$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: UWuiJLDBrpKx1nSc7Ran65Q9bymUZMquxUX6uu9UKqc= Subject key identifier: 8D:42:91:DD:2E:CE:04:40:FE:80:E7:B7:58:64:EB:58:28:EB:72:83 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 011F Signing time: Wed 25 Mar 2026 05:14:53 +0000 Manifest this update: Wed 25 Mar 2026 05:14:52 +0000 Manifest next update: Wed 01 Apr 2026 05:14:52 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: /92fUj1O4WBJmeUhaMYkL8fULGj3Am9trwRPcxtW08g=) 2: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (hash: cuURsbxNvtOqTd1FnCF2I2C85rcA4nGp1HY8p4P3GjI=) 3: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: 7qNyR1XtX/IJK6zuiRl0X5DJ2rVIeGFSUiO8ugtPsRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Mar 25 05:14:52 2026 GMT Not After : Apr 1 05:14:52 2026 GMT Subject: CN=69c36f4c-bd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:29:34:46:6a:39:76:73:5f:84:67:9f:b8:a4: f6:5b:78:8b:9a:0a:c0:6f:9f:0d:5a:ca:87:81:37: 6c:55:ee:07:5f:fa:77:3f:c2:be:97:6f:92:9d:79: 3b:4f:d8:c1:11:67:9e:dc:12:3a:46:26:4c:5a:1a: 21:4c:28:10:bc:4d:51:89:4f:cc:6a:51:20:0f:77: 3c:13:ab:7a:f8:c6:5e:37:95:bf:65:8b:62:56:09: 39:1c:59:36:6b:35:3d:29:4a:59:21:9c:ec:72:4b: 2f:7e:48:15:1f:b6:e3:ea:8c:20:1e:43:a1:99:ba: 98:9d:9e:34:8e:ed:f9:04:fc:81:a3:b9:5f:ad:20: 88:63:2d:84:e2:d0:e1:3c:8a:8f:83:53:21:98:9a: d5:1c:1a:d2:64:ed:4e:a6:b4:0d:d6:39:3e:6b:8b: 09:e9:08:af:61:5d:87:57:13:eb:b0:a8:b1:ef:4d: d5:a3:8c:5e:3f:a7:4b:23:5e:be:2e:5a:20:3d:ec: c1:54:7f:3e:52:ba:57:d5:fa:6c:6a:e3:4d:bf:81: 27:74:a0:70:36:dc:54:aa:44:2a:5e:70:d2:e5:89: e6:91:e3:b8:99:04:23:d1:26:45:48:99:6f:71:40: d6:e3:95:ee:44:69:9f:b8:6e:24:51:02:51:e6:5c: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:42:91:DD:2E:CE:04:40:FE:80:E7:B7:58:64:EB:58:28:EB:72:83 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:4e:80:8e:e7:f4:1d:d6:50:75:6d:16:5b:18:e9:cd:83:5e: 0b:5b:73:e2:35:c1:21:fd:5a:cd:53:db:46:3e:f4:ae:43:3a: 4a:09:11:fb:3f:ae:1f:70:3f:47:ef:18:5b:1b:f2:4d:8b:fa: ea:a4:05:89:6a:33:cc:7c:b5:80:d2:8f:0e:2f:5d:80:62:62: c9:b3:c2:4d:18:d1:c8:1a:37:15:fc:1e:88:8f:9b:a1:ad:56: bf:1b:99:62:a5:69:7a:3c:04:fd:7a:54:51:4b:1b:4d:95:67: ef:04:16:af:33:aa:51:99:30:8f:85:c9:2e:59:bd:76:5e:12: 16:c9:f1:29:eb:84:15:aa:54:86:b4:99:7e:d3:4c:26:b3:f9: 0a:51:d9:3d:dc:8f:b8:a9:61:b2:ac:7b:89:ca:3c:12:e9:eb: 9c:2a:ca:d7:7e:a4:df:2b:6f:da:cc:70:b1:40:63:f2:53:2b: 34:fb:a4:aa:90:3e:da:5c:8a:19:f1:af:2d:cb:86:b4:ad:a0: 21:8f:0d:5c:24:41:d1:75:c7:c9:23:e1:77:1f:50:c8:19:b6: 8e:c2:aa:8e:f6:87:2a:e4:c7:e5:e7:33:e2:cc:29:47:ee:71: 10:b5:63:6e:96:56:5f:2d:66:d5:12:64:fb:78:a0:4e:03:93: 2e:fd:1b:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjYwMzI1MDUxNDUyWhcNMjYwNDAxMDUxNDUyWjAYMRYwFAYD VQQDEw02OWMzNmY0Yy1iZDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnik0Rmo5dnNfhGefuKT2W3iLmgrAb58NWsqHgTdsVe4HX/p3P8K+l2+SnXk7 T9jBEWee3BI6RiZMWhohTCgQvE1RiU/MalEgD3c8E6t6+MZeN5W/ZYtiVgk5HFk2 azU9KUpZIZzscksvfkgVH7bj6owgHkOhmbqYnZ40ju35BPyBo7lfrSCIYy2E4tDh PIqPg1MhmJrVHBrSZO1OprQN1jk+a4sJ6QivYV2HVxPrsKix703Vo4xeP6dLI16+ LlogPezBVH8+UrpX1fpsauNNv4EndKBwNtxUqkQqXnDS5YnmkeO4mQQj0SZFSJlv cUDW45XuRGmfuG4kUQJR5lxCLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1Ckd0u zgRA/oDnt1hk61go63KDMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs06Ajuf0HdZQdW0WWxjpzYNeC1tz4jXBIf1azVPbRj70rkM6SgkR+z+uH3A/ R+8YWxvyTYv66qQFiWozzHy1gNKPDi9dgGJiybPCTRjRyBo3FfweiI+boa1WvxuZ YqVpejwE/XpUUUsbTZVn7wQWrzOqUZkwj4XJLlm9dl4SFsnxKeuEFapUhrSZftNM JrP5ClHZPdyPuKlhsqx7ico8EunrnCrK136k3ytv2sxwsUBj8lMrNPukqpA+2lyK GfGvLcuGtK2gIY8NXCRB0XXHySPhdx9QyBm2jsKqjvaHKuTH5ecz4swpR+5xELVj bpZWXy1m1RJk+3igTgOTLv0bQA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:27:06 2026 by rpki-client