$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: kgOoXG2Jh92yphZFJtavtw4StY2mwgexLkn03sV+YBs= Subject key identifier: 4A:7C:56:C2:4A:D0:88:13:7E:D0:46:40:11:2E:03:F5:8A:B7:E6:62 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0211 Signing time: Wed 25 Mar 2026 02:22:02 +0000 Manifest this update: Wed 25 Mar 2026 02:22:01 +0000 Manifest next update: Wed 01 Apr 2026 02:22:01 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: Va9YqCBLZzwe7xTrP2ujj6Q7RWN8T/YgZ0/ronMeCGQ=) 2: 13208484C09311F0A7D8232BC4F9AE02.roa (hash: zlr6UQBMUyvgAlC88jG9jHU5lVu59fheFcyUu65KIAo=) 3: 534DAC6AC0B811F099CB7061C4F9AE02.roa (hash: 9I7e8jbUM0QMEQjirieUi3zNB4x8nXGmvPV9S7Ro3FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Mar 25 02:22:01 2026 GMT Not After : Apr 1 02:22:01 2026 GMT Subject: CN=69c346ca-4033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c3:8c:7c:b0:f8:90:4c:50:82:6c:6a:87:f6: f4:67:61:e9:21:24:af:15:42:cb:d6:e8:54:5a:46: 62:05:19:66:a2:39:e5:cc:2e:94:fa:55:7b:a1:6a: cb:ec:1d:29:20:06:24:56:cd:8a:54:27:14:3b:50: 4d:0a:ff:89:37:e7:41:3a:cf:0a:02:1f:96:58:f4: a4:fa:d1:76:a8:3c:99:cb:be:97:3d:66:10:b8:7e: b8:d8:02:d3:39:4d:45:ea:d1:a7:79:45:33:03:06: 14:50:9b:ac:d2:6a:76:bd:8c:47:a3:5b:61:e9:79: 0d:ab:df:11:7e:48:a2:67:57:7c:40:25:59:9a:69: ec:b4:ac:52:72:73:3c:bd:55:be:8f:60:b0:c7:19: 05:0a:26:ff:a5:45:68:13:09:0a:bc:36:2a:ee:bd: c6:38:05:2e:64:ac:b7:70:48:b2:b9:da:77:80:34: 3a:8e:c3:02:a7:e8:71:11:06:19:26:92:0c:ec:9b: 10:c1:fb:01:07:0c:a7:af:27:3b:e5:97:f9:cc:4b: c6:19:d5:6c:fc:0e:1c:80:55:f5:76:f5:97:d6:b9: 8f:ca:2d:0e:2a:4b:3f:16:f2:49:4c:2a:ba:39:61: e1:eb:a7:1d:ef:87:9b:af:b4:bb:ac:6f:eb:2e:cf: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:56:C2:4A:D0:88:13:7E:D0:46:40:11:2E:03:F5:8A:B7:E6:62 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:82:41:bf:5a:eb:93:1c:74:9c:09:0f:2d:a8:5b:b5:83:e3: 6f:9e:62:74:10:fa:58:f5:95:17:98:2a:39:8d:44:68:a0:61: c1:8f:3e:3e:bf:2f:f7:72:b0:03:ae:e2:df:3a:cf:90:79:41: e2:5b:f4:12:78:95:e5:89:eb:b9:7f:3a:c7:2f:7a:60:c0:ba: 50:1f:71:d8:a5:c1:6a:18:37:ae:ba:4a:e7:ae:1d:61:31:07: f6:b3:a8:e1:63:43:28:f1:3d:fa:c1:c9:49:9a:eb:c3:9b:60: a7:bb:ec:e2:47:43:1b:9d:a7:34:14:d0:10:9f:84:90:8c:f9: 0f:0f:37:e8:9b:22:5e:83:66:e0:dd:2e:16:73:43:10:a1:2a: e6:fa:b6:47:40:80:7b:33:96:ae:58:b4:28:53:38:ae:73:a9: ff:50:89:07:87:de:61:07:f3:f0:36:9c:35:94:fc:21:2f:fc: b0:ed:80:cf:00:d5:6d:b1:dd:e0:75:d0:94:7e:af:6b:eb:45: c8:a9:5f:d4:2e:c4:f5:0e:f0:65:47:4f:e9:92:f4:66:5f:a5: 31:8b:cc:ce:6f:44:f0:56:2a:67:74:d7:06:0f:42:d4:ee:7e: 7f:80:55:69:9c:3d:7d:71:14:da:5c:79:d1:6a:b8:e0:c0:8b: 65:53:db:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjYwMzI1MDIyMjAxWhcNMjYwNDAxMDIyMjAxWjAYMRYwFAYD VQQDEw02OWMzNDZjYS00MDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sOMfLD4kExQgmxqh/b0Z2HpISSvFULL1uhUWkZiBRlmojnlzC6U+lV7oWrL 7B0pIAYkVs2KVCcUO1BNCv+JN+dBOs8KAh+WWPSk+tF2qDyZy76XPWYQuH642ALT OU1F6tGneUUzAwYUUJus0mp2vYxHo1th6XkNq98RfkiiZ1d8QCVZmmnstKxScnM8 vVW+j2CwxxkFCib/pUVoEwkKvDYq7r3GOAUuZKy3cEiyudp3gDQ6jsMCp+hxEQYZ JpIM7JsQwfsBBwynryc75Zf5zEvGGdVs/A4cgFX1dvWX1rmPyi0OKks/FvJJTCq6 OWHh66cd74ebr7S7rG/rLs8ioQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEp8VsJK 0IgTftBGQBEuA/WKt+ZiMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiIJBv1rrkxx0nAkPLahbtYPjb55idBD6WPWVF5gqOY1EaKBhwY8+Pr8v93Kw A67i3zrPkHlB4lv0EniV5YnruX86xy96YMC6UB9x2KXBahg3rrpK564dYTEH9rOo 4WNDKPE9+sHJSZrrw5tgp7vs4kdDG52nNBTQEJ+EkIz5Dw836JsiXoNm4N0uFnND EKEq5vq2R0CAezOWrli0KFM4rnOp/1CJB4feYQfz8DacNZT8IS/8sO2AzwDVbbHd 4HXQlH6va+tFyKlf1C7E9Q7wZUdP6ZL0Zl+lMYvMzm9E8FYqZ3TXBg9C1O5+f4BV aZw9fXEU2lx50Wq44MCLZVPbOg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:41:46 2026 by rpki-client