$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: 5sb1Bw6/gIkpFfjx/Ph7jBKU3teZVJmHLZ+z3bswRY0= Subject key identifier: 4E:D4:34:2B:00:83:D7:21:DF:58:2E:8F:B6:A0:08:3C:A5:07:1A:DC Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02BD Signing time: Wed 25 Mar 2026 01:11:58 +0000 Manifest this update: Wed 25 Mar 2026 01:11:58 +0000 Manifest next update: Wed 01 Apr 2026 01:11:58 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: nRGNqae5no3J/wdKWGFO8RgGJMiPvuCa4+fGh04ntuQ=) 2: D21111C2190011F187AE9EA5203D8C67.roa (hash: uasely3IYLJpFPZrjUlU1e7imRXTWBwwzQQrrOVlt1g=) 3: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: V4gg7pcr7YrjK7rWsqsxjaWk9ENGsoYC1+z624FXyYk=) 4: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 3wJUwv1JOANB7KtEkQSECl632Z0R2h+/KA/vlRDClPg=) 5: F84FF96A493911ED805EB686C4F9AE02.roa (hash: VB4shFZW5YO/9CNmWmiUMkFcJba9e5If6VsVJJNONi0=) 6: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 4YK/YXNaP55xzsT3tIBQWLpaJchht9fsYf/coW+ZF9I=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: GhAg2nH8ZdD5s08pjhFRrWKGBU7cJZ4LEj2dY9ehh+U=) 8: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: E2zSUWy4cWvpgz8q4AaLfJBcy0d+iSwSELQj17OFM9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Mar 25 01:11:58 2026 GMT Not After : Apr 1 01:11:58 2026 GMT Subject: CN=69c3365e-aa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:b0:f5:fe:03:85:d9:3a:69:01:97:28:3e: 27:1b:5e:d6:5a:e6:23:8f:aa:95:01:4d:66:24:12: 8e:a2:ff:64:f9:bb:7b:50:36:ee:31:06:3b:f9:59: ff:1c:aa:71:fe:f3:32:a2:b3:90:a6:6d:9d:60:cd: b2:43:30:c7:49:a9:6f:5d:d2:69:a9:0c:53:8a:0b: 36:b7:ed:42:21:c9:4f:be:ba:6c:ba:c4:65:f4:8b: 10:f6:65:b6:ad:aa:45:c2:f7:b5:03:9b:2e:c8:4a: 94:9d:4f:f9:50:b9:f4:30:8f:3e:8d:19:6a:63:71: 82:bc:8f:3c:ba:56:f0:bc:9a:1c:4f:11:e1:f5:10: a1:27:f9:b2:16:12:b0:cd:26:29:1d:77:aa:00:4c: b4:7e:f8:f0:46:74:75:d5:f3:1e:44:5d:96:07:d9: 9e:7f:ec:d2:f3:19:8b:1f:18:86:2d:68:ca:e3:5e: 37:86:df:0d:03:7d:9c:5e:a3:ed:50:26:ab:90:1f: 37:ba:ad:c7:8d:f1:0c:27:61:c5:23:c2:1e:15:1f: 45:c3:27:8d:42:5e:79:7c:25:d5:b3:b8:f7:0e:18: c3:1b:1b:d2:d5:7d:7c:44:44:2b:b7:07:49:4a:48: dc:0f:ba:f0:63:11:6e:fc:26:c9:99:24:42:5a:dd: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D4:34:2B:00:83:D7:21:DF:58:2E:8F:B6:A0:08:3C:A5:07:1A:DC X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:bb:df:16:ef:f8:e3:1d:c1:5f:0b:0a:58:e3:da:95:3b:dd: 74:dd:4e:54:80:09:ae:cb:b7:02:2a:18:cd:81:6a:ac:04:cb: 30:36:b1:2b:a0:83:31:a6:f8:46:da:9c:4c:1a:4a:c4:2e:6a: f5:9c:6f:9d:a1:0d:72:2a:00:95:c5:45:94:4d:26:f8:c2:7a: 77:d4:74:30:10:b9:47:44:af:81:4b:62:42:7c:d3:0c:ec:4d: d1:3f:4e:a3:e6:ea:3b:f6:48:8d:4f:89:4c:3d:cb:d0:be:97: 7c:6e:a1:0c:49:cf:1b:55:81:61:3b:19:c5:24:f6:d3:27:b3: 86:64:f0:07:d7:49:f8:dd:af:14:31:f8:23:db:da:1a:f1:93: 8b:b3:da:b2:9f:72:93:2b:08:07:2c:9c:9a:f9:9d:d0:37:7d: c5:82:8d:52:a2:71:59:33:0f:77:c8:70:20:9a:93:ff:7b:29: 79:c6:f6:bd:ef:16:7d:dd:5c:48:29:ab:33:88:59:6d:a4:1c: 73:b9:3e:9d:6a:2e:37:e4:01:61:8d:3c:2c:d2:85:50:c4:86: 6d:00:9a:70:7e:4c:1d:a8:e4:c6:6f:9c:90:f4:c8:f4:8e:61: 8c:20:04:68:8b:89:3c:f3:b5:85:35:af:e0:24:7b:50:cd:db: 55:37:75:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwMzI1MDExMTU4WhcNMjYwNDAxMDExMTU4WjAYMRYwFAYD VQQDEw02OWMzMzY1ZS1hYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZSw9f4Dhdk6aQGXKD4nG17WWuYjj6qVAU1mJBKOov9k+bt7UDbuMQY7+Vn/ HKpx/vMyorOQpm2dYM2yQzDHSalvXdJpqQxTigs2t+1CIclPvrpsusRl9IsQ9mW2 rapFwve1A5suyEqUnU/5ULn0MI8+jRlqY3GCvI88ulbwvJocTxHh9RChJ/myFhKw zSYpHXeqAEy0fvjwRnR11fMeRF2WB9mef+zS8xmLHxiGLWjK4143ht8NA32cXqPt UCarkB83uq3HjfEMJ2HFI8IeFR9FwyeNQl55fCXVs7j3DhjDGxvS1X18REQrtwdJ SkjcD7rwYxFu/CbJmSRCWt2G6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7UNCsA g9ch31guj7agCDylBxrcMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVLvfFu/44x3BXwsKWOPalTvddN1OVIAJrsu3AioYzYFqrATLMDaxK6CDMab4 RtqcTBpKxC5q9ZxvnaENcioAlcVFlE0m+MJ6d9R0MBC5R0SvgUtiQnzTDOxN0T9O o+bqO/ZIjU+JTD3L0L6XfG6hDEnPG1WBYTsZxST20yezhmTwB9dJ+N2vFDH4I9va GvGTi7Pasp9ykysIByycmvmd0Dd9xYKNUqJxWTMPd8hwIJqT/3specb2ve8Wfd1c SCmrM4hZbaQcc7k+nWouN+QBYY08LNKFUMSGbQCacH5MHajkxm+ckPTI9I5hjCAE aIuJPPO1hTWv4CR7UM3bVTd1jA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:13 2026 by rpki-client