$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: ORy52GSTuBnz7DbEXyCriSBcshxpqWiFi2EHIauoxWo= Subject key identifier: 4A:E9:64:86:E8:3B:A9:66:74:FE:CF:76:67:D7:41:D9:08:4B:C4:C4 Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 01C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: 01AA Signing time: Sun 05 Apr 2026 03:49:16 +0000 Manifest this update: Sun 05 Apr 2026 03:49:16 +0000 Manifest next update: Sun 12 Apr 2026 03:49:16 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: z2wt2i3dkF+Q6B55dKlAzLkdlJumg72624vCMHA6Hqw=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: UHApmas+hTdDUlF2H9mpnUy31ic+ROSnLqaHdClEfoo=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Apr 5 03:49:16 2026 GMT Not After : Apr 12 03:49:16 2026 GMT Subject: CN=69d1dbbc-3aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:5d:dc:ef:32:ef:5e:76:c7:d7:5d:40:22: f7:c2:30:c8:08:c3:45:f7:02:db:64:a9:a5:8c:b1: ec:27:4f:6b:c4:d5:4e:c9:28:b5:9e:61:27:15:79: 54:80:5b:94:b6:13:dd:12:f1:80:b8:9a:77:3b:4f: a0:62:09:8e:84:6a:cd:e1:ca:46:5d:06:0d:d5:6b: e8:28:92:70:37:89:f2:19:24:f7:66:3d:13:4e:a6: be:f4:0c:c1:91:4f:e8:eb:0f:32:64:e4:54:64:87: 35:5d:4f:f9:3f:e1:97:25:d2:48:77:51:94:34:df: b1:85:72:70:00:e2:7b:c0:a6:62:75:34:62:bd:54: 75:78:a0:01:cb:4d:0c:2c:3d:4b:f9:ac:e7:b6:70: 1e:5e:9a:10:33:7d:80:25:83:1d:2f:65:9f:f4:a4: da:03:6e:1a:96:79:63:cf:e3:83:fd:f9:f3:cb:01: c7:0e:ff:13:46:b0:a7:0c:c2:5c:0f:73:79:61:1b: 3a:62:78:2d:1d:03:e8:c1:86:64:1a:97:d1:f7:e1: 65:14:35:b0:d4:d7:2e:9f:09:af:51:f5:42:7b:fe: 74:91:c6:9a:1e:5d:7f:7c:88:c0:12:8b:a2:77:70: 9d:f9:50:7f:20:cb:6f:20:92:80:3c:e4:2c:26:c3: c7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E9:64:86:E8:3B:A9:66:74:FE:CF:76:67:D7:41:D9:08:4B:C4:C4 X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:08:82:2f:48:c8:10:3a:0c:5e:0e:6d:12:43:37:17:cd:72: ef:5d:4e:88:89:83:fc:10:a7:d2:ad:80:f7:2c:66:02:cd:be: 17:8a:d2:e7:08:59:f0:6f:bf:b8:84:26:9d:23:31:08:5f:a5: 2e:88:89:61:75:44:64:1c:de:d1:a5:ab:69:59:ed:e0:cb:33: a7:37:bb:b3:21:14:7a:3c:8f:8d:fa:f9:e3:ff:e7:b2:c6:31: 13:8d:31:51:79:14:44:80:1f:63:6c:04:24:28:4d:cc:6b:f2: fc:57:d7:17:0f:65:80:7a:e7:93:f2:dc:21:25:f0:6a:ab:a9: 53:ba:bc:26:2b:d5:2a:b0:f7:62:d5:92:5b:f1:3f:57:14:cc: 9a:8a:40:19:80:66:0f:08:83:51:09:05:72:fe:a5:85:cc:21: 79:52:27:54:a0:71:51:5a:f8:2f:2b:ae:fd:32:d1:4a:8e:7c: 8d:3a:ed:37:1d:34:11:d9:e6:be:c8:16:6d:3c:21:86:83:d9: fe:f2:c7:b5:61:91:f0:a9:9e:db:ec:b9:b2:a7:f7:24:c1:ef: 64:63:ee:b7:b6:06:fb:54:69:f6:98:e4:65:51:62:0e:1f:84: 25:e2:af:59:40:ed:e6:93:f6:7c:05:3e:5f:ab:ae:36:ea:ff: 97:f3:10:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjYwNDA1MDM0OTE2WhcNMjYwNDEyMDM0OTE2WjAYMRYwFAYD VQQDEw02OWQxZGJiYy0zYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWBd3O8y7152x9ddQCL3wjDICMNF9wLbZKmljLHsJ09rxNVOySi1nmEnFXlU gFuUthPdEvGAuJp3O0+gYgmOhGrN4cpGXQYN1WvoKJJwN4nyGST3Zj0TTqa+9AzB kU/o6w8yZORUZIc1XU/5P+GXJdJId1GUNN+xhXJwAOJ7wKZidTRivVR1eKABy00M LD1L+azntnAeXpoQM32AJYMdL2Wf9KTaA24alnljz+OD/fnzywHHDv8TRrCnDMJc D3N5YRs6YngtHQPowYZkGpfR9+FlFDWw1NcunwmvUfVCe/50kcaaHl1/fIjAEoui d3Cd+VB/IMtvIJKAPOQsJsPHnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErpZIbo O6lmdP7PdmfXQdkIS8TEMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJwiCL0jIEDoMXg5tEkM3F81y711OiImD/BCn0q2A9yxmAs2+F4rS5whZ8G+/ uIQmnSMxCF+lLoiJYXVEZBze0aWraVnt4Mszpze7syEUejyPjfr54//nssYxE40x UXkURIAfY2wEJChNzGvy/FfXFw9lgHrnk/LcISXwaqupU7q8JivVKrD3YtWSW/E/ VxTMmopAGYBmDwiDUQkFcv6lhcwheVInVKBxUVr4Lyuu/TLRSo58jTrtNx00Ednm vsgWbTwhhoPZ/vLHtWGR8Kme2+y5sqf3JMHvZGPut7YG+1Rp9pjkZVFiDh+EJeKv WUDt5pP2fAU+X6uuNur/l/MQkw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:49 2026 by rpki-client