$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft File: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft (raw, json) Hash identifier: OLavKFuyqyXp9Fb0tAMAiwoCqsxy4dUe1pzd2Y/9sSs= Subject key identifier: 90:B2:45:69:6D:92:AC:97:5D:28:DA:5E:9A:B9:7D:02:A4:F5:22:54 Authority key identifier: A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF Certificate issuer: /CN=A91A3AD9/serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft Manifest number: 25 Signing time: Wed 25 Mar 2026 08:01:40 +0000 Manifest this update: Wed 25 Mar 2026 08:01:39 +0000 Manifest next update: Wed 01 Apr 2026 08:01:39 +0000 Files and hashes: 1: pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl (hash: +TFPWH2ZLnvAF2gDRCc/E2GwDKa+EuvC4tYVCRx0Zj0=) 2: 8B10B888061111F18D858310203D8C67.roa (hash: tOl6umKX3unrAEmRMF9DGSQuWUSsAqCraLPKeYMTquU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AD9, serialNumber=A739387478C8AD9DD5D19553AB4B1DEEF1A961FF Validity Not Before: Mar 25 08:01:39 2026 GMT Not After : Apr 1 08:01:39 2026 GMT Subject: CN=69c39664-df57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:26:91:91:9d:c1:96:53:59:29:78:3f:05: 2f:48:ec:3f:5f:d5:74:d5:b8:0f:f9:4d:15:9a:56: 76:a0:7b:78:f2:2c:23:9a:a4:d1:53:81:9d:d7:8d: ec:f0:67:b8:8e:47:c7:57:54:c7:8d:92:6c:5d:74: 3e:57:62:ea:81:5d:05:ef:fa:4a:49:e7:49:52:d1: 9f:1f:55:e9:20:3a:de:54:5a:d7:bb:ef:6d:c1:48: 27:b9:22:a2:b7:ec:fc:26:73:49:27:f7:cf:79:bf: d5:23:ec:aa:af:24:ec:19:08:cf:bb:28:46:48:31: 65:c8:7b:26:72:f7:4e:17:e5:0e:41:38:0c:7d:da: 88:fa:60:8b:cb:8c:b6:be:5b:d5:3e:19:ef:40:16: 43:9b:01:f4:56:c2:a0:98:f8:32:71:17:f4:f4:b6: fd:67:9b:30:e4:f7:82:9c:95:1c:29:d6:12:83:5d: bf:5c:6e:c8:c2:e4:c7:ad:db:8d:d2:33:ee:83:7b: 8f:22:0e:11:77:7c:5e:8c:79:19:50:84:d4:f1:61: 67:92:6a:35:c2:d0:4e:0b:fb:65:e7:0f:fe:c1:ae: 4a:64:23:2e:b3:80:54:45:e4:af:84:7b:ec:b4:96: 2a:66:d1:27:9d:a2:5a:19:06:a8:82:b1:c1:06:06: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:45:69:6D:92:AC:97:5D:28:DA:5E:9A:B9:7D:02:A4:F5:22:54 X509v3 Authority Key Identifier: keyid:A7:39:38:74:78:C8:AD:9D:D5:D1:95:53:AB:4B:1D:EE:F1:A9:61:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/77274DC0F98011F087DA99084F6F56BC/pzk4dHjIrZ3V0ZVTq0sd7vGpYf8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:91:3d:7a:8c:1d:72:86:fb:89:e9:ba:fd:41:8a:76:74:89: 