$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: Fj11Z+t/er/StkzdbBaMUx8PL682XsAJLpkXamU8Sek= Subject key identifier: 52:97:72:5A:72:3E:1C:7B:ED:77:72:AC:4E:3A:21:32:2A:3D:A7:9A Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 85 Signing time: Wed 25 Mar 2026 06:53:11 +0000 Manifest this update: Wed 25 Mar 2026 06:53:11 +0000 Manifest next update: Wed 01 Apr 2026 06:53:11 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: cIJGEKMr8F3QimB/13ILqA1CcrpCNu2/ZVjUHKdFSXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Mar 25 06:53:11 2026 GMT Not After : Apr 1 06:53:11 2026 GMT Subject: CN=69c38657-34a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:60:46:6d:02:ae:2e:83:de:3b:28:ed:0e: ca:24:f6:cd:fe:ee:0c:3f:35:4d:dd:f4:fc:18:2f: 07:b6:d6:63:3f:19:94:b3:77:d1:52:66:0d:91:4c: 33:d4:92:bc:41:cc:01:70:f8:8d:51:5a:64:54:5e: 49:2c:57:f2:06:b2:4b:30:9e:1b:18:9a:e7:4d:01: 97:9e:b5:61:83:6c:1a:78:3e:d0:6e:35:37:eb:de: 02:da:dc:88:1d:4f:e7:91:e0:08:a0:d0:a9:35:6a: 7f:34:c3:8e:5d:ab:2a:03:df:4f:76:d1:1d:0f:71: df:69:d6:65:51:e9:ef:eb:32:6f:1b:77:3e:94:e3: 1d:9d:84:c5:8b:57:87:63:1a:5d:1a:1a:fb:10:72: 29:79:6a:39:2d:79:06:41:50:03:fb:e9:d0:ae:26: d5:e9:ba:19:08:7f:50:a6:bc:da:7f:b1:b4:fd:db: 08:8f:f8:47:b2:d4:29:18:4e:16:ca:e8:ad:20:12: b2:1b:4b:cf:a7:9d:92:34:04:e8:c0:cc:98:9c:10: c1:5d:52:08:47:07:e7:c6:4a:4a:85:71:28:96:68: f3:77:8a:db:db:a7:32:20:75:3d:c9:9d:aa:02:03: 9f:40:3f:f1:3c:10:da:41:b0:75:0b:56:55:0d:6a: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:72:5A:72:3E:1C:7B:ED:77:72:AC:4E:3A:21:32:2A:3D:A7:9A X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ac:be:46:45:b7:19:37:76:97:de:e7:86:d6:52:3a:5b:28: dd:7f:98:5d:ab:68:93:4d:62:64:cd:7f:42:f7:6a:2c:e1:b1: 2f:48:30:9c:6c:27:05:e9:85:4f:ff:ec:36:8f:83:11:2a:a5: e8:1d:c6:d4:26:aa:fe:ce:cb:50:9c:b4:0b:5b:c8:cf:fb:77: 88:0d:ba:96:d1:38:d3:1d:06:15:5c:81:50:a8:d6:a3:26:c4: 1b:10:2c:cc:68:b5:01:31:0e:25:2e:1d:ee:26:56:74:a8:47: 75:91:ee:f2:30:b5:76:fc:3b:ed:3e:1b:77:a7:4d:b7:5c:1b: 70:9b:7d:14:52:7d:64:28:69:26:4f:9d:a3:e8:c8:ce:f5:48: 08:1b:14:89:e1:b4:51:1a:16:c4:56:b0:ed:70:f9:4a:16:58: 8c:c1:f5:fe:f1:22:5c:70:b0:1a:e0:c0:8a:f7:e4:ad:ac:f0: e7:4d:1f:02:a7:c9:2b:0e:87:d6:bc:7d:7a:f1:7c:4d:4a:9f: 09:5f:1c:f9:75:67:88:28:d4:32:fe:66:05:d2:30:6d:4b:33: 98:5b:2f:9f:ec:f4:bf:4d:f6:78:74:0e:6b:b6:7f:74:5d:92: 51:a3:77:aa:bf:a5:0a:2f:8b:c1:83:91:b8:3c:3a:6a:e6:f5: 5b:c4:44:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3NTYxMTAvBgNVBAUTKDY0MjEzNTJBRUQ2NDQxMDA2QkJDRTQ4QTg1MzQ1NUM4 RDI3MjNEQjgwHhcNMjYwMzI1MDY1MzExWhcNMjYwNDAxMDY1MzExWjAYMRYwFAYD VQQDEw02OWMzODY1Ny0zNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVlgRm0Cri6D3jso7Q7KJPbN/u4MPzVN3fT8GC8HttZjPxmUs3fRUmYNkUwz 1JK8QcwBcPiNUVpkVF5JLFfyBrJLMJ4bGJrnTQGXnrVhg2waeD7QbjU3694C2tyI HU/nkeAIoNCpNWp/NMOOXasqA99PdtEdD3HfadZlUenv6zJvG3c+lOMdnYTFi1eH YxpdGhr7EHIpeWo5LXkGQVAD++nQribV6boZCH9Qprzaf7G0/dsIj/hHstQpGE4W yuitIBKyG0vPp52SNATowMyYnBDBXVIIRwfnxkpKhXEolmjzd4rb26cyIHU9yZ2q AgOfQD/xPBDaQbB1C1ZVDWoEKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKXclpy Phx77XdyrE46ITIqPaeaMB8GA1UdIwQYMBaAFGQhNSrtZEEAa7zkioU0VcjScj24 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1Ni83NDQ2NERFNjYy MTIxMUYwOENBNkMxNTRDNEY5QUUwMi9aQ0UxS3Uxa1FRQnJ2T1NLaFRSVnlOSnlQ YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTc1Ni83NDQ2NERFNjYyMTIxMUYwOENBNkMxNTRDNEY5QUUwMi9aQ0UxS3Uxa1FR QnJ2T1NLaFRSVnlOSnlQYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe6y+RkW3GTd2l97nhtZSOlso3X+YXatok01iZM1/QvdqLOGxL0gwnGwnBemF T//sNo+DESql6B3G1Caq/s7LUJy0C1vIz/t3iA26ltE40x0GFVyBUKjWoybEGxAs zGi1ATEOJS4d7iZWdKhHdZHu8jC1dvw77T4bd6dNt1wbcJt9FFJ9ZChpJk+do+jI zvVICBsUieG0URoWxFaw7XD5ShZYjMH1/vEiXHCwGuDAivfkrazw500fAqfJKw6H 1rx9evF8TUqfCV8c+XVniCjUMv5mBdIwbUszmFsvn+z0v032eHQOa7Z/dF2SUaN3 qr+lCi+LwYORuDw6aub1W8REgA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:57:13 2026 by rpki-client