$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: WiYvjz02qqJj01tCdx7q3yaqD2Iw+OQqZ23ss0mQG3Y= Subject key identifier: 5A:76:FF:FE:95:26:6D:27:3B:5B:82:1A:21:F9:DA:81:E3:70:4A:1D Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 099F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 098C Signing time: Tue 24 Mar 2026 19:49:57 +0000 Manifest this update: Tue 24 Mar 2026 19:49:56 +0000 Manifest next update: Tue 31 Mar 2026 19:49:56 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: vWgUqLiERrTv9aUrIEkeoDEdiKZY4w9GaaQJKER1hbE=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: oDVejNljbDL/11huUe+XaNuZxfU7WrqBrupnQVfzggU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2463 (0x99f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Mar 24 19:49:56 2026 GMT Not After : Mar 31 19:49:56 2026 GMT Subject: CN=69c2eae4-a2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:12:02:ce:23:fc:3f:53:10:14:14:48:68:2a: 8b:a6:0c:4b:0c:f9:94:85:62:9d:d5:f0:5e:d6:d8: 3a:f5:15:35:72:01:81:4b:f3:1c:c8:66:9c:fa:56: 06:b2:72:3e:05:34:e4:90:51:03:71:f1:2e:3e:3f: e4:8f:43:ca:35:95:98:3d:e7:8f:2c:88:33:49:87: ec:e3:c2:28:ca:49:5d:f4:1e:9e:24:57:5b:1b:ba: 5f:ab:3b:8c:22:47:87:89:2f:c5:c0:7a:a2:69:7e: c9:5c:a6:3d:7b:88:61:95:f8:80:69:48:8d:5b:43: 66:b5:9a:7c:14:30:44:14:d2:d6:aa:18:d1:db:64: 35:0d:37:e9:6a:17:22:01:07:d5:cc:36:73:94:7c: 8f:46:c5:56:da:15:cb:15:7c:a9:81:14:50:99:ea: 84:e5:77:2d:a2:55:cb:a9:4b:b1:61:f1:2b:ff:b0: 09:73:ca:0a:7e:b4:b4:91:71:b9:32:50:1a:84:b6: bc:d8:a7:a4:24:64:95:b7:ec:b0:26:07:d2:31:77: c5:68:25:b0:04:f7:e6:e0:92:e8:f5:05:7e:6e:e2: 6d:72:07:ea:74:31:2c:28:56:64:ab:86:d9:74:ce: 24:75:88:60:48:e0:2a:02:29:f4:58:3c:ba:af:ab: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:76:FF:FE:95:26:6D:27:3B:5B:82:1A:21:F9:DA:81:E3:70:4A:1D X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:04:82:77:2d:d9:a1:93:5e:29:28:30:04:8a:62:e7:41:a5: 72:b1:51:9c:a7:ab:28:ee:e4:b5:19:ce:11:96:0d:55:a5:76: f0:9d:e5:a0:a5:23:52:54:b8:60:3a:35:d4:c4:86:e0:01:8c: 92:8a:b4:66:ed:54:66:b6:e3:fc:aa:3e:c4:43:f9:ce:3e:07: 8b:d4:23:4c:dc:70:11:a7:95:cb:54:76:a1:ab:b0:ed:9f:d5: 62:93:42:27:eb:9d:4f:82:13:8f:cc:a9:92:92:e5:f2:bc:c5: 34:44:a5:7e:dc:26:9a:26:59:ca:47:e0:dd:0b:cc:52:ab:ae: 1f:c4:bd:09:3b:e4:ab:60:ff:64:e0:95:41:f2:ac:e4:e7:fe: 7a:7c:6f:47:64:82:5a:8f:72:30:9c:81:b1:9c:90:df:cc:03: 43:1f:39:ed:7c:d6:14:79:39:8b:96:30:42:94:36:1a:e8:0f: 58:bf:61:bc:c8:f9:c3:2e:23:d8:37:10:3d:6c:a9:6b:14:50: c1:05:9d:06:bd:74:4d:3b:6a:76:fb:b5:b4:c1:97:3e:34:f7: 97:c9:ed:ff:2c:a9:76:49:5b:07:65:26:e6:13:9e:23:5d:76: 94:38:88:46:56:1c:d9:42:84:b6:b5:9d:52:a0:ce:dd:23:33: 89:98:5b:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYwMzI0MTk0OTU2WhcNMjYwMzMxMTk0OTU2WjAYMRYwFAYD VQQDEw02OWMyZWFlNC1hMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxICziP8P1MQFBRIaCqLpgxLDPmUhWKd1fBe1tg69RU1cgGBS/McyGac+lYG snI+BTTkkFEDcfEuPj/kj0PKNZWYPeePLIgzSYfs48Ioykld9B6eJFdbG7pfqzuM IkeHiS/FwHqiaX7JXKY9e4hhlfiAaUiNW0NmtZp8FDBEFNLWqhjR22Q1DTfpahci AQfVzDZzlHyPRsVW2hXLFXypgRRQmeqE5XctolXLqUuxYfEr/7AJc8oKfrS0kXG5 MlAahLa82KekJGSVt+ywJgfSMXfFaCWwBPfm4JLo9QV+buJtcgfqdDEsKFZkq4bZ dM4kdYhgSOAqAin0WDy6r6uGYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFp2//6V Jm0nO1uCGiH52oHjcEodMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQQSCdy3ZoZNeKSgwBIpi50GlcrFRnKerKO7ktRnOEZYNVaV28J3loKUjUlS4 YDo11MSG4AGMkoq0Zu1UZrbj/Ko+xEP5zj4Hi9QjTNxwEaeVy1R2oauw7Z/VYpNC J+udT4ITj8ypkpLl8rzFNESlftwmmiZZykfg3QvMUquuH8S9CTvkq2D/ZOCVQfKs 5Of+enxvR2SCWo9yMJyBsZyQ38wDQx857XzWFHk5i5YwQpQ2GugPWL9hvMj5wy4j 2DcQPWypaxRQwQWdBr10TTtqdvu1tMGXPjT3l8nt/yypdklbB2Um5hOeI112lDiI RlYc2UKEtrWdUqDO3SMziZhbjQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:11 2026 by rpki-client