$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft File: Z187oflqnh7CsBN2YsdU2x0eAHM.mft (raw, json) Hash identifier: 0fy3qpkKzjGYrN+cqiAOclN0ILVMSXktWh94qug1jxA= Subject key identifier: C0:72:CA:6C:C1:F6:F8:6A:15:C5:C4:61:49:08:7E:B9:FF:91:9C:F2 Authority key identifier: 67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 Certificate issuer: /CN=A91A4517/serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Certificate serial: 29B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft Manifest number: 298F Signing time: Tue 24 Mar 2026 15:32:14 +0000 Manifest this update: Tue 24 Mar 2026 15:32:13 +0000 Manifest next update: Tue 31 Mar 2026 15:32:13 +0000 Files and hashes: 1: Z187oflqnh7CsBN2YsdU2x0eAHM.crl (hash: 3WXpVA8rD2P2//UQuM1AJaQpOGKH0P1XqX3nlx5qpRA=) 2: 58292E96774111F0A079543BC4F9AE02.roa (hash: P3bTncrBFtGdAwQb7tAPqCqSxWsCZcWixC2KVwmQSd8=) 3: F4246CDA561811E98A165872C4F9AE02.roa (hash: TyPrJA81J72DgxXKRay/Nk8ROYHj+G2p/whskRMJwDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10674 (0x29b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4517, serialNumber=675F3BA1F96A9E1EC2B0137662C754DB1D1E0073 Validity Not Before: Mar 24 15:32:13 2026 GMT Not After : Mar 31 15:32:13 2026 GMT Subject: CN=69c2ae7d-4981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:51:26:60:e5:94:f1:71:0f:f8:ac:4e:93: 3a:8a:2e:a0:6b:a2:8c:49:fa:d5:8a:3d:3c:5c:66: e8:a5:62:2a:06:da:c5:28:05:d8:49:30:8f:af:7e: 23:51:a6:a5:30:9f:9e:be:b9:32:47:4c:31:74:b1: 4b:4d:8c:dc:f2:96:a7:fc:1e:6b:be:e2:c0:06:52: 37:78:13:4c:e9:44:df:3d:4e:88:2b:62:10:73:4a: 85:5c:bd:0e:35:4d:53:c6:6d:e7:bd:b5:19:bc:13: 42:28:aa:01:db:ca:be:ec:2a:09:50:69:8d:d0:41: b0:56:e3:39:d3:ab:94:fc:c3:c5:74:d1:19:00:c3: 58:9e:69:ac:00:4b:7f:47:b0:05:2a:5f:b4:2c:8e: 52:49:c1:f0:8d:ac:a5:84:f0:0c:35:da:4c:05:46: 28:86:ff:14:9b:a8:f7:72:5a:82:ff:e4:a5:11:da: 53:e1:f2:24:af:87:08:61:54:6b:1e:3b:f9:9a:ad: ca:8e:a2:65:fe:ac:2c:6b:55:f8:d6:88:ca:06:0e: f2:8b:99:db:2a:e3:cc:57:2c:65:ae:ff:d3:82:66: 41:a1:50:63:7e:ac:02:e0:d8:58:e4:af:0a:67:ec: a4:30:23:54:8d:05:1b:78:59:ee:58:77:34:b6:d0: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:72:CA:6C:C1:F6:F8:6A:15:C5:C4:61:49:08:7E:B9:FF:91:9C:F2 X509v3 Authority Key Identifier: keyid:67:5F:3B:A1:F9:6A:9E:1E:C2:B0:13:76:62:C7:54:DB:1D:1E:00:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z187oflqnh7CsBN2YsdU2x0eAHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4517/406F904C6AE611E491914687C4F9AE02/Z187oflqnh7CsBN2YsdU2x0eAHM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b7:78:9a:1f:a6:f8:23:d5:54:c8:3f:46:3e:14:6f:b5:17: