$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: dkycxsd90fqOO7hoT30wiFjbLwplNp1e7bIWUktnGtQ= Subject key identifier: 80:BF:10:89:35:E4:72:2D:C9:B5:28:D7:A2:0D:3D:8B:BA:13:61:7B Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 0200 Signing time: Sun 05 Apr 2026 02:42:08 +0000 Manifest this update: Sun 05 Apr 2026 02:42:07 +0000 Manifest next update: Sun 12 Apr 2026 02:42:07 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: FjK6KjCb78nBDxJp9gMyCs6amHA91a4nJMNjgSKtnEY=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 8y7hfK3jGDMBr1f4yhw0XCvK5AAMWqEEBB2+0ezh2M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: Apr 5 02:42:07 2026 GMT Not After : Apr 12 02:42:07 2026 GMT Subject: CN=69d1cc00-bf82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:60:57:a6:32:66:65:38:0c:12:2c:cc:bc: 27:1c:56:65:14:d6:72:b3:a4:dc:bc:46:19:98:70: 29:e4:4e:23:c7:d3:3d:9b:f4:67:a0:55:9d:2b:3f: 3f:92:ef:bf:2e:fa:f4:3b:05:cf:26:ad:d0:2b:f4: 6e:6d:07:74:7d:37:ef:17:e0:b3:2c:4c:cc:09:ca: 7e:ca:27:c9:ec:f1:8c:bf:98:96:82:c7:fb:0c:70: 3b:18:9f:84:3c:24:c7:0b:37:21:88:75:bb:a7:6e: 54:08:53:6f:55:47:be:ec:a8:2e:d6:26:f6:d9:b5: dc:5a:ef:0a:28:aa:ec:b3:ba:72:ac:a3:23:69:ce: d2:6e:59:cd:0a:33:82:f3:8f:58:ae:fd:f8:3d:e3: be:89:99:ba:17:fa:3d:c9:a2:3e:ce:c9:84:52:b8: cf:05:2d:30:29:9b:25:ea:9c:eb:cf:29:38:11:a7: ff:e2:c5:05:22:30:05:2a:ed:fc:2f:cd:41:54:34: f0:e2:2e:83:be:68:5f:da:e3:7f:85:a0:80:ef:41: 90:3d:01:48:4e:95:75:8a:e8:2a:7f:c9:05:05:9a: 0a:99:fe:b2:a6:0e:6d:09:80:c3:d0:52:ac:04:9d: 0b:9e:9a:85:33:e9:58:03:b5:be:43:bd:03:73:af: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:10:89:35:E4:72:2D:C9:B5:28:D7:A2:0D:3D:8B:BA:13:61:7B X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:9a:3d:ee:7e:f3:0c:07:9b:c7:66:4c:ee:12:b8:fc:28:b3: e0:74:3e:d1:53:da:e3:9a:bf:83:67:25:a6:06:6e:74:67:78: df:1a:54:59:c8:4c:4d:1c:19:3d:33:02:b7:63:2b:69:80:c2: c6:69:58:5e:b3:fc:55:bd:a8:ca:7a:65:4e:e6:8c:62:2a:c6: 70:4e:8c:97:71:ae:7d:59:32:4f:b4:6a:53:b1:0f:19:6a:05: 11:a3:fa:7e:9a:96:bf:a2:99:d4:a0:02:5e:64:9a:86:00:4c: f1:1b:89:42:09:4e:76:2d:80:fc:77:a6:4b:8e:46:af:36:a9: b0:e4:5b:f5:38:0c:53:be:32:28:0b:70:e1:f4:f3:ea:26:e4: 70:9a:61:0e:91:d6:e3:ac:69:d2:b5:2d:5a:72:66:c4:cf:d9: 33:3d:f1:03:b0:a6:c1:f9:28:a6:23:1f:f1:bc:23:f7:7a:f0: 04:d8:fa:fe:45:21:47:2a:f1:dd:b0:72:0c:d8:bd:51:bb:9b: 55:f9:18:b4:e9:a8:25:f1:2e:b7:d6:12:8c:6f:0a:7f:e8:be: d6:4a:9f:22:e0:0d:ab:f4:c7:55:2f:a1:07:51:2b:20:ea:33: 9b:33:8d:c8:1f:3b:78:21:7a:6b:9b:8c:e0:70:0e:70:0d:d1: b2:8e:c5:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjYwNDA1MDI0MjA3WhcNMjYwNDEyMDI0MjA3WjAYMRYwFAYD VQQDEw02OWQxY2MwMC1iZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOFgV6YyZmU4DBIszLwnHFZlFNZys6TcvEYZmHAp5E4jx9M9m/RnoFWdKz8/ ku+/Lvr0OwXPJq3QK/RubQd0fTfvF+CzLEzMCcp+yifJ7PGMv5iWgsf7DHA7GJ+E PCTHCzchiHW7p25UCFNvVUe+7Kgu1ib22bXcWu8KKKrss7pyrKMjac7SblnNCjOC 849Yrv34PeO+iZm6F/o9yaI+zsmEUrjPBS0wKZsl6pzrzyk4Eaf/4sUFIjAFKu38 L81BVDTw4i6Dvmhf2uN/haCA70GQPQFITpV1iugqf8kFBZoKmf6ypg5tCYDD0FKs BJ0LnpqFM+lYA7W+Q70Dc68LSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIC/EIk1 5HItybUo16INPYu6E2F7MB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvJo97n7zDAebx2ZM7hK4/Ciz4HQ+0VPa45q/g2clpgZudGd43xpUWchMTRwZ PTMCt2MraYDCxmlYXrP8Vb2oynplTuaMYirGcE6Ml3GufVkyT7RqU7EPGWoFEaP6 fpqWv6KZ1KACXmSahgBM8RuJQglOdi2A/HemS45GrzapsORb9TgMU74yKAtw4fTz 6ibkcJphDpHW46xp0rUtWnJmxM/ZMz3xA7CmwfkopiMf8bwj93rwBNj6/kUhRyrx 3bByDNi9UbubVfkYtOmoJfEut9YSjG8Kf+i+1kqfIuANq/THVS+hB1ErIOozmzON yB87eCF6a5uM4HAOcA3Rso7FJQ== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:27 2026 by rpki-client