49:d4:91:d2:c7:1b:7d:e0:54:1a:7d:cd:a4:58:b4:29:00:d7: 53:da:dc:57:e6:32:e0:4b:94:c3:7b:0a:e6:64:78:29:cc:70: 9e:0e:41:82:cd:27:75:70:16:a8:19:91:06:f2:86:c7:52:c9: e7:5e:96:b1:75:c1:64:1f:f9:46:ad:9a:2a:7e:7a:0a:6c:4a: 5a:4f:22:be:b2:ff:c8:63:bd:9d:11:d2:39:59:3c:45:d8:db: 35:b7:65:e7:88:19:30:a7:f4:5a:96:3d:1d:9a:04:64:af:c9: fd:cd:d8:e5:7a:35:92:20:c4:1b:cd:55:ec:8a:d5:23:96:2e: 67:6a:93:3c:57:de:17:20:cf:7d:0f:fa:fc:34:a9:9e:36:14: c0:32:82:5e:5d:53:b7:5e:4b:35:43:e5:11:cd:dd:d7:eb:f9: c0:3b:02:c4:9a:5e:06:a2:c6:ba:75:c7:44:9a:dc:7f:aa:bf: 9e:87:7b:90:d0:eb:b6:e9:45:90:2f:c0:3a:48:2e:cf:62:11: 48:4e:10:c9:7c:dd:1a:2f:f7:db:2a:27:de:36:0c:2e:0a:e3: 52:02:97:d2:fd:9e:3b:c4:31:e2:1e:94:91:cb:f6:ef:d9:54: 92:55:9c:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0FEOTExMC8GA1UEBRMoQTczOTM4NzQ3OEM4QUQ5REQ1RDE5NTUzQUI0QjFERUVG MUE5NjFGRjAeFw0yNjAzMjUwODAxMzlaFw0yNjA0MDEwODAxMzlaMBgxFjAUBgNV BAMTDTY5YzM5NjY0LWRmNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqfSaRkZ3BllNZKXg/BS9I7D9f1XTVuA/5TRWaVnage3jyLCOapNFTgZ3Xjezw Z7iOR8dXVMeNkmxddD5XYuqBXQXv+kpJ50lS0Z8fVekgOt5UWte7723BSCe5IqK3 7Pwmc0kn9895v9Uj7KqvJOwZCM+7KEZIMWXIeyZy904X5Q5BOAx92oj6YIvLjLa+ W9U+Ge9AFkObAfRWwqCY+DJxF/T0tv1nmzDk94KclRwp1hKDXb9cbsjC5Met243S M+6De48iDhF3fF6MeRlQhNTxYWeSajXC0E4L+2XnD/7BrkpkIy6zgFRF5K+Ee+y0 lipm0SedoloZBqiCscEGBo6jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkLJFaW2S rJddKNpemrl9AqT1IlQwHwYDVR0jBBgwFoAUpzk4dHjIrZ3V0ZVTq0sd7vGpYf8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQUQ5Lzc3Mjc0REMwRjk4 MDExRjA4N0RBOTkwODRGNkY1NkJDL3B6azRkSGpJclozVjBaVlRxMHNkN3ZHcFlm OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcHprNGRIaklyWjNWMFpWVHEwc2Q3dkdwWWY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz QUQ5Lzc3Mjc0REMwRjk4MDExRjA4N0RBOTkwODRGNkY1NkJDL3B6azRkSGpJcloz VjBaVlRxMHNkN3ZHcFlmOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqkT16jB1yhvuJ6br9QYp2dIlJ1JHSxxt94FQafc2kWLQpANdT2txX5jLgS5TD ewrmZHgpzHCeDkGCzSd1cBaoGZEG8obHUsnnXpaxdcFkH/lGrZoqfnoKbEpaTyK+ sv/IY72dEdI5WTxF2Ns1t2XniBkwp/Ralj0dmgRkr8n9zdjlejWSIMQbzVXsitUj li5napM8V94XIM99D/r8NKmeNhTAMoJeXVO3Xks1Q+URzd3X6/nAOwLEml4Gosa6 dcdEmtx/qr+eh3uQ0Ou26UWQL8A6SC7PYhFIThDJfN0aL/fbKifeNgwuCuNSApfS /Z47xDHiHpSRy/bv2VSSVZzk -----END CERTIFICATE-----Generated at Thu Mar 26 03:15:04 2026 by rpki-client