$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: o3+XLgphG1xcUX5GapinHV52w78lyM6vBFbh79+pBf4= Subject key identifier: 9F:EA:AB:9E:65:B8:9B:D3:24:EB:CE:B6:AF:BE:E5:25:94:6F:25:7B Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 0113 Signing time: Wed 25 Mar 2026 05:08:31 +0000 Manifest this update: Wed 25 Mar 2026 05:08:31 +0000 Manifest next update: Wed 01 Apr 2026 05:08:31 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: C37+XHsu0yGjC0DXe0zbUhGVHKfT5XjqCgFfDP79VaU=) 2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o=) 3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: A7rSSZVeM5zH7Lu6nq0wtI2MJAwPFWQR7zTSTecfo9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:08:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Mar 25 05:08:31 2026 GMT Not After : Apr 1 05:08:31 2026 GMT Subject: CN=69c36dcf-6a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:4d:d0:fe:a8:1e:f9:ec:72:13:54:8a:b0: 78:66:bd:df:a4:bd:0e:d2:54:2b:ac:02:73:a4:c2: f7:ac:1b:e6:bf:82:57:10:c5:f2:ab:2f:dd:ca:99: 16:67:61:a4:98:03:87:2c:b7:d0:d8:a4:bf:d6:88: 75:8d:04:81:1e:57:24:ab:c6:1d:28:dc:f3:08:c2: e7:a2:51:85:e5:1e:fb:65:be:36:53:c8:09:f7:0b: fa:6e:26:43:7b:4e:03:d0:d8:f9:e2:e8:a4:42:99: b0:17:fc:1e:22:7a:36:39:45:a5:91:56:92:15:4d: 50:62:d8:16:42:4a:e4:58:3d:7d:1f:6f:1a:77:7d: 4b:ea:47:4c:0f:a3:9d:1a:25:0f:b3:32:fe:55:20: af:5b:da:65:d3:3c:f8:74:23:87:2c:73:12:7a:91: b6:2b:9b:66:70:11:39:aa:35:b0:0f:b5:92:00:0d: 27:a1:67:7c:bb:d3:c4:bd:0d:59:fb:a4:05:52:ab: 19:c4:3c:11:34:47:93:d8:fd:f3:82:17:48:31:54: 1e:da:8f:e3:43:f7:ef:70:c0:ce:9f:73:5b:9d:48: 25:b7:a8:88:15:90:ef:6c:bc:8c:7c:23:0e:a7:85: 02:33:0e:d1:aa:61:c9:79:0b:f6:b3:92:47:59:be: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EA:AB:9E:65:B8:9B:D3:24:EB:CE:B6:AF:BE:E5:25:94:6F:25:7B X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:76:fa:7c:0b:d6:a3:10:7e:42:5a:87:45:a9:30:84:ae:64: f3:5d:a5:bb:da:65:2d:b9:71:1e:ed:6f:a4:5c:40:11:58:19: 4d:1f:55:7d:52:66:5b:66:5e:d2:db:80:bc:41:06:22:7d:b8: 85:0d:c7:e7:7e:a8:45:f0:a6:dd:7a:d7:df:8a:33:99:84:cd: a1:96:5b:3a:5f:59:51:01:43:14:36:9d:f2:94:98:eb:66:a7: 7d:90:cf:8f:f2:4f:23:7d:5d:a2:4b:91:cd:bf:a5:e0:83:8d: 68:81:29:a8:cb:07:43:c8:ec:7b:52:fa:73:67:65:fc:06:5a: 03:a3:a2:76:a8:05:66:9c:44:e9:7f:7d:4c:20:34:eb:7b:cf: 88:07:e5:c5:34:8a:cf:86:44:d8:fe:3f:25:c6:fc:a2:36:56: 72:ca:bb:dc:c8:8e:5a:53:b4:dc:63:ff:7e:ed:40:5e:51:69: c9:fa:6f:1d:e9:c3:5a:7f:fa:1c:1d:7f:eb:72:e3:a2:bb:84: a4:db:7c:22:ba:0e:f1:a3:8a:eb:98:b4:72:d0:ce:32:30:87: e0:b5:37:57:b9:d1:ee:99:41:66:5b:a4:10:12:86:8a:d1:f6: 47:3d:0f:49:ff:9c:67:01:42:4b:71:19:3f:8a:e6:03:39:5c: 6e:e3:9b:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjYwMzI1MDUwODMxWhcNMjYwNDAxMDUwODMxWjAYMRYwFAYD VQQDEw02OWMzNmRjZi02YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XxN0P6oHvnschNUirB4Zr3fpL0O0lQrrAJzpML3rBvmv4JXEMXyqy/dypkW Z2GkmAOHLLfQ2KS/1oh1jQSBHlckq8YdKNzzCMLnolGF5R77Zb42U8gJ9wv6biZD e04D0Nj54uikQpmwF/weIno2OUWlkVaSFU1QYtgWQkrkWD19H28ad31L6kdMD6Od GiUPszL+VSCvW9pl0zz4dCOHLHMSepG2K5tmcBE5qjWwD7WSAA0noWd8u9PEvQ1Z +6QFUqsZxDwRNEeT2P3zghdIMVQe2o/jQ/fvcMDOn3NbnUglt6iIFZDvbLyMfCMO p4UCMw7RqmHJeQv2s5JHWb6EcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/qq55l uJvTJOvOtq++5SWUbyV7MB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnb6fAvWoxB+QlqHRakwhK5k812lu9plLblxHu1vpFxAEVgZTR9VfVJmW2Ze 0tuAvEEGIn24hQ3H536oRfCm3XrX34ozmYTNoZZbOl9ZUQFDFDad8pSY62anfZDP j/JPI31dokuRzb+l4IONaIEpqMsHQ8jse1L6c2dl/AZaA6OidqgFZpxE6X99TCA0 63vPiAflxTSKz4ZE2P4/Jcb8ojZWcsq73MiOWlO03GP/fu1AXlFpyfpvHenDWn/6 HB1/63LjoruEpNt8IroO8aOK65i0ctDOMjCH4LU3V7nR7plBZlukEBKGitH2Rz0P Sf+cZwFCS3EZP4rmAzlcbuObRg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:45 2026 by rpki-client