$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: lq8YGxLqYBpxYeE3YLuMGlnVaJVezH91mC7hjchHZBA= Subject key identifier: A4:7B:E8:6C:1A:A4:E0:E5:19:92:3B:5B:AC:0F:28:E2:C2:48:AA:30 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 0137 Signing time: Wed 25 Mar 2026 04:39:55 +0000 Manifest this update: Wed 25 Mar 2026 04:39:55 +0000 Manifest next update: Wed 01 Apr 2026 04:39:55 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: Pi/J+rCiEjAJxN3HZk1VUoj36M588k6GnzIHyxk4ve0=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: rQPLuDedWDyQSG967e0npTQmvnHAr1Plxeiiz+JB7Bc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Mar 25 04:39:55 2026 GMT Not After : Apr 1 04:39:55 2026 GMT Subject: CN=69c3671b-2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d4:cf:2e:8f:a4:e1:ee:f2:3b:cf:5d:3a:aa: fa:07:b6:e8:e9:18:ba:aa:61:fe:7b:10:ac:aa:d7: 3a:1d:57:f9:fd:97:fc:25:e6:09:21:d7:f9:66:41: 75:a3:ec:2f:e9:03:45:0e:14:99:5b:bb:c2:6a:46: cb:71:5c:2e:4d:eb:f1:e2:06:ca:eb:85:69:2d:10: 00:d3:1a:c3:26:c9:51:5f:62:33:62:f5:1e:2d:4a: 30:bf:e3:86:ba:c6:d4:42:31:ae:58:3a:64:ff:93: 1e:6d:e7:0d:6e:4b:16:1b:ee:5c:70:85:6d:16:cd: 2e:ae:46:b3:0f:91:f5:f1:ac:c5:61:c4:26:2e:74: 5f:c2:03:69:48:a2:bc:27:f7:74:43:79:87:6c:77: 10:11:bb:8f:7f:bb:05:56:4b:41:64:8a:96:44:49: ef:e7:e6:79:1e:63:22:1c:af:09:af:18:82:98:76: 48:b9:81:73:75:61:f4:7b:03:00:28:98:6d:48:c0: 00:07:1f:86:b0:98:24:62:85:af:4d:80:54:96:18: c7:32:4c:1d:f9:c2:07:27:f8:fa:63:0d:a5:f8:da: c4:db:f1:29:e2:c0:1b:e6:23:33:36:d7:f1:bf:3a: e3:1c:4c:33:05:da:2a:a3:25:11:14:e8:4d:54:d6: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7B:E8:6C:1A:A4:E0:E5:19:92:3B:5B:AC:0F:28:E2:C2:48:AA:30 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:74:14:f8:33:ae:1b:d0:ed:42:e0:50:71:51:b0:fa:e1:df: 0e:5e:75:bb:7e:f0:c2:de:33:fb:e7:62:0d:fa:40:7e:c8:67: 8d:ce:9a:15:b6:04:ed:d7:f0:c0:79:0d:b7:47:24:47:19:57: 67:7d:9f:a8:35:5a:be:fc:3a:75:b5:9a:70:2e:54:e0:71:27: b7:c9:64:33:2a:9e:af:fc:ca:de:53:c3:9a:83:cb:cc:52:ac: ed:0e:81:16:60:7f:e9:02:31:d2:21:b9:ed:23:ea:d4:22:d8: a9:ba:6c:5a:fb:cd:8b:bf:39:07:56:03:5c:e6:5f:7e:48:f9: b4:25:02:db:98:be:a7:18:e9:8c:f0:ee:15:71:e4:44:80:ab: 6a:7f:37:2b:a0:d1:c9:14:fe:a6:51:21:c7:fb:58:4b:47:45: 4c:17:36:1d:f9:a7:32:e8:61:08:1f:ed:92:97:7e:ee:63:ca: f8:40:42:a7:76:24:93:06:e0:72:aa:f4:81:67:23:2b:78:3e: be:66:a2:1d:a5:c0:ac:52:b4:34:c7:cb:4a:dc:df:b1:50:72: cd:6f:48:23:5e:bd:27:3d:ed:e9:14:0e:95:10:03:fc:17:06: 33:b3:90:b1:bf:41:89:b1:08:8d:38:df:38:24:7d:23:a6:3f: 95:38:e5:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjYwMzI1MDQzOTU1WhcNMjYwNDAxMDQzOTU1WjAYMRYwFAYD VQQDEw02OWMzNjcxYi0yMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdTPLo+k4e7yO89dOqr6B7bo6Ri6qmH+exCsqtc6HVf5/Zf8JeYJIdf5ZkF1 o+wv6QNFDhSZW7vCakbLcVwuTevx4gbK64VpLRAA0xrDJslRX2IzYvUeLUowv+OG usbUQjGuWDpk/5MebecNbksWG+5ccIVtFs0urkazD5H18azFYcQmLnRfwgNpSKK8 J/d0Q3mHbHcQEbuPf7sFVktBZIqWREnv5+Z5HmMiHK8JrxiCmHZIuYFzdWH0ewMA KJhtSMAABx+GsJgkYoWvTYBUlhjHMkwd+cIHJ/j6Yw2l+NrE2/Ep4sAb5iMzNtfx vzrjHEwzBdoqoyURFOhNVNZwnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKR76Gwa pODlGZI7W6wPKOLCSKowMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA13QU+DOuG9DtQuBQcVGw+uHfDl51u37wwt4z++diDfpAfshnjc6aFbYE7dfw wHkNt0ckRxlXZ32fqDVavvw6dbWacC5U4HEnt8lkMyqer/zK3lPDmoPLzFKs7Q6B FmB/6QIx0iG57SPq1CLYqbpsWvvNi785B1YDXOZffkj5tCUC25i+pxjpjPDuFXHk RICran83K6DRyRT+plEhx/tYS0dFTBc2HfmnMuhhCB/tkpd+7mPK+EBCp3Ykkwbg cqr0gWcjK3g+vmaiHaXArFK0NMfLStzfsVByzW9II169Jz3t6RQOlRAD/BcGM7OQ sb9BibEIjTjfOCR9I6Y/lTjlww== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:16 2026 by rpki-client