$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: uy5oZcm7j3Xx3mXKr9iQEOB/txXDkSizNSMXcHkOkdk= Subject key identifier: 12:B7:C5:85:71:1E:91:88:D8:76:41:53:94:F7:33:E7:5B:CB:31:A0 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1203 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 11C8 Signing time: Tue 24 Mar 2026 17:03:55 +0000 Manifest this update: Tue 24 Mar 2026 17:03:55 +0000 Manifest next update: Tue 31 Mar 2026 17:03:55 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: SHQgeS2nMeHATa01fLD2B5hkirdEnT0ZxKveW4emDKY=) 2: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: 6bJMavZFRpkLHiVk166wivPVWZcYiFXj4dWo/IpNl7w=) 3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: 6R3WrQlkwYdoSKIA9m9L9kSxThcr/NMUZ6ZAaENWcLk=) 4: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: tb6d2POyVxQvEjZTCt8zzCzL5T0dHc+hRl47vzKiwro=) 5: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: 8sR59Lp6fQc79JgAgqC1t1+yUKy4/xiWteMrpfGnLFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4611 (0x1203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Mar 24 17:03:55 2026 GMT Not After : Mar 31 17:03:55 2026 GMT Subject: CN=69c2c3fb-f6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:84:f8:b2:9c:40:df:61:a8:62:80:42:f0: cb:f7:34:e8:24:97:5e:bd:db:52:c7:7c:34:b0:7b: 05:9b:85:b9:4d:3c:07:12:89:de:c3:ff:15:9c:a5: d4:c1:43:b2:bc:09:94:a0:3c:85:72:33:a5:d5:c2: e9:8d:73:5a:d2:0e:b8:b9:62:42:4c:f7:7c:a1:b8: 1e:d4:5c:8e:75:bd:91:61:db:4a:a9:e4:bd:a8:d4: 30:c3:21:c4:3d:69:ec:bc:7e:1f:1d:c9:07:e7:5a: a2:75:09:ef:52:31:d7:f3:87:ac:b8:17:48:ab:d3: 99:65:d5:90:8b:1e:25:9f:d3:a3:7e:b5:b0:39:69: 3c:cf:20:c5:62:1b:1b:6d:f8:f3:ef:09:82:9c:18: 5c:78:42:23:1a:49:cf:aa:f9:d2:10:c6:54:be:e0: 4e:7e:16:15:a6:ac:f8:97:35:c2:2e:c3:4f:a0:18: dc:05:ee:fc:61:80:74:fd:11:2c:00:c8:3e:26:ad: 48:54:44:95:4c:61:16:23:7f:6e:47:1a:c3:44:47: 28:4b:e0:bc:14:35:a1:3c:a7:5e:6e:d7:97:d4:c1: 69:91:8c:c9:dc:79:46:cd:f2:3f:4b:85:d7:41:27: 58:cf:bd:52:69:5e:48:cb:16:78:a3:8c:77:4d:95: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B7:C5:85:71:1E:91:88:D8:76:41:53:94:F7:33:E7:5B:CB:31:A0 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:71:c3:44:39:63:7f:c4:45:3a:4a:a4:a2:4a:2f:e0:cc:76: a2:ab:29:8b:cb:47:ab:5e:21:7f:aa:9f:f5:ff:82:ad:26:e7: bc:df:e3:d3:d4:9d:51:7d:ea:f3:fe:8c:63:9c:7d:25:44:b3: 09:d1:e1:e1:b9:c7:60:fe:87:36:1b:64:61:0b:f4:40:88:bd: b6:e5:c0:2b:74:3a:f6:d6:04:51:bc:94:ad:a8:49:9f:b2:3f: ac:9a:77:41:f8:5d:e2:57:65:d6:06:45:c4:73:8f:1d:ea:c6: 12:d9:b7:da:1f:90:3e:76:69:4c:d8:60:f0:44:44:6c:2e:7f: 0c:23:ef:9b:fb:a2:ed:fb:d8:b7:9e:e3:26:89:50:c1:99:6b: aa:95:ca:d6:6b:f1:83:4d:07:35:6a:f3:91:50:b2:99:dd:52: 70:8e:7e:d6:d5:46:d3:1a:07:e5:7c:4c:c2:21:a9:bf:04:e3: c1:07:be:a0:ab:a2:aa:70:01:c2:fa:eb:72:1d:25:46:35:b7: 0e:40:fa:98:b6:21:d2:e1:bd:39:c9:a8:f4:a5:61:19:a4:7b: 1e:1f:77:c2:68:ea:36:c5:72:b0:8b:a8:2c:14:47:a5:00:98: d1:eb:c5:aa:04:4d:ab:f2:ad:be:38:71:85:dd:ea:d4:1b:cc: ad:6d:bd:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwMzI0MTcwMzU1WhcNMjYwMzMxMTcwMzU1WjAYMRYwFAYD VQQDEw02OWMyYzNmYi1mNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLiE+LKcQN9hqGKAQvDL9zToJJdevdtSx3w0sHsFm4W5TTwHEonew/8VnKXU wUOyvAmUoDyFcjOl1cLpjXNa0g64uWJCTPd8obge1FyOdb2RYdtKqeS9qNQwwyHE PWnsvH4fHckH51qidQnvUjHX84esuBdIq9OZZdWQix4ln9OjfrWwOWk8zyDFYhsb bfjz7wmCnBhceEIjGknPqvnSEMZUvuBOfhYVpqz4lzXCLsNPoBjcBe78YYB0/REs AMg+Jq1IVESVTGEWI39uRxrDREcoS+C8FDWhPKdebteX1MFpkYzJ3HlGzfI/S4XX QSdYz71SaV5IyxZ4o4x3TZUufwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBK3xYVx HpGI2HZBU5T3M+dbyzGgMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANXHDRDljf8RFOkqkokov4Mx2oqspi8tHq14hf6qf9f+CrSbnvN/j09SdUX3q 8/6MY5x9JUSzCdHh4bnHYP6HNhtkYQv0QIi9tuXAK3Q69tYEUbyUrahJn7I/rJp3 Qfhd4ldl1gZFxHOPHerGEtm32h+QPnZpTNhg8EREbC5/DCPvm/ui7fvYt57jJolQ wZlrqpXK1mvxg00HNWrzkVCymd1ScI5+1tVG0xoH5XxMwiGpvwTjwQe+oKuiqnAB wvrrch0lRjW3DkD6mLYh0uG9Ocmo9KVhGaR7Hh93wmjqNsVysIuoLBRHpQCY0evF qgRNq/Ktvjhxhd3q1BvMrW29mg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:17 2026 by rpki-client