$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: wPgU4vV9G9x5+HWGrvS9G+xR3APIVLGIm0HyoR5Ioho= Subject key identifier: BA:1F:7C:B0:85:C0:69:55:AC:78:9F:E8:FC:02:77:B2:71:67:04:D6 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 188E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 1875 Signing time: Tue 24 Mar 2026 16:24:45 +0000 Manifest this update: Tue 24 Mar 2026 16:24:44 +0000 Manifest next update: Tue 31 Mar 2026 16:24:44 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: ltCZxkgjeJ3Zt6PF2Q6B6yofaNwv+c+HN68S0iNh4oo=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6286 (0x188e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: Mar 24 16:24:44 2026 GMT Not After : Mar 31 16:24:44 2026 GMT Subject: CN=69c2bacc-3dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:52:fb:88:98:52:60:f9:6e:eb:f2:10:59: 86:32:79:14:df:29:51:d6:bf:77:dd:06:63:9d:4e: 06:d0:42:eb:b5:89:c8:25:13:16:07:51:ab:82:2c: 16:01:62:d6:39:2c:65:94:d3:59:bf:10:d6:b3:12: fa:b3:bb:9e:a1:5b:94:ed:51:ee:cc:05:ac:b2:9d: 2c:71:65:6c:e8:2b:05:1b:fc:cf:3c:d1:0c:c8:d5: 94:d5:e8:f6:29:03:e7:83:35:c6:1a:db:d7:a0:7e: f9:5f:34:a9:cd:52:7e:a3:26:2d:c9:73:0c:38:36: 7c:f2:ac:11:b5:3b:8e:65:02:2d:50:f5:18:ca:82: a6:15:b7:fe:a7:37:d8:7a:41:1a:5b:be:cc:15:89: cd:10:b0:78:74:d5:cb:ad:e9:b1:e4:14:0e:6f:6b: 59:c8:8c:4d:e9:6c:3a:d1:fa:0d:4e:05:2f:b3:ef: f6:c9:50:81:98:2d:85:d4:08:c0:09:ff:46:b0:b4: a9:99:07:63:c9:3d:81:9a:29:7b:e4:4a:92:7c:cd: d0:b2:ad:d0:1e:cc:19:a0:fd:8c:1f:b0:97:91:76: e9:dc:c0:4a:ba:31:e7:e5:8d:51:50:b2:82:88:ba: 7c:5e:ee:67:36:c0:cf:ba:19:53:6e:09:f8:c0:eb: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1F:7C:B0:85:C0:69:55:AC:78:9F:E8:FC:02:77:B2:71:67:04:D6 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:86:33:ee:1f:13:33:b4:05:d2:68:8a:37:65:3b:b0:46:f4: 58:b0:37:d8:c8:30:04:52:90:b3:b7:28:40:2e:b9:c0:82:61: 60:97:bd:81:20:d3:bb:38:72:42:32:1d:47:67:0f:74:96:1a: 4d:83:b7:e3:73:81:49:b9:bd:79:6f:a3:22:08:36:29:32:c7: 24:f5:e7:91:de:95:25:a0:0b:09:17:4b:74:6c:f2:e9:01:65: df:ad:59:84:e2:d8:ec:f4:29:d3:3c:f6:9e:96:ae:c0:e0:ba: 49:d0:57:a2:20:b8:2e:f2:d6:37:36:4e:cb:9b:6e:b1:90:c9: c9:0b:5c:e2:bc:9d:2f:71:fd:21:a9:6c:30:5a:bb:8d:5d:50: a7:31:fc:f4:4c:79:25:73:94:35:7c:bf:de:dd:c8:08:c5:ec: 69:5a:95:dc:67:96:18:02:d5:9c:b7:58:22:e9:f6:5a:89:86: b2:24:b6:94:7a:2d:0b:5f:24:cb:2f:c3:58:3f:33:fe:8e:34: 02:86:75:81:4c:10:82:4f:be:11:df:32:15:d8:46:0d:33:96: d9:45:8d:49:d2:d3:5d:cb:e6:5f:9b:2c:6f:73:33:99:9b:8c: 10:5d:06:de:82:85:94:e9:79:f5:de:9f:13:0a:df:0e:d1:2a: cf:58:6a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjYwMzI0MTYyNDQ0WhcNMjYwMzMxMTYyNDQ0WjAYMRYwFAYD VQQDEw02OWMyYmFjYy0zZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye9S+4iYUmD5buvyEFmGMnkU3ylR1r933QZjnU4G0ELrtYnIJRMWB1GrgiwW AWLWOSxllNNZvxDWsxL6s7ueoVuU7VHuzAWssp0scWVs6CsFG/zPPNEMyNWU1ej2 KQPngzXGGtvXoH75XzSpzVJ+oyYtyXMMODZ88qwRtTuOZQItUPUYyoKmFbf+pzfY ekEaW77MFYnNELB4dNXLremx5BQOb2tZyIxN6Ww60foNTgUvs+/2yVCBmC2F1AjA Cf9GsLSpmQdjyT2Bmil75EqSfM3Qsq3QHswZoP2MH7CXkXbp3MBKujHn5Y1RULKC iLp8Xu5nNsDPuhlTbgn4wOtNDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoffLCF wGlVrHif6PwCd7JxZwTWMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqYYz7h8TM7QF0miKN2U7sEb0WLA32MgwBFKQs7coQC65wIJhYJe9gSDTuzhy QjIdR2cPdJYaTYO343OBSbm9eW+jIgg2KTLHJPXnkd6VJaALCRdLdGzy6QFl361Z hOLY7PQp0zz2npauwOC6SdBXoiC4LvLWNzZOy5tusZDJyQtc4rydL3H9IalsMFq7 jV1QpzH89Ex5JXOUNXy/3t3ICMXsaVqV3GeWGALVnLdYIun2WomGsiS2lHotC18k yy/DWD8z/o40AoZ1gUwQgk++Ed8yFdhGDTOW2UWNSdLTXcvmX5ssb3MzmZuMEF0G 3oKFlOl59d6fEwrfDtEqz1hqUg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:32 2026 by rpki-client