$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: bl5hi0lJ7O6orgRen85GOhLwRZAEDYI3K0CF3mhldyY= Subject key identifier: A8:9C:4F:B4:C5:A5:26:5C:B7:87:B0:F3:ED:EA:D6:8B:A8:D2:9F:BC Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 019A Signing time: Wed 25 Mar 2026 03:41:22 +0000 Manifest this update: Wed 25 Mar 2026 03:41:22 +0000 Manifest next update: Wed 01 Apr 2026 03:41:22 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: gYNYpFBDhxdQblx8EyKOoCWGqN4NCJDwpzMb5wO0bHA=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: 4MonzweCLEnl+TnK4Sp/6IiK94a2qiwQ1O3fFdo89mM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Mar 25 03:41:22 2026 GMT Not After : Apr 1 03:41:22 2026 GMT Subject: CN=69c35962-2d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:d8:b2:b9:02:60:14:be:e4:0f:c1:d0:b2: e9:9f:e3:ac:4b:2d:9d:93:85:21:d4:a6:5c:60:b0: 75:a4:ab:1f:01:c6:a1:b6:c9:ed:dd:63:e8:66:46: e8:04:30:b5:89:84:ba:f1:bc:25:da:ed:a5:51:4a: 84:1d:35:1d:c0:90:f0:48:d7:d0:36:11:35:66:bc: 4e:d1:98:fb:25:7f:97:f0:d2:5e:6b:b3:dc:14:bc: b8:ae:87:82:d5:48:e0:18:8a:2b:c1:b4:ff:66:b8: 8e:f6:62:a0:59:da:e0:78:cc:df:88:77:1f:24:bc: 73:a7:21:2a:93:17:24:4a:c8:49:d9:31:bf:02:90: ef:ec:02:a7:25:93:ea:d6:d1:7d:f3:f4:0b:a1:0c: f3:69:e0:63:49:92:9e:fe:a2:b3:21:31:c4:2d:53: 66:e6:38:08:ab:ba:57:4e:a8:8a:2d:f5:d4:e3:15: d9:c3:49:ba:62:d2:f2:ce:8f:ad:94:8e:5b:1c:3d: d6:47:db:d5:c1:6f:f9:94:60:fa:dc:3e:dd:e1:f9: 3b:1f:69:c2:ae:e5:63:77:98:e9:01:0b:4a:ed:60: 43:7e:04:a0:dd:f9:d4:a0:6c:87:b4:79:06:a9:04: 7f:d3:f1:d1:66:f8:85:90:2c:e7:46:59:a1:d4:c7: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9C:4F:B4:C5:A5:26:5C:B7:87:B0:F3:ED:EA:D6:8B:A8:D2:9F:BC X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:6d:9e:0c:50:66:63:63:c0:f5:4c:84:0b:d8:5f:03:15:8e: bb:b3:be:a8:4b:98:1d:f8:26:98:85:5e:fc:c0:65:0e:7c:cb: fb:74:bf:ca:78:a6:81:7e:52:2f:60:2e:1f:ff:7f:4a:2e:65: 49:8b:6c:bc:50:33:fe:f9:63:e3:92:cc:cf:fe:fc:af:fd:e3: 99:80:9c:41:5d:97:f7:78:df:13:07:48:b0:3a:8b:bf:2a:da: 9f:b1:de:17:7f:d4:de:a3:af:b4:98:77:9e:1c:3c:3f:cf:51: 9e:ba:9c:3e:73:c4:ed:7c:e8:99:49:2e:d8:a1:8b:05:ea:be: c8:4b:33:a4:22:f6:51:00:96:bf:40:fa:b7:4b:7e:7f:01:55: 07:05:21:de:47:6f:4f:e1:04:41:29:6f:70:70:b7:d0:23:75: 6d:b2:a8:6d:d4:ff:9e:5d:6e:b8:71:af:36:95:17:64:da:b7: 96:e0:49:93:6e:5e:ed:ff:70:f9:6e:0b:b2:9e:11:6d:cd:3b: d5:af:d9:75:f4:f4:7e:df:f6:fd:c8:05:38:e5:40:0c:36:b9: 6a:76:cd:e3:11:a9:2f:68:19:85:2b:ce:1f:dc:e9:28:46:c2: dc:6f:29:e3:d7:b6:b6:83:ea:ea:bf:ca:68:40:c6:43:be:4c: e9:73:a9:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjYwMzI1MDM0MTIyWhcNMjYwNDAxMDM0MTIyWjAYMRYwFAYD VQQDEw02OWMzNTk2Mi0yZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgDYsrkCYBS+5A/B0LLpn+OsSy2dk4Uh1KZcYLB1pKsfAcahtsnt3WPoZkbo BDC1iYS68bwl2u2lUUqEHTUdwJDwSNfQNhE1ZrxO0Zj7JX+X8NJea7PcFLy4roeC 1UjgGIorwbT/ZriO9mKgWdrgeMzfiHcfJLxzpyEqkxckSshJ2TG/ApDv7AKnJZPq 1tF98/QLoQzzaeBjSZKe/qKzITHELVNm5jgIq7pXTqiKLfXU4xXZw0m6YtLyzo+t lI5bHD3WR9vVwW/5lGD63D7d4fk7H2nCruVjd5jpAQtK7WBDfgSg3fnUoGyHtHkG qQR/0/HRZviFkCznRlmh1Md5xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKicT7TF pSZct4ew8+3q1ouo0p+8MB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIW2eDFBmY2PA9UyEC9hfAxWOu7O+qEuYHfgmmIVe/MBlDnzL+3S/ynimgX5S L2AuH/9/Si5lSYtsvFAz/vlj45LMz/78r/3jmYCcQV2X93jfEwdIsDqLvyran7He F3/U3qOvtJh3nhw8P89RnrqcPnPE7XzomUku2KGLBeq+yEszpCL2UQCWv0D6t0t+ fwFVBwUh3kdvT+EEQSlvcHC30CN1bbKobdT/nl1uuHGvNpUXZNq3luBJk25e7f9w +W4Lsp4Rbc071a/ZdfT0ft/2/cgFOOVADDa5anbN4xGpL2gZhSvOH9zpKEbC3G8p 49e2toPq6r/KaEDGQ75M6XOpLg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:31:42 2026 by rpki-client