$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: a4eCMiSBKw/BJak2a30pjYSi5JDGlZBF+3aViDacH3Y= Subject key identifier: C6:DA:5C:17:48:59:EC:B5:31:45:44:C1:EC:1F:1A:52:D9:0A:8B:6C Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0CDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0CD4 Signing time: Tue 24 Mar 2026 18:10:25 +0000 Manifest this update: Tue 24 Mar 2026 18:10:24 +0000 Manifest next update: Tue 31 Mar 2026 18:10:24 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: qp8aKfHS9YJOW3Dc5WQsIm2YGecCFFlzmLpt/Jo8SKY=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: meOvUnI6mZjXF6pHdFTMnP3Ln7ggpvg5+mk6tSp8zNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3292 (0xcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Mar 24 18:10:24 2026 GMT Not After : Mar 31 18:10:24 2026 GMT Subject: CN=69c2d391-46b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:ae:77:b2:73:d9:5f:1c:1e:2e:62:cd:d4: e9:5d:09:23:1e:9c:40:28:86:97:9e:e8:88:43:d1: e6:23:6e:cf:72:5f:aa:f9:07:64:5b:57:ed:f9:68: e2:a1:b7:f0:34:40:a2:42:b3:20:ac:97:1d:80:62: 1e:cc:3f:9b:6d:d0:f3:91:76:0f:c7:77:f9:2e:09: 04:64:a1:2a:44:d0:30:9b:3f:b3:46:34:65:37:29: 5f:1a:70:50:e0:ec:b2:58:90:ca:38:c5:23:2e:05: 63:70:2d:db:a0:c9:d6:6f:4f:e3:69:8e:4f:c4:a6: a8:7c:d8:48:a8:d2:f1:60:0c:d1:7e:05:5a:b8:8b: 22:34:16:87:2e:91:50:dd:09:b4:96:f3:e2:02:9c: be:94:c9:58:4a:c9:f9:f4:3a:25:87:21:a3:de:d7: 1d:8c:51:d3:b2:b0:4f:79:2e:f4:16:5a:dc:74:14: 44:4d:35:33:df:ff:64:97:7e:5d:11:97:a9:5f:4d: 94:2b:a6:70:05:d2:26:64:57:21:e5:13:6d:c6:03: 8e:25:f6:90:c6:a2:f3:f8:b8:3e:82:93:93:f6:51: e1:b3:6c:ec:9d:bf:81:87:8d:b2:3d:3b:ea:d1:0e: 77:47:ec:3b:0d:74:7e:55:ac:aa:56:05:ec:ca:c7: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DA:5C:17:48:59:EC:B5:31:45:44:C1:EC:1F:1A:52:D9:0A:8B:6C X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a1:53:f9:c4:dc:3e:8b:3a:1f:9a:2e:42:74:73:07:d3:4f: 9c:ec:fc:66:1b:d9:b0:c1:cf:2b:91:fe:1a:a1:00:b8:5e:80: 73:f4:55:e5:ba:5b:b5:18:d5:84:3e:de:f4:a1:47:d7:53:1b: a1:f0:5c:ed:cc:24:dd:40:0d:0e:0f:db:b5:71:19:39:b7:07: 87:07:e3:9b:69:66:21:05:32:cf:42:8a:6d:17:ce:25:8a:60: b2:5c:dd:a0:59:f7:fa:d3:41:b2:a4:ed:77:18:72:17:2e:0c: a6:92:50:13:a6:1e:0a:83:bd:81:3b:e3:df:89:fe:7f:2a:37: 5f:52:26:9f:a5:24:ba:2e:64:91:60:6b:60:db:da:d6:2f:9b: 26:ca:3f:07:5c:2f:bc:e0:74:1d:67:7e:7c:d4:fe:99:9b:5a: 42:5d:03:c1:23:83:94:99:ad:65:fe:53:ff:f8:80:2c:d3:41: 87:c5:b3:64:42:67:a9:6a:e2:48:0a:57:2d:3c:8f:0f:c5:ea: 74:95:08:04:8a:f4:3b:29:fb:3f:f9:14:40:e6:78:fd:83:af: 6a:c7:8e:c7:5e:1d:e1:e6:db:0f:bb:40:49:1b:6e:28:8e:e9: e0:74:29:b9:75:34:38:20:92:f4:04:3e:c5:f7:16:fb:ef:34: 97:e1:aa:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjYwMzI0MTgxMDI0WhcNMjYwMzMxMTgxMDI0WjAYMRYwFAYD VQQDEw02OWMyZDM5MS00NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYWud7Jz2V8cHi5izdTpXQkjHpxAKIaXnuiIQ9HmI27Pcl+q+QdkW1ft+Wji obfwNECiQrMgrJcdgGIezD+bbdDzkXYPx3f5LgkEZKEqRNAwmz+zRjRlNylfGnBQ 4OyyWJDKOMUjLgVjcC3boMnWb0/jaY5PxKaofNhIqNLxYAzRfgVauIsiNBaHLpFQ 3Qm0lvPiApy+lMlYSsn59DolhyGj3tcdjFHTsrBPeS70FlrcdBRETTUz3/9kl35d EZepX02UK6ZwBdImZFch5RNtxgOOJfaQxqLz+Lg+gpOT9lHhs2zsnb+Bh42yPTvq 0Q53R+w7DXR+VayqVgXsysfqxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbaXBdI Wey1MUVEwewfGlLZCotsMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjaFT+cTcPos6H5ouQnRzB9NPnOz8ZhvZsMHPK5H+GqEAuF6Ac/RV5bpbtRjV hD7e9KFH11MbofBc7cwk3UANDg/btXEZObcHhwfjm2lmIQUyz0KKbRfOJYpgslzd oFn3+tNBsqTtdxhyFy4MppJQE6YeCoO9gTvj34n+fyo3X1Imn6Ukui5kkWBrYNva 1i+bJso/B1wvvOB0HWd+fNT+mZtaQl0DwSODlJmtZf5T//iALNNBh8WzZEJnqWri SApXLTyPD8XqdJUIBIr0Oyn7P/kUQOZ4/YOvaseOx14d4ebbD7tASRtuKI7p4HQp uXU0OCCS9AQ+xfcW++80l+GqFw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:17 2026 by rpki-client