$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: jzZvq8ntvunqWk/K9RkNA/TKnFTgnhl6mKW/cn3eQts= Subject key identifier: 28:E1:AA:DF:22:DD:93:DC:06:6A:75:DF:B8:89:27:7B:04:4B:E2:7D Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 5D Signing time: Wed 25 Mar 2026 07:16:24 +0000 Manifest this update: Wed 25 Mar 2026 07:16:23 +0000 Manifest next update: Wed 01 Apr 2026 07:16:23 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: oyF8QJCpT0GZzTeUYPAp6Bu0pkXsSsOJpyM3qebLUT0=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: /odblAES8/7YPLaconnJ5Vgys59wwFEPqcpWiTdxc8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Mar 25 07:16:23 2026 GMT Not After : Apr 1 07:16:23 2026 GMT Subject: CN=69c38bc8-4812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:4f:1e:cc:0f:92:c3:8e:e0:75:5f:9a:1f: 9b:b3:16:72:bd:14:57:3a:4f:f5:24:eb:54:c7:ee: e0:43:f4:11:ff:0d:74:a5:a5:9f:e5:54:1f:76:0e: 29:ae:0a:b1:a6:3f:10:aa:28:bc:17:9e:b5:36:49: 79:ac:75:8d:34:0a:17:a8:60:ee:86:15:e1:99:0d: c5:76:8b:b8:ce:32:77:55:a4:9d:57:bf:b9:b6:c4: 4a:0b:c9:e3:59:dc:25:f4:ef:49:dd:2b:ba:7a:29: c1:d5:cc:a3:46:35:52:9c:a8:65:b0:57:b2:b5:3d: a6:c0:42:18:27:0e:a3:68:89:0b:c3:bd:7b:07:9a: d2:49:95:fa:86:ee:7b:0a:a1:8f:6a:fe:c1:2c:06: eb:c4:a7:3f:1f:34:69:91:78:30:c3:09:3c:7c:21: 3d:7e:11:e8:55:12:4d:ab:12:ed:53:90:23:35:a2: 74:31:ae:18:48:bb:ea:5c:73:aa:34:0a:31:4d:5b: 2a:6b:0c:e6:7d:77:65:b6:e7:e6:f5:71:91:a1:8d: e2:5f:5b:1e:28:59:db:69:44:4d:a0:7f:d5:08:b2: c5:0c:99:d4:cd:06:d8:9f:8c:1e:96:90:e0:e8:86: 71:bc:0e:1f:df:d4:ee:2b:36:9e:b0:e4:f5:95:eb: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E1:AA:DF:22:DD:93:DC:06:6A:75:DF:B8:89:27:7B:04:4B:E2:7D X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:02:f8:05:26:fb:33:35:c4:e7:f9:73:16:52:1a:3a:f1:95: a0:19:1c:f9:fb:f0:25:98:ea:34:c0:c6:d8:fb:63:8d:55:9e: 25:57:8b:dc:a6:24:3b:d8:88:1b:79:b0:a5:01:79:4c:2f:dd: 0d:db:b8:81:fe:82:35:d0:e9:b4:7f:e3:c2:6a:ff:b4:17:ca: e0:f7:6b:85:65:b3:0f:19:45:7b:34:b0:46:b5:0d:09:ce:e0: b7:b6:25:72:3c:d0:9e:74:3d:10:08:9a:78:70:e7:82:47:be: 60:4d:08:78:08:76:ed:39:a9:d2:8a:ca:16:56:81:a7:28:eb: 6c:76:27:67:8a:6b:4f:63:1b:ea:13:16:e8:62:06:14:e9:50: 92:7f:1e:0b:5f:f2:84:f4:06:05:3f:df:ed:9f:6e:5e:a7:a7: e1:00:51:62:53:d8:ea:b7:3e:78:ce:8b:bd:27:d7:a4:be:f4: e2:15:67:23:ff:56:cc:29:de:cb:b9:50:0e:77:bd:0c:d7:16: be:6d:bf:a6:57:89:13:9a:db:7d:5b:f4:77:0b:88:cd:a3:41: 2d:55:d3:54:d5:08:98:18:ed:d5:9e:c5:d9:e2:70:5f:fa:3a: 14:fb:e6:cb:5b:dd:db:46:e2:83:f7:e5:45:53:fc:e7:26:e7: dc:78:29:3d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNjAzMjUwNzE2MjNaFw0yNjA0MDEwNzE2MjNaMBgxFjAUBgNV BAMTDTY5YzM4YmM4LTQ4MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdSE8ezA+Sw47gdV+aH5uzFnK9FFc6T/Uk61TH7uBD9BH/DXSlpZ/lVB92Dimu CrGmPxCqKLwXnrU2SXmsdY00CheoYO6GFeGZDcV2i7jOMndVpJ1Xv7m2xEoLyeNZ 3CX070ndK7p6KcHVzKNGNVKcqGWwV7K1PabAQhgnDqNoiQvDvXsHmtJJlfqG7nsK oY9q/sEsBuvEpz8fNGmReDDDCTx8IT1+EehVEk2rEu1TkCM1onQxrhhIu+pcc6o0 CjFNWyprDOZ9d2W25+b1cZGhjeJfWx4oWdtpRE2gf9UIssUMmdTNBtifjB6WkODo hnG8Dh/f1O4rNp6w5PWV6wnzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKOGq3yLd k9wGanXfuIknewRL4n0wHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkAvgFJvszNcTn+XMWUho68ZWgGRz5+/AlmOo0wMbY+2ONVZ4lV4vcpiQ72Igb ebClAXlML90N27iB/oI10Om0f+PCav+0F8rg92uFZbMPGUV7NLBGtQ0JzuC3tiVy PNCedD0QCJp4cOeCR75gTQh4CHbtOanSisoWVoGnKOtsdidnimtPYxvqExboYgYU 6VCSfx4LX/KE9AYFP9/tn25ep6fhAFFiU9jqtz54zou9J9ekvvTiFWcj/1bMKd7L uVAOd70M1xa+bb+mV4kTmtt9W/R3C4jNo0EtVdNU1QiYGO3VnsXZ4nBf+joU++bL W93bRuKD9+VFU/znJufceCk9 -----END CERTIFICATE-----Generated at Thu Mar 26 23:01:52 2026 by rpki-client