ae:0b:e9:0a:e2:40:e5:10:23:28:c8: c0:ed:3c:69:04:e1:39:b1:39:cf:6f:a8:fe:8f:a9:50:32:3c: 82:1f:89:99:16:d1:6d:79:4c:a8:61:c4:1e:8b:33:d9:b6:d3: 0c:12:97:99:c3:db:50:a1:c6:94:c5:00:05:9b:da:bc:8f:50: 52:b1:3d:ac:c9:48:8a:86:bf:a1:f1:d1:de:e2:ea:f5:d9:54: 30:93:84:08:0f:b8:b2:57:7a:27:e2:4f:22:d0:a0:b1:b3:5d: 24:b6:ad:0d:db:40:12:f6:33:d9:20:4c:22:37:c8:ac:16:aa: c6:9b:59:aa:80:e4:2c:95:c9:ac:8b:a6:39:3f:b0:54:05:50: ff:94:bb:3a:72:ab:b2:7c:e3:d2:50:51:96:d6:58:bb:7b:22: a6:8d:d9:8b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy MjMyNTM3MjAeFw0yNjAzMjUwNzUzMTVaFw0yNjA0MDEwNzUzMTVaMBgxFjAUBgNV BAMTDTY5YzM5NDZjLTY0MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2N/NQF83QRRi7/75K8GoGu+SucmoQnSi1YIMraUoCIFWmegSY5tatJLv8GuvU FhGuxGG7jbVilsAdc1bGibgYL3oPQI3tA6tzQ7P02/4Y964OHvbZkfucDKiD28iW OuirBgvOtzzRwVeNVqdhk29o4AZ2KBKZJTXq+0wEVn0Lk/FBnr41e6MgoSoSSBUF STWYBbse3qknPOfChvmWow4/BoAZIT+dG3T+9ax6xHuwJG8IEENw+5/gj5qw7H1I IX7c+obdHgzhJ71YTO4T95j8UujONPAn+FyR3U/fmmFvkMNypX06FCd3eVP2LEls CIV74kAjLKJvAJ87jKsXnIADAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnfg2tOIo nn4bPLDJY9hB+0GcxGAwHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0 MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx OEFCLzhBNTc5N0RDRTk0MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtM U09sSTRVMHhsZGlJeVUzSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCIe5yBB/IZr6kH0l5eN+5obQiv0XsvxljsSTEyxtz9w8Q3KqUJXsPAVX7uLcVO nLz7tg+N2NbVE0bWLJ3UFTKiH0dj0Ad/KhIX/Betgg4/kj78DbsBrSsKlUBZCaUE q8qYrgvpCuJA5RAjKMjA7TxpBOE5sTnPb6j+j6lQMjyCH4mZFtFteUyoYcQeizPZ ttMMEpeZw9tQocaUxQAFm9q8j1BSsT2syUiKhr+h8dHe4ur12VQwk4QID7iyV3on 4k8i0KCxs10ktq0N20AS9jPZIEwiN8isFqrGm1mqgOQslcmsi6Y5P7BUBVD/lLs6 cquyfOPSUFGW1li7eyKmjdmL -----END CERTIFICATE-----Generated at Thu Mar 26 14:32:00 2026 by rpki-client