$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: UeY068lGPjFS7M8wOoQ9KXrNXSm8Ekrc/63SS+ZQGbM= Subject key identifier: 6D:22:C8:53:E7:3B:C0:BB:3F:C1:30:E6:5B:0F:E3:B0:36:A0:61:3E Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0CDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0CCF Signing time: Tue 24 Mar 2026 18:12:02 +0000 Manifest this update: Tue 24 Mar 2026 18:12:01 +0000 Manifest next update: Tue 31 Mar 2026 18:12:01 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: Hk/ryE1FHxV9Ei0kAIaIQ3XHpFwGns5twkH6O/vTEsc=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: AajdPkJ4rEa4vqdqvJqj9eo6LBkmjEKm6+u/Jv10pOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3291 (0xcdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Mar 24 18:12:01 2026 GMT Not After : Mar 31 18:12:01 2026 GMT Subject: CN=69c2d3f2-1c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0d:6b:88:9b:03:92:96:cb:31:25:9e:e6:f6: b1:d0:16:59:cf:b3:d8:87:e1:d2:44:e7:e6:e4:90: 69:2d:a9:38:96:3e:9d:d1:b6:26:ab:7b:4c:a0:01: 17:cd:0e:3e:d6:ec:84:8d:24:ac:08:76:50:b4:cd: 5d:e4:d8:1e:fa:5d:01:1c:af:ea:df:8b:60:17:33: 79:26:0e:4b:93:4e:ba:84:20:f4:68:be:dd:53:4c: 2f:5f:3d:f0:f3:95:30:a9:6f:1d:ed:e2:f7:86:57: 60:52:88:1d:9e:60:42:8d:30:b0:79:c4:ed:0d:83: 19:f6:7a:f8:cd:16:da:62:2d:de:73:d6:f1:ca:b9: 17:91:c7:f9:5d:cf:ac:d0:ed:dc:4d:30:52:c1:e7: 34:b5:32:dc:6e:64:24:8e:8b:45:2c:90:c4:80:b8: 50:38:cc:4e:12:1e:9d:0e:84:d5:f1:a7:f0:ea:96: ba:b0:96:73:c8:99:27:bb:83:ab:96:60:5f:40:8c: 90:cd:13:33:68:de:19:92:55:1a:ee:10:05:e2:de: 18:9a:fb:5f:f5:60:7c:39:f2:96:ff:85:70:6a:4e: 70:d3:1e:7b:47:04:af:a5:94:fd:09:7d:69:a9:09: a6:e1:11:6b:56:50:c5:15:b5:1a:bd:9b:c4:30:2a: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:22:C8:53:E7:3B:C0:BB:3F:C1:30:E6:5B:0F:E3:B0:36:A0:61:3E X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:22:93:77:e0:22:ba:fa:4d:ad:cd:06:c5:fc:db:51:e4:3e: 14:41:92:62:ee:9e:ff:cd:fa:25:ac:f9:dc:35:31:43:fa:24: b7:e9:d8:5b:43:6a:5b:20:37:cd:59:84:9f:0c:c0:d2:8f:34: 35:7c:ca:7f:eb:eb:b4:c7:08:ba:40:6c:d3:80:dd:82:dc:c5: 94:e3:51:f5:f1:99:41:f8:07:71:de:7d:e6:52:a4:7f:61:f1: 5d:42:ab:b8:46:32:32:c6:6e:35:18:db:88:be:02:ad:36:53: 97:72:18:cb:62:af:b7:e6:f8:ee:01:73:2e:2a:f7:a5:24:55: b0:fb:4e:87:f0:0c:61:39:b9:e2:24:1f:f1:c5:ad:43:b5:44: 2b:71:a5:1b:d1:f4:d4:a0:db:30:4e:a0:2b:96:d4:ac:6f:f5: 9a:d6:82:b2:cc:d4:5a:c7:cf:22:1a:70:ed:dd:55:93:3f:e9: 22:ed:c7:2a:7d:4b:82:b4:f4:a6:41:ec:41:08:6c:e0:f9:d6: 3a:11:79:a6:36:8f:24:77:00:31:e1:e7:7a:e8:9d:d5:a5:db: b7:be:62:5e:d9:19:4d:e5:f4:09:00:8b:b6:87:a0:45:d7:58: f9:2e:25:0a:3b:59:68:02:03:6d:8f:68:0e:74:d8:2c:b9:64: 4f:7d:e4:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjYwMzI0MTgxMjAxWhcNMjYwMzMxMTgxMjAxWjAYMRYwFAYD VQQDEw02OWMyZDNmMi0xYzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5g1riJsDkpbLMSWe5vax0BZZz7PYh+HSROfm5JBpLak4lj6d0bYmq3tMoAEX zQ4+1uyEjSSsCHZQtM1d5Nge+l0BHK/q34tgFzN5Jg5Lk066hCD0aL7dU0wvXz3w 85UwqW8d7eL3hldgUogdnmBCjTCwecTtDYMZ9nr4zRbaYi3ec9bxyrkXkcf5Xc+s 0O3cTTBSwec0tTLcbmQkjotFLJDEgLhQOMxOEh6dDoTV8afw6pa6sJZzyJknu4Or lmBfQIyQzRMzaN4ZklUa7hAF4t4Ymvtf9WB8OfKW/4Vwak5w0x57RwSvpZT9CX1p qQmm4RFrVlDFFbUavZvEMCqhJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0iyFPn O8C7P8Ew5lsP47A2oGE+MB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArSKTd+AiuvpNrc0GxfzbUeQ+FEGSYu6e/836Jaz53DUxQ/okt+nYW0NqWyA3 zVmEnwzA0o80NXzKf+vrtMcIukBs04DdgtzFlONR9fGZQfgHcd595lKkf2HxXUKr uEYyMsZuNRjbiL4CrTZTl3IYy2Kvt+b47gFzLir3pSRVsPtOh/AMYTm54iQf8cWt Q7VEK3GlG9H01KDbME6gK5bUrG/1mtaCsszUWsfPIhpw7d1Vkz/pIu3HKn1LgrT0 pkHsQQhs4PnWOhF5pjaPJHcAMeHneuid1aXbt75iXtkZTeX0CQCLtoegRddY+S4l CjtZaAIDbY9oDnTYLLlkT33k3A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:15 2026 by rpki-client