$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: BDNglwVmIks5zCt+nJUrcCX0h6p27VclC/h8y3ki7sU= Subject key identifier: 31:60:9A:E2:C3:7B:4E:C6:79:2B:17:E3:97:0E:E5:36:11:1A:7E:1C Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 0117 Signing time: Wed 25 Mar 2026 05:07:40 +0000 Manifest this update: Wed 25 Mar 2026 05:07:39 +0000 Manifest next update: Wed 01 Apr 2026 05:07:39 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: NFq8Qqn1wR386sW5pQNTMfdxtAolzjWK+wD9ZhDFIkQ=) 2: 4694313A887211EF840E431CC4F9AE02.roa (hash: eif617S5bX0Z7ndJMVLfruP5oLQH3qStAeh61KPNYBo=) 3: A54B071C887211EFAC44513CC4F9AE02.roa (hash: A+hlWvL+lcb0OAC4v/UaMyQV/3V/t7kpEeh0OoWWKV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Mar 25 05:07:39 2026 GMT Not After : Apr 1 05:07:39 2026 GMT Subject: CN=69c36d9c-fae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:0c:00:8b:dd:e4:db:a0:aa:97:c8:f7:78: 4b:da:58:e7:97:48:2f:08:50:14:33:80:7b:3a:91: 83:f9:d7:bb:a6:ce:22:8c:b8:61:8b:9d:13:cd:90: 41:a3:36:76:11:26:e6:ab:dd:63:32:f4:76:df:a9: 34:9b:62:e9:42:f7:0e:ad:25:95:52:1f:50:37:8b: 70:d6:0a:d5:4a:cc:09:e3:e2:58:4e:22:2c:8c:23: 63:23:aa:56:c0:a0:c7:3c:b8:58:6c:16:94:c6:92: ce:b1:a2:b0:00:15:f3:71:5a:9c:ec:2f:7e:e3:c7: 8b:dd:a9:a1:0b:15:75:99:10:57:48:df:39:a2:8e: 58:6f:8a:2d:d2:68:54:b7:50:fa:f1:9d:ca:c0:a0: 80:a6:dc:4b:5f:d9:6e:3a:5a:a3:39:b0:3d:2b:3c: f7:76:89:07:c5:26:09:ad:95:21:36:ee:02:2d:5c: 4d:54:4f:5d:d3:6d:14:6d:9f:3d:e2:c0:fc:32:77: 3b:04:aa:78:9f:7a:55:e6:32:93:d5:47:d4:31:13: 9f:32:7e:9d:d5:b5:bb:ba:af:ca:24:44:3f:50:78: 28:02:c5:f8:51:c8:d0:e3:ef:5f:ae:9c:d0:96:9b: fc:11:ec:82:e5:b3:dc:47:e2:04:5a:18:58:17:a3: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:60:9A:E2:C3:7B:4E:C6:79:2B:17:E3:97:0E:E5:36:11:1A:7E:1C X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:93:c8:11:5f:c4:f2:6f:bb:41:a3:e1:be:70:ff:35:8b:72: 89:47:50:d4:9c:24:ff:3d:42:fc:aa:f2:47:69:66:5a:52:6a: 5a:3c:18:d4:79:08:3c:8d:c1:1b:a0:fe:bf:e5:69:35:0f:d1: 3e:f4:80:c0:15:e4:fa:30:dc:c8:1c:0d:36:4a:bc:5d:2e:1a: 1c:e4:66:d5:b7:4d:f9:42:72:91:1b:2d:bc:de:77:43:32:00: 27:be:bc:38:2a:bb:b5:7f:29:4d:19:ec:fa:5b:15:52:d4:0f: 67:63:06:35:75:8b:84:b0:8b:ea:ee:de:e2:b0:ba:c5:64:5d: 8a:68:c2:40:80:b8:df:1b:ef:cf:2d:3b:b8:86:b6:ce:b2:49: 8f:cc:c4:92:f4:4b:c0:42:45:5b:a7:af:d0:86:bf:74:59:43: 00:c3:17:9c:df:b1:25:33:f5:95:61:64:d2:b8:91:c8:50:fc: c9:ab:e8:19:69:23:dd:37:7a:f4:60:a4:e4:1e:8f:63:69:d7: 5e:bd:f8:fc:af:3e:c8:7f:52:db:32:1b:59:7c:84:40:69:08: e9:1f:25:a9:e0:23:76:9f:1e:13:64:ba:5b:53:8c:d1:90:1f: b3:da:6b:c3:64:c5:fb:78:4e:56:2b:73:7e:ca:cb:fe:78:a3: ab:c1:cb:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjYwMzI1MDUwNzM5WhcNMjYwNDAxMDUwNzM5WjAYMRYwFAYD VQQDEw02OWMzNmQ5Yy1mYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEcMAIvd5NugqpfI93hL2ljnl0gvCFAUM4B7OpGD+de7ps4ijLhhi50TzZBB ozZ2ESbmq91jMvR236k0m2LpQvcOrSWVUh9QN4tw1grVSswJ4+JYTiIsjCNjI6pW wKDHPLhYbBaUxpLOsaKwABXzcVqc7C9+48eL3amhCxV1mRBXSN85oo5Yb4ot0mhU t1D68Z3KwKCAptxLX9luOlqjObA9Kzz3dokHxSYJrZUhNu4CLVxNVE9d020UbZ89 4sD8Mnc7BKp4n3pV5jKT1UfUMROfMn6d1bW7uq/KJEQ/UHgoAsX4UcjQ4+9frpzQ lpv8EeyC5bPcR+IEWhhYF6NYKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFgmuLD e07GeSsX45cO5TYRGn4cMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJPIEV/E8m+7QaPhvnD/NYtyiUdQ1Jwk/z1C/KryR2lmWlJqWjwY1HkIPI3B G6D+v+VpNQ/RPvSAwBXk+jDcyBwNNkq8XS4aHORm1bdN+UJykRstvN53QzIAJ768 OCq7tX8pTRns+lsVUtQPZ2MGNXWLhLCL6u7e4rC6xWRdimjCQIC43xvvzy07uIa2 zrJJj8zEkvRLwEJFW6ev0Ia/dFlDAMMXnN+xJTP1lWFk0riRyFD8yavoGWkj3Td6 9GCk5B6PY2nXXr34/K8+yH9S2zIbWXyEQGkI6R8lqeAjdp8eE2S6W1OM0ZAfs9pr w2TF+3hOVitzfsrL/nijq8HLTg== -----END CERTIFICATE-----Generated at Thu Mar 26 09:06:12 2026 by rpki-client