$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json) Hash identifier: VyXJGBU/2Mtb8aFt54YSY4skiSb+9UpB8d1b/RTMrrU= Subject key identifier: 52:C2:F3:E5:AA:7D:B1:50:56:76:A4:7E:A9:0A:7A:21:26:A1:9B:A0 Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft Manifest number: F8 Signing time: Wed 25 Mar 2026 05:32:54 +0000 Manifest this update: Wed 25 Mar 2026 05:32:54 +0000 Manifest next update: Wed 01 Apr 2026 05:32:54 +0000 Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: h31Dp2Kr/zHK281bU7YuK9GjP+Tm43Dsx0ad8tcs4MI=) 2: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=) 3: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Mar 25 05:32:54 2026 GMT Not After : Apr 1 05:32:54 2026 GMT Subject: CN=69c37386-4598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:7e:9a:c4:a9:df:f8:1f:6a:9d:35:9e:b6: 62:24:65:b0:82:46:c6:6f:b3:23:58:53:f3:d2:4b: 55:d0:40:18:ee:31:40:5c:01:e7:25:d5:c6:b0:44: 66:71:7e:c5:9d:73:a4:2d:c4:57:89:9e:84:65:df: bd:7b:ff:7e:7e:3a:ed:69:fe:51:29:84:8f:11:98: d4:e5:7b:0c:50:a2:76:9f:82:73:d9:60:c5:27:08: c9:fb:50:04:00:9d:66:86:7b:72:f1:96:82:7c:94: 63:e8:83:74:5a:28:89:93:28:54:aa:4b:14:76:13: 17:04:4d:91:9e:14:fc:97:89:1f:81:76:44:14:33: 3c:9c:c2:39:39:14:09:16:88:87:e9:89:3c:95:6c: 24:a9:e5:da:08:59:98:a1:8c:42:67:a5:e3:fc:fb: eb:6f:5c:c9:23:48:c0:e6:65:88:df:99:d8:27:83: 17:42:a2:32:a2:42:1f:dd:a1:c3:09:00:fe:76:03: 7e:26:a3:32:2f:8f:b4:02:5c:d3:e1:42:e5:f6:2c: 53:d7:f9:41:10:a0:24:ac:03:33:62:74:60:ec:3e: 6e:43:2b:3b:67:87:c3:e9:e1:14:f2:62:ea:92:ed: 77:7c:2f:e6:8d:8b:cd:2a:93:5b:16:f0:03:ac:86: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C2:F3:E5:AA:7D:B1:50:56:76:A4:7E:A9:0A:7A:21:26:A1:9B:A0 X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9b:db:69:83:40:0a:07:ad:e2:16:f1:b9:fa:77:d5:7f:3a: 54:e5:c6:21:64:55:d6:bf:9d:ee:39:ee:d8:83:f4:e0:1b:7d: 9a:65:27:c9:79:ba:3c:b7:8a:0f:e4:66:d9:1b:3e:b8:b1:2e: a1:bc:06:dd:d3:f7:95:ca:87:83:c5:ee:c9:6c:46:d5:4a:ea: 6f:1a:57:9e:9f:f7:ea:7f:0b:e0:54:99:4f:77:f9:bf:d4:8e: 2e:b3:ec:2c:a3:3c:d7:82:0e:33:1b:78:89:f7:fe:17:94:2f: ae:d3:b5:57:94:f1:90:ec:51:0b:5f:c6:ff:fc:28:b1:a4:a5: 03:7a:08:12:97:a0:b6:d1:93:71:96:4c:96:3c:c4:14:ef:50: 7e:63:89:31:2e:00:f1:09:04:b3:4a:cf:6c:cf:fe:87:df:39: a2:99:8c:8f:68:d1:05:a0:61:45:a0:1a:4d:63:d5:09:2c:a4: 29:90:c7:f1:64:70:84:2a:92:56:1e:dd:f9:dd:c5:91:51:6d: ca:8b:ce:48:4e:2b:f5:b3:e4:0c:b2:a2:12:fb:98:39:40:5c: 4a:7f:34:5c:97:6a:d4:39:c0:e0:6c:c4:bf:05:b7:09:5f:09: 02:1f:5a:c1:d4:88:b9:73:05:f1:c0:12:91:b2:a1:47:79:96: eb:7d:ec:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFMEExMTAvBgNVBAUTKDY3MEUzQTA2NzIxNjg0QUI0NzNCQkJFNUNDMjJDRjA1 RDAyNEJGNkQwHhcNMjYwMzI1MDUzMjU0WhcNMjYwNDAxMDUzMjU0WjAYMRYwFAYD VQQDEw02OWMzNzM4Ni00NTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjB+msSp3/gfap01nrZiJGWwgkbGb7MjWFPz0ktV0EAY7jFAXAHnJdXGsERm cX7FnXOkLcRXiZ6EZd+9e/9+fjrtaf5RKYSPEZjU5XsMUKJ2n4Jz2WDFJwjJ+1AE AJ1mhnty8ZaCfJRj6IN0WiiJkyhUqksUdhMXBE2RnhT8l4kfgXZEFDM8nMI5ORQJ FoiH6Yk8lWwkqeXaCFmYoYxCZ6Xj/Pvrb1zJI0jA5mWI35nYJ4MXQqIyokIf3aHD CQD+dgN+JqMyL4+0AlzT4ULl9ixT1/lBEKAkrAMzYnRg7D5uQys7Z4fD6eEU8mLq ku13fC/mjYvNKpNbFvADrIaEOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLC8+Wq fbFQVnakfqkKeiEmoZugMB8GA1UdIwQYMBaAFGcOOgZyFoSrRzu75cwizwXQJL9t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUwQS9EQUY2RDczNkI3 MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hLdEhPN3ZsekNMUEJkQWt2 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3YyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUwQS9EQUY2RDczNkI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hL dEhPN3ZsekNMUEJkQWt2MjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZZvbaYNACget4hbxufp31X86VOXGIWRV1r+d7jnu2IP04Bt9mmUnyXm6PLeK D+Rm2Rs+uLEuobwG3dP3lcqHg8XuyWxG1UrqbxpXnp/36n8L4FSZT3f5v9SOLrPs LKM814IOMxt4iff+F5QvrtO1V5TxkOxRC1/G//wosaSlA3oIEpegttGTcZZMljzE FO9QfmOJMS4A8QkEs0rPbM/+h985opmMj2jRBaBhRaAaTWPVCSykKZDH8WRwhCqS Vh7d+d3FkVFtyovOSE4r9bPkDLKiEvuYOUBcSn80XJdq1DnA4GzEvwW3CV8JAh9a wdSIuXMF8cASkbKhR3mW633s3g== -----END CERTIFICATE-----Generated at Thu Mar 26 10:38:08 2026 by rpki-client