$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json) Hash identifier: u4sdW7gQYzp/tMYy+5h4kSeTSeFJoJ2mMPQzREx/zY4= Subject key identifier: E9:3D:3F:99:EB:B9:64:3F:D8:D1:83:27:2F:D1:E7:42:2F:85:0A:12 Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft Manifest number: 012A Signing time: Wed 25 Mar 2026 04:52:56 +0000 Manifest this update: Wed 25 Mar 2026 04:52:55 +0000 Manifest next update: Wed 01 Apr 2026 04:52:55 +0000 Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: T/ond24fP3qyVXXbAAzMvRb2+VtEaIJUwsnHkIi7Zvs=) 2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: Ut6wTzQqWH7gTz2iJzacD5zAQ3RJj3PLXlh5yOWIbT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Mar 25 04:52:55 2026 GMT Not After : Apr 1 04:52:55 2026 GMT Subject: CN=69c36a28-6177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:70:84:fa:9b:26:4c:53:32:13:89:cf:1a: d2:59:3f:e9:7b:0b:d5:5c:37:41:54:fb:19:64:b0: 23:d3:f1:ba:08:f4:2b:6f:e0:86:80:c5:7e:34:d3: 83:67:13:e3:f6:2c:32:a8:43:ce:9b:a5:ee:b4:4d: d6:25:c0:43:5d:9b:a3:6b:e8:80:5b:b8:1b:fa:84: 73:6b:82:c0:9d:e0:59:5d:1b:8c:a7:92:e0:73:05: d6:a7:7c:32:73:3e:e7:b6:fb:94:e0:37:7d:85:b1: 21:b2:8b:75:b8:ad:19:3a:e0:47:ed:28:3a:53:0f: 13:49:1d:71:52:0c:c5:b5:ed:e8:f3:9a:37:80:9c: ea:57:5f:bd:9f:fa:b8:6b:7d:2f:26:e7:8c:ba:48: 34:11:09:1a:bf:8a:d0:01:7a:08:a7:8e:be:b3:d0: a2:15:dd:e2:3d:03:4c:19:eb:3e:d9:bf:7e:57:db: 77:6c:7b:8d:2b:5f:14:c3:c0:e1:37:d4:de:c2:ad: 93:02:88:63:05:04:49:02:bf:2d:c7:d4:fa:f9:5b: 75:85:04:80:29:65:e2:ad:eb:b5:d8:11:df:b5:24: 8a:16:7f:b8:1f:32:6a:90:f8:21:85:57:f9:62:26: df:87:54:b9:cd:68:5a:5b:09:cb:eb:5b:84:ee:fe: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:3F:99:EB:B9:64:3F:D8:D1:83:27:2F:D1:E7:42:2F:85:0A:12 X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c1:34:db:8b:d4:69:72:d1:f2:e0:67:be:7b:75:be:45:1b: 3a:b3:46:65:93:77:e3:7b:3c:5d:cc:f0:5c:96:0c:48:7c:34: 6c:7f:96:53:12:b9:8d:f8:ce:b7:b2:7b:93:85:32:f2:44:a2: ec:75:5e:a9:57:64:94:cf:2a:13:76:79:3c:62:8e:ae:aa:ed: b1:47:13:f1:34:a9:b2:1b:e9:99:e4:95:7a:e9:2c:d8:6b:c7: be:c9:98:18:17:64:cf:ed:7c:fc:83:42:60:32:a2:db:4b:39: 2b:82:b9:52:ad:13:cd:e3:d5:11:5c:0b:6c:46:0b:21:df:e7: 20:07:98:a8:06:31:bd:f5:cd:b3:ed:87:b6:34:df:8a:ea:46: 65:f5:83:55:f8:c2:09:37:06:6f:74:13:21:eb:88:4d:06:ae: 60:24:93:a8:5b:e6:7f:53:0d:51:64:aa:6d:51:98:73:a7:5b: ca:da:40:cc:46:c4:a3:c5:c1:4c:ed:7d:e0:09:a3:2e:90:46: 99:0b:18:eb:56:d4:c7:0b:7d:8f:8f:f5:83:7e:b8:91:34:ac: 57:d1:8d:9e:46:51:f9:aa:c3:25:b7:0b:18:31:01:c8:6d:e1: 81:4c:d3:fa:84:7f:3f:76:e5:bd:89:86:d5:34:53:b0:b0:1d: e5:8d:8f:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjYwMzI1MDQ1MjU1WhcNMjYwNDAxMDQ1MjU1WjAYMRYwFAYD VQQDEw02OWMzNmEyOC02MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVVwhPqbJkxTMhOJzxrSWT/pewvVXDdBVPsZZLAj0/G6CPQrb+CGgMV+NNOD ZxPj9iwyqEPOm6XutE3WJcBDXZuja+iAW7gb+oRza4LAneBZXRuMp5LgcwXWp3wy cz7ntvuU4Dd9hbEhsot1uK0ZOuBH7Sg6Uw8TSR1xUgzFte3o85o3gJzqV1+9n/q4 a30vJueMukg0EQkav4rQAXoIp46+s9CiFd3iPQNMGes+2b9+V9t3bHuNK18Uw8Dh N9Tewq2TAohjBQRJAr8tx9T6+Vt1hQSAKWXireu12BHftSSKFn+4HzJqkPghhVf5 Yibfh1S5zWhaWwnL61uE7v46AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOk9P5nr uWQ/2NGDJy/R50IvhQoSMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox MzRBRS1NWlpmN0xJek1jRVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf8E024vUaXLR8uBnvnt1vkUbOrNGZZN343s8XczwXJYMSHw0bH+WUxK5jfjO t7J7k4Uy8kSi7HVeqVdklM8qE3Z5PGKOrqrtsUcT8TSpshvpmeSVeuks2GvHvsmY GBdkz+18/INCYDKi20s5K4K5Uq0TzePVEVwLbEYLId/nIAeYqAYxvfXNs+2HtjTf iupGZfWDVfjCCTcGb3QTIeuITQauYCSTqFvmf1MNUWSqbVGYc6dbytpAzEbEo8XB TO194AmjLpBGmQsY61bUxwt9j4/1g364kTSsV9GNnkZR+arDJbcLGDEByG3hgUzT +oR/P3blvYmG1TRTsLAd5Y2Pvw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:07 2026 by rpki-client