c1:a2:cb:d6:fa:dc:9d:b1:33:03:e6:85:ac:7c:5b:33:bd:05: 11:8a:8b:0a:0c:18:bd:f8:bb:a9:46:7a:81:0e:bd:51:ca:1e: 51:6f:74:b8:9e:18:2f:90:71:a2:3e:dd:91:42:2f:34:0e:84: ae:af:dd:ff:54:62:cc:4a:f1:64:53:79:e4:92:00:31:c3:24: b1:6b:03:6d:39:98:d3:17:2e:ac:09:77:8e:90:c1:46:b5:53: d0:89:dc:88:99:bd:08:2d:3b:d4:7c:f9:d4:7c:2b:80:55:28: ec:83:7d:ae:bc:a4:5c:d5:c2:b2:5f:3c:3a:80:ea:bf:8b:d8: 62:fc:5d:5f:35:d1:9e:e6:a3:33:a3:45:9f:66:3f:af:65:31: 9d:db:dd:fd:ab:f3:87:7a:1c:ea:04:56:28:86:2a:db:e9:1c: ee:65:71:b0:19:15:cf:16:04:b8:9c:55:28:b9:fe:42:13:c8: 9f:e8:07:1a:16:70:94:54:15:07:3e:78:75:75:79:c8:22:aa: 2d:dc:78:e1:24:9c:4c:19:5d:6b:8d:6a:78:d5:7a:5e:67:a1: bd:3b:98:85:35:55:8a:59:52:d0:b1:38:b3:e6:4a:14:b7:14: e4:f7:f4:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1MTcxMTAvBgNVBAUTKDY3NUYzQkExRjk2QTlFMUVDMkIwMTM3NjYyQzc1NERC MUQxRTAwNzMwHhcNMjYwMzI0MTUzMjEzWhcNMjYwMzMxMTUzMjEzWjAYMRYwFAYD VQQDEw02OWMyYWU3ZC00OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApklRJmDllPFxD/isTpM6ii6ga6KMSfrVij08XGbopWIqBtrFKAXYSTCPr34j UaalMJ+evrkyR0wxdLFLTYzc8pan/B5rvuLABlI3eBNM6UTfPU6IK2IQc0qFXL0O NU1Txm3nvbUZvBNCKKoB28q+7CoJUGmN0EGwVuM506uU/MPFdNEZAMNYnmmsAEt/ R7AFKl+0LI5SScHwjaylhPAMNdpMBUYohv8Um6j3clqC/+SlEdpT4fIkr4cIYVRr Hjv5mq3KjqJl/qwsa1X41ojKBg7yi5nbKuPMVyxlrv/TgmZBoVBjfqwC4NhY5K8K Z+ykMCNUjQUbeFnuWHc0ttDIywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMByymzB 9vhqFcXEYUkIfrn/kZzyMB8GA1UdIwQYMBaAFGdfO6H5ap4ewrATdmLHVNsdHgBz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDUxNy80MDZGOTA0QzZB RTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5oN0NzQk4yWXNkVTJ4MGVB SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxODdvZmxxbmg3Q3NCTjJZc2RVMngwZUFITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDUxNy80MDZGOTA0QzZBRTYxMUU0OTE5MTQ2ODdDNEY5QUUwMi9aMTg3b2ZscW5o N0NzQk4yWXNkVTJ4MGVBSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgrd4mh+m+CPVVMg/Rj4Ub7UXwaLL1vrcnbEzA+aFrHxbM70FEYqLCgwYvfi7 qUZ6gQ69UcoeUW90uJ4YL5Bxoj7dkUIvNA6Erq/d/1RizErxZFN55JIAMcMksWsD bTmY0xcurAl3jpDBRrVT0InciJm9CC071Hz51HwrgFUo7IN9rrykXNXCsl88OoDq v4vYYvxdXzXRnuajM6NFn2Y/r2Uxndvd/avzh3oc6gRWKIYq2+kc7mVxsBkVzxYE uJxVKLn+QhPIn+gHGhZwlFQVBz54dXV5yCKqLdx44SScTBlda41qeNV6XmehvTuY hTVVillS0LE4s+ZKFLcU5Pf0fQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:10 2026 by rpki-client