$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft File: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft (raw, json) Hash identifier: myNmYTi10EOD+uTBvi3fa93982wvGOcKj/OO8KrXBfk= Subject key identifier: B1:A8:05:38:13:AF:E8:2D:44:CE:F3:1F:2D:EC:95:36:AE:12:7C:DA Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49 Certificate issuer: /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft Manifest number: 28 Signing time: Wed 25 Mar 2026 08:02:53 +0000 Manifest this update: Wed 25 Mar 2026 08:02:52 +0000 Manifest next update: Wed 01 Apr 2026 08:02:52 +0000 Files and hashes: 1: Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl (hash: 9u76I/r2cDpqIiy2iprz7q8Kg1D+0vE+HjUptO/l1aU=) 2: 511F1EDCFC0511F081195104746F56BC.roa (hash: nuEm/nImsWX8e2aMNTAfOV22vEEsr1OrR90OJJJ/kIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449 Validity Not Before: Mar 25 08:02:52 2026 GMT Not After : Apr 1 08:02:52 2026 GMT Subject: CN=69c396ac-4696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:72:02:80:42:11:de:bd:03:96:4a:93:bc: 4b:43:a9:b5:8f:67:da:72:51:fd:78:bd:39:f5:e4: dc:d9:1c:fe:3c:24:29:24:d0:16:ff:a6:e2:78:63: 2c:b1:24:b7:e0:da:8b:9f:e0:5d:65:58:97:b4:fc: d1:61:3e:77:e9:d7:83:ea:44:4e:51:4e:9c:84:0c: 8e:ae:53:28:bc:cb:b8:5a:d0:1d:41:a0:14:f6:42: 49:bd:2b:56:48:c6:69:c9:74:81:1a:82:3d:0f:31: e7:a7:49:e1:47:a0:0c:b3:1d:57:50:68:e2:20:43: b5:db:0a:6e:97:1b:c4:71:c1:16:a4:86:72:4a:f0: f5:1c:e6:0e:93:29:24:9e:e3:14:a0:10:7b:53:3a: 7f:7e:c6:12:b5:1b:91:ec:17:67:1d:19:00:d6:88: 4c:99:44:4b:02:dc:70:08:7a:95:df:a7:4b:fe:d4: 44:f5:8d:83:00:a4:e2:a5:48:b9:d3:27:e6:95:13: 1b:75:29:31:8c:0f:64:3a:c6:d7:62:61:92:02:5d: 36:f6:1c:31:5b:18:95:3b:d8:a0:64:09:4e:35:5f: 8e:3c:70:fc:98:06:a7:50:d1:d8:9f:8a:8c:a2:d0: 12:b4:3f:51:68:78:3f:34:72:c6:c8:1f:ab:79:ce: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:05:38:13:AF:E8:2D:44:CE:F3:1F:2D:EC:95:36:AE:12:7C:DA X509v3 Authority Key Identifier: keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:13:fa:b5:12:a7:46:b6:4a:2d:1e:b1:2d:3c:a4:f8:c2:b9: 30:c9:83:a7:d4:14:c0:37:af:64:da:08:af:1a:fd:1c:09:42: b1:f5:00:8f:54:1a:f3:51:8c:60:6f:78:de:0a:cb:52:d7:42: bd:64:0f:ea:fc:3d:95:00:f9:f1:ff:7d:8c:7e:10:e4:4f:d4: 04:97:20:dd:9e:d4:c8:de:9f:d1:94:1b:8d:60:b3:ff:90:4e: 13:02:f1:83:13:22:86:e7:f5:8c:35:14:a8:f8:de:e5:3c:4b: 41:7b:54:ac:4b:aa:42:c5:55:cb:99:aa:17:93:11:54:7d:1f: 3e:ed:33:9b:f1:95:90:79:72:f4:16:e4:4c:22:dc:4d:7e:af: b0:1a:fc:fb:55:38:ec:01:57:06:0b:7b:d6:a7:6d:e0:98:13: ff:04:b2:78:95:53:0b:85:b7:5a:c1:8f:8c:31:a5:80:30:a5: a8:16:1e:80:7e:5b:6c:9f:de:1a:60:71:3c:51:78:29:e9:fd: ea:b3:b9:36:83:f8:f0:41:fa:3e:97:d2:1f:66:ba:90:82:2f: d7:87:60:46:54:9d:ef:04:7f:e9:ec:2e:7e:15:0f:1f:64:ab: 7e:38:32:29:6d:19:e2:3b:33:8a:f3:32:d5:33:4d:92:b2:44: f4:3c:d1:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzQ3MzExMC8GA1UEBRMoMzMzNzdBMTE1RkU1MkU5MUNENjEyMTk3MTk4NUEwMDNC QjNCQTQ0OTAeFw0yNjAzMjUwODAyNTJaFw0yNjA0MDEwODAyNTJaMBgxFjAUBgNV BAMTDTY5YzM5NmFjLTQ2OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQ/3ICgEIR3r0DlkqTvEtDqbWPZ9pyUf14vTn15NzZHP48JCkk0Bb/puJ4Yyyx JLfg2ouf4F1lWJe0/NFhPnfp14PqRE5RTpyEDI6uUyi8y7ha0B1BoBT2Qkm9K1ZI xmnJdIEagj0PMeenSeFHoAyzHVdQaOIgQ7XbCm6XG8RxwRakhnJK8PUc5g6TKSSe 4xSgEHtTOn9+xhK1G5HsF2cdGQDWiEyZREsC3HAIepXfp0v+1ET1jYMApOKlSLnT J+aVExt1KTGMD2Q6xtdiYZICXTb2HDFbGJU72KBkCU41X448cPyYBqdQ0difioyi 0BK0P1FoeD80csbIH6t5ztAhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsagFOBOv 6C1EzvMfLeyVNq4SfNowHwYDVR0jBBgwFoAUMzd6EV/lLpHNYSGXGYWgA7s7pEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNDczLzZDMTdFRUNDRkMw NDExRjA4RTNDRkEwMDc0NkY1NkJDL016ZDZFVl9sTHBITllTR1hHWVdnQTdzN3BF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTXpkNkVWX2xMcEhOWVNHWEdZV2dBN3M3cEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NDczLzZDMTdFRUNDRkMwNDExRjA4RTNDRkEwMDc0NkY1NkJDL016ZDZFVl9sTHBI TllTR1hHWVdnQTdzN3BFay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzE/q1EqdGtkotHrEtPKT4wrkwyYOn1BTAN69k2givGv0cCUKx9QCPVBrzUYxg b3jeCstS10K9ZA/q/D2VAPnx/32MfhDkT9QElyDdntTI3p/RlBuNYLP/kE4TAvGD EyKG5/WMNRSo+N7lPEtBe1SsS6pCxVXLmaoXkxFUfR8+7TOb8ZWQeXL0FuRMItxN fq+wGvz7VTjsAVcGC3vWp23gmBP/BLJ4lVMLhbdawY+MMaWAMKWoFh6Afltsn94a YHE8UXgp6f3qs7k2g/jwQfo+l9IfZrqQgi/Xh2BGVJ3vBH/p7C5+FQ8fZKt+ODIp bRniOzOK8zLVM02SskT0PNGX -----END CERTIFICATE-----Generated at Thu Mar 26 02:22:38 2026 by rpki-client