$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: S34xS7HFdaACg9/H+YDJJBF3DDWCQELQurTtim8cZsI= Subject key identifier: DB:1B:F0:21:83:99:1C:9F:41:B8:BD:D4:59:9F:18:A1:B0:0B:23:1C Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 01C8 Signing time: Wed 25 Mar 2026 03:19:41 +0000 Manifest this update: Wed 25 Mar 2026 03:19:41 +0000 Manifest next update: Wed 01 Apr 2026 03:19:41 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: /J3ZkOjSo3ZQ8VjOeT6JC7hcz1YE7Rw3fr4RU47rFuc=) 2: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (hash: bi2iG9oBsC/hNTwCVoxLS7RAbzRZyqyTqSKMjtrttUA=) 3: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: HGdDjcoTsUm7kJL5rC6tXKA4D2ZhJnskWqB8F3KifFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Mar 25 03:19:41 2026 GMT Not After : Apr 1 03:19:41 2026 GMT Subject: CN=69c3544d-9bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e4:d8:e1:b9:37:b8:9b:3e:c6:64:37:e0:db: 2c:d9:59:1a:cc:67:9e:05:f8:bb:21:1b:c2:1b:33: 24:39:ce:5c:5e:b8:f7:3a:f4:5e:45:51:3b:29:1e: 18:58:6b:bf:ab:4f:18:63:b6:44:e4:02:10:b4:22: a6:2f:58:0f:ff:bb:20:31:4f:52:b2:6c:ad:b2:8d: 9a:b9:68:0e:ea:2a:0c:8c:50:ab:9d:2a:f9:11:09: e9:65:76:da:b1:d2:e2:86:30:43:ae:3f:d6:7c:48: ab:33:88:4d:0a:eb:9d:87:5c:00:e5:64:c4:3d:31: a2:fa:7b:77:2e:7e:8b:f3:04:fe:f5:d2:68:b0:d8: ad:d0:d7:74:d7:39:9d:8a:d5:ce:f8:22:a4:68:09: 57:36:5f:13:94:86:b1:96:39:e4:d2:66:dc:a6:f8: d8:e7:21:dc:4d:d3:fa:2b:6f:84:cc:e2:d3:1f:44: f3:39:77:a7:6e:40:23:55:b1:b3:e6:cd:8f:4c:b0: cd:ba:90:72:9a:03:a6:95:02:8f:6d:b5:d8:f7:9d: b5:c8:5b:aa:8a:6a:6c:da:4f:b5:24:9f:8a:ef:6e: cc:12:01:65:5f:d6:76:f0:72:73:c5:bd:7c:f2:94: 92:d9:82:b9:71:69:9b:b0:ea:9a:48:9d:c1:8d:90: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1B:F0:21:83:99:1C:9F:41:B8:BD:D4:59:9F:18:A1:B0:0B:23:1C X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:3b:84:2d:40:94:57:6c:26:2e:04:34:15:15:f7:78:c6:4f: e8:bd:b7:d0:27:0a:50:6a:32:56:5f:84:cf:90:97:e5:c8:d7: 60:4b:bf:f4:1f:48:57:88:a8:f4:d7:88:5f:79:d3:f2:0c:a7: 43:7a:e9:fa:63:97:41:56:e2:3c:c7:07:6b:43:fd:e2:4a:15: 50:01:bc:67:3d:50:74:e4:63:33:89:c5:b1:bd:88:94:83:a1: 4f:38:06:e7:d8:71:7f:d6:37:64:06:77:61:01:cd:cf:9d:c1: 10:72:c1:0d:50:99:ca:4f:48:90:55:99:b0:6e:26:69:47:9f: 8b:68:b5:d4:28:eb:cb:20:7f:fc:1b:19:69:fa:78:e7:0e:ed: 40:4c:de:a2:53:ee:ae:9f:5b:ac:a5:33:19:11:d2:0e:8d:33: 69:a5:3b:5a:16:5b:b9:2b:d1:94:0f:70:f2:3c:11:49:e7:47: b2:a2:de:92:0f:7c:a2:17:61:8a:92:87:22:c2:0c:d0:2d:33: d2:ef:2f:3e:c1:5c:ef:bf:9b:60:7f:25:4a:1c:45:1a:58:5a: 63:0d:57:53:cb:84:d9:79:c1:8b:99:db:32:63:8f:6c:dc:ad: 56:55:b7:79:07:e5:c2:9b:50:71:4f:5b:ce:33:20:4c:db:c8: 34:a4:19:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjYwMzI1MDMxOTQxWhcNMjYwNDAxMDMxOTQxWjAYMRYwFAYD VQQDEw02OWMzNTQ0ZC05YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OTY4bk3uJs+xmQ34Nss2VkazGeeBfi7IRvCGzMkOc5cXrj3OvReRVE7KR4Y WGu/q08YY7ZE5AIQtCKmL1gP/7sgMU9Ssmytso2auWgO6ioMjFCrnSr5EQnpZXba sdLihjBDrj/WfEirM4hNCuudh1wA5WTEPTGi+nt3Ln6L8wT+9dJosNit0Nd01zmd itXO+CKkaAlXNl8TlIaxljnk0mbcpvjY5yHcTdP6K2+EzOLTH0TzOXenbkAjVbGz 5s2PTLDNupBymgOmlQKPbbXY9521yFuqimps2k+1JJ+K727MEgFlX9Z28HJzxb18 8pSS2YK5cWmbsOqaSJ3BjZBkqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsb8CGD mRyfQbi91FmfGKGwCyMcMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJTuELUCUV2wmLgQ0FRX3eMZP6L230CcKUGoyVl+Ez5CX5cjXYEu/9B9IV4io 9NeIX3nT8gynQ3rp+mOXQVbiPMcHa0P94koVUAG8Zz1QdORjM4nFsb2IlIOhTzgG 59hxf9Y3ZAZ3YQHNz53BEHLBDVCZyk9IkFWZsG4maUefi2i11CjryyB//BsZafp4 5w7tQEzeolPurp9brKUzGRHSDo0zaaU7WhZbuSvRlA9w8jwRSedHsqLekg98ohdh ipKHIsIM0C0z0u8vPsFc77+bYH8lShxFGlhaYw1XU8uE2XnBi5nbMmOPbNytVlW3 eQflwptQcU9bzjMgTNvINKQZXA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:00 2026 by rpki-client