$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: hTv3SLjUSvUZkbM9ckqOzeMxnh1GI/bpaFa9zy5HPTM= Subject key identifier: B5:5E:24:36:82:F4:62:DE:28:4F:38:31:A2:30:C9:77:68:82:15:56 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 6C Signing time: Wed 25 Mar 2026 07:07:59 +0000 Manifest this update: Wed 25 Mar 2026 07:07:58 +0000 Manifest next update: Wed 01 Apr 2026 07:07:58 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: hHxwsjyJ6cNcE+4Sv6hR1xGHfgVeFO2v9/RLv9EPLd0=) 2: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nfkyb/Tz5NQlhNZsBNa0u6kXsTrtvohtVsYxwkzt5J4=) 3: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: rrsFR5Ke0szyOJcgYxwbfWLrvLVCd2Mf/LeRWKwXulQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Mar 25 07:07:58 2026 GMT Not After : Apr 1 07:07:58 2026 GMT Subject: CN=69c389cf-374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:cc:27:46:49:a3:e3:5b:47:27:7a:72:e4: bc:32:da:9e:a8:07:04:5d:a2:7e:a0:5c:3d:53:ec: 37:da:69:73:f4:3d:96:65:9f:d8:47:b7:9b:fc:49: 67:6f:3b:3b:95:1a:e0:0d:4a:69:c1:e0:b6:fa:24: 28:bc:42:a0:4e:66:6d:59:b4:0e:44:d1:b4:d8:ed: 80:31:15:4f:c9:f7:3d:b8:8f:21:06:a9:89:be:ad: 3e:4e:0b:ca:eb:60:b2:7d:47:98:cc:e2:43:e8:01: 4e:dd:45:6a:01:61:63:cc:d7:87:80:c0:d9:93:03: da:16:bc:b6:70:94:28:59:d4:4b:6c:5d:ac:3a:7d: 99:4f:1f:9b:39:06:0a:8e:b2:19:bd:2c:a3:a0:a0: 4c:14:1d:f1:81:a7:01:74:fb:b3:b0:58:a5:3f:3e: 67:67:e4:0a:e4:8c:be:a7:01:71:21:aa:89:9c:b2: bc:87:0b:17:37:55:87:1c:da:4a:1f:95:1b:28:31: c2:ed:62:1f:64:d3:00:56:9a:ba:d8:13:4c:a7:db: 03:13:12:b6:46:3a:44:ca:c1:ef:84:9a:04:dc:f9: b3:c7:8e:12:60:1a:70:8e:24:a8:4e:68:9f:7f:07: 2b:3b:5a:98:90:d3:21:8e:21:60:78:c1:10:5d:51: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5E:24:36:82:F4:62:DE:28:4F:38:31:A2:30:C9:77:68:82:15:56 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:50:be:f9:8f:78:e1:3d:6e:54:e7:f1:ee:b8:7f:c2:16:68: 9c:18:5c:d0:39:ff:ad:2e:89:03:17:8e:51:c9:d1:a3:86:e6: 9a:46:34:5c:e3:a5:65:09:7b:f0:14:23:1e:c7:e3:61:04:b7: 3e:40:ac:b9:69:3c:8e:c7:93:ac:8e:e3:66:d6:c1:56:29:df: f9:0f:c5:2f:25:86:55:8d:6d:2e:95:c4:c5:3c:01:a1:c5:48: 87:64:e4:67:e2:2f:89:70:3f:cc:32:e9:a5:b8:e5:ff:c1:e2: 12:1e:02:44:8b:8d:38:85:11:3a:95:59:4a:98:63:a3:1d:21: 53:66:33:1c:20:a7:92:c9:cc:1f:57:d0:76:20:33:69:d7:19: f4:92:5e:7e:c4:85:a5:bf:27:c7:c9:26:04:fa:e3:50:2d:44: c2:90:03:0d:38:b5:a9:30:2d:b1:35:64:11:af:0e:47:76:70: 38:bf:5a:17:b4:09:41:e5:6b:5e:d4:e0:a7:f7:9f:0e:52:3f: c4:be:6b:30:7d:10:fd:73:2d:b3:2c:51:73:63:bb:61:34:2e: c7:bb:2b:8e:92:d5:95:f9:a2:cb:52:8f:96:00:9d:65:29:a2: 5f:56:fc:de:fe:09:82:73:59:1f:9d:50:d4:c4:f6:ab:01:6e: 09:58:0a:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNjAzMjUwNzA3NThaFw0yNjA0MDEwNzA3NThaMBgxFjAUBgNV BAMTDTY5YzM4OWNmLTM3NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr7cwnRkmj41tHJ3py5Lwy2p6oBwRdon6gXD1T7DfaaXP0PZZln9hHt5v8SWdv OzuVGuANSmnB4Lb6JCi8QqBOZm1ZtA5E0bTY7YAxFU/J9z24jyEGqYm+rT5OC8rr YLJ9R5jM4kPoAU7dRWoBYWPM14eAwNmTA9oWvLZwlChZ1EtsXaw6fZlPH5s5BgqO shm9LKOgoEwUHfGBpwF0+7OwWKU/Pmdn5ArkjL6nAXEhqomcsryHCxc3VYcc2kof lRsoMcLtYh9k0wBWmrrYE0yn2wMTErZGOkTKwe+EmgTc+bPHjhJgGnCOJKhOaJ9/ Bys7WpiQ0yGOIWB4wRBdUeH/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtV4kNoL0 Yt4oTzgxojDJd2iCFVYwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBiUL75j3jhPW5U5/HuuH/CFmicGFzQOf+tLokDF45RydGjhuaaRjRc46VlCXvw FCMex+NhBLc+QKy5aTyOx5OsjuNm1sFWKd/5D8UvJYZVjW0ulcTFPAGhxUiHZORn 4i+JcD/MMumluOX/weISHgJEi404hRE6lVlKmGOjHSFTZjMcIKeSycwfV9B2IDNp 1xn0kl5+xIWlvyfHySYE+uNQLUTCkAMNOLWpMC2xNWQRrw5HdnA4v1oXtAlB5Wte 1OCn958OUj/EvmswfRD9cy2zLFFzY7thNC7HuyuOktWV+aLLUo+WAJ1lKaJfVvze /gmCc1kfnVDUxParAW4JWArP -----END CERTIFICATE-----Generated at Thu Mar 26 22:14:49 2026 by rpki-client