$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: vFEm/8B4nehBD0UbW0AZ272WHOMpZu1/1cKN97kE2pY= Subject key identifier: AD:B6:6F:C5:C5:C9:E5:8F:F5:01:17:D6:A4:48:96:AC:7B:AB:3F:EF Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 08B8 Signing time: Tue 24 Mar 2026 20:12:42 +0000 Manifest this update: Tue 24 Mar 2026 20:12:41 +0000 Manifest next update: Tue 31 Mar 2026 20:12:41 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: +1YUk62e0X5feDCOAZ0ancxZ/UAheGd7p0096VohHDU=) 2: 3A4918D41DED11F18280100E163D8C67.roa (hash: Juhjiq7zpIGJ2ca6uyWvgKrk4pkgUf8b9Px9rrY5jmY=) 3: A3FFFAF41DED11F18835BD3E163D8C67.roa (hash: 5k8cO87Qj/gNgbt2kI9Eh+2F5/UczXoTj75VoZrq4q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Mar 24 20:12:41 2026 GMT Not After : Mar 31 20:12:41 2026 GMT Subject: CN=69c2f03a-c867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:51:0b:60:60:79:af:6f:01:3c:88:56:a4: 40:ca:be:dc:54:10:66:f9:58:7e:6d:a7:6e:f6:0f: cc:52:69:03:2c:d9:4d:e8:ca:32:92:9f:bd:3b:0f: ea:b9:77:df:7c:1e:f8:16:46:60:91:4e:86:ae:2e: 6c:45:2a:3f:ad:5b:81:4f:9d:cd:2b:af:bc:00:98: 54:0a:aa:1f:d9:30:d1:e7:13:47:03:90:07:97:c6: d2:df:1e:76:a4:d0:84:5b:29:8b:ae:b9:d9:f5:02: 34:16:34:96:42:5f:07:24:84:04:54:d0:01:84:d1: c2:f7:7c:0b:85:c4:4d:e8:0a:cb:be:ca:b1:8b:31: 5d:86:a2:c6:70:60:ef:a4:bd:40:47:99:74:f6:41: fa:d5:bf:0a:d2:c2:af:7f:5a:3e:dc:dd:d7:59:1e: 3c:c4:4e:28:2a:7e:2f:e7:eb:bd:a9:cb:fa:ef:f9: d2:ab:9e:b9:f9:02:6e:6f:f6:2c:c9:de:c4:e2:ec: eb:c0:49:6c:ca:31:51:97:c9:20:c2:ab:f5:84:62: 40:e2:c2:40:ae:40:fd:22:78:ea:66:9c:c8:36:fb: 6a:86:5e:31:a3:d1:a6:7a:1a:21:24:56:cb:7c:d7: 21:11:d4:f5:00:34:a1:95:ce:5b:d8:ba:1d:b5:06: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B6:6F:C5:C5:C9:E5:8F:F5:01:17:D6:A4:48:96:AC:7B:AB:3F:EF X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b9:f8:d7:f2:2d:05:d2:60:06:a6:b9:f5:f4:e8:7c:8c:64: 1a:98:67:40:56:52:fe:6d:89:13:d8:7f:e4:f9:29:c5:22:ce: 60:8c:3d:a4:97:4d:79:2b:b1:85:c6:5d:ad:2b:76:7e:55:2b: 9d:fa:26:b0:a2:65:4a:d8:03:9b:ae:4b:b0:3f:25:cf:db:df: 4e:d6:91:ac:3b:48:c5:5f:04:b5:48:5e:d8:66:e6:1e:66:cb: d2:7f:b3:55:5c:d2:8f:36:7d:9d:5e:bf:d7:ee:29:56:07:3e: 93:f1:bf:d8:37:99:c1:4e:35:f1:61:59:79:01:4d:a4:17:91: 03:bb:ef:cc:7f:34:a6:39:88:08:af:52:37:64:82:1b:9e:94: 65:41:bd:44:dd:52:b5:25:df:7e:c7:c6:ba:f5:28:8e:a7:f3: df:2b:e8:10:62:97:5e:6e:de:0f:23:07:7c:c8:d3:a0:bc:a7: f7:88:77:ad:ed:02:ce:4a:7b:da:21:32:d2:68:04:e0:3c:32: f4:07:8f:53:e4:98:aa:ab:c4:ae:ef:5a:19:88:ed:55:b5:cb: b8:81:db:8f:5a:bc:31:5c:cd:63:e5:bd:41:6d:a5:da:f2:d8: df:4d:9a:c0:b4:5c:99:c8:e6:36:02:30:56:a1:65:ec:f2:6a: 3a:5e:74:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjYwMzI0MjAxMjQxWhcNMjYwMzMxMjAxMjQxWjAYMRYwFAYD VQQDEw02OWMyZjAzYS1jODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8VRC2Bgea9vATyIVqRAyr7cVBBm+Vh+badu9g/MUmkDLNlN6Moykp+9Ow/q uXfffB74FkZgkU6Gri5sRSo/rVuBT53NK6+8AJhUCqof2TDR5xNHA5AHl8bS3x52 pNCEWymLrrnZ9QI0FjSWQl8HJIQEVNABhNHC93wLhcRN6ArLvsqxizFdhqLGcGDv pL1AR5l09kH61b8K0sKvf1o+3N3XWR48xE4oKn4v5+u9qcv67/nSq565+QJub/Ys yd7E4uzrwElsyjFRl8kgwqv1hGJA4sJArkD9InjqZpzINvtqhl4xo9GmehohJFbL fNchEdT1ADShlc5b2LodtQZ/4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK22b8XF yeWP9QEX1qRIlqx7qz/vMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAibn41/ItBdJgBqa59fTofIxkGphnQFZS/m2JE9h/5PkpxSLOYIw9pJdNeSux hcZdrSt2flUrnfomsKJlStgDm65LsD8lz9vfTtaRrDtIxV8EtUhe2GbmHmbL0n+z VVzSjzZ9nV6/1+4pVgc+k/G/2DeZwU418WFZeQFNpBeRA7vvzH80pjmICK9SN2SC G56UZUG9RN1StSXffsfGuvUojqfz3yvoEGKXXm7eDyMHfMjToLyn94h3re0Czkp7 2iEy0mgE4Dwy9AePU+SYqqvEru9aGYjtVbXLuIHbj1q8MVzNY+W9QW2l2vLY302a wLRcmcjmNgIwVqFl7PJqOl50jA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:28:34 2026 by rpki-client