$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: dU0vGwiDC3+NaffJj9sHdILpsz3L73EWXkWejvOfx5U= Subject key identifier: 27:2B:71:CB:65:29:74:C4:89:74:B6:47:91:B1:D9:CB:9C:43:DF:83 Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 0973 Signing time: Tue 24 Mar 2026 20:02:02 +0000 Manifest this update: Tue 24 Mar 2026 20:02:02 +0000 Manifest next update: Tue 31 Mar 2026 20:02:02 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: mn/3i0nZDTnc1ayswRwwcX1LCHObqFknSOocyzJa5Jw=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: 5RbDYlZaIKQenAR20w6lc3nfzj9SDGCtSWGXdzXfTX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Mar 24 20:02:02 2026 GMT Not After : Mar 31 20:02:02 2026 GMT Subject: CN=69c2edba-7038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:27:71:1f:14:b4:9c:a8:38:e7:73:5b:61: 5e:c1:4f:16:55:31:b6:b8:0d:54:a2:6e:3e:e3:1b: de:c2:43:b8:23:33:f0:45:49:7c:13:01:c7:ae:af: 07:0c:b4:ef:a5:a9:70:29:63:c6:69:38:98:c2:77: a1:81:28:b7:b2:3f:75:93:1a:25:6c:2a:82:b1:20: 00:7f:66:e3:c3:1d:55:2d:fb:cd:d1:7f:e6:54:56: cf:f2:c2:ed:5c:59:d9:d8:7d:27:4b:4d:a0:61:e5: 05:4c:39:cb:cc:e7:00:d6:21:09:c9:c0:87:b0:dc: a0:79:b0:a9:e0:fe:dc:12:a1:69:df:f5:20:18:b0: 80:97:0f:8c:39:0f:10:4e:7a:cb:dc:d8:8c:f9:0b: d8:48:a1:10:ba:c2:e3:79:bb:3c:3e:26:b1:e7:c2: 1d:f4:7e:74:a3:b3:96:28:4a:f8:e7:45:31:af:22: 1a:63:94:d8:97:22:ab:4b:7a:ea:ac:47:79:33:64: 84:78:c1:37:79:ed:5b:d2:7a:a0:8e:2b:dc:44:c0: d1:9c:4f:05:b0:c2:06:75:28:b6:3b:07:66:67:73: 08:11:dd:5f:5e:bd:de:c8:bb:bd:c5:32:0c:cf:cb: 42:ac:65:b9:3f:09:02:58:90:8d:3f:60:50:16:bc: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:71:CB:65:29:74:C4:89:74:B6:47:91:B1:D9:CB:9C:43:DF:83 X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:0a:b3:df:d3:1a:32:a0:d7:10:2b:e7:75:62:99:81:0b:ed: be:c0:ee:ae:45:91:5e:14:64:a6:52:66:8a:b9:20:40:e7:d7: 00:57:ce:24:b3:be:19:24:1a:26:34:f4:d5:1a:a1:72:78:b7: 55:c5:9b:74:72:a4:6c:d9:b0:bb:a3:74:1d:7c:61:7c:13:21: aa:d2:dc:9d:f0:79:40:5e:ac:d9:c3:e7:02:ce:94:cf:a5:3e: 3d:2b:4d:0c:7b:64:50:b5:2a:87:e3:ee:a5:d5:ce:f3:08:a1: cb:02:a9:a9:e7:29:5a:9a:68:d7:a0:cf:63:e8:d2:cb:52:da: 73:61:47:6b:fa:5a:30:33:7e:a9:5f:db:37:71:d4:3b:0b:6a: 3b:a7:6d:eb:84:78:64:b9:0a:f2:a1:64:53:36:67:c4:49:fd: e7:2f:1a:fc:16:46:07:78:fb:4d:32:cf:65:1b:ff:e8:64:5b: 57:9f:58:93:76:20:fd:95:d9:71:1e:00:ec:45:5a:47:7c:47: 95:ae:c6:fe:da:8a:d4:03:e3:9f:c3:2a:df:07:12:07:ab:b2: fd:b7:fe:5a:67:04:96:5f:85:02:9c:fd:82:e9:64:2a:44:95: 3a:77:9e:68:d1:9d:b5:a7:60:46:48:73:82:16:f1:27:ad:e6: 6d:47:34:d4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNjAzMjQyMDAyMDJaFw0yNjAzMzEyMDAyMDJaMBgxFjAUBgNV BAMTDTY5YzJlZGJhLTcwMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyBCdxHxS0nKg453NbYV7BTxZVMba4DVSibj7jG97CQ7gjM/BFSXwTAceurwcM tO+lqXApY8ZpOJjCd6GBKLeyP3WTGiVsKoKxIAB/ZuPDHVUt+83Rf+ZUVs/ywu1c WdnYfSdLTaBh5QVMOcvM5wDWIQnJwIew3KB5sKng/twSoWnf9SAYsICXD4w5DxBO esvc2Iz5C9hIoRC6wuN5uzw+JrHnwh30fnSjs5YoSvjnRTGvIhpjlNiXIqtLeuqs R3kzZIR4wTd57VvSeqCOK9xEwNGcTwWwwgZ1KLY7B2ZncwgR3V9evd7Iu73FMgzP y0KsZbk/CQJYkI0/YFAWvI3dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJytxy2Up dMSJdLZHkbHZy5xD34MwHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCwCrPf0xoyoNcQK+d1YpmBC+2+wO6uRZFeFGSmUmaKuSBA59cAV84ks74ZJBom NPTVGqFyeLdVxZt0cqRs2bC7o3QdfGF8EyGq0tyd8HlAXqzZw+cCzpTPpT49K00M e2RQtSqH4+6l1c7zCKHLAqmp5ylammjXoM9j6NLLUtpzYUdr+lowM36pX9s3cdQ7 C2o7p23rhHhkuQryoWRTNmfESf3nLxr8FkYHePtNMs9lG//oZFtXn1iTdiD9ldlx HgDsRVpHfEeVrsb+2orUA+OfwyrfBxIHq7L9t/5aZwSWX4UCnP2C6WQqRJU6d55o 0Z21p2BGSHOCFvEnreZtRzTU -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:25 2026 by rpki-client