$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: lsgeDVMq9ZMcqs2iD1EP/vufRGP2PNBIBMRheAJ+YGQ= Subject key identifier: 30:95:B5:2A:28:05:F6:38:A6:D0:BC:4F:8B:85:9F:ED:22:D8:75:62 Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1ED9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1EA5 Signing time: Tue 24 Mar 2026 15:58:42 +0000 Manifest this update: Tue 24 Mar 2026 15:58:41 +0000 Manifest next update: Tue 31 Mar 2026 15:58:41 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: SI7nKn9VcqeejDdn8YfMyBL7+hnRup3Iob5fa9NCmg8=) 2: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: TptByVGgUQdWR0MavGH9OYmCsbH/nXydqU06KChwsXI=) 3: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: fuTljzKvBea7sJt2VNckungbhAnkDIYji3I6D462WJ8=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: MORsfRo625k6Z6J+RgEowsAvarYUIEu/pPax0H0xX08=) 5: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: ZF+S9Eq6dimNzHWGXtdSSL8R6tb42i721A8ipARJHDg=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: SP9KLqagmi8apHAQ/A1PSM4jrXC2JUZTS6enHcX0VwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7897 (0x1ed9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Mar 24 15:58:41 2026 GMT Not After : Mar 31 15:58:41 2026 GMT Subject: CN=69c2b4b1-6614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:01:62:89:31:0c:5c:46:14:27:12:f3:5e: a6:04:e5:85:ad:18:87:b6:7b:10:bf:2c:c5:7f:0c: 04:f8:d7:33:8b:b8:43:6f:bb:85:c2:02:20:44:7c: d6:75:a7:63:e6:ac:5d:e1:16:b3:6d:ee:1c:98:12: 35:47:6f:1b:43:15:16:58:62:1b:c6:ab:c0:ac:9e: 2e:0a:e7:20:0e:da:44:fe:1a:e8:b6:a6:27:fa:fb: df:c0:fc:50:2a:5f:c7:7e:72:9d:08:a4:31:d9:f0: aa:f2:55:ca:4e:e5:ab:fb:eb:60:90:e6:b1:f3:97: 6a:67:67:2e:62:ed:f2:7c:70:bf:c1:dc:a9:4e:d7: d8:e3:ad:9a:d3:1d:7e:5a:45:b4:c3:fa:4d:44:7a: 8d:a0:a5:4a:31:7f:90:8e:ae:8b:54:87:b1:94:62: 8e:cb:07:c0:ee:7e:be:4e:4e:96:fc:4f:77:4f:14: c5:35:c9:30:9e:ba:47:1c:18:72:d9:51:3e:c5:a6: bc:35:3c:09:07:e0:0d:83:32:74:d2:bd:fb:2b:8f: 24:fe:be:71:cf:d9:75:66:8f:11:a6:82:f8:33:77: d6:5e:9a:5b:36:62:00:4c:eb:33:fd:d5:ce:f4:fe: be:90:13:08:fe:50:60:bc:f1:4f:0b:4a:e4:98:b2: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:95:B5:2A:28:05:F6:38:A6:D0:BC:4F:8B:85:9F:ED:22:D8:75:62 X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:98:b8:43:6c:1d:9d:52:5b:6c:37:c6:2e:50:de:79:cf: 70:cc:c4:4b:60:b4:d9:2e:05:42:77:e5:b4:e8:2a:61:d9:a5: ec:0a:97:6d:6a:e4:fb:05:7b:c0:87:fb:78:51:c5:b5:92:a1: ed:1b:e2:c8:54:09:8e:26:13:01:f7:f9:3c:80:57:89:1d:ec: 38:ed:5c:e1:8b:98:a8:1a:de:2a:52:b1:77:65:c0:b4:6c:46: 48:fa:56:a7:89:98:85:8d:7a:53:ae:0e:06:d6:56:26:8c:6d: 9d:83:e4:a3:3a:03:e2:1c:d5:a9:26:64:c1:0e:cf:8f:81:00: 85:bd:a9:a2:9b:dd:e3:0c:82:d8:df:3c:db:f9:e7:21:97:d6: 5b:d8:c0:37:27:35:4a:0f:3d:98:40:e8:7b:d9:48:50:d1:b5: 28:d5:01:9c:ac:a6:b9:62:96:48:c0:7e:54:b2:7d:be:b5:8e: d8:f5:e5:2c:c8:67:36:65:c6:36:c9:be:29:ca:68:1c:2e:cf: f4:cd:9d:8c:e3:5b:26:f2:33:16:31:ca:a8:3d:78:93:02:8a: bc:e5:47:ec:77:2d:a3:b7:fb:26:ef:8d:69:98:f1:1f:44:05: 0c:85:22:35:d9:00:97:2c:ce:d7:88:d0:c9:02:47:3c:05:8c: 6a:34:f3:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjYwMzI0MTU1ODQxWhcNMjYwMzMxMTU1ODQxWjAYMRYwFAYD VQQDEw02OWMyYjRiMS02NjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJUBYokxDFxGFCcS816mBOWFrRiHtnsQvyzFfwwE+Nczi7hDb7uFwgIgRHzW dadj5qxd4Razbe4cmBI1R28bQxUWWGIbxqvArJ4uCucgDtpE/hrotqYn+vvfwPxQ Kl/HfnKdCKQx2fCq8lXKTuWr++tgkOax85dqZ2cuYu3yfHC/wdypTtfY462a0x1+ WkW0w/pNRHqNoKVKMX+Qjq6LVIexlGKOywfA7n6+Tk6W/E93TxTFNckwnrpHHBhy 2VE+xaa8NTwJB+ANgzJ00r37K48k/r5xz9l1Zo8RpoL4M3fWXppbNmIATOsz/dXO 9P6+kBMI/lBgvPFPC0rkmLJKlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCVtSoo BfY4ptC8T4uFn+0i2HViMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaCuYuENsHZ1SW2w3xi5Q3nnPcMzES2C02S4FQnfltOgqYdml7AqXbWrk+wV7 wIf7eFHFtZKh7RviyFQJjiYTAff5PIBXiR3sOO1c4YuYqBreKlKxd2XAtGxGSPpW p4mYhY16U64OBtZWJoxtnYPkozoD4hzVqSZkwQ7Pj4EAhb2popvd4wyC2N882/nn IZfWW9jANyc1Sg89mEDoe9lIUNG1KNUBnKymuWKWSMB+VLJ9vrWO2PXlLMhnNmXG Nsm+KcpoHC7P9M2djONbJvIzFjHKqD14kwKKvOVH7Hcto7f7Ju+NaZjxH0QFDIUi NdkAlyzO14jQyQJHPAWMajTzRw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:39:38 2026 by rpki-client