$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft File: hZApCIKLAzHpSNRu2zgl_2A9uYY.mft (raw, json) Hash identifier: MK8wzosE7ilUzwdm2IYqZgXlrrgfd4IK3mt07lXcy9A= Subject key identifier: BF:56:B0:D1:3C:74:16:F9:6D:AA:86:42:72:74:99:04:9D:CC:F7:A7 Authority key identifier: 85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 Certificate issuer: /CN=A91EEE1B/serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Certificate serial: 0787 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft Manifest number: 0764 Signing time: Tue 24 Mar 2026 21:27:26 +0000 Manifest this update: Tue 24 Mar 2026 21:27:25 +0000 Manifest next update: Tue 31 Mar 2026 21:27:25 +0000 Files and hashes: 1: hZApCIKLAzHpSNRu2zgl_2A9uYY.crl (hash: 6ZP1963QdFZcQ5uvKs77npuZ+blybdZ4KLSyUTWfJc0=) 2: 761C9E22171811EF81DCE817C4F9AE02.roa (hash: dTHGef/qaPXq5V6Jr39TXLuUIZibSjAipj9MsBmIQ2Y=) 3: 9EF5320617C811ED95FB874FC4F9AE02.roa (hash: 7S73h8W2HxXiTwsYOnuyv1jT9DvXmbAVM1IlpZiwrbQ=) 4: 457C2AF8210811F092050034C4F9AE02.roa (hash: WEX6LWR0ej6+sm6Apo4GxC3XFf/K0Ijx563V6zRrBlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1927 (0x787) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE1B, serialNumber=85902908828B0331E948D46EDB3825FF603DB986 Validity Not Before: Mar 24 21:27:25 2026 GMT Not After : Mar 31 21:27:25 2026 GMT Subject: CN=69c301bd-45e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:12:1b:cd:66:6d:f7:5c:39:a3:f3:f8:79: a0:9f:95:3f:85:b6:67:a1:0f:6d:65:e4:08:ff:c9: 21:30:77:53:39:4f:29:38:65:ad:70:b3:c7:cb:a9: bc:a9:73:30:e0:87:9f:7b:42:fa:93:b2:48:19:72: 54:4e:82:7e:a4:84:48:de:ff:9d:bd:0d:4d:2e:f6: 7b:1a:a3:b6:73:84:51:24:42:da:13:e5:67:f2:9e: cf:74:8d:ec:28:8c:ca:6b:30:72:02:f1:0f:c2:2d: 58:57:7e:10:de:26:34:9b:7e:07:2d:ea:2a:3f:ee: 4d:ea:cc:e0:76:ef:36:3b:4d:3f:92:4a:06:62:7e: da:bd:d9:00:1d:cd:0a:a6:d9:95:38:cb:9b:28:64: 38:0d:71:94:c1:11:16:de:42:10:d8:13:04:14:6b: 26:09:bf:15:8e:13:85:7f:98:0a:93:bb:f0:a4:de: a2:99:12:2f:8a:0b:96:1c:79:e5:ce:13:e1:e5:5f: 64:1f:2a:65:b6:ee:8e:90:d4:0e:bc:4f:89:7c:c8: b9:94:e4:f9:74:01:17:65:5f:f8:ed:1e:1a:6d:bc: 42:d0:17:5b:5e:34:b0:98:47:a9:02:06:dc:38:ce: 7e:3f:0e:2e:5f:4c:10:1a:4e:b4:e3:84:26:aa:24: 6f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:56:B0:D1:3C:74:16:F9:6D:AA:86:42:72:74:99:04:9D:CC:F7:A7 X509v3 Authority Key Identifier: