$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft File: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft (raw, json) Hash identifier: llNZiZexnMsQTxXjD70F+JOaQux/Av4se0YWBoZU7Yk= Subject key identifier: DF:A8:48:AA:2C:D2:E4:F6:9C:17:21:8A:85:09:35:4F:B3:12:71:93 Authority key identifier: 65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D Certificate issuer: /CN=A91DC76E/serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft Manifest number: 09 Signing time: Wed 25 Mar 2026 08:20:01 +0000 Manifest this update: Wed 25 Mar 2026 08:20:00 +0000 Manifest next update: Wed 01 Apr 2026 08:20:00 +0000 Files and hashes: 1: ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl (hash: M1bkrtpXapbdfp0JFF+zBvJfQMSplyykA36dhFEw00g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC76E, serialNumber=658A5901025E26B7176DD2ADAEABB67CF0A1ED1D Validity Not Before: Mar 25 08:20:00 2026 GMT Not After : Apr 1 08:20:00 2026 GMT Subject: CN=69c39ab1-a6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:e1:38:69:75:e3:87:19:f4:4a:c4:f1:e6: ae:ec:75:c5:47:c7:ce:f7:b7:5d:d5:7c:81:32:99: de:e5:cc:60:f9:ee:fd:91:23:8c:50:05:48:55:0d: 9b:1d:c9:7e:40:8f:b3:31:a2:ec:5b:1b:3f:55:e6: a1:de:0b:c6:48:d5:38:80:27:86:db:63:16:ba:db: c5:38:2f:10:66:22:0f:41:c0:72:34:4b:d3:e1:73: 64:83:45:9b:c1:1a:5c:96:fa:fd:f7:d6:02:5a:fa: 72:72:30:96:fa:af:fe:ab:ce:19:ce:f3:7c:2b:99: 97:77:63:8b:4a:24:af:d2:30:86:e2:e8:56:55:ff: 41:d6:33:de:73:64:08:af:1c:a8:d9:d9:b3:7f:d3: 23:7f:ae:2b:3b:a5:6b:29:bb:12:e8:dc:30:80:90: ce:fc:90:b1:41:1f:08:02:e9:e3:59:ce:81:9b:cc: e5:87:c5:00:01:d9:2a:c5:9c:a9:58:f2:07:8f:58: ae:0f:47:72:2a:4f:82:70:30:22:7b:1d:91:16:72: 8b:40:d7:bf:57:0e:f7:c0:8d:94:c5:54:08:4b:d4: 37:75:50:41:70:53:e4:ef:e0:74:ce:c5:cf:61:b7: b6:a7:7f:bd:1c:f1:4a:c8:a6:c6:85:fc:42:d5:e8: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:48:AA:2C:D2:E4:F6:9C:17:21:8A:85:09:35:4F:B3:12:71:93 X509v3 Authority Key Identifier: keyid:65:8A:59:01:02:5E:26:B7:17:6D:D2:AD:AE:AB:B6:7C:F0:A1:ED:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC76E/D5B04DF21CFC11F1A90879D8413D8C67/ZYpZAQJeJrcXbdKtrqu2fPCh7R0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:8a:56:47:c4:8b:80:b6:e7:d9:41:73:bc:ff:cf:4e:8c:f0: b1:03:55:33:c2:b4:34:e4:ea:26:00:0a:ba:29:c8:21:40:46: ac:78:18:93:49:e2:b0:ff:bb:ae:03:92:75:12:5c:6a:5a:c0: 47:52:c8:58:e5:f9:a0:29:d4:98:82:66:de:ae:69:3a:35:8d: d0:ea:e3:64:c2:7a:58:cf:34:40:86:f0:7e:d5:41:8a:48:17: f9:58:43:22:75:06:b8:79:ad:d9:e3:b5:64:fb:05:10:17:a1: 2d:63:40:95:65:b0:e3:dc:a1:c4:7f:aa:67:0b:41:c3:ce:ab: b3:24:a4:66:44:e5:0d:c5:aa:6a:24:a4:d2:81:61:4a:97:38: b6:24:5f:7d:c6:eb:fb:a2:a6:87:76:84:d5:7e:2f:d2:5f:37: 75:1b:15:88:22:73:32:5b:fa:e3:5d:c8:af:10:fb:f1:67:33: 5d:91:bd:6e:c1:06:13:18:86:ba:d1:7e:01:a9:60:9f:f1:fc: 1f:0f:f5:e1:fe:9d:80:2a:fc:07:c4:9c:61:5d:96:9d:0b:26: c9:be:08:0c:db:26:1d:b2:ec:10:ca:d1:7c:2e:9d:db:1e:fc: f7:e6:47:22:16:bf:15:c5:bc:71:be:a0:09:2e:0f:6e:91:77: fa:bc:83:9f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzc2RTExMC8GA1UEBRMoNjU4QTU5MDEwMjVFMjZCNzE3NkREMkFEQUVBQkI2N0NG MEExRUQxRDAeFw0yNjAzMjUwODIwMDBaFw0yNjA0MDEwODIwMDBaMBgxFjAUBgNV BAMTDTY5YzM5YWIxLWE2ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmEuE4aXXjhxn0SsTx5q7sdcVHx873t13VfIEymd7lzGD57v2RI4xQBUhVDZsd yX5Aj7MxouxbGz9V5qHeC8ZI1TiAJ4bbYxa628U4LxBmIg9BwHI0S9Phc2SDRZvB GlyW+v331gJa+nJyMJb6r/6rzhnO83wrmZd3Y4tKJK/SMIbi6FZV/0HWM95zZAiv HKjZ2bN/0yN/ris7pWspuxLo3DCAkM78kLFBHwgC6eNZzoGbzOWHxQAB2SrFnKlY 8gePWK4PR3IqT4JwMCJ7HZEWcotA179XDvfAjZTFVAhL1Dd1UEFwU+Tv4HTOxc9h t7anf70c8UrIpsaF/ELV6O/HAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU36hIqizS 5PacFyGKhQk1T7MScZMwHwYDVR0jBBgwFoAUZYpZAQJeJrcXbdKtrqu2fPCh7R0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDNzZFL0Q1QjA0REYyMUNG QzExRjFBOTA4NzlEODQxM0Q4QzY3L1pZcFpBUUplSnJjWGJkS3RycXUyZlBDaDdS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWllwWkFRSmVKcmNYYmRLdHJxdTJmUENoN1IwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD NzZFL0Q1QjA0REYyMUNGQzExRjFBOTA4NzlEODQxM0Q4QzY3L1pZcFpBUUplSnJj WGJkS3RycXUyZlBDaDdSMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC4ilZHxIuAtufZQXO8/89OjPCxA1UzwrQ05OomAAq6KcghQEaseBiTSeKw/7uu A5J1ElxqWsBHUshY5fmgKdSYgmbermk6NY3Q6uNkwnpYzzRAhvB+1UGKSBf5WEMi dQa4ea3Z47Vk+wUQF6EtY0CVZbDj3KHEf6pnC0HDzquzJKRmROUNxapqJKTSgWFK lzi2JF99xuv7oqaHdoTVfi/SXzd1GxWIInMyW/rjXcivEPvxZzNdkb1uwQYTGIa6 0X4BqWCf8fwfD/Xh/p2AKvwHxJxhXZadCybJvggM2yYdsuwQytF8Lp3bHvz35kci Fr8VxbxxvqAJLg9ukXf6vIOf -----END CERTIFICATE-----Generated at Thu Mar 26 06:03:11 2026 by rpki-client