$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: kxfTO58vBWQEH3tuEN3OsoSR7TmSbmPvamRUgn9V3xE= Subject key identifier: EA:63:8C:F5:27:D1:4A:E2:CD:6E:4A:45:8D:42:D1:6E:D5:2A:CC:2B Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 17BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 17B0 Signing time: Tue 24 Mar 2026 16:28:45 +0000 Manifest this update: Tue 24 Mar 2026 16:28:45 +0000 Manifest next update: Tue 31 Mar 2026 16:28:45 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: RbeEDfAiLEk2Gd8T4KIh7MY6J9ohd1Uf1pMwjKjoDh0=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: NTZYpBwfz3MFFsFX93cSlvxKSWnC0xJLfEsB3AUxbQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6077 (0x17bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Mar 24 16:28:45 2026 GMT Not After : Mar 31 16:28:45 2026 GMT Subject: CN=69c2bbbd-b4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:11:76:3d:4e:3c:1c:ff:36:0e:33:12:4c: 47:71:54:64:13:41:bd:17:eb:5a:c1:f9:43:6f:64: 35:55:50:2b:0b:60:38:ab:0a:e2:c2:95:6c:87:cc: 87:db:43:fb:4f:28:86:54:26:4e:ef:9f:80:f6:ab: b2:25:cc:f0:ee:95:b9:b7:7e:e5:7f:bc:9c:fb:24: 4d:98:fb:cd:b3:8e:7a:03:b6:be:85:91:65:0c:1d: 44:56:29:92:63:4d:ba:b4:ce:9b:26:fb:64:93:46: 9d:e6:6c:de:93:e8:8d:35:b8:00:d5:6d:71:5a:fd: 61:e1:73:f3:21:b9:5d:c0:67:75:70:96:ee:6a:47: da:bd:a7:b2:81:9f:8b:26:24:e3:29:71:ac:7b:22: b9:6a:c8:f9:56:ff:a1:e4:ae:5e:b3:2e:b9:e1:a0: ac:4c:b3:86:76:29:ce:88:cc:51:58:c7:fe:77:20: cd:c6:e9:52:25:72:f1:37:72:3c:dd:1a:28:63:58: fc:cd:e2:56:25:c1:61:3e:2b:24:89:65:1c:64:a5: 5f:e1:9d:39:fb:09:76:b9:50:ce:1e:f6:fe:2a:f0: 4f:0b:fb:62:d7:8a:59:2d:1a:20:3b:d9:15:b3:b7: 1b:81:1b:5c:54:99:bb:ac:e0:cf:51:90:85:f3:af: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:63:8C:F5:27:D1:4A:E2:CD:6E:4A:45:8D:42:D1:6E:D5:2A:CC:2B X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:46:13:d9:1b:34:c0:a4:a6:d8:c8:48:3e:bb:ab:8b:71:7a: ed:4d:4d:4d:c1:af:63:2c:c0:ec:dc:33:71:35:2f:72:d0:41: 49:09:f9:3c:22:63:5d:62:52:96:4c:86:2e:6c:3c:3d:a4:ce: ad:14:e2:27:ed:18:0a:0a:0f:ed:ef:fa:ed:29:76:dd:33:a2: 60:c1:3d:1c:92:b1:24:74:40:d0:0e:bb:2f:98:11:94:e8:4c: 7c:07:22:3e:5c:c3:0b:6c:3b:89:1d:74:98:df:6d:26:f3:d5: 0d:bd:fa:d1:b2:f2:43:f3:26:c3:b7:37:60:f2:2b:47:b3:43: 43:ec:38:a0:03:cd:1e:ae:94:e9:56:12:d3:cb:98:bc:de:1a: 0f:f0:bc:b8:f8:9a:02:02:5c:08:d9:0b:8f:fa:6f:89:5a:59: e6:2b:2a:70:7a:ed:1c:90:24:fd:2c:0c:8a:1b:f3:24:9e:d9: af:d8:43:a0:d9:be:32:68:9b:20:db:a1:4c:83:93:62:dc:45: 01:1b:4c:ca:6b:0c:89:e1:94:93:15:5e:ef:04:70:45:fc:74: 79:1c:fd:34:b3:ba:ad:3f:2f:45:7b:fa:30:ec:5e:ec:27:7f: f8:eb:4c:15:e2:2c:28:88:ad:b1:3c:d3:cb:41:fc:75:9c:ec: 15:e4:dc:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjYwMzI0MTYyODQ1WhcNMjYwMzMxMTYyODQ1WjAYMRYwFAYD VQQDEw02OWMyYmJiZC1iNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwYRdj1OPBz/Ng4zEkxHcVRkE0G9F+tawflDb2Q1VVArC2A4qwriwpVsh8yH 20P7TyiGVCZO75+A9quyJczw7pW5t37lf7yc+yRNmPvNs456A7a+hZFlDB1EVimS Y026tM6bJvtkk0ad5mzek+iNNbgA1W1xWv1h4XPzIbldwGd1cJbuakfavaeygZ+L JiTjKXGseyK5asj5Vv+h5K5esy654aCsTLOGdinOiMxRWMf+dyDNxulSJXLxN3I8 3RooY1j8zeJWJcFhPiskiWUcZKVf4Z05+wl2uVDOHvb+KvBPC/ti14pZLRogO9kV s7cbgRtcVJm7rODPUZCF869ISwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpjjPUn 0UrizW5KRY1C0W7VKswrMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF0YT2Rs0wKSm2MhIPruri3F67U1NTcGvYyzA7NwzcTUvctBBSQn5PCJjXWJS lkyGLmw8PaTOrRTiJ+0YCgoP7e/67Sl23TOiYME9HJKxJHRA0A67L5gRlOhMfAci PlzDC2w7iR10mN9tJvPVDb360bLyQ/Mmw7c3YPIrR7NDQ+w4oAPNHq6U6VYS08uY vN4aD/C8uPiaAgJcCNkLj/pviVpZ5isqcHrtHJAk/SwMihvzJJ7Zr9hDoNm+Mmib INuhTIOTYtxFARtMymsMieGUkxVe7wRwRfx0eRz9NLO6rT8vRXv6MOxe7Cd/+OtM FeIsKIitsTzTy0H8dZzsFeTcpg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:23:30 2026 by rpki-client