$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: fzGHgOrCP9061VlZS46QHmxihmjwaVSHDVkDXvTSthM= Subject key identifier: 32:6D:C7:5B:52:57:BF:2F:44:E8:A4:DB:8B:E4:A7:4C:28:25:44:69 Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 3578 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 3552 Signing time: Sat 04 Apr 2026 14:44:39 +0000 Manifest this update: Sat 04 Apr 2026 14:44:38 +0000 Manifest next update: Sat 11 Apr 2026 14:44:38 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: jYSTdbJbTS3Pr7xiArR9edYrJUnwBGi0olw46YbXI/Y=) 2: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: 1FvqcPFNxP5aJfOWJT4ukUS3AH7RPWYI9Od/FbL+7ho=) 3: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: bZzolfmbCovbz7YFqFNgPEzhpv1IVZt9wwhhANcwKSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13688 (0x3578) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Apr 4 14:44:38 2026 GMT Not After : Apr 11 14:44:38 2026 GMT Subject: CN=69d123d7-1e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f4:27:75:e6:a3:a7:9e:d0:ea:4f:b0:6e:65: b4:65:01:48:f7:4c:26:dc:e4:cf:cd:a5:fb:35:90: d3:69:f5:66:8a:84:d1:58:d3:eb:98:b6:9f:55:8f: 73:ba:d8:ee:8a:0b:1b:e6:42:b9:00:04:cc:38:7f: b1:d4:67:ca:f6:ed:c4:31:5e:ce:03:45:c3:90:0e: fb:dc:f8:c6:c2:d5:00:a5:6a:4d:20:f9:01:db:55: 0d:1d:8e:19:bc:e6:a8:b2:19:6f:b6:60:81:4e:4c: e4:6f:bf:16:08:dc:09:9b:1d:d4:33:20:b3:25:1e: e3:27:50:6d:fc:3c:2c:ff:60:6c:79:d7:36:a9:4e: f4:32:b9:90:54:dc:7e:6b:cf:50:ce:b5:3c:5b:74: 62:17:b3:ea:b3:96:a0:a7:73:f3:49:fe:97:05:2c: 4b:7c:7f:1f:39:72:85:b9:62:36:8a:8a:14:7e:9a: 44:a5:e9:5a:28:10:ed:25:d4:85:de:c6:cc:6b:bb: 38:12:3d:cc:e1:90:a5:03:24:7a:78:f0:38:5a:15: bc:0e:a6:68:ec:1f:bf:f1:24:b7:75:73:36:09:66: 95:2c:a9:6e:96:3b:81:4c:a0:c6:e0:57:ec:18:52: 81:70:fc:e6:61:4a:02:e2:a6:3e:55:a8:71:d5:11: 15:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6D:C7:5B:52:57:BF:2F:44:E8:A4:DB:8B:E4:A7:4C:28:25:44:69 X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:85:de:a2:22:ba:94:da:96:66:c8:00:60:42:30:ca:7d:df: 7b:6c:58:8b:ae:c5:57:6c:38:f9:4d:d7:0b:40:9a:ce:0d:a1: 2a:ab:0a:15:79:d3:cf:e5:4c:f7:01:5f:f4:b4:b5:c7:d7:0d: eb:86:0a:43:1e:e2:a5:ee:e2:53:ac:cc:3a:3d:cc:9c:0c:33: 22:dd:fe:c4:99:35:67:ca:4d:8e:05:9b:ad:04:13:3d:ac:82: dc:5a:79:a9:4d:08:c5:16:24:a0:d7:62:b4:eb:22:73:96:b6: e7:6a:d2:89:a8:6d:47:cf:ac:1b:32:96:fe:ef:08:bc:18:9e: 11:59:ee:47:50:ea:76:2e:70:c9:90:d0:f6:73:b8:be:75:be: fa:66:80:9a:dc:0d:d1:66:18:dc:f3:be:50:d9:40:ce:32:42: 8c:9e:eb:a5:ba:34:21:da:2b:09:58:87:72:16:2c:68:f6:32: bf:19:b4:5c:34:db:01:05:3c:dc:1e:db:b9:b1:e5:9d:1f:cf: 47:8f:b3:15:e1:af:30:e7:2e:e4:cd:be:ae:e6:e6:a3:5c:0f: 92:ba:8a:c4:07:42:1e:f4:47:a1:52:4b:60:bb:3e:8e:36:bd: 5a:27:a0:ba:ba:b2:01:bd:ac:b8:e5:33:66:01:0f:4b:a4:fa: ff:db:8a:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjYwNDA0MTQ0NDM4WhcNMjYwNDExMTQ0NDM4WjAYMRYwFAYD VQQDEw02OWQxMjNkNy0xZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/Qndeajp57Q6k+wbmW0ZQFI90wm3OTPzaX7NZDTafVmioTRWNPrmLafVY9z utjuigsb5kK5AATMOH+x1GfK9u3EMV7OA0XDkA773PjGwtUApWpNIPkB21UNHY4Z vOaoshlvtmCBTkzkb78WCNwJmx3UMyCzJR7jJ1Bt/Dws/2Bsedc2qU70MrmQVNx+ a89QzrU8W3RiF7Pqs5agp3PzSf6XBSxLfH8fOXKFuWI2iooUfppEpelaKBDtJdSF 3sbMa7s4Ej3M4ZClAyR6ePA4WhW8DqZo7B+/8SS3dXM2CWaVLKluljuBTKDG4Ffs GFKBcPzmYUoC4qY+Vahx1REVnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDJtx1tS V78vROik24vkp0woJURpMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbYXeoiK6lNqWZsgAYEIwyn3fe2xYi67FV2w4+U3XC0Cazg2hKqsKFXnTz+VM 9wFf9LS1x9cN64YKQx7ipe7iU6zMOj3MnAwzIt3+xJk1Z8pNjgWbrQQTPayC3Fp5 qU0IxRYkoNditOsic5a252rSiahtR8+sGzKW/u8IvBieEVnuR1Dqdi5wyZDQ9nO4 vnW++maAmtwN0WYY3PO+UNlAzjJCjJ7rpbo0IdorCViHchYsaPYyvxm0XDTbAQU8 3B7bubHlnR/PR4+zFeGvMOcu5M2+rubmo1wPkrqKxAdCHvRHoVJLYLs+jja9Wieg urqyAb2suOUzZgEPS6T6/9uKaA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:34 2026 by rpki-client