keyid:85:90:29:08:82:8B:03:31:E9:48:D4:6E:DB:38:25:FF:60:3D:B9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZApCIKLAzHpSNRu2zgl_2A9uYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE1B/206DFC28643811EB94683B4EC4F9AE02/hZApCIKLAzHpSNRu2zgl_2A9uYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:46:7f:57:9a:93:9c:67:a6:52:89:ed:b9:e2:ac:a7:2a:9e: fd:e5:a1:ef:ac:93:7f:be:25:1d:a1:d6:61:00:75:1a:b2:d1: 88:76:da:71:cf:7f:fa:bb:c8:59:a8:34:d7:9f:cd:fd:97:a3: 34:49:43:1f:31:7d:12:28:ca:63:5c:60:a3:54:e0:76:69:73: 9a:73:75:2a:93:00:6f:ed:26:0f:df:37:45:74:51:79:f0:46: 6f:99:85:0d:77:81:23:cc:b8:9d:d7:af:3d:09:d8:83:c0:18: 04:9f:f4:b9:54:44:c4:86:08:b3:24:d3:51:65:18:5f:b4:e0: da:3a:49:d3:ce:2d:16:54:ce:81:f9:2e:99:8d:f9:3e:65:64: 48:b5:c2:7e:a5:80:06:69:51:1c:98:93:16:05:04:26:ca:1d: 78:0d:2d:75:be:12:d4:a7:71:82:8d:14:36:5c:72:79:09:ef: 9d:61:44:cc:41:e2:30:2c:cb:1c:61:01:e6:0e:8a:29:b8:19: b5:bf:6c:cd:20:3f:ff:5d:c2:b1:3d:dd:fb:e3:e9:4a:b6:b1: 2f:30:7b:3a:91:b7:5c:0c:88:d3:74:d5:2e:40:92:87:ad:2f: 8c:49:e5:ad:c6:01:54:cd:b8:cd:d3:d7:23:9b:f1:e5:dd:50: 6f:89:c7:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMUIxMTAvBgNVBAUTKDg1OTAyOTA4ODI4QjAzMzFFOTQ4RDQ2RURCMzgyNUZG NjAzREI5ODYwHhcNMjYwMzI0MjEyNzI1WhcNMjYwMzMxMjEyNzI1WjAYMRYwFAYD VQQDEw02OWMzMDFiZC00NWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/8SG81mbfdcOaPz+Hmgn5U/hbZnoQ9tZeQI/8khMHdTOU8pOGWtcLPHy6m8 qXMw4Iefe0L6k7JIGXJUToJ+pIRI3v+dvQ1NLvZ7GqO2c4RRJELaE+Vn8p7PdI3s KIzKazByAvEPwi1YV34Q3iY0m34HLeoqP+5N6szgdu82O00/kkoGYn7avdkAHc0K ptmVOMubKGQ4DXGUwREW3kIQ2BMEFGsmCb8VjhOFf5gKk7vwpN6imRIviguWHHnl zhPh5V9kHypltu6OkNQOvE+JfMi5lOT5dAEXZV/47R4abbxC0BdbXjSwmEepAgbc OM5+Pw4uX0wQGk6044QmqiRvGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9WsNE8 dBb5baqGQnJ0mQSdzPenMB8GA1UdIwQYMBaAFIWQKQiCiwMx6UjUbts4Jf9gPbmG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUxQi8yMDZERkMyODY0 MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6SHBTTlJ1MnpnbF8yQTl1 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2haQXBDSUtMQXpIcFNOUnUyemdsXzJBOXVZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUUxQi8yMDZERkMyODY0MzgxMUVCOTQ2ODNCNEVDNEY5QUUwMi9oWkFwQ0lLTEF6 SHBTTlJ1MnpnbF8yQTl1WVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABEZ/V5qTnGemUontueKspyqe/eWh76yTf74lHaHWYQB1GrLRiHbacc9/+rvI Wag015/N/ZejNElDHzF9EijKY1xgo1TgdmlzmnN1KpMAb+0mD983RXRRefBGb5mF DXeBI8y4ndevPQnYg8AYBJ/0uVRExIYIsyTTUWUYX7Tg2jpJ084tFlTOgfkumY35 PmVkSLXCfqWABmlRHJiTFgUEJsodeA0tdb4S1Kdxgo0UNlxyeQnvnWFEzEHiMCzL HGEB5g6KKbgZtb9szSA//13CsT3d++PpSraxLzB7OpG3XAyI03TVLkCSh60vjEnl rcYBVM24zdPXI5vx5d1Qb4nH1A== -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:16 2026 by rpki-client