$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: j48xb/BBe3FDH/9KtrD07/NTxUGLpdi23XYBNguD4d8= Subject key identifier: CF:59:35:23:85:30:2C:AC:81:89:70:4B:A0:51:08:E4:F7:67:77:2D Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0D20 Signing time: Thu 26 Mar 2026 18:03:28 +0000 Manifest this update: Thu 26 Mar 2026 18:03:27 +0000 Manifest next update: Thu 02 Apr 2026 18:03:27 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: 3PgWEoZrKsUClA+eCyJN2aHtsOQGwkF8ALhfn7gdt3g=) 2: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: uG1n6oQlH/BD2kN8eezzTV0mrmttdYgvZK05ssYpezk=) 3: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: tYrptTReRqZO1YPDqoVNFDI5YhGz7SlI6PvwAcljtcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3395 (0xd43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Mar 26 18:03:27 2026 GMT Not After : Apr 2 18:03:27 2026 GMT Subject: CN=69c574f0-606e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:7a:a5:93:ad:96:f9:fc:cb:74:99:0a:00: f8:8a:42:aa:62:db:e7:ba:d5:c0:37:93:22:af:ab: f5:0f:3c:59:35:78:45:a7:57:f1:a2:e1:4e:44:38: a8:43:28:7c:b8:b9:d7:9f:79:59:d7:8e:e8:cc:2c: aa:48:e7:b2:7a:40:70:bc:97:86:9e:c3:de:b2:d6: 31:a7:f3:b5:83:d4:67:2c:d6:19:fa:97:4c:3b:53: c4:83:36:39:a9:fa:15:d3:0a:26:00:3d:ae:f8:56: be:84:3b:42:06:28:1f:c0:cd:b3:76:cf:63:95:58: c7:7e:ca:05:81:1d:75:c4:e1:f0:9e:98:97:45:93: 4c:e9:a4:f4:2a:e2:61:27:aa:be:b3:5b:d9:2d:df: 53:bd:8a:1e:bd:7c:5b:17:43:e0:5f:84:02:b2:b5: 78:37:99:af:5b:be:68:d7:a8:52:59:92:4d:c4:55: 40:80:67:7e:1e:26:98:3d:36:e8:5c:f8:84:52:ee: 71:9f:7f:28:57:65:b5:57:34:e8:45:1d:01:eb:37: 99:66:60:73:a3:41:d6:be:d4:da:19:dc:a7:6a:5e: 4f:70:7c:78:a1:1f:e7:d7:fb:ce:1d:d5:92:9d:d3: 15:8f:ea:7e:4d:e4:ba:fe:d7:97:36:75:c8:36:f3: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:59:35:23:85:30:2C:AC:81:89:70:4B:A0:51:08:E4:F7:67:77:2D X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:ac:23:a4:5e:64:8d:1d:ce:d7:0d:5d:ee:a7:6b:af:0a:32: 69:d2:f3:dc:cb:d7:91:98:ea:7d:39:78:fa:08:b0:df:a9:3d: b4:93:96:e8:4d:ee:35:0e:38:a0:e9:ca:06:6e:f3:ad:48:1d: 89:41:6e:bc:1b:de:5a:50:56:dd:0c:33:47:6c:c3:89:ae:57: 85:c5:45:ef:9b:7c:40:75:db:67:15:39:fc:b6:34:76:97:4e: 85:a6:4b:06:55:bc:90:82:0f:bb:af:d2:24:27:f3:3b:2b:7c: 17:de:cf:9d:ca:e0:5d:e1:0e:4c:7f:19:dc:a8:99:d9:23:13: 88:9a:ee:3a:24:6e:9b:7b:98:d7:6b:52:75:53:1f:c5:c5:15: 9c:fb:f8:05:bc:fa:25:f7:a3:5e:aa:4d:06:f2:d5:e0:ab:73: 86:6b:80:18:23:ca:14:4b:12:b3:05:a5:0c:17:75:45:0b:8d: 86:9c:34:8f:31:fa:24:0d:10:81:5a:9c:8d:82:43:18:40:f8: ac:73:9d:14:16:5c:80:b7:d5:da:fd:cd:d8:61:c6:fe:03:0f: 39:62:aa:65:a4:64:ea:1e:16:5f:87:21:08:35:62:fe:d9:9e: e7:1d:b5:f9:ab:8c:31:1d:2a:2c:c4:af:77:0e:39:e7:75:4c: f3:3f:b1:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjYwMzI2MTgwMzI3WhcNMjYwNDAyMTgwMzI3WjAYMRYwFAYD VQQDEw02OWM1NzRmMC02MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvZ6pZOtlvn8y3SZCgD4ikKqYtvnutXAN5Mir6v1DzxZNXhFp1fxouFORDio Qyh8uLnXn3lZ147ozCyqSOeyekBwvJeGnsPestYxp/O1g9RnLNYZ+pdMO1PEgzY5 qfoV0womAD2u+Fa+hDtCBigfwM2zds9jlVjHfsoFgR11xOHwnpiXRZNM6aT0KuJh J6q+s1vZLd9TvYoevXxbF0PgX4QCsrV4N5mvW75o16hSWZJNxFVAgGd+HiaYPTbo XPiEUu5xn38oV2W1VzToRR0B6zeZZmBzo0HWvtTaGdynal5PcHx4oR/n1/vOHdWS ndMVj+p+TeS6/teXNnXINvP7SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9ZNSOF MCysgYlwS6BRCOT3Z3ctMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1qwjpF5kjR3O1w1d7qdrrwoyadLz3MvXkZjqfTl4+giw36k9tJOW6E3uNQ44 oOnKBm7zrUgdiUFuvBveWlBW3QwzR2zDia5XhcVF75t8QHXbZxU5/LY0dpdOhaZL BlW8kIIPu6/SJCfzOyt8F97PncrgXeEOTH8Z3KiZ2SMTiJruOiRum3uY12tSdVMf xcUVnPv4Bbz6JfejXqpNBvLV4KtzhmuAGCPKFEsSswWlDBd1RQuNhpw0jzH6JA0Q gVqcjYJDGED4rHOdFBZcgLfV2v3N2GHG/gMPOWKqZaRk6h4WX4chCDVi/tme5x21 +auMMR0qLMSvdw4553VM8z+x5A== -----END CERTIFICATE-----Generated at Sat Mar 28 12:15:20 2026 by rpki-client