$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: Vz3RLjNwMCemmOsp3201Wr37aOOp7ALwvvbZSTNjcAs= Subject key identifier: 41:E6:95:46:71:FF:F1:08:85:3A:63:CF:59:D6:AF:97:4D:D9:FE:9A Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1ABB Signing time: Tue 24 Mar 2026 16:14:16 +0000 Manifest this update: Tue 24 Mar 2026 16:14:16 +0000 Manifest next update: Tue 31 Mar 2026 16:14:16 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: GDvNkq8gF/yl65Wg8NOnA34zLubivJ7HBeqhavAuCNc=) 2: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: Nh1Q+Dya7glLRU5/4sMU0gPbts/P00D+f3Yj7z1hNXY=) 3: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6877 (0x1add) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Mar 24 16:14:16 2026 GMT Not After : Mar 31 16:14:16 2026 GMT Subject: CN=69c2b858-5f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:88:5e:b9:d3:7f:4f:58:14:89:12:a7:27: 99:ff:21:ec:81:04:b3:52:51:3f:06:cc:31:28:44: f2:ca:79:eb:50:7f:f7:bf:88:b5:2f:01:60:c6:6e: 64:17:f3:1b:01:0d:c4:c7:a0:e2:8f:6c:68:2e:da: a1:16:1b:6c:ab:c6:78:63:11:30:10:2f:a0:d7:00: b3:81:da:9f:0c:7b:0a:e2:c3:ac:d5:bd:99:0d:1e: 0a:39:1b:24:80:c1:69:d1:22:38:ee:7f:f6:df:90: 56:25:a8:76:8b:bc:5c:fe:da:d2:fa:00:a7:c3:12: d4:23:8e:4a:43:99:a5:21:ba:79:d8:a8:0e:c1:a2: b6:12:6a:cd:25:2e:ea:44:55:07:74:da:d9:87:0e: 56:28:85:76:bb:07:12:0e:a3:28:ca:f8:e2:f1:74: bd:75:b2:4f:88:a6:e9:c7:ea:6b:78:f2:47:68:0f: 5c:38:67:bc:ac:f5:35:a1:fe:cd:3c:d2:49:d2:8a: 2d:cc:06:27:3d:cf:cd:01:ac:bd:60:9d:ed:d4:c4: b2:90:6b:df:79:3f:57:3d:cd:ea:81:c8:4d:ec:87: 89:80:bb:de:00:62:a7:63:3e:41:e5:1b:cd:11:0b: 5e:19:07:3d:da:a1:f4:af:fa:f4:c7:b1:75:5d:a6: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:95:46:71:FF:F1:08:85:3A:63:CF:59:D6:AF:97:4D:D9:FE:9A X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:14:c4:c1:7d:27:cc:77:9a:20:74:ba:0c:47:27:c0:a7: 91:d4:ec:8b:21:ba:2e:72:db:bf:8b:5f:a3:ce:c9:09:09:6d: 19:58:d7:77:ec:36:82:b7:f1:1d:84:89:3a:31:dd:39:bd:65: 34:a2:91:01:65:a5:4f:8c:f0:05:11:c2:6f:95:96:ce:5d:e0: 27:20:6b:5d:ff:d8:2a:32:c1:f3:28:00:03:54:58:1a:27:6b: 75:a5:49:72:45:cb:bc:50:db:1d:de:9a:d1:77:41:2d:b4:32: 6c:65:3d:4f:42:9e:e3:8c:38:93:e8:9b:f6:be:a9:f9:26:7e: 09:41:ac:ea:5d:6e:b5:85:eb:cd:93:de:e3:87:e3:5a:e3:50: d7:90:dc:cf:45:39:ed:79:7e:ea:18:da:41:f2:c9:14:19:8a: 65:b3:ce:e5:1d:e0:eb:67:30:94:37:2e:14:cd:4d:9f:52:8a: ca:79:02:9c:09:cd:b8:3c:51:cb:07:4c:9f:b3:d5:eb:4e:f9: 41:84:aa:fe:64:d9:76:2d:03:61:90:9e:ff:a3:83:8b:b1:0b: 0c:85:44:88:3b:03:9e:fa:28:02:5e:20:f1:02:4a:76:14:39: 88:f1:ff:57:f3:e2:8c:b2:a3:53:ec:7c:4a:cb:cb:27:22:63: b4:5a:eb:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjYwMzI0MTYxNDE2WhcNMjYwMzMxMTYxNDE2WjAYMRYwFAYD VQQDEw02OWMyYjg1OC01ZjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQKIXrnTf09YFIkSpyeZ/yHsgQSzUlE/BswxKETyynnrUH/3v4i1LwFgxm5k F/MbAQ3Ex6Dij2xoLtqhFhtsq8Z4YxEwEC+g1wCzgdqfDHsK4sOs1b2ZDR4KORsk gMFp0SI47n/235BWJah2i7xc/trS+gCnwxLUI45KQ5mlIbp52KgOwaK2EmrNJS7q RFUHdNrZhw5WKIV2uwcSDqMoyvji8XS9dbJPiKbpx+prePJHaA9cOGe8rPU1of7N PNJJ0ootzAYnPc/NAay9YJ3t1MSykGvfeT9XPc3qgchN7IeJgLveAGKnYz5B5RvN EQteGQc92qH0r/r0x7F1XaZaLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEHmlUZx //EIhTpjz1nWr5dN2f6aMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP/MUxMF9J8x3miB0ugxHJ8CnkdTsiyG6LnLbv4tfo87JCQltGVjXd+w2grfx HYSJOjHdOb1lNKKRAWWlT4zwBRHCb5WWzl3gJyBrXf/YKjLB8ygAA1RYGidrdaVJ ckXLvFDbHd6a0XdBLbQybGU9T0Ke44w4k+ib9r6p+SZ+CUGs6l1utYXrzZPe44fj WuNQ15Dcz0U57Xl+6hjaQfLJFBmKZbPO5R3g62cwlDcuFM1Nn1KKynkCnAnNuDxR ywdMn7PV6075QYSq/mTZdi0DYZCe/6ODi7ELDIVEiDsDnvooAl4g8QJKdhQ5iPH/ V/PijLKjU+x8SsvLJyJjtFrriQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:37 2026 by rpki-client