$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: qtJdWK86C9hM7qUgODg8x9lErDX6EjM+yJK3vnJguwk= Subject key identifier: 14:6A:58:B3:95:57:24:FC:1A:A3:3A:FD:BF:DD:7E:75:24:59:A4:B4 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 02BA Signing time: Thu 19 Mar 2026 01:04:57 +0000 Manifest this update: Thu 19 Mar 2026 01:04:57 +0000 Manifest next update: Thu 26 Mar 2026 01:04:57 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: WXu7kNsOKvH8HEW+oB56V+oNW2nLL9S6QzbSx+eurAA=) 2: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: GhAg2nH8ZdD5s08pjhFRrWKGBU7cJZ4LEj2dY9ehh+U=) 3: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: 4YK/YXNaP55xzsT3tIBQWLpaJchht9fsYf/coW+ZF9I=) 4: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 3wJUwv1JOANB7KtEkQSECl632Z0R2h+/KA/vlRDClPg=) 5: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: E2zSUWy4cWvpgz8q4AaLfJBcy0d+iSwSELQj17OFM9I=) 6: D21111C2190011F187AE9EA5203D8C67.roa (hash: uasely3IYLJpFPZrjUlU1e7imRXTWBwwzQQrrOVlt1g=) 7: F84FF96A493911ED805EB686C4F9AE02.roa (hash: VB4shFZW5YO/9CNmWmiUMkFcJba9e5If6VsVJJNONi0=) 8: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: V4gg7pcr7YrjK7rWsqsxjaWk9ENGsoYC1+z624FXyYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 01:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Mar 19 01:04:57 2026 GMT Not After : Mar 26 01:04:57 2026 GMT Subject: CN=69bb4bb9-6795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:17:a6:07:9a:15:a4:8d:0f:71:b0:54:74: 39:e1:83:60:3c:51:0a:4e:b4:1c:b5:f0:a2:7f:5a: 05:24:05:df:bd:45:28:d1:d4:d0:58:0e:c5:15:54: a4:7d:34:3a:98:43:8f:bf:8c:89:2f:da:42:ed:3b: 80:2d:bf:e0:61:6d:e7:bd:8c:79:11:24:92:6e:7c: 1e:fb:14:8b:8e:6f:51:49:f4:fb:6c:42:d7:8d:7f: c1:10:d2:93:28:11:2e:75:78:63:39:29:be:8f:d9: f3:71:e9:1d:97:72:ad:f9:e2:38:e4:ee:e1:93:9b: 0e:c6:f2:5a:80:4a:87:c3:cc:90:b9:4b:df:06:41: 80:9e:7a:d6:2b:92:59:6c:8d:04:51:0d:eb:fd:29: 1d:5f:3d:53:aa:22:7c:70:9c:4b:82:a2:17:62:f8: 22:c4:4a:7b:41:db:70:49:71:08:a4:e6:83:50:51: 17:56:fb:8c:09:7c:58:8c:a8:d1:0c:e9:af:46:54: 65:e0:fc:f0:79:29:88:4d:de:3c:56:be:b7:04:a1: e1:a7:d5:b8:bd:07:80:86:d5:ea:1f:cd:57:3a:4b: f7:9f:56:09:5b:92:4e:41:ac:68:14:d0:2a:a3:35: 1b:2d:43:ec:30:8b:99:1c:90:23:a4:f6:8e:d0:26: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6A:58:B3:95:57:24:FC:1A:A3:3A:FD:BF:DD:7E:75:24:59:A4:B4 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:1b:8c:7e:60:94:c0:20:c7:bd:82:92:50:29:66:27:fc:6e: ef:4a:a9:93:8d:e1:13:73:ed:ea:54:32:d9:a6:a4:c1:73:f1: d1:23:5b:bf:32:49:e0:3c:db:eb:66:44:f2:fd:a6:be:e5:6d: 7a:80:1d:f7:1e:5f:18:f2:86:6f:b7:6c:4b:16:a0:7f:29:71: 80:c6:65:9d:48:5a:24:25:4e:6f:11:70:b5:ec:b3:32:7b:83: 6a:f2:46:eb:20:b5:53:23:f2:36:24:88:69:a7:0c:b7:9b:d8: 5c:b8:29:89:67:ab:e6:c6:47:94:a5:7d:99:b3:7a:2e:45:c2: a5:c5:98:d3:87:7e:50:3a:09:22:d2:ea:5c:0b:3f:07:40:ab: f2:a5:04:32:7f:24:8c:44:a7:1c:48:55:bc:5e:9b:70:95:56: 38:cf:e5:40:32:5f:75:69:3c:9b:99:bf:cd:29:42:e2:f7:92: d3:60:8f:b7:cb:8f:63:bd:24:55:75:16:d0:d1:a0:59:cd:f9: 40:a5:1e:07:7f:49:91:25:b9:98:98:af:93:32:a4:b9:ad:c2: d6:19:43:73:8f:80:25:95:85:25:3b:5c:e0:cc:2e:74:03:04: 33:70:fe:da:0e:2e:9c:8b:09:77:50:7d:ac:53:cf:6e:a3:db: 40:b8:6f:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjYwMzE5MDEwNDU3WhcNMjYwMzI2MDEwNDU3WjAYMRYwFAYD VQQDEw02OWJiNGJiOS02Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugIXpgeaFaSND3GwVHQ54YNgPFEKTrQctfCif1oFJAXfvUUo0dTQWA7FFVSk fTQ6mEOPv4yJL9pC7TuALb/gYW3nvYx5ESSSbnwe+xSLjm9RSfT7bELXjX/BENKT KBEudXhjOSm+j9nzcekdl3Kt+eI45O7hk5sOxvJagEqHw8yQuUvfBkGAnnrWK5JZ bI0EUQ3r/SkdXz1TqiJ8cJxLgqIXYvgixEp7QdtwSXEIpOaDUFEXVvuMCXxYjKjR DOmvRlRl4PzweSmITd48Vr63BKHhp9W4vQeAhtXqH81XOkv3n1YJW5JOQaxoFNAq ozUbLUPsMIuZHJAjpPaO0CYprwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRqWLOV VyT8GqM6/b/dfnUkWaS0MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlBuMfmCUwCDHvYKSUClmJ/xu70qpk43hE3Pt6lQy2aakwXPx0SNbvzJJ4Dzb 62ZE8v2mvuVteoAd9x5fGPKGb7dsSxagfylxgMZlnUhaJCVObxFwteyzMnuDavJG 6yC1UyPyNiSIaacMt5vYXLgpiWer5sZHlKV9mbN6LkXCpcWY04d+UDoJItLqXAs/ B0Cr8qUEMn8kjESnHEhVvF6bcJVWOM/lQDJfdWk8m5m/zSlC4veS02CPt8uPY70k VXUW0NGgWc35QKUeB39JkSW5mJivkzKkua3C1hlDc4+AJZWFJTtc4MwudAMEM3D+ 2g4unIsJd1B9rFPPbqPbQLhvuA== -----END CERTIFICATE-----Generated at Thu Mar 19 22:11:13 2026 by rpki-client