$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft File: cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json) Hash identifier: zCP68xLp/w5FhQ4VyYv4Hku3Cwo3CJ5piVkx20Z+aF8= Subject key identifier: C6:1B:F5:AB:C0:70:D0:19:24:D0:06:6E:91:11:41:F3:33:62:6E:3C Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D Certificate issuer: /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Certificate serial: 086C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft Manifest number: 085C Signing time: Tue 24 Mar 2026 20:29:44 +0000 Manifest this update: Tue 24 Mar 2026 20:29:44 +0000 Manifest next update: Tue 31 Mar 2026 20:29:44 +0000 Files and hashes: 1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: 4S473XNMR/1v9t5+cvQVeOyrfBbWLq72seqhqxXoaXw=) 2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: aHXBmA0NtyR13VuTHpIm+ZaiBP/Di2n0/CwGR7lCYqI=) 3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: 5RUGr84S9u/MYGYJzdR1/AUpkucviMpdR/eHj0IncTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2156 (0x86c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D Validity Not Before: Mar 24 20:29:44 2026 GMT Not After : Mar 31 20:29:44 2026 GMT Subject: CN=69c2f438-960b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:9b:65:f8:f5:8b:67:94:9a:e1:9a:ff:e8: 15:17:af:46:07:1d:65:34:d5:ca:27:09:5e:50:2d: 1c:d7:42:9f:88:93:78:49:b5:e3:1c:12:fd:2f:7b: 78:7f:df:de:00:8a:ab:56:9b:03:71:76:57:d3:66: 7c:0e:9f:58:dc:e9:4f:e2:c5:a5:20:4b:ec:73:d8: 0d:6b:ba:9d:43:e5:3e:7a:81:0f:8c:4e:9b:63:e6: bd:c1:95:5e:66:b0:41:51:e1:7b:2d:9a:48:ab:7f: df:79:2e:84:52:f3:17:b8:a3:a2:d4:dc:8a:78:36: 68:4c:d1:b3:0e:32:fd:f7:45:c0:e3:da:e3:e4:e3: 1b:91:8e:82:e0:3a:7a:a9:2c:1c:58:e7:86:a1:81: c6:e9:e7:88:79:6e:32:41:ce:3c:9a:0b:28:85:9b: c2:74:74:e0:91:a6:bb:c0:26:82:9f:df:9c:33:38: a5:25:a4:01:40:f3:4c:3d:1a:51:09:03:81:71:16: 1d:c5:5c:a0:b8:35:31:6e:62:54:3b:b5:d7:9e:e6: bd:b0:40:dc:07:e6:96:03:63:71:b8:84:21:d7:3e: f4:5f:1d:ee:49:ff:d1:8d:95:89:52:64:ee:38:5f: 52:e0:e5:75:ee:73:5c:a5:6f:42:93:1c:fc:47:8f: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1B:F5:AB:C0:70:D0:19:24:D0:06:6E:91:11:41:F3:33:62:6E:3C X509v3 Authority Key Identifier: keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9b:04:35:62:38:f0:d7:4d:4f:60:21:da:87:2e:76:3f:95: 91:3a:98:14:19:25:5a:e0:8a:ae:dc:07:3d:2f:ba:a8:1b:1f: b0:22:eb:8d:c9:b9:ea:06:b8:54:68:8e:8a:15:37:95:6f:ed: 1a:c8:45:82:a9:ce:32:11:cf:cb:92:3a:de:37:2a:e5:49:37: 40:56:dd:b5:74:b8:fe:5f:49:ca:df:cb:aa:f9:01:54:b2:c0: bd:88:f6:72:fb:91:58:cc:a3:f3:2a:ec:88:22:15:3b:06:0d: 3d:2d:88:9d:00:12:87:19:2b:50:8d:1e:0b:51:e5:83:55:a6: 22:69:93:1f:1f:1d:00:0e:b0:a9:92:8e:c1:e6:3b:2d:c8:07: cf:a7:ba:d2:af:3d:47:7a:ce:e3:1f:0c:29:2a:5b:9c:42:79: ac:b7:07:9f:4a:63:55:d6:2c:5c:5e:ca:27:94:a3:5f:c3:16: 12:a0:ae:19:f9:fa:36:9d:02:62:6a:2e:81:81:c2:47:c0:82: 65:b0:3f:8d:33:ba:a3:93:f0:24:de:69:b0:15:8d:ce:4d:ae: ef:86:44:4c:6b:b2:08:65:7a:d9:c0:bc:9d:b1:8e:4f:d1:64: c3:37:55:39:98:78:ab:6d:b8:81:d1:0a:6c:b4:25:52:4a:b9: 2d:ad:dd:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU1OTAxMTAvBgNVBAUTKDcxOTYxMzhGRDlGQzhDNzhGRTg0M0EyNTNDQjA0ODBB RENDNTdGMEQwHhcNMjYwMzI0MjAyOTQ0WhcNMjYwMzMxMjAyOTQ0WjAYMRYwFAYD VQQDEw02OWMyZjQzOC05NjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuabZfj1i2eUmuGa/+gVF69GBx1lNNXKJwleUC0c10KfiJN4SbXjHBL9L3t4 f9/eAIqrVpsDcXZX02Z8Dp9Y3OlP4sWlIEvsc9gNa7qdQ+U+eoEPjE6bY+a9wZVe ZrBBUeF7LZpIq3/feS6EUvMXuKOi1NyKeDZoTNGzDjL990XA49rj5OMbkY6C4Dp6 qSwcWOeGoYHG6eeIeW4yQc48mgsohZvCdHTgkaa7wCaCn9+cMzilJaQBQPNMPRpR CQOBcRYdxVyguDUxbmJUO7XXnua9sEDcB+aWA2NxuIQh1z70Xx3uSf/RjZWJUmTu OF9S4OV17nNcpW9Ckxz8R4+FNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYb9avA cNAZJNAGbpERQfMzYm48MB8GA1UdIwQYMBaAFHGWE4/Z/Ix4/oQ6JTywSArcxX8N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTU5MC9BODk1MjQ5RUY3 QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpIai1oRG9sUExCSUN0ekZm dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NaWVRqOW44akhqLWhEb2xQTEJJQ3R6RmZ3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTU5MC9BODk1MjQ5RUY3QzUxMUVBODcxQzAwMENDNEY5QUUwMi9jWllUajluOGpI ai1oRG9sUExCSUN0ekZmdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABpsENWI48NdNT2Ah2ocudj+VkTqYFBklWuCKrtwHPS+6qBsfsCLrjcm56ga4 VGiOihU3lW/tGshFgqnOMhHPy5I63jcq5Uk3QFbdtXS4/l9Jyt/LqvkBVLLAvYj2 cvuRWMyj8yrsiCIVOwYNPS2InQAShxkrUI0eC1Hlg1WmImmTHx8dAA6wqZKOweY7 LcgHz6e60q89R3rO4x8MKSpbnEJ5rLcHn0pjVdYsXF7KJ5SjX8MWEqCuGfn6Np0C YmougYHCR8CCZbA/jTO6o5PwJN5psBWNzk2u74ZETGuyCGV62cC8nbGOT9FkwzdV OZh4q224gdEKbLQlUkq5La3dxA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:49 2026 by rpki-client