$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: YNQXQJs9lEcW3peKrUKb7QmvVUvkdgM8GEKect3sE1g= Subject key identifier: 41:57:17:19:02:E2:29:0E:41:2D:C8:62:40:E8:F7:A2:B2:AE:C6:1C Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: 01A7 Signing time: Wed 25 Mar 2026 03:32:31 +0000 Manifest this update: Wed 25 Mar 2026 03:32:31 +0000 Manifest next update: Wed 01 Apr 2026 03:32:31 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: U4CbVr/z51JuwfeeB0Yem+ObAz1xbMXryao9Ap48kbQ=) 2: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: MiKf/hrtY4nGNwWt8u8etuZ0Gw3xF9JGpGA4BCKSaOs=) 3: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oegRAcugKLatUbTXSLvKEbrye0Tdi4sy7aoKF/I5tTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Mar 25 03:32:31 2026 GMT Not After : Apr 1 03:32:31 2026 GMT Subject: CN=69c3574f-60d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:de:35:e2:db:39:a6:3b:e0:ba:f4:49:29: 4f:cd:96:9c:4c:df:43:95:df:73:18:65:8f:75:d5: 14:ab:3f:6f:eb:aa:82:b4:34:c1:e6:19:63:e3:b2: ff:86:c2:e8:a1:46:91:82:c9:a8:53:22:e8:f8:c6: 6f:17:c7:e3:77:cc:bf:76:a2:49:94:c3:ca:9d:80: f5:03:bb:fc:d7:bc:fc:76:6d:ac:5a:3c:b2:ce:89: 69:0b:2a:fa:ab:71:17:bb:ad:7e:93:5e:cd:49:ec: 32:82:7d:a8:30:14:c7:e4:41:0c:92:4c:f5:53:3b: 12:f6:80:ec:dd:85:b7:4c:5b:f7:17:d4:e5:b3:aa: 18:17:ff:35:9b:98:35:09:51:a8:d9:20:99:87:26: c6:52:46:8a:6c:15:38:54:b5:02:dc:e3:13:ee:8d: 91:e7:95:aa:ec:34:66:48:c1:64:29:d5:dd:5b:02: b4:65:98:07:e8:e2:65:e7:be:88:50:dc:39:5c:e4: 52:0f:38:e8:a8:30:6e:9d:28:30:59:b1:06:32:a2: 58:da:5d:39:98:73:ab:0b:e7:ae:1c:9d:cd:b1:50: 4e:f6:e0:e7:8e:c1:36:58:43:56:e0:78:83:7c:60: 87:aa:f2:53:04:c6:86:a7:77:e6:71:9c:32:94:88: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:17:19:02:E2:29:0E:41:2D:C8:62:40:E8:F7:A2:B2:AE:C6:1C X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:54:1c:79:13:8e:c1:49:07:7a:5e:00:d7:f2:8f:94:2c:fa: 0b:d4:18:8b:47:80:fe:aa:85:a1:ed:28:b2:fc:f8:ac:b5:05: 32:a5:e5:00:bb:5c:c3:f5:4d:e9:6b:eb:ed:f1:21:b8:f0:c1: 75:c4:51:8a:77:0b:96:fa:ac:af:d6:14:00:15:f3:f8:78:bd: 3a:c6:5d:7a:21:22:d6:0c:86:f7:7a:e4:b8:f1:ed:48:f0:8f: d7:a2:35:5a:2f:21:af:e5:47:a7:93:80:6a:b9:23:49:e6:2b: f7:b1:3d:98:0f:56:7f:04:df:28:16:8b:4a:ec:cd:5a:19:f9: d9:33:7c:1f:bc:f3:5d:f0:6d:c7:8d:34:7a:b9:4a:bb:00:9b: d3:29:df:73:94:1c:1e:4e:b7:b4:70:da:f4:39:dc:16:bc:60: cb:b1:23:05:64:0f:cf:f4:03:32:d1:79:bf:e3:2d:01:46:3c: 0e:22:5f:57:d5:70:2a:d9:ba:64:2c:c8:96:81:83:d4:03:6a: a1:68:94:7b:f3:db:73:db:c7:12:28:1f:be:7b:d5:ac:4e:2a: d3:98:c1:0d:8b:24:e8:96:cb:b4:cb:0a:0b:94:37:70:ac:a3: 79:05:4c:8c:b2:8a:8a:f3:00:cc:fd:a6:6b:d6:da:16:49:3e: 6a:32:d2:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjYwMzI1MDMzMjMxWhcNMjYwNDAxMDMzMjMxWjAYMRYwFAYD VQQDEw02OWMzNTc0Zi02MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqzeNeLbOaY74Lr0SSlPzZacTN9Dld9zGGWPddUUqz9v66qCtDTB5hlj47L/ hsLooUaRgsmoUyLo+MZvF8fjd8y/dqJJlMPKnYD1A7v817z8dm2sWjyyzolpCyr6 q3EXu61+k17NSewygn2oMBTH5EEMkkz1UzsS9oDs3YW3TFv3F9Tls6oYF/81m5g1 CVGo2SCZhybGUkaKbBU4VLUC3OMT7o2R55Wq7DRmSMFkKdXdWwK0ZZgH6OJl576I UNw5XORSDzjoqDBunSgwWbEGMqJY2l05mHOrC+euHJ3NsVBO9uDnjsE2WENW4HiD fGCHqvJTBMaGp3fmcZwylIg3RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFXFxkC 4ikOQS3IYkDo96KyrsYcMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXFQceROOwUkHel4A1/KPlCz6C9QYi0eA/qqFoe0osvz4rLUFMqXlALtcw/VN 6Wvr7fEhuPDBdcRRincLlvqsr9YUABXz+Hi9OsZdeiEi1gyG93rkuPHtSPCP16I1 Wi8hr+VHp5OAarkjSeYr97E9mA9WfwTfKBaLSuzNWhn52TN8H7zzXfBtx400erlK uwCb0ynfc5QcHk63tHDa9DncFrxgy7EjBWQPz/QDMtF5v+MtAUY8DiJfV9VwKtm6 ZCzIloGD1ANqoWiUe/Pbc9vHEigfvnvVrE4q05jBDYsk6JbLtMsKC5Q3cKyjeQVM jLKKivMAzP2ma9baFkk+ajLS2g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:37 2026 by rpki-client