$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: vJDMmsiMlopY9koo/1HEVontuJfT53h9Th67KnahZIY= Subject key identifier: 11:34:DB:C2:3C:F7:25:40:75:7D:6E:14:AC:EE:92:21:19:BC:18:E7 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 61 Signing time: Wed 25 Mar 2026 07:16:47 +0000 Manifest this update: Wed 25 Mar 2026 07:16:47 +0000 Manifest next update: Wed 01 Apr 2026 07:16:47 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: YBMb3BW/1VwShy3MAeGZZzeyRYLKb+dF9A3OQw8eyVk=) 2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: L2xc97rBOEo7wGTXyTU4krqEAbLPgvd1QpBdIvhLYmA=) 3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: /dWw78lmDvPsrlgqtDvPWypN8cQFZwkLxuNHhkdxFFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Mar 25 07:16:47 2026 GMT Not After : Apr 1 07:16:47 2026 GMT Subject: CN=69c38bdf-bd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:d2:9c:d3:d6:dd:34:db:8b:e1:71:bc:8a: 7c:ab:98:80:58:7e:b2:6f:01:cf:6c:8e:cc:cb:ef: b4:6a:74:c2:bc:c3:ed:16:a3:3a:0d:54:96:2e:fa: f4:00:16:9e:0f:e0:8b:a2:68:57:79:37:4e:03:9e: 56:38:01:25:7c:fa:37:16:0f:63:f5:6d:e0:2e:87: 10:84:4d:26:06:73:2f:1a:1a:a9:05:44:ab:09:58: 81:6b:0f:ba:09:25:cb:d5:47:cd:8c:13:a8:1b:82: 47:65:e9:cc:77:e2:9c:f8:6c:17:cd:e8:d9:dd:e2: c1:e9:5e:93:cf:1f:93:0d:04:b5:bb:20:4c:bc:a3: 20:20:a5:93:6c:e3:59:44:9c:97:e0:7f:c4:93:7f: 4d:82:25:bf:60:ba:ee:6e:ef:61:e0:fe:ed:0e:3d: 5a:71:e9:d9:4e:93:80:c3:d4:7e:6e:a4:bc:3f:41: f1:0e:2d:11:c2:70:2f:3f:91:7c:3a:58:45:87:46: 7e:2a:8e:8c:2e:1f:16:4d:19:aa:4b:c2:bd:3f:ea: 25:d7:de:0d:0e:8d:2f:38:f3:14:9a:2c:84:d0:d4: 49:b1:c0:32:4c:24:e1:91:ce:56:fb:c9:b5:98:39: d5:a5:de:9b:b7:af:b0:a5:43:c2:4e:ce:da:43:06: 4e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:34:DB:C2:3C:F7:25:40:75:7D:6E:14:AC:EE:92:21:19:BC:18:E7 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:28:e6:e8:15:5c:81:5b:28:fa:a4:9e:86:25:ae:14:e6:78: 42:3c:ef:c5:cc:48:36:c7:a7:e9:d9:21:1e:d5:fb:10:3c:36: 40:b8:d0:32:3d:c0:3a:b6:3f:07:27:68:61:ed:d4:af:23:87: c2:a3:53:83:60:0a:ea:82:2c:d6:f9:96:00:cb:2b:7b:44:e4: cd:a1:9a:e6:57:21:34:06:8c:71:0d:87:21:ff:10:43:e3:7d: 7d:b7:04:78:dc:ea:df:40:23:32:1e:77:49:6d:a6:58:a9:41: a3:be:cf:ee:61:9b:c7:ea:50:de:3b:a1:87:71:64:84:9f:ce: f2:f9:4d:3e:03:1b:8d:6d:68:e2:a0:48:55:24:f5:42:94:65: f4:da:eb:2e:70:d3:87:c0:d8:14:07:4c:be:76:e7:61:e4:bb: 05:ee:18:48:1a:c5:8e:4b:0d:66:4e:ce:8c:b3:ed:1e:d9:5c: 5c:4a:ce:b6:cd:81:46:c2:24:1d:e7:d4:0b:ad:6d:2d:1e:0f: fd:7c:70:42:ac:e4:6e:08:d4:e3:61:0a:1d:06:6a:0e:81:b9: 77:9d:fb:fa:89:11:2f:2a:ba:bf:49:11:73:3f:01:75:b2:81: 4a:f2:5c:67:49:3c:a2:11:39:de:7a:d2:34:9a:f9:3b:a9:cc: e5:83:6f:4d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNjAzMjUwNzE2NDdaFw0yNjA0MDEwNzE2NDdaMBgxFjAUBgNV BAMTDTY5YzM4YmRmLWJkM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMZ9Kc09bdNNuL4XG8inyrmIBYfrJvAc9sjszL77RqdMK8w+0WozoNVJYu+vQA Fp4P4IuiaFd5N04DnlY4ASV8+jcWD2P1beAuhxCETSYGcy8aGqkFRKsJWIFrD7oJ JcvVR82ME6gbgkdl6cx34pz4bBfN6Nnd4sHpXpPPH5MNBLW7IEy8oyAgpZNs41lE nJfgf8STf02CJb9guu5u72Hg/u0OPVpx6dlOk4DD1H5upLw/QfEOLRHCcC8/kXw6 WEWHRn4qjowuHxZNGapLwr0/6iXX3g0OjS848xSaLITQ1EmxwDJMJOGRzlb7ybWY OdWl3pu3r7ClQ8JOztpDBk67AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUETTbwjz3 JUB1fW4UrO6SIRm8GOcwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5KOboFVyBWyj6pJ6GJa4U5nhCPO/FzEg2x6fp2SEe1fsQPDZAuNAyPcA6tj8H J2hh7dSvI4fCo1ODYArqgizW+ZYAyyt7ROTNoZrmVyE0BoxxDYch/xBD4319twR4 3OrfQCMyHndJbaZYqUGjvs/uYZvH6lDeO6GHcWSEn87y+U0+AxuNbWjioEhVJPVC lGX02usucNOHwNgUB0y+dudh5LsF7hhIGsWOSw1mTs6Ms+0e2VxcSs62zYFGwiQd 59QLrW0tHg/9fHBCrORuCNTjYQodBmoOgbl3nfv6iREvKrq/SRFzPwF1soFK8lxn STyiETneetI0mvk7qczlg29N -----END CERTIFICATE-----Generated at Thu Mar 26 12:01:25 2026 by rpki-client