$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json) Hash identifier: xKbxuGwK8AeiXzMS6abud75BujhBrTbutQHoYbzmmhM= Subject key identifier: 91:23:EB:69:DC:F9:34:45:23:04:72:DE:4D:45:67:6F:FB:05:58:25 Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5 Certificate issuer: /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft Manifest number: 29 Signing time: Wed 25 Mar 2026 07:56:02 +0000 Manifest this update: Wed 25 Mar 2026 07:56:02 +0000 Manifest next update: Wed 01 Apr 2026 07:56:02 +0000 Files and hashes: 1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: B0jAwt0QJbKGcZuXAirdAnpsYJ6K1jmI9rRw+R2Pgbk=) 2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Zm5NVQiX1B1lMh6YYC6ofTBSfpDnYcLSn7pw+rOzSFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5 Validity Not Before: Mar 25 07:56:02 2026 GMT Not After : Apr 1 07:56:02 2026 GMT Subject: CN=69c39512-9761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b2:fa:d2:7f:1e:82:36:3c:b3:2f:b6:e7:81: 80:9c:2a:9c:45:d3:36:e0:e0:9a:62:61:45:d2:8a: a7:e2:3f:a7:76:7e:28:be:f5:87:2a:e5:f2:33:27: cb:56:de:0c:6b:ce:0d:1e:19:d8:40:d9:f5:bd:e8: 32:e1:03:c6:d3:82:f0:f7:fe:a0:37:c0:0c:e7:16: bf:f0:b1:64:b0:b1:56:bc:7e:c7:24:75:ce:62:32: 60:b7:8a:1c:97:f0:fd:c3:6e:98:0c:10:dd:5a:8a: c1:9f:f8:6d:31:fc:44:34:dd:01:27:7f:cc:ab:95: 62:19:2d:af:8c:ba:98:a5:12:b3:b3:07:09:0a:8a: 8e:bb:d6:67:00:ad:dd:4b:01:8d:f2:82:a4:c6:41: 06:bb:8c:6c:92:16:fa:03:f9:a7:ec:d1:54:7c:9a: 8d:f4:9a:29:25:72:6d:91:9d:93:3d:ac:d3:f5:55: 0b:c4:31:90:1f:b3:2c:5e:49:aa:37:f1:b8:17:b1: 42:f0:89:06:48:95:9a:57:3f:35:6f:23:68:ef:a0: f2:1e:41:4d:6a:5f:3a:63:24:c9:dd:29:47:fe:e8: ea:9d:a5:ca:74:61:80:9d:31:8d:df:48:7c:c3:8f: b2:8a:87:f5:9e:de:bf:34:fd:94:f7:25:0f:99:b2: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:23:EB:69:DC:F9:34:45:23:04:72:DE:4D:45:67:6F:FB:05:58:25 X509v3 Authority Key Identifier: keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6d:ab:80:f7:4d:0f:34:12:ba:b6:ef:6b:9f:27:2e:d0:50: 04:fe:02:31:53:24:bf:cf:51:1f:a0:c2:5e:8b:c1:1b:9a:ee: d8:d8:a5:95:19:af:ce:4d:8f:cd:9a:34:80:08:00:35:5e:11: 74:d9:22:5d:99:a7:3c:b4:e6:66:6a:35:4f:eb:44:b5:ca:c2: 0e:b9:d2:16:eb:9f:c1:2e:f4:41:2d:7e:d7:ee:3f:de:5e:0c: dc:52:9b:8f:b1:85:d2:80:f8:a5:51:85:82:51:6e:de:c1:1f: 24:ec:74:fc:5f:bd:25:f4:b0:49:4c:15:50:7f:d3:2c:0c:27: 12:f9:39:a8:36:74:ce:1f:de:48:bd:dc:ba:a3:e3:81:c7:97: 0e:54:ae:07:98:bb:26:09:c9:fa:e0:8f:40:1f:2a:94:87:b4: ab:ac:9f:da:34:e6:79:e5:7a:ff:df:9b:ee:14:5c:07:c6:92: 33:3d:03:ad:2a:9a:b6:26:81:45:1d:34:5f:06:09:6d:64:5e: 99:f0:de:24:b9:0f:e8:e6:5e:89:54:de:cc:ee:8d:c8:57:9b: 00:87:63:37:6e:66:02:f6:25:31:bf:1c:f0:10:23:e3:0a:17: 9e:23:83:4d:4f:45:5f:cd:bc:ff:4a:6b:94:0d:07:d7:95:20: 4b:39:6c:76 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OEZGRjExMC8GA1UEBRMoQ0M5RjJGQkJGQUVEQzQ0Qzc2MzJCMThDMkJEM0JDNThF Q0VEN0JGNTAeFw0yNjAzMjUwNzU2MDJaFw0yNjA0MDEwNzU2MDJaMBgxFjAUBgNV BAMTDTY5YzM5NTEyLTk3NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1svrSfx6CNjyzL7bngYCcKpxF0zbg4JpiYUXSiqfiP6d2fii+9Ycq5fIzJ8tW 3gxrzg0eGdhA2fW96DLhA8bTgvD3/qA3wAznFr/wsWSwsVa8fsckdc5iMmC3ihyX 8P3DbpgMEN1aisGf+G0x/EQ03QEnf8yrlWIZLa+MupilErOzBwkKio671mcArd1L AY3ygqTGQQa7jGySFvoD+afs0VR8mo30miklcm2RnZM9rNP1VQvEMZAfsyxeSao3 8bgXsULwiQZIlZpXPzVvI2jvoPIeQU1qXzpjJMndKUf+6Oqdpcp0YYCdMY3fSHzD j7KKh/We3r80/ZT3JQ+ZspEbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkSPradz5 NEUjBHLeTUVnb/sFWCUwHwYDVR0jBBgwFoAUzJ8vu/rtxEx2MrGMK9O8WOzte/Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzU5MTNFMjYyRUVE MTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4Mk1yR01LOU84V096dGVf VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveko4dnVfcnR4RXgyTXJHTUs5TzhXT3p0ZV9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 RkZGLzU5MTNFMjYyRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4 Mk1yR01LOU84V096dGVfVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGbauA900PNBK6tu9rnycu0FAE/gIxUyS/z1EfoMJei8Ebmu7Y2KWVGa/OTY/N mjSACAA1XhF02SJdmac8tOZmajVP60S1ysIOudIW65/BLvRBLX7X7j/eXgzcUpuP sYXSgPilUYWCUW7ewR8k7HT8X70l9LBJTBVQf9MsDCcS+TmoNnTOH95Ivdy6o+OB x5cOVK4HmLsmCcn64I9AHyqUh7SrrJ/aNOZ55Xr/35vuFFwHxpIzPQOtKpq2JoFF HTRfBgltZF6Z8N4kuQ/o5l6JVN7M7o3IV5sAh2M3bmYC9iUxvxzwECPjCheeI4NN T0Vfzbz/SmuUDQfXlSBLOWx2 -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:32 2026 by rpki-client